Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/dRiOplKLuu9khkO3W3pNYL4bLPk.roa
File: dRiOplKLuu9khkO3W3pNYL4bLPk.roa (raw, json)
Hash identifier: rogFX3LjgfZlndZ6XXwYS2Pe4PKTsm6j7z0fE9YqLJ8=
Subject key identifier: 75:18:8E:A6:52:8B:BA:EF:64:86:43:B7:5B:7A:4D:60:BE:1B:2C:F9
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 01A153DF0DFAAD95EA2FAF9C9FA30FB33B7A
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/dRiOplKLuu9khkO3W3pNYL4bLPk.roa
Signing time: Mon 19 Oct 2026 11:14:49 +0000
ROA not before: Mon 19 Oct 2026 11:14:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3225
IP address blocks: 91.140.128.0/17 maxlen: 24
91.140.128.0/18 maxlen: 18
91.140.128.0/22 maxlen: 24
91.140.132.0/22 maxlen: 24
91.140.136.0/22 maxlen: 22
91.140.140.0/22 maxlen: 24
91.140.144.0/22 maxlen: 22
91.140.148.0/22 maxlen: 24
91.140.152.0/22 maxlen: 24
91.140.156.0/22 maxlen: 22
91.140.160.0/22 maxlen: 24
91.140.164.0/22 maxlen: 24
91.140.168.0/22 maxlen: 22
91.140.172.0/22 maxlen: 24
91.140.176.0/22 maxlen: 22
91.140.180.0/22 maxlen: 24
91.140.184.0/22 maxlen: 22
91.140.188.0/22 maxlen: 24
91.140.192.0/22 maxlen: 24
91.140.196.0/22 maxlen: 24
91.140.200.0/22 maxlen: 24
91.140.201.0/24 maxlen: 24
91.140.202.0/24 maxlen: 24
91.140.203.0/24 maxlen: 24
91.140.204.0/22 maxlen: 24
91.140.207.0/24 maxlen: 24
91.140.208.0/22 maxlen: 24
91.140.211.0/24 maxlen: 24
91.140.212.0/22 maxlen: 24
91.140.216.0/22 maxlen: 24
91.140.219.0/24 maxlen: 24
91.140.220.0/24 maxlen: 24
91.140.221.0/24 maxlen: 24
91.140.222.0/24 maxlen: 24
91.140.223.0/24 maxlen: 24
91.140.224.0/22 maxlen: 24
91.140.224.0/24 maxlen: 24
91.140.226.0/24 maxlen: 24
91.140.227.0/24 maxlen: 24
91.140.228.0/22 maxlen: 24
91.140.228.0/24 maxlen: 24
91.140.229.0/24 maxlen: 24
91.140.230.0/24 maxlen: 24
91.140.231.0/24 maxlen: 24
91.140.232.0/22 maxlen: 22
91.140.232.0/24 maxlen: 24
91.140.233.0/24 maxlen: 24
91.140.234.0/24 maxlen: 24
91.140.235.0/24 maxlen: 24
91.140.236.0/22 maxlen: 22
91.140.236.0/24 maxlen: 24
91.140.237.0/24 maxlen: 24
91.140.238.0/24 maxlen: 24
91.140.239.0/24 maxlen: 24
91.140.240.0/22 maxlen: 22
91.140.240.0/24 maxlen: 24
91.140.241.0/24 maxlen: 24
91.140.242.0/24 maxlen: 24
91.140.244.0/22 maxlen: 24
91.140.244.0/24 maxlen: 24
91.140.245.0/24 maxlen: 24
91.140.246.0/24 maxlen: 24
91.140.248.0/22 maxlen: 24
91.140.248.0/24 maxlen: 24
91.140.249.0/24 maxlen: 24
91.140.250.0/24 maxlen: 24
91.140.251.0/24 maxlen: 24
91.140.252.0/22 maxlen: 24
91.140.252.0/24 maxlen: 24
91.140.253.0/24 maxlen: 24
91.140.254.0/24 maxlen: 24
91.140.255.0/24 maxlen: 24
94.187.224.0/19 maxlen: 24
94.187.224.0/22 maxlen: 22
94.187.224.0/24 maxlen: 24
94.187.225.0/24 maxlen: 24
94.187.226.0/24 maxlen: 24
94.187.227.0/24 maxlen: 24
94.187.228.0/22 maxlen: 24
94.187.228.0/24 maxlen: 24
94.187.230.0/24 maxlen: 24
