Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ndEfYq6rlh030I8ZroufhqhE9oU.roa
File: ndEfYq6rlh030I8ZroufhqhE9oU.roa (raw, json)
Hash identifier: P3m8Nc0gtCSN99/5Gr0vCNcFLdYP9rMHudHPYI+tXZs=
Subject key identifier: 9D:D1:1F:62:AE:AB:96:1D:37:D0:8F:19:AE:8B:9F:86:A8:44:F6:85
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019CB39EFD75180440FE4EA2EB2DFE3F0B83
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ndEfYq6rlh030I8ZroufhqhE9oU.roa
Signing time: Tue 03 Mar 2026 12:14:27 +0000
ROA not before: Tue 03 Mar 2026 12:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34665
IP address blocks: 5.8.0.0/21 maxlen: 22
5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.10.0/24 maxlen: 24
5.8.11.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.16.0/24 maxlen: 24
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/24 maxlen: 24
5.8.49.0/24 maxlen: 24
5.8.50.0/23 maxlen: 23
5.8.50.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.8.52.0/22 maxlen: 22
5.8.52.0/23 maxlen: 23
5.8.52.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.65.0/24 maxlen: 24
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.4.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.101.6.0/24 maxlen: 24
5.101.7.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.47.0/24 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.101.64.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.90.0/23 maxlen: 23
5.188.10.0/23 maxlen: 23
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.46.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.204.0/23 maxlen: 23
5.188.208.0/23 maxlen: 23
5.188.210.0/24 maxlen: 24
5.188.211.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.189.248.0/22 maxlen: 24
31.44.188.0/22 maxlen: 32
31.184.192.0/22 maxlen: 22
31.184.192.0/23 maxlen: 23
31.184.192.0/24 maxlen: 24
31.184.193.0/24 maxlen: 24
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.196.0/24 maxlen: 24
31.184.197.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.198.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
31.184.240.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.56.0/22 maxlen: 22
37.139.56.0/23 maxlen: 23
37.139.56.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.58.0/24 maxlen: 24
37.139.59.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.8.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.28.0/22 maxlen: 22
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/23 maxlen: 23
46.161.50.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.50.0/23 maxlen: 23
91.243.50.0/24 maxlen: 24
91.243.51.0/24 maxlen: 24
91.243.52.0/22 maxlen: 22
91.243.56.0/22 maxlen: 22
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.2.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
146.185.223.0/24 maxlen: 24
146.185.224.0/21 maxlen: 21
188.143.232.0/22 maxlen: 22
188.143.232.0/23 maxlen: 23
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:9e:fd:75:18:04:40:fe:4e:a2:eb:2d:fe:3f:0b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Mar 3 12:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dd11f62aeab961d37d08f19ae8b9f86a844f685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:17:36:76:c1:70:d5:30:72:1f:4f:e1:b4:
4e:ec:83:22:a9:78:d0:7e:81:16:48:cd:a2:83:dc:
db:2e:59:57:e3:b7:81:02:c2:cb:52:c8:c0:ef:f5:
15:00:fb:d6:37:99:3d:f3:d5:c6:a1:e3:81:fc:b1:
14:f6:21:2c:69:5a:9f:c3:e0:eb:e7:90:4d:f8:9e:
d8:57:b7:57:5a:6e:7a:53:cf:3f:51:3b:e7:6f:cd:
92:72:b3:42:1b:3e:59:f3:a9:18:19:df:0e:2f:b6:
a1:ee:04:fe:ad:75:14:5f:41:94:be:88:fe:a1:f1:
00:07:ba:56:8e:96:35:46:36:a4:6b:b1:77:28:eb:
b7:04:8e:f7:9c:ba:19:7e:ca:b2:0d:d5:ea:4f:7a:
bb:40:a7:ba:d7:cb:7b:30:ce:9e:be:7a:c2:43:20:
be:31:ec:ca:b5:99:a1:07:36:27:1c:c3:da:11:f4:
2b:18:90:64:9e:3c:cb:12:c8:8e:cb:bb:ca:77:d1:
d8:f0:fe:7b:46:1e:9b:18:89:2b:46:0c:37:4d:6e:
51:80:37:e8:e6:92:98:98:00:39:91:37:67:b6:df:
9e:7f:bb:0f:b7:10:55:ab:42:48:df:b1:c8:a3:1b:
c2:8b:cb:54:e8:9a:c9:47:19:f9:73:b9:89:54:dd:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:1F:62:AE:AB:96:1D:37:D0:8F:19:AE:8B:9F:86:A8:44:F6:85
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ndEfYq6rlh030I8ZroufhqhE9oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.0.0-5.8.16.255
5.8.48.0/21
5.8.60.0/23
5.8.65.0/24
5.101.0.0/21
5.101.32.0/22
5.101.47.0/24
5.101.64.0/22
5.101.90.0/23
5.188.10.0/23
5.188.44.0-5.188.49.255
5.188.204.0/23
5.188.208.0/22
5.188.223.0/24
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.188.0/22
31.184.192.0/21
31.184.238.0-31.184.241.255
31.184.243.0/24
37.9.48.0/24
37.139.53.0/24
37.139.56.0/22
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.20.0/22
46.161.28.0-46.161.35.255
46.161.44.0-46.161.51.255
91.243.32.0/22
91.243.48.0-91.243.61.255
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
97:7d:c6:00:19:e9:e0:b4:50:18:93:76:8e:c6:01:72:5d:2a:
73:c5:72:6e:8a:cf:b5:a7:dd:10:bc:5d:55:ea:8e:c0:d0:b2:
64:f6:88:ff:5e:2b:60:a0:30:ce:4a:45:92:03:0e:d5:ea:fa:
b7:e7:93:61:3f:3a:c9:1f:bd:18:76:5c:cf:05:8f:e3:59:d1:
d4:84:0c:84:93:b8:16:55:ca:05:04:e3:e2:bd:9f:ae:99:77:
bf:0a:5b:7b:82:ba:71:36:cc:de:1b:c7:cb:5c:e5:27:bc:f9:
dd:e9:dc:d2:fe:31:c6:98:e7:3a:21:38:4b:c6:22:42:d0:a3:
db:fc:0f:7e:51:a7:8d:55:47:73:fe:58:a4:5b:4e:6e:fe:98:
14:b4:31:16:ba:f5:c2:58:71:bc:f9:36:fc:25:1d:4a:50:cb:
ef:2f:01:d0:e5:51:bc:14:bc:35:76:e6:9f:83:22:b5:c1:be:
5a:41:58:c2:9b:5c:1f:8d:9b:6d:67:3c:73:9c:96:f6:9a:35:
e3:7e:2b:1a:9a:dc:60:d1:fb:58:6b:66:7d:44:31:ea:fd:d4:
04:2f:b5:41:2b:49:9b:98:01:c7:ba:33:ac:57:e8:2c:1d:d7:
cf:56:49:d5:56:e4:5e:e2:66:43:4d:99:1c:17:4b:8a:63:84:
fe:bd:a0:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 7 00:52:41 2026 by rpki-client