Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/MYiR6d13wnOJyMgIVOtD39N0N2Y.roa
File: MYiR6d13wnOJyMgIVOtD39N0N2Y.roa (raw, json)
Hash identifier: 1MsnnpZMhXZvlE3ZAn7W0Wa3woN4DjCUknVa97haYzc=
Subject key identifier: 31:88:91:E9:DD:77:C2:73:89:C8:C8:08:54:EB:43:DF:D3:74:37:66
Certificate issuer: /CN=ae02cd8026c60c3c883648a0bff7116cf26707d6
Certificate serial: 019F236855763395FA1C32EA361B473B533C
Authority key identifier: AE:02:CD:80:26:C6:0C:3C:88:36:48:A0:BF:F7:11:6C:F2:67:07:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/MYiR6d13wnOJyMgIVOtD39N0N2Y.roa
Signing time: Thu 02 Jul 2026 15:17:47 +0000
ROA not before: Thu 02 Jul 2026 15:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6810
IP address blocks: 147.235.0.0/16 maxlen: 24
147.235.0.0/24 maxlen: 24
147.235.28.0/24 maxlen: 24
147.235.31.0/24 maxlen: 24
147.235.59.0/24 maxlen: 24
147.235.69.0/24 maxlen: 24
147.235.70.0/23 maxlen: 23
147.235.70.0/24 maxlen: 24
147.235.71.0/24 maxlen: 24
147.235.96.0/22 maxlen: 22
147.235.96.0/23 maxlen: 23
147.235.96.0/24 maxlen: 24
147.235.97.0/24 maxlen: 24
147.235.98.0/23 maxlen: 23
147.235.98.0/24 maxlen: 24
147.235.99.0/24 maxlen: 24
147.235.101.0/24 maxlen: 24
147.235.111.0/24 maxlen: 24
147.235.144.0/21 maxlen: 24
147.235.154.0/24 maxlen: 24
147.235.182.0/23 maxlen: 23
147.235.182.0/24 maxlen: 24
147.235.183.0/24 maxlen: 24
147.235.185.0/24 maxlen: 24
147.235.186.0/24 maxlen: 24
147.235.187.0/24 maxlen: 24
147.235.188.0/24 maxlen: 24
147.235.192.0/19 maxlen: 24
147.235.192.0/20 maxlen: 20
147.235.192.0/21 maxlen: 21
147.235.192.0/22 maxlen: 22
147.235.192.0/24 maxlen: 24
147.235.193.0/24 maxlen: 24
147.235.194.0/23 maxlen: 24
147.235.194.0/24 maxlen: 24
147.235.195.0/24 maxlen: 24
147.235.196.0/22 maxlen: 22
147.235.196.0/23 maxlen: 24
147.235.196.0/24 maxlen: 24
147.235.197.0/24 maxlen: 24
147.235.198.0/23 maxlen: 24
147.235.198.0/24 maxlen: 24
147.235.199.0/24 maxlen: 24
147.235.200.0/21 maxlen: 21
147.235.200.0/22 maxlen: 22
147.235.200.0/23 maxlen: 24
147.235.200.0/24 maxlen: 24
147.235.201.0/24 maxlen: 24
147.235.202.0/23 maxlen: 24
147.235.202.0/24 maxlen: 24
147.235.203.0/24 maxlen: 24
147.235.204.0/22 maxlen: 22
147.235.204.0/23 maxlen: 24
147.235.204.0/24 maxlen: 24
147.235.205.0/24 maxlen: 24
147.235.206.0/23 maxlen: 24
147.235.206.0/24 maxlen: 24
147.235.207.0/24 maxlen: 24
147.235.208.0/22 maxlen: 23
147.235.208.0/24 maxlen: 24
147.235.209.0/24 maxlen: 24
147.235.210.0/24 maxlen: 24
147.235.211.0/24 maxlen: 24
147.235.212.0/22 maxlen: 23
147.235.212.0/23 maxlen: 23
147.235.212.0/24 maxlen: 24
147.235.213.0/24 maxlen: 24
147.235.214.0/24 maxlen: 24
