Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/PHBVcLRZ0JCxIjD6mpGn6AvW8ZY.roa
File: PHBVcLRZ0JCxIjD6mpGn6AvW8ZY.roa (raw, json)
Hash identifier: yyR7EEqYqs9gZ7CBUjGPu4VZKI4Y1lxoMo9VHO2gHFA=
Subject key identifier: 3C:70:55:70:B4:59:D0:90:B1:22:30:FA:9A:91:A7:E8:0B:D6:F1:96
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 019D2F9B049AE00AD929868A442506FC37E5
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/PHBVcLRZ0JCxIjD6mpGn6AvW8ZY.roa
Signing time: Fri 27 Mar 2026 14:03:01 +0000
ROA not before: Fri 27 Mar 2026 14:03:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25145
IP address blocks: 31.40.240.0/24 maxlen: 24
77.92.96.0/19 maxlen: 19
77.92.96.0/24 maxlen: 24
77.92.97.0/24 maxlen: 24
77.92.98.0/24 maxlen: 24
77.92.99.0/24 maxlen: 24
77.92.100.0/22 maxlen: 22
77.92.100.0/24 maxlen: 24
77.92.101.0/24 maxlen: 24
77.92.102.0/24 maxlen: 24
77.92.103.0/24 maxlen: 24
77.92.104.0/24 maxlen: 24
77.92.105.0/24 maxlen: 24
77.92.106.0/24 maxlen: 24
77.92.107.0/24 maxlen: 24
77.92.108.0/22 maxlen: 22
77.92.108.0/24 maxlen: 24
77.92.109.0/24 maxlen: 24
77.92.110.0/24 maxlen: 24
77.92.111.0/24 maxlen: 24
77.92.112.0/22 maxlen: 22
77.92.112.0/24 maxlen: 24
77.92.113.0/24 maxlen: 24
77.92.114.0/24 maxlen: 24
77.92.115.0/24 maxlen: 24
77.92.116.0/24 maxlen: 24
77.92.117.0/24 maxlen: 24
77.92.118.0/24 maxlen: 24
77.92.119.0/24 maxlen: 24
77.92.120.0/24 maxlen: 24
77.92.121.0/24 maxlen: 24
77.92.122.0/24 maxlen: 24
77.92.123.0/24 maxlen: 24
77.92.124.0/24 maxlen: 24
77.92.125.0/24 maxlen: 24
77.92.126.0/24 maxlen: 24
77.92.127.0/24 maxlen: 24
185.115.208.0/24 maxlen: 24
185.115.210.0/24 maxlen: 24
185.115.211.0/24 maxlen: 24
213.144.96.0/19 maxlen: 19
213.144.96.0/22 maxlen: 22
213.144.96.0/24 maxlen: 24
213.144.97.0/24 maxlen: 24
213.144.98.0/24 maxlen: 24
213.144.99.0/24 maxlen: 24
213.144.100.0/24 maxlen: 24
213.144.101.0/24 maxlen: 24
213.144.103.0/24 maxlen: 24
213.144.104.0/22 maxlen: 22
213.144.104.0/24 maxlen: 24
213.144.105.0/24 maxlen: 24
213.144.106.0/24 maxlen: 24
213.144.107.0/24 maxlen: 24
213.144.108.0/22 maxlen: 22
213.144.108.0/24 maxlen: 24
213.144.109.0/24 maxlen: 24
213.144.110.0/24 maxlen: 24
213.144.111.0/24 maxlen: 24
213.144.112.0/22 maxlen: 22
213.144.112.0/24 maxlen: 24
213.144.113.0/24 maxlen: 24
213.144.114.0/24 maxlen: 24
213.144.115.0/24 maxlen: 24
213.144.116.0/22 maxlen: 22
213.144.116.0/24 maxlen: 24
213.144.117.0/24 maxlen: 24
213.144.118.0/24 maxlen: 24
213.144.119.0/24 maxlen: 24
213.144.120.0/22 maxlen: 22
213.144.120.0/24 maxlen: 24
213.144.121.0/24 maxlen: 24
213.144.122.0/24 maxlen: 24
213.144.123.0/24 maxlen: 24
213.144.124.0/22 maxlen: 22
213.144.124.0/24 maxlen: 24
213.144.125.0/24 maxlen: 24
213.144.126.0/24 maxlen: 24
213.144.127.0/24 maxlen: 24
2a02:ac80::/29 maxlen: 29
2a02:ac80::/32 maxlen: 32
2a02:ac80:10::/48 maxlen: 48
2a02:ac80:20::/48 maxlen: 48
2a02:ac80:30::/48 maxlen: 48
2a02:ac80:40::/48 maxlen: 48
2a02:ac80:50::/48 maxlen: 48
2a02:ac80:60::/48 maxlen: 48
2a02:ac80:70::/48 maxlen: 48
2a02:ac80:97::/48 maxlen: 48
2a02:ac80:99::/48 maxlen: 48
2a02:ac80:a0::/48 maxlen: 48
2a02:ac80:b0::/48 maxlen: 48
2a02:ac80:c0::/48 maxlen: 48
2a02:ac80:d0::/48 maxlen: 48
2a02:ac80:e0::/48 maxlen: 48
2a02:ac80:f0::/48 maxlen: 48
2a02:ac80:100::/48 maxlen: 48
2a02:ac80:105::/48 maxlen: 48
2a02:ac80:127::/48 maxlen: 48
2a02:ac80:200::/48 maxlen: 48
