Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa
File: fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa (raw, json)
Hash identifier: lFdrIIdtjiCYDR2tpND6VyItgrcJm0ON9+SgONNjvtk=
Subject key identifier: 7E:2E:83:FD:0E:4B:7B:97:A2:0F:AF:BD:25:A1:07:67:F3:38:C9:70
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 019CE6D07EAC42C4392FC5360491AADDA330
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa
Signing time: Fri 13 Mar 2026 10:49:09 +0000
ROA not before: Fri 13 Mar 2026 10:49:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35104
IP address blocks: 37.228.64.0/24 maxlen: 24
37.228.65.0/24 maxlen: 24
37.228.66.0/24 maxlen: 24
37.228.67.0/24 maxlen: 24
37.228.68.0/24 maxlen: 24
37.228.69.0/24 maxlen: 24
37.228.70.0/24 maxlen: 24
37.228.71.0/24 maxlen: 24
46.235.80.0/24 maxlen: 24
46.235.81.0/24 maxlen: 24
46.235.82.0/24 maxlen: 24
46.235.83.0/24 maxlen: 24
46.235.84.0/24 maxlen: 24
46.235.85.0/24 maxlen: 24
46.235.86.0/24 maxlen: 24
46.235.87.0/24 maxlen: 24
77.245.96.0/24 maxlen: 24
77.245.97.0/24 maxlen: 24
77.245.98.0/24 maxlen: 24
77.245.99.0/24 maxlen: 24
77.245.100.0/24 maxlen: 24
77.245.101.0/24 maxlen: 24
77.245.102.0/24 maxlen: 24
77.245.103.0/24 maxlen: 24
77.245.104.0/22 maxlen: 22
77.245.104.0/24 maxlen: 24
77.245.105.0/24 maxlen: 24
77.245.106.0/24 maxlen: 24
77.245.107.0/24 maxlen: 24
77.245.108.0/23 maxlen: 23
77.245.108.0/24 maxlen: 24
77.245.109.0/24 maxlen: 24
77.245.110.0/24 maxlen: 24
77.245.111.0/24 maxlen: 24
80.242.208.0/24 maxlen: 24
80.242.209.0/24 maxlen: 24
80.242.210.0/24 maxlen: 24
80.242.211.0/24 maxlen: 24
80.242.212.0/24 maxlen: 24
80.242.213.0/24 maxlen: 24
80.242.214.0/24 maxlen: 24
80.242.215.0/24 maxlen: 24
80.242.216.0/24 maxlen: 24
80.242.217.0/24 maxlen: 24
80.242.218.0/24 maxlen: 24
80.242.219.0/24 maxlen: 24
80.242.220.0/24 maxlen: 24
80.242.221.0/24 maxlen: 24
80.242.222.0/24 maxlen: 24
80.242.223.0/24 maxlen: 24
93.185.64.0/24 maxlen: 24
93.185.65.0/24 maxlen: 24
93.185.66.0/24 maxlen: 24
93.185.67.0/24 maxlen: 24
93.185.68.0/24 maxlen: 24
93.185.69.0/24 maxlen: 24
93.185.70.0/24 maxlen: 24
93.185.71.0/24 maxlen: 24
93.185.72.0/21 maxlen: 21
93.185.72.0/24 maxlen: 24
93.185.73.0/24 maxlen: 24
93.185.74.0/24 maxlen: 24
93.185.75.0/24 maxlen: 24
93.185.76.0/24 maxlen: 24
93.185.77.0/24 maxlen: 24
93.185.78.0/24 maxlen: 24
93.185.79.0/24 maxlen: 24
95.141.128.0/24 maxlen: 24
95.141.129.0/24 maxlen: 24
95.141.130.0/24 maxlen: 24
95.141.131.0/24 maxlen: 24
95.141.132.0/24 maxlen: 24
95.141.133.0/24 maxlen: 24
95.141.134.0/24 maxlen: 24