94.187.232.0/22 maxlen: 24
94.187.232.0/24 maxlen: 24
94.187.236.0/22 maxlen: 24
94.187.240.0/22 maxlen: 24
94.187.241.0/24 maxlen: 24
94.187.244.0/22 maxlen: 24
94.187.248.0/22 maxlen: 24
94.187.249.0/24 maxlen: 24
94.187.252.0/22 maxlen: 24
94.187.252.0/24 maxlen: 24
94.187.255.0/24 maxlen: 24
185.16.4.0/22 maxlen: 24
185.46.144.0/22 maxlen: 24
194.54.192.0/18 maxlen: 24
194.54.192.0/19 maxlen: 24
194.54.192.0/22 maxlen: 22
194.54.194.0/23 maxlen: 24
194.54.196.0/22 maxlen: 24
194.54.200.0/22 maxlen: 24
194.54.202.0/24 maxlen: 24
194.54.204.0/22 maxlen: 24
194.54.208.0/22 maxlen: 24
194.54.208.0/24 maxlen: 24
194.54.209.0/24 maxlen: 24
194.54.212.0/22 maxlen: 24
194.54.216.0/22 maxlen: 24
194.54.220.0/22 maxlen: 24
194.54.220.0/24 maxlen: 24
194.54.224.0/19 maxlen: 24
194.54.224.0/22 maxlen: 24
194.54.228.0/22 maxlen: 24
194.54.232.0/22 maxlen: 24
194.54.234.0/24 maxlen: 24
194.54.236.0/22 maxlen: 24
194.54.240.0/22 maxlen: 24
194.54.241.0/24 maxlen: 24
194.54.243.0/24 maxlen: 24
194.54.244.0/22 maxlen: 24
194.54.248.0/22 maxlen: 24
194.54.252.0/22 maxlen: 24
213.132.224.0/19 maxlen: 19
213.132.224.0/22 maxlen: 22
213.132.224.0/24 maxlen: 24
213.132.228.0/22 maxlen: 22
213.132.228.0/24 maxlen: 24
213.132.229.0/24 maxlen: 24
213.132.230.0/24 maxlen: 24
213.132.231.0/24 maxlen: 24
213.132.232.0/22 maxlen: 22
213.132.236.0/22 maxlen: 22
213.132.240.0/22 maxlen: 22
213.132.244.0/22 maxlen: 22
213.132.244.0/24 maxlen: 24
213.132.245.0/24 maxlen: 24
213.132.246.0/24 maxlen: 24
213.132.247.0/24 maxlen: 24
213.132.248.0/22 maxlen: 22
213.132.248.0/24 maxlen: 24
213.132.249.0/24 maxlen: 24
213.132.251.0/24 maxlen: 24
213.132.252.0/22 maxlen: 22
213.132.252.0/24 maxlen: 24
213.132.254.0/24 maxlen: 24
213.132.255.0/24 maxlen: 24
2a01:7780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:df:0d:fa:ad:95:ea:2f:af:9c:9f:a3:0f:b3:3b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Oct 19 11:14:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75188ea6528bbaef648643b75b7a4d60be1b2cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:b6:22:8f:e0:c1:a4:cf:79:3c:fe:73:f8:
60:f9:70:f9:9c:33:cc:d6:cf:f4:14:d8:db:6b:b4:
cd:52:c2:8f:80:c8:13:28:8a:ab:34:78:d5:a0:2a:
1c:80:cd:90:57:5f:cf:2f:88:9b:c7:53:eb:16:6b:
2e:d1:f8:a7:d0:ac:1a:d3:fc:71:be:63:6e:94:55:
a1:52:e7:ec:22:be:56:98:4b:47:47:e9:ef:ab:15:
86:f7:1b:7f:9f:ee:ba:e2:29:7c:21:fd:36:65:55:
c9:bd:6f:54:c9:e0:0e:cb:d0:98:f5:5f:c2:03:9d:
0d:49:c8:70:e3:50:4c:c1:a9:5d:46:55:a2:fe:96:
dc:f3:09:75:a6:4a:88:75:06:4c:17:d2:96:6c:51:
bc:ee:21:4d:86:f2:58:81:4f:6f:a1:f7:4d:68:07:
c8:00:3c:83:f0:c4:17:c0:93:f6:18:f5:13:c6:b8:
37:df:5b:84:05:ca:1d:6b:a3:dc:da:39:7f:05:08:
14:91:e7:82:15:e9:17:bd:b1:e4:26:d3:76:cd:2f:
b9:ed:86:ee:3c:b4:49:04:d8:7b:33:ab:d5:dd:f5:
8c:5f:75:c2:ad:22:98:90:c0:e4:dd:47:91:29:ce:
