Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/_wGyv0k8XO18ySIo4NGtQz8fi-Y.roa
File: _wGyv0k8XO18ySIo4NGtQz8fi-Y.roa (raw, json)
Hash identifier: 4PptUYYXksAvbEf1d4Az+k3sicfatEKpk4yuXrS/xKQ=
Subject key identifier: FF:01:B2:BF:49:3C:5C:ED:7C:C9:22:28:E0:D1:AD:43:3F:1F:8B:E6
Certificate issuer: /CN=950d7f3c8f1fe011c0921abdadc355047d32dc59
Certificate serial: 01A019FDA294960E50B6D7670AD0E616D5F0
Authority key identifier: 95:0D:7F:3C:8F:1F:E0:11:C0:92:1A:BD:AD:C3:55:04:7D:32:DC:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/_wGyv0k8XO18ySIo4NGtQz8fi-Y.roa
Signing time: Wed 19 Aug 2026 12:27:27 +0000
ROA not before: Wed 19 Aug 2026 12:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56478
IP address blocks: 31.14.248.0/22 maxlen: 22
37.156.72.0/22 maxlen: 22
68.168.32.0/19 maxlen: 19
68.168.32.0/22 maxlen: 22
68.168.40.0/22 maxlen: 22
68.168.44.0/22 maxlen: 22
68.168.60.0/22 maxlen: 22
88.98.192.0/18 maxlen: 18
88.98.200.0/22 maxlen: 22
88.98.204.0/22 maxlen: 22
88.98.216.0/23 maxlen: 23
88.98.218.0/23 maxlen: 23
88.98.240.0/20 maxlen: 20
88.98.240.0/22 maxlen: 22
89.32.120.0/22 maxlen: 22
89.34.164.0/22 maxlen: 22
89.35.196.0/22 maxlen: 22
89.36.64.0/21 maxlen: 21
89.39.136.0/21 maxlen: 21
89.44.40.0/22 maxlen: 22
93.115.192.0/22 maxlen: 22
137.220.64.0/18 maxlen: 18
137.220.68.0/22 maxlen: 22
137.220.72.0/21 maxlen: 21
137.220.80.0/22 maxlen: 22
137.220.84.0/22 maxlen: 22
137.220.88.0/22 maxlen: 22
137.220.92.0/22 maxlen: 22
137.220.96.0/22 maxlen: 22
137.220.100.0/22 maxlen: 22
137.220.104.0/22 maxlen: 22
137.220.108.0/22 maxlen: 22
137.220.112.0/20 maxlen: 20
137.220.112.0/23 maxlen: 23
137.220.112.0/24 maxlen: 24
137.220.113.0/24 maxlen: 24
137.220.114.0/23 maxlen: 23
137.220.116.0/23 maxlen: 23
137.220.116.0/24 maxlen: 24
137.220.117.0/24 maxlen: 24
137.220.118.0/23 maxlen: 23
137.220.118.0/24 maxlen: 24
137.220.119.0/24 maxlen: 24
137.220.120.0/23 maxlen: 23
137.220.120.0/24 maxlen: 24
137.220.121.0/24 maxlen: 24
137.220.122.0/23 maxlen: 23
137.220.122.0/24 maxlen: 24
137.220.123.0/24 maxlen: 24
137.220.124.0/22 maxlen: 22
140.228.32.0/19 maxlen: 19
140.228.40.0/22 maxlen: 22
140.228.44.0/22 maxlen: 22
140.228.48.0/22 maxlen: 22
140.228.52.0/22 maxlen: 22
140.228.56.0/22 maxlen: 22
140.228.64.0/19 maxlen: 19
140.228.80.0/21 maxlen: 21
140.228.88.0/22 maxlen: 22
140.228.92.0/22 maxlen: 22