147.235.215.0/24 maxlen: 24
147.235.216.0/21 maxlen: 21
147.235.216.0/22 maxlen: 23
147.235.216.0/24 maxlen: 24
147.235.217.0/24 maxlen: 24
147.235.218.0/23 maxlen: 23
147.235.218.0/24 maxlen: 24
147.235.219.0/24 maxlen: 24
147.235.220.0/22 maxlen: 22
147.235.220.0/23 maxlen: 23
147.235.220.0/24 maxlen: 24
147.235.221.0/24 maxlen: 24
147.235.222.0/23 maxlen: 23
147.235.222.0/24 maxlen: 24
147.235.223.0/24 maxlen: 24
147.235.226.0/24 maxlen: 24
147.235.228.0/22 maxlen: 24
147.235.236.0/24 maxlen: 24
147.235.237.0/24 maxlen: 24
147.235.239.0/24 maxlen: 24
147.235.242.0/24 maxlen: 24
147.235.243.0/24 maxlen: 24
147.235.244.0/24 maxlen: 24
147.235.245.0/24 maxlen: 24
147.235.246.0/24 maxlen: 24
147.235.247.0/24 maxlen: 24
147.235.250.0/24 maxlen: 24
147.235.251.0/24 maxlen: 24
147.235.253.0/24 maxlen: 24
147.235.254.0/23 maxlen: 24
149.106.128.0/19 maxlen: 24
149.106.224.0/19 maxlen: 24
2a06:c700::/29 maxlen: 48
2a06:c700::/32 maxlen: 48
2a06:c700::/44 maxlen: 44
2a06:c700:2000::/36 maxlen: 36
2a06:c700:2002::/48 maxlen: 48
2a06:c701::/32 maxlen: 32
2a06:c701:1000::/36 maxlen: 36
2a06:c701:eeee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:55:76:33:95:fa:1c:32:ea:36:1b:47:3b:53:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae02cd8026c60c3c883648a0bff7116cf26707d6
Validity
Not Before: Jul 2 15:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=318891e9dd77c27389c8c80854eb43dfd3743766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:aa:2a:ae:db:52:50:63:9d:13:88:04:3e:
60:6c:bd:bd:55:a5:fa:19:8a:b3:96:e0:fc:6f:b5:
a9:d4:9d:b0:14:93:67:49:ea:f2:fc:06:bc:35:46:
51:0a:57:f5:7c:a8:8c:75:ab:fe:82:b7:ce:fd:b1:
71:14:0a:90:80:e2:b3:a6:81:c5:b3:a9:f3:61:cc:
49:4a:0f:02:fb:5f:3c:6b:fd:4e:c0:1a:be:56:96:
d9:11:22:2e:0b:10:e0:9b:2d:90:50:f8:f4:4e:0c:
93:32:65:8f:2f:1d:bd:42:be:04:b0:ea:87:e3:2b:
78:8b:d4:f7:64:5c:d7:d7:1e:04:67:13:43:32:00:
ee:a2:5c:74:fe:f8:69:e8:da:ac:81:d1:c8:f8:e4:
e6:da:75:19:df:4e:59:53:e5:e7:b1:17:8e:1f:57:
c1:77:0d:1c:fd:da:54:5e:2d:40:99:0d:ef:ec:dc:
3a:cf:b7:1a:da:9a:13:e8:28:8f:53:78:69:5b:b5:
88:af:83:64:b3:50:34:8f:13:53:5e:ff:76:b7:e2:
34:63:d5:87:d4:f3:6c:25:0c:ef:14:a6:49:a3:20:
b6:ae:49:e5:e5:49:d8:a8:dc:0b:e6:61:d8:6f:a3:
df:0e:8c:b5:67:d7:e5:e0:8e:f0:76:d7:0c:dd:74:
49:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:88:91:E9:DD:77:C2:73:89:C8:C8:08:54:EB:43:DF:D3:74:37:66
X509v3 Authority Key Identifier:
keyid:AE:02:CD:80:26:C6:0C:3C:88:36:48:A0:BF:F7:11:6C:F2:67:07:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/MYiR6d13wnOJyMgIVOtD39N0N2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.235.0.0/16