0e:48:d5:9f:b4:32:62:98:1c:2d:53:5c:8a:33:6d:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:18:8E:A6:52:8B:BA:EF:64:86:43:B7:5B:7A:4D:60:BE:1B:2C:F9
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/dRiOplKLuu9khkO3W3pNYL4bLPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.128.0/17
94.187.224.0/19
185.16.4.0/22
185.46.144.0/22
194.54.192.0/18
213.132.224.0/19
IPv6:
2a01:7780::/32
Signature Algorithm: sha256WithRSAEncryption
83:27:b8:aa:86:bf:8a:7c:6f:2f:86:9d:9b:0e:7c:1e:82:13:
5b:c7:bf:ba:ed:b7:ac:33:c8:07:8c:11:78:75:7c:d9:f6:73:
06:94:af:fb:72:07:95:69:5b:4f:1f:35:ad:f0:a5:3c:fe:e9:
a6:2f:7a:cb:cd:e5:2f:64:94:32:dc:85:fc:8b:65:4d:6a:24:
d1:1f:79:0b:6f:9b:9c:93:43:2c:b2:be:3f:75:51:0c:05:12:
cb:74:47:59:f2:d1:b4:16:68:a6:43:22:b5:53:1b:1a:51:50:
21:8d:0a:98:99:f3:97:90:9e:7a:46:02:a1:de:22:8e:42:6b:
6d:ee:be:f0:41:7a:dc:aa:4b:7e:8f:e5:f8:ce:39:7d:90:21:
d8:da:3b:ff:97:c0:64:4b:63:64:8e:e2:6d:e8:83:de:bc:bc:
35:cd:7d:8f:ae:da:ec:42:23:5a:cc:94:49:f0:b8:c1:81:bb:
55:df:d0:46:45:07:c1:9b:c3:5b:72:39:56:88:7d:a7:a6:54:
88:e6:ee:a1:5b:21:7b:f2:70:6a:95:f3:c1:7f:02:b2:39:12:
2a:b6:2c:50:92:50:58:44:84:f7:7f:b7:82:bc:d1:79:b6:f5:
20:5f:7d:c3:d0:37:b0:4c:07:9e:12:f7:8c:f0:88:00:43:f3:
00:be:bb:15
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAaFT3w36rZXqL6+cn6MPszt6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2Y3ZGIwMzMzMTRjNDczY2RhMTk0ZTBkZjc5ZjFjMzc1
ZGEzZjQwHhcNMjYxMDE5MTExNDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTE4OGVhNjUyOGJiYWVmNjQ4NjQzYjc1YjdhNGQ2MGJlMWIyY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pe2Io/gwaTPeTz+c/hg+XD5nDPM
1s/0FNjba7TNUsKPgMgTKIqrNHjVoCocgM2QV1/PL4ibx1PrFmsu0fin0Kwa0/xx
vmNulFWhUufsIr5WmEtHR+nvqxWG9xt/n+664il8If02ZVXJvW9UyeAOy9CY9V/C
A50NSchw41BMwaldRlWi/pbc8wl1pkqIdQZMF9KWbFG87iFNhvJYgU9vofdNaAfI
ADyD8MQXwJP2GPUTxrg331uEBcoda6Pc2jl/BQgUkeeCFekXvbHkJtN2zS+57Ybu
PLRJBNh7M6vV3fWMX3XCrSKYkMDk3UeRKc4OSNWftDJimBwtU1yKM20HxQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFHUYjqZSi7rvZIZDt1t6TWC+Gyz5MB8GA1UdIwQY
MBaAFCN/fbAzMUxHPNoZTg33nxw3XaP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYt
ZWUwNjAzOTQ5ZjkzLzEvZFJpT3BsS0x1dTlraGtPM1czcE5ZTDRiTFBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYtZWUwNjAzOTQ5Zjkz
LzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQHW4yAAwQF
XrvgAwQCuRAEAwQCuS6QAwQGwjbAAwQF1YTgMA0EAgACMAcDBQAqAXeAMA0GCSqG
SIb3DQEBCwUAA4IBAQCDJ7iqhr+KfG8vhp2bDnweghNbx7+67besM8gHjBF4dXzZ
9nMGlK/7cgeVaVtPHzWt8KU8/ummL3rLzeUvZJQy3IX8i2VNaiTRH3kLb5uck0Ms
sr4/dVEMBRLLdEdZ8tG0FmimQyK1UxsaUVAhjQqYmfOXkJ56RgKh3iKOQmtt7r7w
QXrcqkt+j+X4zjl9kCHY2jv/l8BkS2NkjuJt6IPevLw1zX2PrtrsQiNazJRJ8LjB
gbtV39BGRQfBm8NbcjlWiH2nplSI5u6hWyF78nBqlfPBfwKyORIqtixQklBYRIT3
f7eCvNF5tvUgX33D0DewTAeeEveM8IgAQ/MAvrsV
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:41:18 2026 by rpki-client