Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/9UorqUntgUcQCAGY-wQJUUZyCU8.roa
File: 9UorqUntgUcQCAGY-wQJUUZyCU8.roa (raw, json)
Hash identifier: PpTY10RVywOudMA5753VFciBE3YsC4c4YmP92Sp1ZQo=
Subject key identifier: F5:4A:2B:A9:49:ED:81:47:10:08:01:98:FB:04:09:51:46:72:09:4F
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 01A172C305B59208FF37B09ABD737425684A
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/9UorqUntgUcQCAGY-wQJUUZyCU8.roa
Signing time: Sun 25 Oct 2026 11:12:25 +0000
ROA not before: Sun 25 Oct 2026 11:12:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398781
IP address blocks: 31.13.211.0/24 maxlen: 32
45.81.39.0/24 maxlen: 32
45.112.248.0/22 maxlen: 24
67.211.224.0/20 maxlen: 32
69.160.128.0/20 maxlen: 32
69.160.144.0/20 maxlen: 32
80.76.48.0/24 maxlen: 32
81.31.193.0/24 maxlen: 32
82.158.232.0/21 maxlen: 32
82.158.240.0/21 maxlen: 32
82.158.248.0/21 maxlen: 32
85.136.224.0/20 maxlen: 32
85.136.240.0/20 maxlen: 32
85.217.222.0/23 maxlen: 32
87.120.4.0/24 maxlen: 32
87.120.38.0/24 maxlen: 32
87.120.59.0/24 maxlen: 32
87.120.60.0/24 maxlen: 32
87.120.98.0/24 maxlen: 32
87.120.236.0/24 maxlen: 32
87.121.20.0/24 maxlen: 32
87.121.21.0/24 maxlen: 32
87.121.45.0/24 maxlen: 32
87.121.87.0/24 maxlen: 32
91.92.230.0/24 maxlen: 32
93.123.47.0/24 maxlen: 32
93.123.73.0/24 maxlen: 32
93.123.117.0/24 maxlen: 32
93.123.119.0/24 maxlen: 32
94.156.12.0/24 maxlen: 32
94.156.130.0/24 maxlen: 32
94.156.239.0/24 maxlen: 32
94.156.248.0/24 maxlen: 32
103.52.124.0/22 maxlen: 24
103.210.200.0/22 maxlen: 24
139.84.96.0/19 maxlen: 24
140.209.128.0/18 maxlen: 24
152.114.224.0/22 maxlen: 24
152.114.240.0/21 maxlen: 24
157.239.32.0/19 maxlen: 24
160.20.0.0/22 maxlen: 24
165.217.0.0/18 maxlen: 24
185.207.13.0/24 maxlen: 32
194.180.51.0/24 maxlen: 32
213.254.64.0/18 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:c3:05:b5:92:08:ff:37:b0:9a:bd:73:74:25:68:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Oct 25 11:12:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f54a2ba949ed814710080198fb0409514672094f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:da:2b:17:1f:48:1d:83:84:c9:f4:f2:4c:
f0:2b:3a:32:86:b9:8e:c5:d6:3e:83:c5:9a:36:0a:
a9:19:35:bf:8b:ce:08:d9:bf:8d:17:ef:76:80:59:
15:7d:42:7d:ce:82:c8:9a:15:f1:ef:09:a1:d5:c6:
47:63:88:30:5b:71:24:db:fb:c0:13:58:06:bd:9b:
df:ec:29:2a:0a:4e:a9:c1:d7:38:eb:8e:1d:5d:76:
1e:e6:8c:db:2a:8e:9d:f3:53:c9:7c:69:b3:82:b9:
39:f2:2c:13:00:eb:d2:88:57:cc:27:04:5d:e4:d9:
63:ec:ad:02:d8:7f:0c:93:2e:33:25:ba:75:7c:58:
2f:49:49:43:6a:d9:07:13:9c:93:eb:15:ed:b2:0d:
55:0d:74:2b:97:1d:92:f7:03:af:18:91:97:52:ba:
98:83:49:fc:78:ff:03:4b:86:96:e1:74:77:06:1b:
16:5c:3a:30:3c:8e:b4:79:00:5f:6e:d9:ee:2b:da:
b6:f6:00:a9:0b:62:9c:97:f4:6f:42:36:e2:b9:75:
57:4e:9d:c5:10:6d:ec:07:00:59:a0:1b:3d:bf:8d:
c9:bc:41:06:70:e1:2f:6e:0f:86:28:07:6b:5a:76:
a9:da:e5:84:42:fd:e3:e5:d2:b9:1d:c2:f5:f1:9f:
90:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4A:2B:A9:49:ED:81:47:10:08:01:98:FB:04:09:51:46:72:09:4F
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/9UorqUntgUcQCAGY-wQJUUZyCU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
45.81.39.0/24
45.112.248.0/22
67.211.224.0/20