95.141.135.0/24 maxlen: 24
95.141.136.0/22 maxlen: 22
95.141.136.0/24 maxlen: 24
95.141.137.0/24 maxlen: 24
95.141.138.0/24 maxlen: 24
95.141.139.0/24 maxlen: 24
95.141.140.0/24 maxlen: 24
95.141.141.0/24 maxlen: 24
95.141.142.0/24 maxlen: 24
95.141.143.0/24 maxlen: 24
185.20.124.0/24 maxlen: 24
185.20.125.0/24 maxlen: 24
185.20.126.0/23 maxlen: 23
185.20.126.0/24 maxlen: 24
185.20.127.0/24 maxlen: 24
188.0.128.0/24 maxlen: 24
188.0.129.0/24 maxlen: 24
188.0.130.0/24 maxlen: 24
188.0.131.0/24 maxlen: 24
188.0.132.0/24 maxlen: 24
188.0.133.0/24 maxlen: 24
188.0.134.0/24 maxlen: 24
188.0.135.0/24 maxlen: 24
188.0.136.0/24 maxlen: 24
188.0.137.0/24 maxlen: 24
188.0.138.0/24 maxlen: 24
188.0.139.0/24 maxlen: 24
188.0.140.0/22 maxlen: 24
188.0.141.0/24 maxlen: 24
188.0.142.0/24 maxlen: 24
188.0.143.0/24 maxlen: 24
188.0.144.0/24 maxlen: 24
188.0.145.0/24 maxlen: 24
188.0.146.0/24 maxlen: 24
188.0.147.0/24 maxlen: 24
188.0.148.0/24 maxlen: 24
188.0.149.0/24 maxlen: 24
188.0.150.0/24 maxlen: 24
188.0.151.0/24 maxlen: 24
188.0.152.0/24 maxlen: 24
188.0.153.0/24 maxlen: 24
188.0.154.0/24 maxlen: 24
188.0.155.0/24 maxlen: 24
188.0.156.0/24 maxlen: 24
188.0.157.0/24 maxlen: 24
188.0.158.0/24 maxlen: 24
188.0.159.0/24 maxlen: 24
188.127.32.0/24 maxlen: 24
188.127.33.0/24 maxlen: 24
188.127.34.0/24 maxlen: 24
188.127.35.0/24 maxlen: 24
188.127.36.0/24 maxlen: 24
188.127.37.0/24 maxlen: 24
188.127.38.0/24 maxlen: 24
188.127.39.0/24 maxlen: 24
188.127.40.0/24 maxlen: 24
188.127.41.0/24 maxlen: 24
188.127.42.0/24 maxlen: 24
188.127.43.0/24 maxlen: 24
188.127.44.0/24 maxlen: 24
188.127.45.0/24 maxlen: 24
188.127.47.0/24 maxlen: 24
188.127.48.0/24 maxlen: 24
188.127.49.0/24 maxlen: 24
188.127.52.0/24 maxlen: 24
193.29.53.0/24 maxlen: 24
195.189.28.0/24 maxlen: 24
195.189.29.0/24 maxlen: 24
195.189.30.0/24 maxlen: 24
195.189.31.0/24 maxlen: 24
217.196.16.0/24 maxlen: 24
217.196.17.0/24 maxlen: 24
217.196.18.0/24 maxlen: 24
217.196.19.0/24 maxlen: 24
217.196.20.0/24 maxlen: 24
217.196.21.0/24 maxlen: 24
217.196.22.0/24 maxlen: 24
217.196.23.0/24 maxlen: 24
217.196.24.0/24 maxlen: 24
217.196.25.0/24 maxlen: 24
217.196.26.0/23 maxlen: 23
217.196.26.0/24 maxlen: 24
217.196.27.0/24 maxlen: 24
217.196.28.0/24 maxlen: 24
217.196.29.0/24 maxlen: 24
217.196.30.0/24 maxlen: 24
217.196.31.0/24 maxlen: 24
2a03:a300::/32 maxlen: 32
2a03:a300:800::/37 maxlen: 37
2a03:a300:1000::/48 maxlen: 48
2a03:a300:1140::/48 maxlen: 48
2a03:a300:2000::/48 maxlen: 48
2a03:a300:2020::/48 maxlen: 48
2a03:a300:3000::/48 maxlen: 48