149.106.128.0/19
149.106.224.0/19
IPv6:
2a06:c700::/29
Signature Algorithm: sha256WithRSAEncryption
77:02:4e:c7:5b:25:87:74:25:4a:b9:ad:6c:0b:da:19:07:8e:
79:b8:9f:0f:9c:d0:f0:2e:c2:3a:34:67:f6:f0:0e:51:75:a8:
c7:ef:b5:c5:6f:f8:bb:a5:22:77:3b:1f:fe:b0:a9:72:af:28:
c6:5a:29:b0:4b:b7:1e:a9:2c:3f:a6:bf:83:3f:86:3b:47:4c:
27:6e:ee:c7:6e:9d:37:b7:6e:98:79:fd:3e:48:fc:39:58:1d:
d4:99:06:cb:52:45:42:9b:5d:e3:69:a7:02:d5:72:4e:ad:f3:
4b:e0:36:d8:c1:4f:34:44:fb:e4:0e:6d:03:43:c1:f2:e1:b6:
7b:dd:5b:95:3a:8e:6d:66:72:76:af:4b:6f:38:79:67:ef:6c:
6c:dc:44:44:b9:0c:21:44:f6:88:ae:bf:c1:71:79:86:e2:88:
2c:e3:1d:be:f8:51:af:b9:cb:ce:a4:01:27:40:24:33:6d:a1:
04:8a:34:ec:8f:2b:cf:e6:4e:f7:d3:55:ec:f5:d4:11:12:46:
05:f5:e2:15:b3:88:e0:e6:82:12:d3:08:86:ee:4c:39:65:d4:
97:41:a7:d6:c7:19:bf:50:89:7e:c4:9b:59:07:25:26:07:45:
28:9d:34:8c:90:e3:f0:73:8b:f5:1f:aa:35:de:c1:c7:9e:0b:
09:aa:43:c8
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ8jaFV2M5X6HDLqNhtHO1M8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMDJjZDgwMjZjNjBjM2M4ODM2NDhhMGJmZjcxMTZjZjI2
NzA3ZDYwHhcNMjYwNzAyMTUxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTg4OTFlOWRkNzdjMjczODljOGM4MDg1NGViNDNkZmQzNzQzNzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcaqKq7bUlBjnROIBD5gbL29VaX6
GYqzluD8b7Wp1J2wFJNnSery/Aa8NUZRClf1fKiMdav+grfO/bFxFAqQgOKzpoHF
s6nzYcxJSg8C+188a/1OwBq+VpbZESIuCxDgmy2QUPj0TgyTMmWPLx29Qr4EsOqH
4yt4i9T3ZFzX1x4EZxNDMgDuolx0/vhp6NqsgdHI+OTm2nUZ305ZU+XnsReOH1fB
dw0c/dpUXi1AmQ3v7Nw6z7ca2poT6CiPU3hpW7WIr4Nks1A0jxNTXv92t+I0Y9WH
1PNsJQzvFKZJoyC2rknl5UnYqNwL5mHYb6PfDoy1Z9fl4I7wdtcM3XRJSQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFDGIkendd8JzicjICFTrQ9/TdDdmMB8GA1UdIwQY
MBaAFK4CzYAmxgw8iDZIoL/3EWzyZwfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmdMTmdDYkdERHlJTmtpZ3ZfY1JiUEpuQjlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MzliODEtM2NkMy00NjljLWI5NTQt
MzU1M2I0ZWQ2Nzk0LzEvTVlpUjZkMTN3bk9KeU1nSVZPdEQzOU4wTjJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83MzliODEtM2NkMy00NjljLWI5NTQtMzU1M2I0ZWQ2Nzk0
LzEvcmdMTmdDYkdERHlJTmtpZ3ZfY1JiUEpuQjlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwMAk+sDBAWV
aoADBAWVauAwDQQCAAIwBwMFAyoGxwAwDQYJKoZIhvcNAQELBQADggEBAHcCTsdb
JYd0JUq5rWwL2hkHjnm4nw+c0PAuwjo0Z/bwDlF1qMfvtcVv+LulInc7H/6wqXKv
KMZaKbBLtx6pLD+mv4M/hjtHTCdu7sdunTe3bph5/T5I/DlYHdSZBstSRUKbXeNp
pwLVck6t80vgNtjBTzRE++QObQNDwfLhtnvdW5U6jm1mcnavS284eWfvbGzcRES5
DCFE9oiuv8FxeYbiiCzjHb74Ua+5y86kASdAJDNtoQSKNOyPK8/mTvfTVez11BES
RgX14hWziODmghLTCIbuTDll1JdBp9bHGb9QiX7Em1kHJSYHRSidNIyQ4/Bzi/Uf
qjXewceeCwmqQ8g=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:28:15 2026 by rpki-client