Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/I1YB_jKnqqhqVgaaikviR2MF1iU.roa
File: I1YB_jKnqqhqVgaaikviR2MF1iU.roa (raw, json)
Hash identifier: WY5a60iQCFtLNGtKSqaF5lBvwIFdVnTCL6DW4+jAAE0=
Subject key identifier: 23:56:01:FE:32:A7:AA:A8:6A:56:06:9A:8A:4B:E2:47:63:05:D6:25
Certificate issuer: /CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
Certificate serial: 01A144D249EBB1CE5C614D3E6579FEA39F58
Authority key identifier: BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/I1YB_jKnqqhqVgaaikviR2MF1iU.roa
Signing time: Fri 16 Oct 2026 13:06:34 +0000
ROA not before: Fri 16 Oct 2026 13:06:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
46.189.116.0/24 maxlen: 24
61.8.128.0/19 maxlen: 21
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.144.37.0/24 maxlen: 24
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.224.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/19 maxlen: 19
83.135.128.0/19 maxlen: 22
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/19 maxlen: 19
83.135.224.0/22 maxlen: 22
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.192.0/22 maxlen: 22
87.123.196.0/24 maxlen: 24
87.123.216.0/21 maxlen: 21
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.32.0/20 maxlen: 20
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.144.0/20 maxlen: 20
88.130.172.0/22 maxlen: 22
88.130.192.0/21 maxlen: 21
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/22 maxlen: 22
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.112.0/20 maxlen: 20
89.246.160.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.232.0/21 maxlen: 21
89.247.240.0/21 maxlen: 21
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.64.0/18 maxlen: 23
94.134.128.0/17 maxlen: 22
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
153.60.32.0/19 maxlen: 19
153.60.192.0/18 maxlen: 18
153.76.32.0/19 maxlen: 19
167.104.0.0/19 maxlen: 19
167.104.128.0/19 maxlen: 19
167.104.224.0/19 maxlen: 19
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 24
202.89.144.0/20 maxlen: 20
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 36
2001:1438:1::/48 maxlen: 56
2001:1438:300::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 29
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
2a00:fbc::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:d2:49:eb:b1:ce:5c:61:4d:3e:65:79:fe:a3:9f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
Validity
Not Before: Oct 16 13:06:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=235601fe32a7aaa86a56069a8a4be2476305d625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:c0:f6:8f:05:a8:93:2c:34:c4:2b:e1:d4:
ff:07:ad:77:47:da:94:99:cc:4c:6c:e2:3c:a0:58:
c1:ce:b6:6f:a8:64:2b:70:bd:8e:16:90:fe:fb:c0:
aa:2a:6f:38:c4:1c:47:9c:3b:79:2a:d7:4b:4e:39:
30:0b:3d:14:23:ca:1f:81:5e:00:44:9f:88:82:66:
22:24:a0:d1:03:10:48:23:3d:30:fd:1f:83:d3:fd:
ec:e8:67:31:47:69:14:f7:2f:a9:91:49:16:bc:a0:
9d:bb:a9:4e:67:67:d0:61:68:4d:2e:35:bc:37:56:
71:4f:01:d4:f4:06:ea:4b:27:93:b1:4d:f4:cd:fb:
b0:69:13:89:3a:a1:f0:aa:50:a4:25:51:08:73:cb:
36:0d:47:3c:0d:40:cc:5e:e3:c0:52:6b:fd:c7:ce:
c0:57:a5:46:5c:1f:35:12:45:51:3b:24:d6:11:d8:
87:e6:a7:b8:76:1a:94:32:74:7e:98:e2:91:a4:8a:
21:c8:5b:78:93:8e:19:48:9d:81:da:ff:6b:e7:09:
56:29:a5:d9:72:f2:4d:2a:4f:cb:54:64:f7:2e:89:
81:cb:52:b8:b0:dc:4a:ba:ce:7a:90:67:29:85:cf:
57:10:72:d4:53:2e:28:f1:cd:82:c2:07:15:08:80:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:56:01:FE:32:A7:AA:A8:6A:56:06:9A:8A:4B:E2:47:63:05:D6:25
X509v3 Authority Key Identifier:
keyid:BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/I1YB_jKnqqhqVgaaikviR2MF1iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
153.60.32.0/19
153.60.192.0/18
153.76.32.0/19
167.104.0.0/19
167.104.128.0/19
167.104.224.0/19
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
202.89.144.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
98:03:fc:c1:da:40:f2:1b:01:1d:79:ed:09:f2:fe:be:23:f4:
20:7f:4c:c0:c3:c9:dc:a4:af:f8:a7:f3:41:23:2d:ae:a3:73:
e9:48:fd:ba:09:c6:54:0f:90:16:ef:0b:ea:a0:ec:24:05:ee:
3b:9d:d1:d6:c7:f8:25:32:7f:d2:7c:0f:3d:fa:03:43:54:bb:
0d:48:07:34:67:8d:95:35:ca:a1:37:70:79:24:1d:0d:6b:9f:
41:a7:a8:20:4e:50:fd:cd:bf:38:89:40:7e:a6:ee:24:87:e7:
3d:60:ad:71:1e:fe:2c:5a:68:af:f8:ca:f8:3a:67:0c:16:c0:
1a:71:5c:96:17:5f:a5:79:cd:8b:06:b3:30:a8:fb:1c:ba:5c:
2c:2a:26:07:b2:31:c3:91:e1:ee:ae:d8:06:fb:53:76:4b:55:
d0:d2:a5:5f:53:d8:ea:25:38:0e:31:19:03:58:bb:34:56:6f:
93:d6:ad:eb:4a:89:52:6a:a5:54:86:37:26:0c:f6:df:f7:b4:
73:eb:e6:8c:2a:e7:34:03:f6:64:b2:a2:cb:f7:8d:a5:43:03:
1e:31:7f:58:92:54:d9:ea:32:51:f0:61:b0:61:e3:f5:21:2e:
dc:aa:09:84:b9:c9:59:d8:49:39:9b:88:f5:75:81:f5:18:b3:
62:23:d9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 21:00:21 2026 by rpki-client