69.160.128.0/19
80.76.48.0/24
81.31.193.0/24
82.158.232.0-82.158.255.255
85.136.224.0/19
85.217.222.0/23
87.120.4.0/24
87.120.38.0/24
87.120.59.0-87.120.60.255
87.120.98.0/24
87.120.236.0/24
87.121.20.0/23
87.121.45.0/24
87.121.87.0/24
91.92.230.0/24
93.123.47.0/24
93.123.73.0/24
93.123.117.0/24
93.123.119.0/24
94.156.12.0/24
94.156.130.0/24
94.156.239.0/24
94.156.248.0/24
103.52.124.0/22
103.210.200.0/22
139.84.96.0/19
140.209.128.0/18
152.114.224.0/22
152.114.240.0/21
157.239.32.0/19
160.20.0.0/22
165.217.0.0/18
185.207.13.0/24
194.180.51.0/24
213.254.64.0/18
Signature Algorithm: sha256WithRSAEncryption
88:44:bf:48:61:0e:48:ed:4e:0f:2a:57:9e:cf:89:45:f2:77:
da:75:05:4c:4e:45:70:6f:ee:b9:89:70:ee:54:d0:0e:41:6b:
ae:d2:7d:0d:c1:d0:0b:05:07:2e:f3:e6:fd:93:bf:8d:fd:4f:
16:86:06:96:6f:f6:6a:0a:48:f3:03:e8:d3:70:52:96:ae:3f:
bd:29:df:25:3d:9a:27:92:16:c2:2e:fc:bc:e9:ec:17:bf:5e:
d4:0e:c7:41:3d:1a:b5:32:8d:f1:39:92:2e:b0:16:5f:30:a0:
66:e8:03:a3:ed:eb:93:5d:de:43:59:c2:c4:86:8c:67:e3:ac:
5e:0f:b7:c5:7b:c2:46:d1:85:0f:da:b3:a9:2a:71:9f:ed:df:
16:8a:ee:bf:96:4b:be:72:42:4d:b1:bd:b0:d2:c5:ba:89:2a:
8a:b5:d2:64:bd:e0:64:26:58:f7:8d:3c:ea:4f:13:17:f8:c3:
36:01:a2:13:08:31:88:e1:b1:b8:a9:63:11:f5:9d:f2:de:73:
f8:6a:9e:0b:e6:45:03:b8:2e:0d:b6:0d:e1:23:f3:69:9d:83:
ea:1e:7f:50:24:cf:4e:a8:64:6c:f7:e9:1e:d0:71:dc:53:85:
4a:d6:47:6f:fe:6a:78:26:fe:be:e2:11:d5:c8:36:c3:20:d8:
11:5a:f8:1b
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgISAaFywwW1kgj/N7CavXN0JWhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl
NzczNWIwHhcNMjYxMDI1MTExMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTRhMmJhOTQ5ZWQ4MTQ3MTAwODAxOThmYjA0MDk1MTQ2NzIwOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuajaKxcfSB2DhMn08kzwKzoyhrmO
xdY+g8WaNgqpGTW/i84I2b+NF+92gFkVfUJ9zoLImhXx7wmh1cZHY4gwW3Ek2/vA
E1gGvZvf7CkqCk6pwdc4644dXXYe5ozbKo6d81PJfGmzgrk58iwTAOvSiFfMJwRd
5Nlj7K0C2H8Mky4zJbp1fFgvSUlDatkHE5yT6xXtsg1VDXQrlx2S9wOvGJGXUrqY
g0n8eP8DS4aW4XR3BhsWXDowPI60eQBfbtnuK9q29gCpC2Kcl/RvQjbiuXVXTp3F
EG3sBwBZoBs9v43JvEEGcOEvbg+GKAdrWnap2uWEQv3j5dK5HcL18Z+QQwIDAQAB
o4IDBTCCAwEwHQYDVR0OBBYEFPVKK6lJ7YFHEAgBmPsECVFGcglPMB8GA1UdIwQY
MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt
ZWVkZDk0ZWMxMjhjLzEvOVVvcnFVbnRnVWNRQ0FHWS13UUpVVVp5Q1U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj
LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBGQYIKwYBBQUHAQcBAf8EggEIMIIBBDCCAQAEAgABMIH5
AwQAHw3TAwQALVEnAwQCLXD4AwQEQ9PgAwQFRaCAAwQAUEwwAwQAUR/BMAsDBANS
nugDAwBSngMEBVWI4AMEAVXZ3gMEAFd4BAMEAFd4JjAMAwQAV3g7AwQAV3g8AwQA
V3hiAwQAV3jsAwQBV3kUAwQAV3ktAwQAV3lXAwQAW1zmAwQAXXsvAwQAXXtJAwQA
XXt1AwQAXXt3AwQAXpwMAwQAXpyCAwQAXpzvAwQAXpz4AwQCZzR8AwQCZ9LIAwQF
i1RgAwQGjNGAAwQCmHLgAwQDmHLwAwQFne8gAwQCoBQAAwQGpdkAAwQAuc8NAwQA
wrQzAwQG1f5AMA0GCSqGSIb3DQEBCwUAA4IBAQCIRL9IYQ5I7U4PKleez4lF8nfa
dQVMTkVwb+65iXDuVNAOQWuu0n0NwdALBQcu8+b9k7+N/U8WhgaWb/ZqCkjzA+jT
cFKWrj+9Kd8lPZonkhbCLvy86ewXv17UDsdBPRq1Mo3xOZIusBZfMKBm6AOj7euT
Xd5DWcLEhoxn46xeD7fFe8JG0YUP2rOpKnGf7d8Wiu6/lku+ckJNsb2w0sW6iSqK
tdJkveBkJlj3jTzqTxMX+MM2AaITCDGI4bG4qWMR9Z3y3nP4ap4L5kUDuC4Ntg3h
I/NpnYPqHn9QJM9OqGRs9+ke0HHcU4VK1kdv/mp4Jv6+4hHVyDbDINgRWvgb
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:34:47 2026 by rpki-client