141.0.144.0/21 maxlen: 21
141.0.152.0/21 maxlen: 21
143.58.128.0/18 maxlen: 18
143.58.128.0/21 maxlen: 21
143.58.136.0/21 maxlen: 21
143.58.144.0/22 maxlen: 22
143.58.148.0/22 maxlen: 22
143.58.152.0/21 maxlen: 21
143.58.160.0/21 maxlen: 21
143.58.168.0/21 maxlen: 21
143.58.176.0/21 maxlen: 21
143.58.184.0/21 maxlen: 21
143.58.192.0/18 maxlen: 18
143.58.192.0/21 maxlen: 21
143.58.200.0/21 maxlen: 21
143.58.212.0/22 maxlen: 22
143.58.216.0/21 maxlen: 21
143.58.216.0/22 maxlen: 22
143.58.220.0/22 maxlen: 22
143.58.224.0/21 maxlen: 21
143.58.224.0/22 maxlen: 22
143.58.228.0/22 maxlen: 22
143.58.232.0/22 maxlen: 22
143.58.236.0/22 maxlen: 22
143.58.240.0/21 maxlen: 21
143.58.248.0/21 maxlen: 21
152.37.64.0/18 maxlen: 18
152.37.64.0/22 maxlen: 22
152.37.68.0/22 maxlen: 22
152.37.72.0/22 maxlen: 22
152.37.76.0/22 maxlen: 22
152.37.80.0/22 maxlen: 22
152.37.84.0/22 maxlen: 22
152.37.88.0/22 maxlen: 22
152.37.92.0/22 maxlen: 22
152.37.96.0/22 maxlen: 22
152.37.100.0/23 maxlen: 23
152.37.102.0/23 maxlen: 23
152.37.104.0/22 maxlen: 22
152.37.108.0/22 maxlen: 22
152.37.114.0/23 maxlen: 23
152.37.116.0/22 maxlen: 22
152.37.120.0/22 maxlen: 22
152.37.124.0/22 maxlen: 22
152.37.124.0/23 maxlen: 23
152.37.126.0/23 maxlen: 23
185.24.120.0/22 maxlen: 22
188.172.144.0/20 maxlen: 20
188.210.208.0/21 maxlen: 21
188.210.208.0/22 maxlen: 22
188.210.212.0/22 maxlen: 22
188.210.212.0/23 maxlen: 23
188.210.214.0/23 maxlen: 23
188.211.160.0/22 maxlen: 22
188.213.136.0/22 maxlen: 22
188.214.8.0/21 maxlen: 21
209.35.64.0/19 maxlen: 19
209.35.64.0/21 maxlen: 21
209.35.72.0/22 maxlen: 22
209.35.76.0/22 maxlen: 22
209.35.78.0/23 maxlen: 23
209.35.80.0/20 maxlen: 20
209.35.80.0/21 maxlen: 21
209.35.80.0/22 maxlen: 22
209.35.84.0/22 maxlen: 22
209.35.88.0/21 maxlen: 21
209.35.88.0/22 maxlen: 22
209.35.92.0/22 maxlen: 22
2a01:4b00::/32 maxlen: 32
2a01:4b00:d000::/36 maxlen: 36
2a01:4b00:e000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:fd:a2:94:96:0e:50:b6:d7:67:0a:d0:e6:16:d5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950d7f3c8f1fe011c0921abdadc355047d32dc59
Validity
Not Before: Aug 19 12:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff01b2bf493c5ced7cc92228e0d1ad433f1f8be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:ab:af:ce:7f:b5:40:c1:71:2c:b7:ce:f9:
0d:71:ec:7b:eb:ca:8f:ff:95:67:6f:3f:93:ad:36:
e0:8e:2c:7f:99:e4:64:84:b8:0c:28:18:4f:4b:ab:
72:5b:56:f4:c9:01:a0:44:51:07:1a:a4:73:74:36:
2e:ca:30:3c:de:6d:2c:9a:d1:fe:44:c5:22:ac:55:
b3:94:e9:88:1b:48:c2:1f:14:a5:6e:ed:f2:71:53:
25:30:fd:a6:71:fe:17:eb:79:9b:f9:de:d9:ef:24:
32:65:3b:a5:10:2d:c2:10:ea:46:f1:8d:70:90:7d:
7b:72:10:44:61:c7:8d:00:12:f3:fe:40:e4:5b:99:
58:21:f2:f2:ce:e3:0f:e4:76:ac:c8:02:9b:e4:bd:
0d:a0:2a:79:9b:ea:66:2d:1d:bd:7b:ab:93:28:c0:
33:8e:44:d7:6b:57:1b:6a:24:cf:bd:53:37:6c:4f:
83:19:c9:46:a4:03:69:d7:d4:49:52:c9:d1:b2:28:
1d:a6:50:0f:9e:7d:fa:e0:4e:06:d3:b7:22:1b:a3:
22:91:82:f9:d0:b1:cc:7a:93:fc:71:1c:0e:00:29:
ee:59:95:28:f8:9f:e7:83:98:a8:ae:b4:dc:26:52:
37:83:12:10:46:3e:72:f4:d9:ac:52:63:f5:3f:b2:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:01:B2:BF:49:3C:5C:ED:7C:C9:22:28:E0:D1:AD:43:3F:1F:8B:E6
X509v3 Authority Key Identifier:
keyid:95:0D:7F:3C:8F:1F:E0:11:C0:92:1A:BD:AD:C3:55:04:7D:32:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/_wGyv0k8XO18ySIo4NGtQz8fi-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/lQ1_PI8f4BHAkhq9rcNVBH0y3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.248.0/22
37.156.72.0/22
68.168.32.0/19
88.98.192.0/18
89.32.120.0/22
89.34.164.0/22
89.35.196.0/22
89.36.64.0/21
89.39.136.0/21
89.44.40.0/22
93.115.192.0/22
137.220.64.0/18
140.228.32.0-140.228.95.255
141.0.144.0/20
143.58.128.0/17
152.37.64.0/18
185.24.120.0/22
188.172.144.0/20
188.210.208.0/21
188.211.160.0/22
188.213.136.0/22
188.214.8.0/21
209.35.64.0/19
IPv6:
2a01:4b00::/32
Signature Algorithm: sha256WithRSAEncryption
66:f6:ab:3a:2e:33:5a:f0:98:a6:36:a7:f8:d6:96:49:34:11:
49:b0:8a:0b:72:1a:80:7f:a1:b0:48:8f:6e:ff:69:ae:ed:19:
30:a4:b0:68:1b:1c:d3:b6:06:81:c4:da:e0:78:98:66:f4:fc:
19:ed:a5:0f:38:c4:26:70:98:91:78:2b:86:d8:fc:ca:15:d4:
d4:60:e5:08:65:02:e1:09:5b:a8:15:3e:aa:92:80:2a:84:dd:
45:53:68:8e:ce:f5:27:f3:2e:d6:e2:c5:55:b6:3a:51:e7:c2:
3e:9c:e9:89:a9:59:cc:a4:a0:34:cb:60:76:7c:c0:de:db:30:
b4:15:f0:84:df:cf:20:fd:39:bf:e1:3a:5c:6a:c2:9c:82:34:
e3:89:a6:50:00:27:76:b1:3f:02:45:76:68:88:e3:ac:17:09:
ba:08:c3:59:a8:91:36:ed:de:45:3f:1e:b4:9b:55:fe:48:e2:
90:e9:f4:0f:6c:48:ed:4e:d2:3f:d2:13:0c:b9:34:33:8d:62:
af:97:41:49:45:26:01:4a:bd:68:8b:29:88:8b:cd:60:f9:27:
71:52:1f:8a:72:30:b9:3b:2a:ae:1a:f4:f0:d5:88:19:72:d2:
0d:43:4a:17:bd:2f:1b:28:3f:2c:1e:b3:ba:0a:ac:2e:fa:fc:
87:b9:7b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:00:52 2026 by rpki-client