Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/ArQ9RH3n-AITgB8tP-_Ch0hxMAA.roa
File: ArQ9RH3n-AITgB8tP-_Ch0hxMAA.roa (raw, json)
Hash identifier: RPestzsJzfsOaey4NtEbwQ9gyrGDcU+Ah2lMH8CXJgU=
Subject key identifier: 02:B4:3D:44:7D:E7:F8:02:13:80:1F:2D:3F:EF:C2:87:48:71:30:00
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 01A135A3D267450916CE148C49BA2BD0EB51
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/ArQ9RH3n-AITgB8tP-_Ch0hxMAA.roa
Signing time: Tue 13 Oct 2026 14:21:30 +0000
ROA not before: Tue 13 Oct 2026 14:21:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44056
IP address blocks: 31.135.224.0/20 maxlen: 24
31.135.226.0/23 maxlen: 23
31.135.227.0/24 maxlen: 24
31.135.228.0/22 maxlen: 22
31.135.232.0/22 maxlen: 22
31.135.236.0/23 maxlen: 23
31.135.236.0/24 maxlen: 24
46.148.128.0/20 maxlen: 20
46.148.128.0/22 maxlen: 22
46.148.128.0/24 maxlen: 24
46.148.129.0/24 maxlen: 24
46.148.130.0/24 maxlen: 24
46.148.132.0/22 maxlen: 22
46.148.134.0/23 maxlen: 23
46.148.143.0/24 maxlen: 24
83.97.104.0/21 maxlen: 21
91.195.130.0/23 maxlen: 23
91.230.146.0/24 maxlen: 24
91.237.186.0/23 maxlen: 23
91.237.186.0/24 maxlen: 24
91.237.187.0/24 maxlen: 24
109.196.64.0/20 maxlen: 24
109.196.64.0/22 maxlen: 22
109.196.64.0/24 maxlen: 24
109.196.65.0/24 maxlen: 24
109.196.67.0/24 maxlen: 24
109.196.68.0/22 maxlen: 22
109.196.68.0/24 maxlen: 24
109.196.69.0/24 maxlen: 24
109.196.70.0/23 maxlen: 23
109.196.72.0/22 maxlen: 22
109.196.72.0/24 maxlen: 24
109.196.73.0/24 maxlen: 24
109.196.74.0/24 maxlen: 24
109.196.75.0/24 maxlen: 24
109.196.76.0/22 maxlen: 22
109.196.76.0/24 maxlen: 24
109.196.77.0/24 maxlen: 24
109.196.78.0/23 maxlen: 23
109.196.78.0/24 maxlen: 24
109.196.79.0/24 maxlen: 24
176.125.192.0/19 maxlen: 19
176.125.192.0/24 maxlen: 24
176.125.194.0/24 maxlen: 24
176.125.195.0/24 maxlen: 24
176.125.196.0/24 maxlen: 24
195.2.238.0/23 maxlen: 23
195.244.24.0/23 maxlen: 23
195.244.25.0/24 maxlen: 24
2a13:2940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:a3:d2:67:45:09:16:ce:14:8c:49:ba:2b:d0:eb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Oct 13 14:21:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02b43d447de7f80213801f2d3fefc28748713000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:96:46:1a:ce:41:89:3c:77:e4:67:33:08:ec:
c4:21:ad:60:0a:e7:61:4a:b3:8f:9f:1f:68:e2:be:
db:32:e1:c9:e9:8f:3f:b8:7f:c2:20:bf:4f:ef:c9:
0d:72:27:79:50:4a:4e:a4:99:4a:8f:d3:07:3f:47:
0c:6b:cf:89:ee:25:c3:2e:fc:d6:47:52:cc:c9:b5:
0f:5c:a7:0a:d1:cf:3c:04:23:7b:e8:d6:a3:2d:74:
1f:80:1d:43:72:5d:91:16:56:31:bb:49:c1:42:f5:
a1:41:99:fb:b2:0a:d4:00:ad:c8:59:17:1b:58:67:
a6:35:1d:6f:9c:18:94:ce:16:6f:4a:cd:e0:7b:ed:
cf:15:ea:1a:7b:d6:e0:c3:c7:9f:d7:da:97:7b:5b:
65:ef:f5:a7:71:5d:90:8a:71:65:07:2e:f4:ca:3f:
6f:f1:af:9c:db:51:b8:c1:33:81:86:0e:27:30:98:
3f:0e:82:67:38:29:a6:1f:23:b4:c4:7a:e1:75:b3:
8a:d1:86:3f:bd:da:5d:61:df:5e:90:96:3f:ce:c7:
00:23:82:bc:bd:05:b9:b6:3d:51:5e:6f:0c:a4:f4:
ee:07:51:f7:b6:15:59:7a:72:12:bd:3e:22:88:9c:
32:d8:f6:9d:92:99:a3:2c:db:6e:14:80:c9:2f:01:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B4:3D:44:7D:E7:F8:02:13:80:1F:2D:3F:EF:C2:87:48:71:30:00
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/ArQ9RH3n-AITgB8tP-_Ch0hxMAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.224.0/20
46.148.128.0/20
83.97.104.0/21
91.195.130.0/23
91.230.146.0/24
91.237.186.0/23
109.196.64.0/20
176.125.192.0/19
195.2.238.0/23
195.244.24.0/23
IPv6:
2a13:2940::/32
Signature Algorithm: sha256WithRSAEncryption
a5:e0:84:0d:31:ad:1a:42:29:f1:f2:27:29:06:52:ac:ee:8b:
e1:6c:94:1a:29:f2:cc:4c:03:ca:45:7b:ba:bf:f2:13:94:f0:
3d:41:0f:b5:69:bb:68:eb:54:e1:3a:48:49:dd:a3:e1:a9:fd:
1b:3c:12:a8:6f:94:10:06:11:ba:d1:ee:ac:ac:f6:a3:44:24:
77:57:ff:ef:2a:5c:9f:e9:c0:f1:74:d6:e1:76:fb:f4:a2:d3:
15:ac:e7:66:79:fa:60:85:c6:98:53:42:3f:a9:17:71:cf:eb:
0d:1f:90:b6:db:33:78:65:e4:98:51:3a:58:00:f1:46:83:08:
74:96:53:74:53:35:2a:15:0f:f7:21:ff:f8:fb:8a:b1:43:20:
d4:20:a4:19:d5:04:34:07:25:4d:be:ae:62:f3:e8:17:65:25:
26:0f:af:a8:63:4e:70:3b:76:a2:eb:32:7a:86:46:92:97:3a:
9b:ac:e2:69:fe:35:81:e3:16:ea:2b:1c:48:c5:30:9a:10:bc:
7f:86:74:01:a8:0e:c4:35:de:a0:89:9f:39:ff:52:e0:5a:41:
4b:bf:1b:1b:0a:d3:44:c2:8b:6a:6d:69:09:db:3e:dd:99:03:
5f:57:85:10:15:b6:b7:b9:3c:74:25:ea:d1:7c:dc:1b:a9:87:
5d:e1:10:74
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAaE1o9JnRQkWzhSMSbor0OtRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OGU5YjJlZWZiMjA1MzQyMzgyYjYwNzJhOTAzZjlkOTgz
NzA3MWEwHhcNMjYxMDEzMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmI0M2Q0NDdkZTdmODAyMTM4MDFmMmQzZmVmYzI4NzQ4NzEzMDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JZGGs5BiTx35GczCOzEIa1gCudh
SrOPnx9o4r7bMuHJ6Y8/uH/CIL9P78kNcid5UEpOpJlKj9MHP0cMa8+J7iXDLvzW
R1LMybUPXKcK0c88BCN76NajLXQfgB1Dcl2RFlYxu0nBQvWhQZn7sgrUAK3IWRcb
WGemNR1vnBiUzhZvSs3ge+3PFeoae9bgw8ef19qXe1tl7/WncV2QinFlBy70yj9v
8a+c21G4wTOBhg4nMJg/DoJnOCmmHyO0xHrhdbOK0YY/vdpdYd9ekJY/zscAI4K8
vQW5tj1RXm8MpPTuB1H3thVZenISvT4iiJwy2PadkpmjLNtuFIDJLwERiQIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFAK0PUR95/gCE4AfLT/vwodIcTAAMB8GA1UdIwQY
MBaAFGaOmy7vsgU0I4K2ByqQP52YNwcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMt
NGMwOGZmZTEwMDc2LzEvQXJROVJIM24tQUlUZ0I4dFAtX0NoMGh4TUFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMtNGMwOGZmZTEwMDc2
LzEvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQEH4fgAwQE
LpSAAwQDU2FoAwQBW8OCAwQAW+aSAwQBW+26AwQEbcRAAwQFsH3AAwQBwwLuAwQB
w/QYMA0EAgACMAcDBQAqEylAMA0GCSqGSIb3DQEBCwUAA4IBAQCl4IQNMa0aQinx
8icpBlKs7ovhbJQaKfLMTAPKRXu6v/ITlPA9QQ+1abto61ThOkhJ3aPhqf0bPBKo
b5QQBhG60e6srPajRCR3V//vKlyf6cDxdNbhdvv0otMVrOdmefpghcaYU0I/qRdx
z+sNH5C22zN4ZeSYUTpYAPFGgwh0llN0UzUqFQ/3If/4+4qxQyDUIKQZ1QQ0ByVN
vq5i8+gXZSUmD6+oY05wO3ai6zJ6hkaSlzqbrOJp/jWB4xbqKxxIxTCaELx/hnQB
qA7ENd6giZ85/1LgWkFLvxsbCtNEwotqbWkJ2z7dmQNfV4UQFba3uTx0JerRfNwb
qYdd4RB0
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:41:01 2026 by rpki-client