2a02:ac80:300::/48 maxlen: 48
2a02:ac80:400::/48 maxlen: 48
2a02:ac80:500::/48 maxlen: 48
2a02:ac80:600::/48 maxlen: 48
2a02:ac80:700::/48 maxlen: 48
2a02:ac80:a00::/48 maxlen: 48
2a02:ac80:b00::/48 maxlen: 48
2a02:ac80:c00::/48 maxlen: 48
2a02:ac80:d00::/48 maxlen: 48
2a02:ac80:e00::/48 maxlen: 48
2a02:ac80:f00::/48 maxlen: 48
2a02:ac80:1000::/48 maxlen: 48
2a02:ac80:2000::/48 maxlen: 48
2a02:ac80:3000::/48 maxlen: 48
2a02:ac80:4000::/48 maxlen: 48
2a02:ac80:5000::/48 maxlen: 48
2a02:ac80:6000::/48 maxlen: 48
2a02:ac80:7000::/48 maxlen: 48
2a02:ac80:7370::/48 maxlen: 48
2a02:ac80:a000::/48 maxlen: 48
2a02:ac80:b000::/48 maxlen: 48
2a02:ac80:c000::/48 maxlen: 48
2a02:ac80:d000::/48 maxlen: 48
2a02:ac80:e000::/48 maxlen: 48
2a02:ac80:f000::/48 maxlen: 48
2a02:ac81::/32 maxlen: 32
2a02:ac82::/32 maxlen: 32
2a02:ac83::/32 maxlen: 32
2a02:ac84::/32 maxlen: 32
2a02:ac85::/32 maxlen: 32
2a02:ac86::/32 maxlen: 32
2a02:ac87::/32 maxlen: 32
2a02:ac87:5900::/48 maxlen: 48
2a02:ac87:59cb::/48 maxlen: 48
2a02:ac87:ac87::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:9b:04:9a:e0:0a:d9:29:86:8a:44:25:06:fc:37:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Mar 27 14:03:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c705570b459d090b12230fa9a91a7e80bd6f196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:29:47:03:85:d9:ad:3e:01:9a:e4:ac:e0:
60:c7:59:bb:5d:92:bf:27:2b:df:10:f3:55:07:5b:
9f:7a:b4:2b:84:ee:6e:11:0d:0f:22:ac:3b:11:a6:
67:94:28:95:36:81:94:51:de:ff:e0:a7:2e:fc:32:
2d:24:0c:15:15:4b:45:86:6b:aa:a4:64:58:2d:b7:
c9:01:f1:de:20:b8:c4:78:03:45:79:22:24:8f:2e:
cc:a3:03:00:84:9e:05:7c:42:7a:ff:66:19:4a:8c:
b3:22:5b:82:02:f2:88:b3:26:bc:ce:d2:53:3a:40:
df:ff:a3:3f:2d:15:55:9c:df:0a:66:b9:c5:26:71:
86:89:f4:c8:13:b0:1a:22:e2:9f:f1:4e:bf:c1:66:
79:9c:1c:ae:f2:ff:0f:06:5d:3e:71:36:61:d3:06:
86:68:ba:e9:98:a0:5a:f5:35:ab:4d:da:f3:6d:2d:
bc:c6:da:39:64:91:6b:70:b8:1e:7a:c3:24:f9:89:
10:06:ab:35:e8:35:11:38:42:31:36:ec:f1:65:ca:
d0:a7:7e:b8:25:07:60:40:a2:aa:f3:33:ec:26:7d:
f3:f5:0a:68:7f:16:d1:c9:80:fd:d0:5a:70:48:a9:
9f:1e:70:cd:68:ca:22:1c:19:41:5f:04:18:0d:09:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:70:55:70:B4:59:D0:90:B1:22:30:FA:9A:91:A7:E8:0B:D6:F1:96
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/PHBVcLRZ0JCxIjD6mpGn6AvW8ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.240.0/24
77.92.96.0/19
185.115.208.0/24
185.115.210.0/23
213.144.96.0/19
IPv6:
2a02:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
c5:76:b7:eb:ec:69:34:e3:1c:9d:41:f4:78:47:90:ff:ea:a7:
04:20:14:e6:89:a0:65:42:4c:76:2e:aa:47:55:2f:50:2c:23:
f5:ba:2e:2f:fe:12:f9:af:ae:82:61:a2:74:da:68:10:4b:ac:
ec:ed:06:27:55:48:df:42:8b:2f:f4:6e:0b:4b:68:8d:8b:e9:
b8:bc:31:a9:4f:b0:a6:56:75:4a:a0:90:af:99:10:10:8e:59:
4a:05:16:77:a2:eb:77:a2:55:a4:24:5e:60:a1:77:80:d4:fb:
3b:d4:e6:b8:96:12:1b:d2:da:7f:97:7b:69:e2:e9:42:3d:3f:
2c:89:20:f2:39:71:a0:3e:29:c3:4e:c6:ff:87:03:95:86:f8:
59:e0:e7:21:09:91:b6:55:90:70:81:5b:bc:69:30:97:31:cd:
df:51:e6:6d:9e:2f:ce:5a:4e:53:2b:b4:16:8d:02:c1:87:61:
14:60:94:25:49:8c:df:d6:7d:db:69:8b:1f:c7:4e:58:6f:d5:
da:d4:14:a8:8d:70:89:3d:17:1c:c2:bd:f9:c0:37:03:26:69:
9d:82:18:1e:9a:10:31:d3:06:4b:3b:fc:e6:e6:be:b6:0e:88:
03:90:c2:a6:3a:16:55:93:04:7b:73:35:1a:1d:5d:e1:8d:1c:
ed:75:3f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:43:58 2026 by rpki-client