Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Umc4K1yDEFDSRJ8vb6pp-GAjsrE.roa
File: Umc4K1yDEFDSRJ8vb6pp-GAjsrE.roa (raw, json)
Hash identifier: qc5rsP2+FQSR9u/PHZ723lIQmGXYHgLb1N7MtFeLauc=
Subject key identifier: 52:67:38:2B:5C:83:10:50:D2:44:9F:2F:6F:AA:69:F8:60:23:B2:B1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A16F49D53354955C193956BB4CD23B16B0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Umc4K1yDEFDSRJ8vb6pp-GAjsrE.roa
Signing time: Sat 24 Oct 2026 19:01:12 +0000
ROA not before: Sat 24 Oct 2026 19:01:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 9.247.5.0/24 maxlen: 24
9.247.8.0/24 maxlen: 24
9.247.9.0/24 maxlen: 24
9.247.11.0/24 maxlen: 24
9.247.16.0/24 maxlen: 24
9.247.24.0/24 maxlen: 24
9.247.28.0/24 maxlen: 24
9.247.34.0/24 maxlen: 24
9.247.66.0/24 maxlen: 24
9.247.77.0/24 maxlen: 24
9.247.88.0/24 maxlen: 24
9.247.107.0/24 maxlen: 24
9.247.143.0/24 maxlen: 24
9.247.160.0/24 maxlen: 24
9.247.241.0/24 maxlen: 24
9.247.247.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
72.35.240.0/24 maxlen: 24
72.35.241.0/24 maxlen: 24
72.35.243.0/24 maxlen: 24
72.35.244.0/24 maxlen: 24
78.17.20.0/24 maxlen: 24
78.17.21.0/24 maxlen: 24
78.17.23.0/24 maxlen: 24
78.17.30.0/24 maxlen: 24
78.17.31.0/24 maxlen: 24
78.17.58.0/24 maxlen: 24
78.17.61.0/24 maxlen: 24
78.17.81.0/24 maxlen: 24
78.17.168.0/24 maxlen: 24
78.17.229.0/24 maxlen: 24
89.125.223.0/24 maxlen: 24
89.125.242.0/24 maxlen: 24
89.125.245.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
104.143.194.0/24 maxlen: 24
104.143.195.0/24 maxlen: 24
104.143.200.0/24 maxlen: 24
140.225.196.0/24 maxlen: 24
140.225.205.0/24 maxlen: 24
153.76.192.0/24 maxlen: 24
153.76.197.0/24 maxlen: 24
153.76.201.0/24 maxlen: 24
153.76.206.0/24 maxlen: 24
153.76.207.0/24 maxlen: 24
153.76.209.0/24 maxlen: 24
153.76.210.0/24 maxlen: 24
153.76.219.0/24 maxlen: 24
153.76.220.0/24 maxlen: 24
153.76.222.0/24 maxlen: 24
153.76.223.0/24 maxlen: 24
162.35.227.0/24 maxlen: 24
206.245.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:49:d5:33:54:95:5c:19:39:56:bb:4c:d2:3b:16:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 24 19:01:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5267382b5c831050d2449f2f6faa69f86023b2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:5f:70:93:c1:76:4c:ae:bc:36:c4:4e:3e:
68:d8:82:41:3b:e2:4d:e6:7f:67:c0:ec:b4:a8:95:
32:1f:24:39:44:61:5f:c4:4b:94:40:e3:12:aa:2f:
e7:34:68:c8:8e:f1:4d:01:a5:6e:28:b5:a1:51:fc:
1c:d7:c0:cd:fc:8d:60:bc:66:1c:e5:50:b3:9e:b2:
e5:29:92:a7:6a:2a:81:e0:79:d6:24:82:2f:57:4b:
77:5b:3f:9a:3c:45:c0:0b:39:99:e5:ac:28:e2:1c:
30:c1:40:65:e1:a1:57:d1:79:fb:c2:e1:72:10:ac:
4b:82:fb:1a:d4:7b:11:ed:76:a6:7e:b4:f2:36:ff:
9f:a8:04:fb:56:e6:85:9c:d3:6f:d8:83:0b:df:4e:
12:4f:62:03:c2:43:bd:b0:50:fe:b9:08:d9:79:84:
e0:06:c2:c1:c6:3c:31:24:f3:ca:9d:99:b7:b5:e4:
52:ab:f4:8a:ad:71:d5:9c:10:8d:5c:63:02:01:67:
19:19:17:92:95:b3:b6:89:e8:ed:69:b0:c6:2b:26:
6e:c2:76:75:df:fe:63:3c:6b:ab:91:f1:24:73:02:
a7:da:38:c3:c3:8e:7e:51:75:26:e7:c8:e6:5e:93:
ec:89:01:fc:85:1c:fd:c3:2b:d0:49:e8:1a:35:95:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:67:38:2B:5C:83:10:50:D2:44:9F:2F:6F:AA:69:F8:60:23:B2:B1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Umc4K1yDEFDSRJ8vb6pp-GAjsrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.5.0/24
