Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/S97f4H7Jcp_RS4iCoVA-_mD7rh4.roa
File: S97f4H7Jcp_RS4iCoVA-_mD7rh4.roa (raw, json)
Hash identifier: rVemoVktMuhGynI9BUyXTqgwlzxx1oDBdpcFqhQcXpo=
Subject key identifier: 4B:DE:DF:E0:7E:C9:72:9F:D1:4B:88:82:A1:50:3E:FE:60:FB:AE:1E
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01A11022EA2295E2077ECFD99963F589FA51
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/S97f4H7Jcp_RS4iCoVA-_mD7rh4.roa
Signing time: Tue 06 Oct 2026 07:34:45 +0000
ROA not before: Tue 06 Oct 2026 07:34:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64445
IP address blocks: 31.193.188.0/24 maxlen: 24
37.156.174.0/24 maxlen: 24
45.83.56.0/22 maxlen: 24
45.83.57.0/24 maxlen: 24
45.83.58.0/24 maxlen: 24
45.83.59.0/24 maxlen: 24
45.86.144.0/24 maxlen: 24
45.86.145.0/24 maxlen: 24
45.86.146.0/24 maxlen: 24
77.81.103.0/24 maxlen: 24
86.104.67.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
89.34.236.0/24 maxlen: 24
89.34.237.0/24 maxlen: 24
89.34.239.0/24 maxlen: 24
89.39.201.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
89.40.142.0/24 maxlen: 24
89.40.143.0/24 maxlen: 24
89.40.227.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.43.34.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
89.43.52.0/24 maxlen: 24
89.44.237.0/24 maxlen: 24
91.212.52.0/24 maxlen: 24
91.229.186.0/24 maxlen: 24
92.114.86.0/24 maxlen: 24
92.114.87.0/24 maxlen: 24
93.113.144.0/24 maxlen: 24
93.113.145.0/24 maxlen: 24
93.113.146.0/24 maxlen: 24
93.113.147.0/24 maxlen: 24
93.113.148.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
93.115.57.0/24 maxlen: 24
94.176.108.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
94.177.10.0/24 maxlen: 24
94.177.21.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
94.177.48.0/24 maxlen: 24
94.177.49.0/24 maxlen: 24
94.177.96.0/24 maxlen: 24
94.177.98.0/24 maxlen: 24
94.177.99.0/24 maxlen: 24
176.223.64.0/24 maxlen: 24
185.184.240.0/22 maxlen: 24
185.184.240.0/24 maxlen: 24
185.184.241.0/24 maxlen: 24
185.184.242.0/24 maxlen: 24
185.198.244.0/24 maxlen: 24
185.198.245.0/24 maxlen: 24
185.198.246.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
188.208.16.0/24 maxlen: 24
188.211.248.0/24 maxlen: 24
188.214.199.0/24 maxlen: 24
188.215.6.0/24 maxlen: 24
188.215.7.0/24 maxlen: 24
188.215.94.0/24 maxlen: 24
188.240.80.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
188.240.228.0/24 maxlen: 24
188.240.229.0/24 maxlen: 24
188.241.66.0/24 maxlen: 24
188.241.67.0/24 maxlen: 24