2a03:a300:4000::/44 maxlen: 44
2a03:a300:4100::/48 maxlen: 48
2a03:a300:5000::/36 maxlen: 36
2a03:a300:5000::/42 maxlen: 42
2a03:a300:5000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:d0:7e:ac:42:c4:39:2f:c5:36:04:91:aa:dd:a3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Mar 13 10:49:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e2e83fd0e4b7b97a20fafbd25a10767f338c970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:f6:67:e9:ec:e8:95:c7:cf:27:96:d9:44:
70:5a:2c:54:8c:59:66:8c:74:2b:75:a0:c2:72:23:
3b:9f:58:2e:50:70:45:f3:3a:d5:8d:03:2c:6f:67:
fe:3c:b4:db:13:91:9e:6b:e7:4c:46:e0:70:66:04:
ba:f5:17:67:12:bd:f0:ed:35:7b:90:48:95:70:08:
29:e0:5a:3c:59:5c:57:7d:12:20:a1:3d:72:64:70:
ad:78:f6:b4:b2:34:57:24:d8:77:00:2c:8a:5b:29:
8f:0a:2f:5f:20:88:ac:de:68:98:20:42:e9:e3:8a:
10:d5:1d:4d:59:75:dc:6c:7e:98:22:e6:62:2d:6e:
f9:93:c0:fe:a7:99:4d:7c:cf:64:66:ac:a0:43:f5:
71:46:ed:90:8f:92:bc:78:60:66:b5:e4:cf:da:fb:
48:70:37:82:f8:8d:6a:e0:74:a7:e1:de:43:97:a6:
fe:c2:82:6f:d1:3a:f1:46:5e:cd:66:4e:06:68:95:
45:99:3d:0d:01:eb:a7:df:3a:1e:17:50:37:7c:63:
03:15:a4:8a:23:b5:12:63:9a:09:38:3f:73:25:04:
59:a5:4b:d4:b1:43:d8:b0:53:fa:1a:d5:2b:5e:aa:
9b:29:e7:a4:a8:90:8e:bc:3e:54:c5:66:6b:24:93:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2E:83:FD:0E:4B:7B:97:A2:0F:AF:BD:25:A1:07:67:F3:38:C9:70
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.64.0/21
46.235.80.0/21
77.245.96.0/20
80.242.208.0/20
93.185.64.0/20
95.141.128.0/20
185.20.124.0/22
188.0.128.0/19
188.127.32.0-188.127.45.255
188.127.47.0-188.127.49.255
188.127.52.0/24
193.29.53.0/24
195.189.28.0/22
217.196.16.0/20
IPv6:
2a03:a300::/32
Signature Algorithm: sha256WithRSAEncryption
6d:eb:12:c5:b7:f2:f4:52:d5:e7:53:69:38:8b:cd:d3:a1:c5:
ab:ca:9a:e1:6e:4e:dd:3c:9e:4d:02:8a:9a:ac:57:60:ef:aa:
9e:fb:34:64:1b:53:9e:c3:ae:bd:c3:7b:fb:40:c7:a2:1b:f3:
9f:6b:50:7c:85:49:06:e2:9a:37:99:07:6c:0d:5b:ff:d5:7c:
b8:c6:e3:ca:5a:47:41:eb:e7:55:2d:29:61:cb:e3:1a:e0:12:
48:c4:66:64:e6:15:71:31:e2:f6:1f:37:ca:59:34:93:3b:b9:
31:b4:51:84:f6:60:72:ae:c8:02:c3:23:ba:8e:a4:c3:de:e3:
85:f6:cc:4b:1f:83:1e:c8:2a:5f:63:40:a5:21:5a:cf:0c:9a:
19:cf:fe:c3:f8:b8:45:75:ed:62:c6:6a:e4:39:fc:ff:8d:ce:
e2:24:c5:81:7c:68:48:da:0c:a2:6c:20:5f:64:a7:96:91:86:
0c:31:e4:05:9e:05:44:81:c9:97:c0:3a:57:ff:af:6c:f7:b3:
6b:b6:13:3f:52:a0:67:6f:f8:7f:d6:29:81:ac:92:43:cb:cc:
5e:6c:67:f0:0b:33:79:78:69:43:b3:09:8d:e6:b5:e9:41:84:
be:df:f0:3f:a3:f9:23:dc:ee:d4:73:a5:e5:9a:79:56:3d:88:
49:70:e8:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Mar 17 13:41:23 2026 by rpki-client