Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rBfoycmlxWGVTYqbqxe1PMG2ZkQ.roa
File: rBfoycmlxWGVTYqbqxe1PMG2ZkQ.roa (raw, json)
Hash identifier: qWcpQpepwKSvUietD+xwSTlha4NxmEHCN5ebF4TSaUo=
Subject key identifier: AC:17:E8:C9:C9:A5:C5:61:95:4D:8A:9B:AB:17:B5:3C:C1:B6:66:44
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A17645286BE904435BB6AEFCB091468975
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rBfoycmlxWGVTYqbqxe1PMG2ZkQ.roa
Signing time: Mon 26 Oct 2026 03:33:26 +0000
ROA not before: Mon 26 Oct 2026 03:33:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
62.105.193.0/24 maxlen: 24
62.105.195.0/24 maxlen: 24
62.105.197.0/24 maxlen: 24
62.105.198.0/24 maxlen: 24
62.105.218.0/24 maxlen: 24
77.67.32.0/24 maxlen: 24
77.67.91.0/24 maxlen: 24
77.67.125.0/24 maxlen: 24
81.94.104.0/21 maxlen: 24
193.141.2.0/24 maxlen: 24
194.45.47.0/24 maxlen: 24
194.77.6.0/24 maxlen: 24
194.77.24.0/23 maxlen: 24
194.77.56.0/22 maxlen: 24
194.77.62.0/24 maxlen: 24
194.77.91.0/24 maxlen: 24
194.77.194.0/23 maxlen: 24
194.77.204.0/22 maxlen: 24
194.77.224.0/22 maxlen: 24
194.77.229.0/24 maxlen: 24
194.122.78.0/24 maxlen: 24
194.122.80.0/24 maxlen: 24
194.122.81.0/24 maxlen: 24
194.122.85.0/24 maxlen: 24
194.231.128.0/22 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.132.0/24 maxlen: 24
194.231.135.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.136.0/24 maxlen: 24
194.231.137.0/24 maxlen: 24
194.231.138.0/24 maxlen: 24
194.231.139.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.143.0/24 maxlen: 24
194.231.148.0/24 maxlen: 24
194.231.149.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.159.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.199.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.203.0/24 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/22 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.208.0/24 maxlen: 24
194.231.209.0/24 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.210.0/24 maxlen: 24
194.231.211.0/24 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.213.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.219.0/24 maxlen: 24
194.231.220.0/22 maxlen: 24
194.231.222.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
195.21.145.0/24 maxlen: 24
195.21.149.0/24 maxlen: 24
212.168.200.0/21 maxlen: 24
212.189.28.0/23 maxlen: 24
212.189.57.0/24 maxlen: 24
212.189.75.0/24 maxlen: 24
212.189.79.0/24 maxlen: 24
212.189.80.0/24 maxlen: 24
212.189.89.0/24 maxlen: 24
212.189.90.0/24 maxlen: 24