9.247.8.0/23
9.247.11.0/24
9.247.16.0/24
9.247.24.0/24
9.247.28.0/24
9.247.34.0/24
9.247.66.0/24
9.247.77.0/24
9.247.88.0/24
9.247.107.0/24
9.247.143.0/24
9.247.160.0/24
9.247.241.0/24
9.247.247.0/24
46.102.237.0/24
72.35.240.0/23
72.35.243.0-72.35.244.255
78.17.20.0/23
78.17.23.0/24
78.17.30.0/23
78.17.58.0/24
78.17.61.0/24
78.17.81.0/24
78.17.168.0/24
78.17.229.0/24
89.125.223.0/24
89.125.242.0/24
89.125.245.0/24
103.245.228.0/24
104.143.194.0/23
104.143.200.0/24
140.225.196.0/24
140.225.205.0/24
153.76.192.0/24
153.76.197.0/24
153.76.201.0/24
153.76.206.0/23
153.76.209.0-153.76.210.255
153.76.219.0-153.76.220.255
153.76.222.0/23
162.35.227.0/24
206.245.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:19:8a:e9:40:d2:bf:37:8f:01:8e:58:e2:a0:0e:4e:be:7d:
04:f9:4d:47:20:cf:0d:0f:98:df:dc:06:16:d4:99:1b:5b:0a:
66:a5:74:ec:90:31:ce:35:41:ff:89:f2:be:4a:a4:05:16:ee:
2d:36:9d:5e:05:78:9d:c9:c7:25:35:7a:eb:e6:7e:ef:01:0e:
6c:b7:16:fc:37:c8:e5:b4:60:1a:f6:27:e3:17:a4:06:5c:40:
59:e4:fb:91:93:c3:ed:83:a0:d4:d3:0c:43:76:f6:48:09:9b:
5f:99:6a:b4:9c:5d:62:63:10:50:f9:00:7f:50:dd:26:b3:50:
40:67:54:e1:c0:73:d6:9f:38:2d:30:13:ad:67:f1:76:05:03:
e1:5c:e9:d3:39:96:e8:4d:70:a8:6e:09:23:6e:b2:e0:bb:e9:
a0:a2:b5:df:57:71:aa:51:95:53:23:1b:d3:03:5a:cd:c1:40:
89:80:c1:22:55:cd:38:0d:c1:b8:96:44:ee:7b:75:c4:5b:c3:
cf:4f:fa:87:97:8a:fa:8e:47:f1:da:ab:1e:a8:07:51:7b:e7:
a4:59:8e:0c:77:a4:b9:ce:30:5c:0b:c2:1e:81:1f:ec:b2:e7:
4c:57:1e:97:91:87:60:8d:a4:0a:d5:e0:5c:69:ab:23:0c:0c:
83:e7:02:01
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgISAaFvSdUzVJVcGTlWu0zSOxawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYxMDI0MTkwMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjY3MzgyYjVjODMxMDUwZDI0NDlmMmY2ZmFhNjlmODYwMjNiMmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9ZfcJPBdkyuvDbETj5o2IJBO+JN
5n9nwOy0qJUyHyQ5RGFfxEuUQOMSqi/nNGjIjvFNAaVuKLWhUfwc18DN/I1gvGYc
5VCznrLlKZKnaiqB4HnWJIIvV0t3Wz+aPEXACzmZ5awo4hwwwUBl4aFX0Xn7wuFy
EKxLgvsa1HsR7XamfrTyNv+fqAT7VuaFnNNv2IML304ST2IDwkO9sFD+uQjZeYTg
BsLBxjwxJPPKnZm3teRSq/SKrXHVnBCNXGMCAWcZGReSlbO2iejtabDGKyZuwnZ1
3/5jPGurkfEkcwKn2jjDw45+UXUm58jmXpPsiQH8hRz9wyvQSegaNZUNbwIDAQAB
o4IDJzCCAyMwHQYDVR0OBBYEFFJnOCtcgxBQ0kSfL2+qafhgI7KxMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvVW1jNEsxeURFRkRTUko4dmI2cHAtR0Fqc3JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBOwYIKwYBBQUHAQcBAf8EggEqMIIBJjCCASIEAgABMIIB
GgMEAAn3BQMEAQn3CAMEAAn3CwMEAAn3EAMEAAn3GAMEAAn3HAMEAAn3IgMEAAn3
QgMEAAn3TQMEAAn3WAMEAAn3awMEAAn3jwMEAAn3oAMEAAn38QMEAAn39wMEAC5m
7QMEAUgj8DAMAwQASCPzAwQASCP0AwQBThEUAwQAThEXAwQBThEeAwQAThE6AwQA
ThE9AwQAThFRAwQAThGoAwQAThHlAwQAWX3fAwQAWX3yAwQAWX31AwQAZ/XkAwQB
aI/CAwQAaI/IAwQAjOHEAwQAjOHNAwQAmUzAAwQAmUzFAwQAmUzJAwQBmUzOMAwD
BACZTNEDBACZTNIwDAMEAJlM2wMEAJlM3AMEAZlM3gMEAKIj4wMEAM71kTANBgkq
hkiG9w0BAQsFAAOCAQEALRmK6UDSvzePAY5Y4qAOTr59BPlNRyDPDQ+Y39wGFtSZ
G1sKZqV07JAxzjVB/4nyvkqkBRbuLTadXgV4ncnHJTV66+Z+7wEObLcW/DfI5bRg
GvYn4xekBlxAWeT7kZPD7YOg1NMMQ3b2SAmbX5lqtJxdYmMQUPkAf1DdJrNQQGdU
4cBz1p84LTATrWfxdgUD4Vzp0zmW6E1wqG4JI26y4LvpoKK131dxqlGVUyMb0wNa
zcFAiYDBIlXNOA3BuJZE7nt1xFvDz0/6h5eK+o5H8dqrHqgHUXvnpFmODHekuc4w
XAvCHoEf7LLnTFcel5GHYI2kCtXgXGmrIwwMg+cCAQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:46:09 2026 by rpki-client