Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/sb9NYEHASJQ8rASkYUIiJ_hADHk.roa
File: sb9NYEHASJQ8rASkYUIiJ_hADHk.roa (raw, json)
Hash identifier: eVCnk3lLJ6eEaX9eyj8I8AsqhGoadKAGqnF2yOjkiig=
Subject key identifier: B1:BF:4D:60:41:C0:48:94:3C:AC:04:A4:61:42:22:27:F8:40:0C:79
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019E81F2B3FF718DEAA7C302C9712EA4548E
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/sb9NYEHASJQ8rASkYUIiJ_hADHk.roa
Signing time: Mon 01 Jun 2026 06:50:27 +0000
ROA not before: Mon 01 Jun 2026 06:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5483
IP address blocks: 5.38.128.0/17 maxlen: 17
5.187.128.0/17 maxlen: 17
31.46.0.0/16 maxlen: 16
31.46.19.0/24 maxlen: 24
31.46.44.0/22 maxlen: 22
37.76.0.0/17 maxlen: 17
46.107.0.0/16 maxlen: 16
46.107.14.0/24 maxlen: 24
46.107.15.0/24 maxlen: 24
46.107.224.0/24 maxlen: 24
46.139.0.0/16 maxlen: 16
62.201.64.0/18 maxlen: 18
78.92.0.0/16 maxlen: 16
79.121.100.0/22 maxlen: 22
79.122.0.0/17 maxlen: 17
80.249.160.0/20 maxlen: 24
80.249.164.0/24 maxlen: 24
80.249.167.0/24 maxlen: 24
80.249.168.0/24 maxlen: 24
80.249.170.0/24 maxlen: 24
80.249.171.0/24 maxlen: 24
80.249.172.0/24 maxlen: 24
80.249.173.0/24 maxlen: 24
80.249.174.0/24 maxlen: 24
81.182.0.0/15 maxlen: 15
84.0.0.0/14 maxlen: 14
84.1.102.0/24 maxlen: 24
84.1.226.0/24 maxlen: 24
84.1.236.0/24 maxlen: 24
84.2.24.0/24 maxlen: 24
84.2.35.0/24 maxlen: 24
84.2.39.0/24 maxlen: 24
84.2.42.0/23 maxlen: 24
84.2.50.0/24 maxlen: 24
84.2.51.0/24 maxlen: 24
84.2.52.0/24 maxlen: 24
84.2.54.0/24 maxlen: 24
84.2.79.0/24 maxlen: 24
84.2.226.0/23 maxlen: 24
84.2.227.0/24 maxlen: 24
84.2.228.0/24 maxlen: 24
84.2.230.0/24 maxlen: 24
84.2.231.0/24 maxlen: 24
86.59.128.0/17 maxlen: 17
87.101.112.0/20 maxlen: 20
91.120.0.0/16 maxlen: 16
91.120.16.0/22 maxlen: 22
91.120.27.0/24 maxlen: 24
91.120.57.0/24 maxlen: 24
91.120.64.0/18 maxlen: 18
91.120.128.0/18 maxlen: 18
93.89.160.0/20 maxlen: 20
94.27.128.0/17 maxlen: 17
134.255.0.0/17 maxlen: 17
145.236.0.0/16 maxlen: 16
145.236.230.0/24 maxlen: 24
149.200.0.0/17 maxlen: 17
158.249.0.0/16 maxlen: 16
185.55.12.0/22 maxlen: 22
185.65.8.0/22 maxlen: 22
188.6.0.0/16 maxlen: 16
188.36.0.0/16 maxlen: 16
188.36.248.0/24 maxlen: 24
188.156.0.0/15 maxlen: 15
194.38.96.0/19 maxlen: 19
194.38.96.0/24 maxlen: 24
194.38.104.0/24 maxlen: 24
194.88.32.0/19 maxlen: 19
194.149.0.0/19 maxlen: 19
194.149.32.0/19 maxlen: 19
194.149.36.0/24 maxlen: 24
194.176.224.0/19 maxlen: 19
195.56.0.0/16 maxlen: 16
195.56.0.0/24 maxlen: 24
195.70.32.0/19 maxlen: 19
195.228.0.0/16 maxlen: 16
195.228.4.0/24 maxlen: 24
195.228.22.0/24 maxlen: 24
195.228.24.0/24 maxlen: 24
195.228.34.0/24 maxlen: 24
195.228.45.0/24 maxlen: 24
195.228.75.0/24 maxlen: 24
195.228.76.0/24 maxlen: 24
195.228.85.0/24 maxlen: 24
195.228.86.0/24 maxlen: 24
195.228.87.0/24 maxlen: 24
