Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/isd8dDI_EnshfrR_CKPovueN_oU.roa
File: isd8dDI_EnshfrR_CKPovueN_oU.roa (raw, json)
Hash identifier: Z2zcAj34GTMEdrdadCZXrXCTPsHIKLpqIAtvOeN+3KU=
Subject key identifier: 8A:C7:7C:74:32:3F:12:7B:21:7E:B4:7F:08:A3:E8:BE:E7:8D:FE:85
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01A034F861AC66FB9769F6F59694903659E6
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/isd8dDI_EnshfrR_CKPovueN_oU.roa
Signing time: Mon 24 Aug 2026 18:11:28 +0000
ROA not before: Mon 24 Aug 2026 18:11:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 80.96.38.0/24 maxlen: 24
80.96.39.0/24 maxlen: 24
80.96.44.0/23 maxlen: 24
80.96.54.0/23 maxlen: 24
80.96.89.0/24 maxlen: 24
80.96.90.0/23 maxlen: 23
80.96.102.0/23 maxlen: 24
80.96.156.0/22 maxlen: 24
80.96.236.0/23 maxlen: 23
80.97.40.0/21 maxlen: 24
80.97.96.0/23 maxlen: 24
81.180.36.0/24 maxlen: 24
81.180.94.0/23 maxlen: 23
81.180.98.0/23 maxlen: 24
81.180.139.0/24 maxlen: 24
81.180.172.0/24 maxlen: 24
81.180.174.0/23 maxlen: 24
81.180.204.0/24 maxlen: 24
81.180.228.0/23 maxlen: 24
81.180.254.0/23 maxlen: 24
81.181.14.0/23 maxlen: 24
81.181.26.0/23 maxlen: 24
81.181.68.0/23 maxlen: 24
81.181.72.0/23 maxlen: 24
81.181.104.0/21 maxlen: 24
85.120.44.0/24 maxlen: 24
85.120.84.0/23 maxlen: 24
85.120.184.0/24 maxlen: 24
85.120.226.0/24 maxlen: 24
85.120.227.0/24 maxlen: 24
85.120.228.0/24 maxlen: 24
85.120.229.0/24 maxlen: 24
85.121.48.0/21 maxlen: 24
85.121.120.0/21 maxlen: 24
85.121.168.0/22 maxlen: 24
85.121.208.0/21 maxlen: 24
85.121.232.0/21 maxlen: 24
85.121.244.0/24 maxlen: 24
85.122.84.0/24 maxlen: 24
85.122.85.0/24 maxlen: 24
85.122.124.0/22 maxlen: 24
85.122.231.0/24 maxlen: 24
193.226.76.0/22 maxlen: 24
194.102.36.0/22 maxlen: 24
194.102.148.0/23 maxlen: 24
194.102.160.0/23 maxlen: 24
194.102.174.0/23 maxlen: 24
194.102.180.0/22 maxlen: 24
194.102.224.0/22 maxlen: 24
194.105.12.0/22 maxlen: 24
194.153.225.0/24 maxlen: 24
194.153.230.0/23 maxlen: 24
194.153.244.0/23 maxlen: 24
217.156.16.0/23 maxlen: 24
217.156.48.0/22 maxlen: 24
217.156.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:f8:61:ac:66:fb:97:69:f6:f5:96:94:90:36:59:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 24 18:11:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ac77c74323f127b217eb47f08a3e8bee78dfe85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:96:cb:cf:82:ae:0b:96:b2:40:6b:0b:a6:f8:
84:d2:b2:dd:9a:db:92:6b:74:f9:91:7d:3c:6e:cb:
8d:53:42:28:f8:fb:0c:ff:27:f9:c7:1d:1f:7d:e8:
bf:2f:5d:31:cd:74:17:0f:da:db:3a:2b:53:86:08:
a2:47:45:e5:85:c7:5e:50:72:03:39:ca:2f:b5:47:
78:cf:3d:cd:5a:2f:83:22:f4:79:3c:eb:9e:e8:19:
db:c9:68:58:45:73:3b:d5:32:42:a6:40:8e:4d:f5:
f2:55:11:a7:08:33:b5:77:55:df:37:a0:35:7c:1e:
7c:29:92:9e:09:6d:45:b0:93:ff:e3:15:16:9f:84:
c2:46:4d:55:b2:86:90:05:b6:1d:d0:ed:33:ca:74:
5b:9a:2c:bc:08:8c:a0:31:0d:20:6e:01:bf:91:b5:
d0:6b:78:f9:9b:74:b5:db:c3:a8:12:16:a0:ea:4f:
1f:e3:4d:9a:fa:90:d8:19:55:6e:d6:6f:ae:11:ab:
49:d4:f3:5c:02:14:99:3e:89:98:67:8c:0c:1a:b5:
49:66:a6:ba:a7:3c:ac:f7:f1:ac:98:30:69:b6:8f:
8a:60:9d:33:77:bc:77:aa:0f:ab:87:d7:e9:90:2e:
8a:c8:28:75:8e:78:61:8b:4f:60:85:b0:8d:37:e0:
5c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C7:7C:74:32:3F:12:7B:21:7E:B4:7F:08:A3:E8:BE:E7:8D:FE:85
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/isd8dDI_EnshfrR_CKPovueN_oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.38.0/23
80.96.44.0/23
80.96.54.0/23
80.96.89.0-80.96.91.255
80.96.102.0/23
80.96.156.0/22
80.96.236.0/23
80.97.40.0/21
80.97.96.0/23
81.180.36.0/24
81.180.94.0/23
81.180.98.0/23
81.180.139.0/24
81.180.172.0/24
81.180.174.0/23
81.180.204.0/24
81.180.228.0/23
81.180.254.0/23
81.181.14.0/23
81.181.26.0/23
81.181.68.0/23
81.181.72.0/23
81.181.104.0/21
85.120.44.0/24
85.120.84.0/23
85.120.184.0/24
85.120.226.0-85.120.229.255
85.121.48.0/21
85.121.120.0/21
85.121.168.0/22
85.121.208.0/21
85.121.232.0/21
85.121.244.0/24
85.122.84.0/23
85.122.124.0/22
85.122.231.0/24
193.226.76.0/22
194.102.36.0/22
194.102.148.0/23
194.102.160.0/23
194.102.174.0/23
194.102.180.0/22
194.102.224.0/22
194.105.12.0/22
194.153.225.0/24
194.153.230.0/23
194.153.244.0/23
217.156.16.0/23
217.156.48.0/22
217.156.94.0/23
Signature Algorithm: sha256WithRSAEncryption
77:67:94:e4:b3:d5:98:73:76:85:08:78:b1:9c:e9:37:1d:f0:
9b:6d:93:38:da:5e:47:4d:42:d8:35:4f:35:d7:c6:1a:86:66:
bd:ad:00:0d:ec:4d:88:cb:e2:8c:47:2b:b7:18:92:20:73:0a:
ff:bd:1a:0f:22:49:29:90:54:80:5f:23:ca:33:c3:11:58:76:
92:01:77:bf:0f:18:e9:60:31:65:82:96:95:ab:e0:bf:51:ec:
4d:41:d6:65:af:a0:0b:d9:86:6d:98:b0:54:ba:1b:fa:e5:35:
72:f7:d1:9b:b4:8f:21:f4:46:ab:77:1a:85:34:db:8c:c5:3f:
70:e1:5b:0d:89:ae:ca:f1:4e:de:03:b2:9e:15:dc:10:67:30:
93:d8:5c:2f:fb:00:5a:5d:76:6f:b5:2b:53:38:90:c3:a0:db:
51:3a:5e:66:1f:84:12:df:7a:6d:70:76:74:30:13:8a:a5:23:
87:60:2b:c6:d8:f8:bf:34:b2:63:d3:9b:8b:cf:43:3a:f6:36:
74:de:7a:e5:5b:25:1a:90:72:5b:ac:0f:95:6d:a1:2c:b5:15:
f1:49:0c:1e:a5:74:60:99:43:5c:a7:57:6a:12:82:cc:dd:e1:
a5:df:55:cc:70:df:cd:54:d6:db:8d:76:44:69:f5:78:3a:70:
19:2e:0b:b7
-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgISAaA0+GGsZvuXafb1lpSQNlnmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwODI0MTgxMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWM3N2M3NDMyM2YxMjdiMjE3ZWI0N2YwOGEzZThiZWU3OGRmZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25bLz4KuC5ayQGsLpviE0rLdmtuS
a3T5kX08bsuNU0Io+PsM/yf5xx0ffei/L10xzXQXD9rbOitThgiiR0XlhcdeUHID
OcovtUd4zz3NWi+DIvR5POue6BnbyWhYRXM71TJCpkCOTfXyVRGnCDO1d1XfN6A1
fB58KZKeCW1FsJP/4xUWn4TCRk1VsoaQBbYd0O0zynRbmiy8CIygMQ0gbgG/kbXQ
a3j5m3S128OoEhag6k8f402a+pDYGVVu1m+uEatJ1PNcAhSZPomYZ4wMGrVJZqa6
pzys9/GsmDBpto+KYJ0zd7x3qg+rh9fpkC6KyCh1jnhhi09ghbCNN+BcBQIDAQAB
o4IDSTCCA0UwHQYDVR0OBBYEFIrHfHQyPxJ7IX60fwij6L7njf6FMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvaXNkOGRESV9FbnNoZnJSX0NLUG92dWVOX29VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXQYIKwYBBQUHAQcBAf8EggFMMIIBSDCCAUQEAgABMIIB
PAMEAVBgJgMEAVBgLAMEAVBgNjAMAwQAUGBZAwQCUGBYAwQBUGBmAwQCUGCcAwQB
UGDsAwQDUGEoAwQBUGFgAwQAUbQkAwQBUbReAwQBUbRiAwQAUbSLAwQAUbSsAwQB
UbSuAwQAUbTMAwQBUbTkAwQBUbT+AwQBUbUOAwQBUbUaAwQBUbVEAwQBUbVIAwQD
UbVoAwQAVXgsAwQBVXhUAwQAVXi4MAwDBAFVeOIDBAFVeOQDBANVeTADBANVeXgD
BAJVeagDBANVedADBANVeegDBABVefQDBAFVelQDBAJVenwDBABVeucDBALB4kwD
BALCZiQDBAHCZpQDBAHCZqADBAHCZq4DBALCZrQDBALCZuADBALCaQwDBADCmeED
BAHCmeYDBAHCmfQDBAHZnBADBALZnDADBAHZnF4wDQYJKoZIhvcNAQELBQADggEB
AHdnlOSz1ZhzdoUIeLGc6Tcd8JttkzjaXkdNQtg1TzXXxhqGZr2tAA3sTYjL4oxH
K7cYkiBzCv+9Gg8iSSmQVIBfI8ozwxFYdpIBd78PGOlgMWWClpWr4L9R7E1B1mWv
oAvZhm2YsFS6G/rlNXL30Zu0jyH0Rqt3GoU024zFP3DhWw2JrsrxTt4Dsp4V3BBn
MJPYXC/7AFpddm+1K1M4kMOg21E6XmYfhBLfem1wdnQwE4qlI4dgK8bY+L80smPT
m4vPQzr2NnTeeuVbJRqQclusD5VtoSy1FfFJDB6ldGCZQ1ynV2oSgszd4aXfVcxw
381U1tuNdkRp9Xg6cBkuC7c=
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:30 2026 by rpki-client