212.189.91.0/24 maxlen: 24
212.189.97.0/24 maxlen: 24
212.189.98.0/24 maxlen: 24
212.189.99.0/24 maxlen: 24
212.189.104.0/24 maxlen: 24
212.189.110.0/24 maxlen: 24
212.189.115.0/24 maxlen: 24
212.221.26.0/24 maxlen: 24
217.8.200.0/24 maxlen: 24
217.8.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:45:28:6b:e9:04:43:5b:b6:ae:fc:b0:91:46:89:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 26 03:33:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac17e8c9c9a5c561954d8a9bab17b53cc1b66644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:19:80:85:d4:2a:c3:52:15:c8:bf:fc:8e:
ef:60:2c:5d:4e:c5:18:65:78:4f:fe:4d:43:1f:ed:
4a:2f:3b:ee:19:86:6b:58:1c:ea:fa:d6:a7:4b:81:
01:c0:36:a5:2a:f8:d1:f3:c3:bf:74:9b:fa:2f:39:
18:65:48:13:e6:ef:5d:90:7f:9c:ac:52:64:a1:32:
4c:8b:9c:64:dd:ef:98:57:64:78:8e:b2:21:79:15:
54:28:2b:3e:1a:2b:51:5f:2e:e0:5f:73:0d:18:ff:
9c:93:61:2c:a7:17:ee:7b:89:7d:0b:53:48:5e:cc:
9d:b3:e1:48:d6:cb:da:ae:a4:2d:f0:48:bf:07:6a:
b1:75:72:f5:fb:f4:93:ba:a4:62:f0:76:1c:a7:a6:
55:95:97:77:6b:bf:8b:48:86:d5:4e:e5:64:9c:f4:
50:91:a2:3f:35:fb:78:93:3d:3a:7a:a4:97:27:76:
61:bc:28:6d:9b:cc:f9:90:1a:f8:fc:a6:8c:0a:43:
9a:29:18:98:ab:19:8a:02:e6:a3:ca:58:89:f4:8a:
85:e7:68:62:de:1d:df:bd:0f:aa:c0:e6:2d:38:4f:
cb:58:ca:b1:4f:37:0f:39:2a:ba:43:46:7c:86:65:
20:9d:7e:5f:37:d1:10:da:02:77:6e:42:79:45:a2:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:17:E8:C9:C9:A5:C5:61:95:4D:8A:9B:AB:17:B5:3C:C1:B6:66:44
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rBfoycmlxWGVTYqbqxe1PMG2ZkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.32.0/24
62.41.37.0/24
62.105.193.0/24
62.105.195.0/24
62.105.197.0-62.105.198.255
62.105.218.0/24
77.67.32.0/24
77.67.91.0/24
77.67.125.0/24
81.94.104.0/21
193.141.2.0/24
194.45.47.0/24
194.77.6.0/24
194.77.24.0/23
194.77.56.0/22
194.77.62.0/24
194.77.91.0/24
194.77.194.0/23
194.77.204.0/22
194.77.224.0/22
194.77.229.0/24
194.122.78.0/24
194.122.80.0/23
194.122.85.0/24
194.231.128.0-194.231.139.255
194.231.142.0/23
194.231.148.0-194.231.155.255
194.231.157.0-194.231.159.255
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
195.21.145.0/24
195.21.149.0/24
212.168.200.0/21
212.189.28.0/23
212.189.57.0/24
212.189.75.0/24
212.189.79.0-212.189.80.255
212.189.89.0-212.189.91.255
212.189.97.0-212.189.99.255
212.189.104.0/24
212.189.110.0/24
212.189.115.0/24
212.221.26.0/24
217.8.200.0/24
217.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:db:c2:fc:f5:78:6f:cb:0b:12:98:4f:4d:2e:9b:05:02:d8:
bb:65:05:8e:e4:70:c9:47:61:07:2a:3a:75:f5:d5:ba:50:65:
ae:c5:48:aa:86:f5:91:ff:66:c2:b9:c0:c7:e4:9b:df:f4:6c:
36:7c:1f:95:c7:51:5f:da:d8:56:57:ca:22:0a:bf:7e:1d:e3:
fa:43:17:a2:5d:b1:81:af:b1:29:ee:7e:61:62:56:23:4a:57:
de:ec:9f:87:1e:4c:6c:bd:35:52:73:40:04:81:c6:8e:77:07:
9f:5a:65:81:e2:79:f5:14:ee:46:e6:b5:59:6a:07:02:a9:0d:
b0:8c:c1:21:33:97:6e:2f:f1:d1:89:a2:00:81:5c:bf:0a:19:
bb:af:0c:2d:d4:a9:a4:6b:19:1e:cb:7c:b3:22:3a:9c:38:5b:
93:fc:7a:d2:3f:49:79:75:4c:3c:b7:18:7f:f4:cf:00:35:6e:
c4:4a:62:4b:09:da:4e:9c:6f:80:b3:15:f8:31:65:ac:32:33:
20:01:de:44:e2:0b:cf:0f:37:7f:50:f7:38:46:85:d6:e0:d0:
78:0e:01:24:d7:55:46:c1:53:db:a5:be:8b:f9:bc:90:15:52:
44:29:b9:62:c7:a6:20:c4:4e:15:df:d4:b1:28:79:34:2a:e9:
3c:95:fd:7d
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISAaF2RShr6QRDW7au/LCRRol1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYxMDI2MDMzMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzE3ZThjOWM5YTVjNTYxOTU0ZDhhOWJhYjE3YjUzY2MxYjY2NjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytgZgIXUKsNSFci//I7vYCxdTsUY
ZXhP/k1DH+1KLzvuGYZrWBzq+tanS4EBwDalKvjR88O/dJv6LzkYZUgT5u9dkH+c
rFJkoTJMi5xk3e+YV2R4jrIheRVUKCs+GitRXy7gX3MNGP+ck2Espxfue4l9C1NI
Xsyds+FI1svarqQt8Ei/B2qxdXL1+/STuqRi8HYcp6ZVlZd3a7+LSIbVTuVknPRQ
kaI/Nft4kz06eqSXJ3ZhvChtm8z5kBr4/KaMCkOaKRiYqxmKAuajyliJ9IqF52hi
3h3fvQ+qwOYtOE/LWMqxTzcPOSq6Q0Z8hmUgnX5fN9EQ2gJ3bkJ5RaKbpQIDAQAB
o4IDYzCCA18wHQYDVR0OBBYEFKwX6MnJpcVhlU2Km6sXtTzBtmZEMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvckJmb3ljbWx4V0dWVFlxYnF4ZTFQTUcyWmtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBdwYIKwYBBQUHAQcBAf8EggFmMIIBYjCCAV4EAgABMIIB
VgMEAD4pIAMEAD4pJQMEAD5pwQMEAD5pwzAMAwQAPmnFAwQAPmnGAwQAPmnaAwQA
TUMgAwQATUNbAwQATUN9AwQDUV5oAwQAwY0CAwQAwi0vAwQAwk0GAwQBwk0YAwQC
wk04AwQAwk0+AwQAwk1bAwQBwk3CAwQCwk3MAwQCwk3gAwQAwk3lAwQAwnpOAwQB
wnpQAwQAwnpVMAwDBAfC54ADBALC54gDBAHC544wDAMEAsLnlAMEAsLnmDAMAwQA
wuedAwQFwueAMAwDBADC58MDBAPC59AwDAMEAcLn2gMEBcLnwAMEAMMVkQMEAMMV
lQMEA9SoyAMEAdS9HAMEANS9OQMEANS9SzAMAwQA1L1PAwQA1L1QMAwDBADUvVkD
BALUvVgwDAMEANS9YQMEAtS9YAMEANS9aAMEANS9bgMEANS9cwMEANTdGgMEANkI
yAMEANkIyzANBgkqhkiG9w0BAQsFAAOCAQEAm9vC/PV4b8sLEphPTS6bBQLYu2UF
juRwyUdhByo6dfXVulBlrsVIqob1kf9mwrnAx+Sb3/RsNnwflcdRX9rYVlfKIgq/
fh3j+kMXol2xga+xKe5+YWJWI0pX3uyfhx5MbL01UnNABIHGjncHn1plgeJ59RTu
Rua1WWoHAqkNsIzBITOXbi/x0YmiAIFcvwoZu68MLdSppGsZHst8syI6nDhbk/x6
0j9JeXVMPLcYf/TPADVuxEpiSwnaTpxvgLMV+DFlrDIzIAHeROILzw83f1D3OEaF
1uDQeA4BJNdVRsFT26W+i/m8kBVSRCm5YsemIMROFd/UsSh5NCrpPJX9fQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:56:25 2026 by rpki-client