188.241.126.0/24 maxlen: 24
188.241.138.0/24 maxlen: 24
188.241.139.0/24 maxlen: 24
188.241.143.0/24 maxlen: 24
188.241.213.0/24 maxlen: 24
193.239.140.0/24 maxlen: 24
193.239.141.0/24 maxlen: 24
217.198.177.0/24 maxlen: 24
2a04:68c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:22:ea:22:95:e2:07:7e:cf:d9:99:63:f5:89:fa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Oct 6 07:34:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bdedfe07ec9729fd14b8882a1503efe60fbae1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bd:9e:fb:b5:62:33:69:0c:61:f3:99:12:70:
37:ab:b6:37:10:f0:e5:29:ff:af:54:b6:8a:52:5e:
d7:6d:4a:89:c5:6d:72:72:4d:38:fa:eb:22:22:45:
a9:0a:1f:7c:49:b3:6c:9b:3c:4d:8b:ea:e4:01:3d:
5f:95:db:b9:f8:4d:dc:96:b9:af:60:02:ef:3e:8c:
45:e5:e7:76:d2:3c:c2:da:62:27:3e:88:21:80:f6:
e7:1c:e3:dc:81:ca:79:c7:e1:fc:bf:02:cf:7f:18:
3b:24:8c:7c:88:4d:99:8a:db:f3:9a:69:d5:25:7a:
bb:29:ef:4a:d0:b5:63:fd:b5:49:cd:3c:dc:b4:39:
e5:2e:d8:54:49:7e:8b:87:70:8d:b7:11:c3:5a:01:
48:ea:aa:7e:d4:e3:6e:46:e0:c4:4d:98:9e:89:aa:
56:5a:d3:8a:33:ae:0a:72:f7:bb:7b:39:23:71:30:
59:8a:28:68:fd:1d:0e:32:b2:28:80:b1:51:f2:bc:
26:9c:a9:81:e2:dc:4e:49:fe:b5:ca:a6:b6:52:e3:
6a:a2:8e:35:d0:7f:87:ec:02:22:79:da:00:9f:f7:
43:d6:ed:ea:5f:1e:a2:5a:89:fe:af:6d:23:85:3a:
a8:ec:49:c4:09:32:a7:34:89:1c:a9:c8:e8:f9:31:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DE:DF:E0:7E:C9:72:9F:D1:4B:88:82:A1:50:3E:FE:60:FB:AE:1E
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/S97f4H7Jcp_RS4iCoVA-_mD7rh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.188.0/24
37.156.174.0/24
45.83.56.0/22
45.86.144.0-45.86.146.255
77.81.103.0/24
86.104.67.0/24
86.107.110.0/24
89.34.236.0/23
89.34.239.0/24
89.39.201.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.34.0/23
89.43.52.0/24
89.44.237.0/24
91.212.52.0/24
91.229.186.0/24
92.114.86.0/23
93.113.144.0/21
93.115.57.0/24
94.176.108.0/24
94.176.212.0/24
94.177.10.0/24
94.177.21.0/24
94.177.48.0/23
94.177.96.0/24
94.177.98.0/23
176.223.64.0/24
185.184.240.0/22
185.198.244.0-185.198.246.255
188.208.16.0/23
188.211.248.0/24
188.214.199.0/24
188.215.6.0/23
188.215.94.0/24
188.240.80.0/24
188.240.228.0/23
188.241.66.0/23
188.241.126.0/24
188.241.138.0/23
188.241.143.0/24
188.241.213.0/24
193.239.140.0/23
217.198.177.0/24
IPv6:
2a04:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
77:fe:67:4c:73:47:46:a3:11:32:fb:aa:61:25:9f:58:c8:60:
53:3d:8b:a3:b5:24:ba:db:45:28:7c:7f:b4:26:8d:47:99:66:
89:a8:77:04:61:49:cc:af:5b:0f:4c:26:ca:34:2c:89:a2:ae:
46:de:31:84:67:ef:ba:7f:5c:57:b0:cb:1d:8e:b9:8d:38:33:
6a:c3:93:87:5c:1d:8c:36:bf:a9:fe:cd:13:f3:24:4c:74:b6:
2f:1a:61:35:ac:f6:a0:0b:5e:8b:cf:bc:dd:22:97:1a:8d:e0:
be:6e:59:f6:0f:4f:95:04:fa:1d:3d:07:73:56:99:9b:9c:0f:
a1:68:4a:cd:c9:38:50:5a:df:57:33:37:02:d9:f8:4e:1a:72:
8b:c3:a1:4d:d5:52:bc:e3:a7:84:b7:34:91:91:4b:70:1f:94:
a4:8a:50:5c:9d:4a:7f:e9:c5:e7:b7:35:70:cb:d3:fb:33:71:
03:f2:40:2c:27:17:0b:2d:3f:8a:d1:26:eb:63:ad:f5:fe:90:
7b:8a:03:4e:28:0b:ed:7c:7a:b9:b8:31:0d:ce:71:15:d4:9b:
20:29:eb:0a:6d:b2:09:9b:c8:b9:63:dd:55:bc:6f:cd:dd:7b:
c0:07:fc:53:29:0b:9b:59:39:da:37:e0:eb:90:aa:c9:c3:79:
82:4b:fa:42
-----BEGIN CERTIFICATE-----
MIIGNDCCBRygAwIBAgISAaEQIuoileIHfs/ZmWP1ifpRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3
NjA1MTkwHhcNMjYxMDA2MDczNDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmRlZGZlMDdlYzk3MjlmZDE0Yjg4ODJhMTUwM2VmZTYwZmJhZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b2e+7ViM2kMYfOZEnA3q7Y3EPDl
Kf+vVLaKUl7XbUqJxW1yck04+usiIkWpCh98SbNsmzxNi+rkAT1fldu5+E3clrmv
YALvPoxF5ed20jzC2mInPoghgPbnHOPcgcp5x+H8vwLPfxg7JIx8iE2ZitvzmmnV
JXq7Ke9K0LVj/bVJzTzctDnlLthUSX6Lh3CNtxHDWgFI6qp+1ONuRuDETZieiapW
WtOKM64Kcve7ezkjcTBZiiho/R0OMrIogLFR8rwmnKmB4txOSf61yqa2UuNqoo41
0H+H7AIiedoAn/dD1u3qXx6iWon+r20jhTqo7EnECTKnNIkcqcjo+TFc7wIDAQAB
o4IDQDCCAzwwHQYDVR0OBBYEFEve3+B+yXKf0UuIgqFQPv5g+64eMB8GA1UdIwQY
MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt
NzQwOGViOGJjNTg2LzEvUzk3ZjRIN0pjcF9SUzRpQ29WQS1fbUQ3cmg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2
LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVAYIKwYBBQUHAQcBAf8EggFDMIIBPzCCASwEAgABMIIB
JAMEAB/BvAMEACWcrgMEAi1TODAMAwQELVaQAwQALVaSAwQATVFnAwQAVmhDAwQA
VmtuAwQBWSLsAwQAWSLvAwQAWSfJAwQAWSf+AwQBWSiOAwQAWSjjAwQAWSqGAwQB
WSsiAwQAWSs0AwQAWSztAwQAW9Q0AwQAW+W6AwQBXHJWAwQDXXGQAwQAXXM5AwQA
XrBsAwQAXrDUAwQAXrEKAwQAXrEVAwQBXrEwAwQAXrFgAwQBXrFiAwQAsN9AAwQC
ubjwMAwDBAK5xvQDBAC5xvYDBAG80BADBAC80/gDBAC81scDBAG81wYDBAC8114D
BAC88FADBAG88OQDBAG88UIDBAC88X4DBAG88YoDBAC88Y8DBAC88dUDBAHB74wD
BADZxrEwDQQCAAIwBwMFACoEaMAwDQYJKoZIhvcNAQELBQADggEBAHf+Z0xzR0aj
ETL7qmEln1jIYFM9i6O1JLrbRSh8f7QmjUeZZomodwRhScyvWw9MJso0LImirkbe
MYRn77p/XFewyx2OuY04M2rDk4dcHYw2v6n+zRPzJEx0ti8aYTWs9qALXovPvN0i
lxqN4L5uWfYPT5UE+h09B3NWmZucD6FoSs3JOFBa31czNwLZ+E4acovDoU3VUrzj
p4S3NJGRS3AflKSKUFydSn/pxee3NXDL0/szcQPyQCwnFwstP4rRJutjrfX+kHuK
A04oC+18erm4MQ3OcRXUmyAp6wptsgmbyLlj3VW8b83de8AH/FMpC5tZOdo34OuQ
qsnDeYJL+kI=
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:57:36 2026 by rpki-client