195.228.112.0/24 maxlen: 24
195.228.135.0/24 maxlen: 24
195.228.152.0/24 maxlen: 24
195.228.155.0/24 maxlen: 24
195.228.156.0/24 maxlen: 24
195.228.224.0/23 maxlen: 23
195.228.240.0/24 maxlen: 24
195.228.244.0/24 maxlen: 24
195.228.245.0/24 maxlen: 24
195.228.247.0/24 maxlen: 24
195.228.248.0/24 maxlen: 24
195.228.249.0/24 maxlen: 24
195.228.250.0/24 maxlen: 24
195.228.251.0/24 maxlen: 24
195.228.253.0/24 maxlen: 24
195.228.254.0/24 maxlen: 24
195.228.255.0/24 maxlen: 24
212.51.64.0/18 maxlen: 18
212.51.79.0/24 maxlen: 24
212.51.91.0/24 maxlen: 24
212.51.110.0/24 maxlen: 24
212.51.125.0/24 maxlen: 24
213.178.96.0/19 maxlen: 19
217.20.128.0/20 maxlen: 20
217.65.96.0/19 maxlen: 19
217.65.96.0/23 maxlen: 23
217.116.32.0/20 maxlen: 20
2001:4c48::/29 maxlen: 29
2001:4c48::/30 maxlen: 30
2001:4c48::/32 maxlen: 32
2001:4c48::/46 maxlen: 48
2001:4c4c::/30 maxlen: 30
2a00:10d0::/32 maxlen: 32
2a00:1110::/29 maxlen: 29
2a02:738::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:81:f2:b3:ff:71:8d:ea:a7:c3:02:c9:71:2e:a4:54:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jun 1 06:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1bf4d6041c048943cac04a461422227f8400c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:26:c2:e0:81:68:96:c2:91:ec:4b:bc:fb:
16:6c:d9:89:17:a3:6d:39:0c:c7:f5:99:a0:9c:b8:
7a:ed:f6:5c:57:fe:42:f3:89:4d:91:95:a7:7f:02:
aa:1c:44:eb:6e:8c:13:5f:9b:ee:0b:8c:a8:51:02:
12:ed:08:ad:3c:07:b7:c2:54:1e:49:c2:ca:d4:31:
bd:88:7d:d7:6e:aa:90:d6:95:97:b7:52:3c:fb:ec:
fd:ef:a2:03:46:dc:dc:de:70:95:1d:91:f1:3d:06:
92:a4:87:83:71:4c:a5:71:5d:dc:93:89:90:91:5c:
ae:e0:b6:5e:5d:d3:a4:81:e4:e0:32:b8:b4:09:fc:
d1:94:31:65:ba:75:1b:e3:0a:2d:56:7c:e0:b6:d8:
e2:8f:83:b6:2d:13:9f:0d:5e:20:7b:37:0b:da:8b:
e6:a6:d5:1b:73:c2:05:87:8c:7c:eb:70:e5:26:dd:
06:93:8e:fb:98:1d:eb:b5:15:44:4b:19:1f:2a:ee:
6e:fb:c0:16:4e:99:46:b1:fa:2e:15:b0:68:18:a3:
fc:b7:b9:17:73:be:fc:e4:37:17:a5:43:fd:ac:3e:
78:6d:26:49:26:0f:6d:d6:0c:4c:a0:8b:2a:48:f0:
66:a8:0b:77:60:c5:f1:d2:02:eb:a5:4f:ee:e4:98:
c0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BF:4D:60:41:C0:48:94:3C:AC:04:A4:61:42:22:27:F8:40:0C:79
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/sb9NYEHASJQ8rASkYUIiJ_hADHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.38.128.0/17
5.187.128.0/17
31.46.0.0/16
37.76.0.0/17
46.107.0.0/16
46.139.0.0/16
62.201.64.0/18
78.92.0.0/16
79.121.100.0/22
79.122.0.0/17
80.249.160.0/20
81.182.0.0/15
84.0.0.0/14
86.59.128.0/17
87.101.112.0/20
91.120.0.0/16
93.89.160.0/20
94.27.128.0/17
134.255.0.0/17
145.236.0.0/16
149.200.0.0/17
158.249.0.0/16
185.55.12.0/22
185.65.8.0/22
188.6.0.0/16
188.36.0.0/16
188.156.0.0/15
194.38.96.0/19
194.88.32.0/19
194.149.0.0/18
194.176.224.0/19
195.56.0.0/16
195.70.32.0/19
195.228.0.0/16
212.51.64.0/18
213.178.96.0/19
217.20.128.0/20
217.65.96.0/19
217.116.32.0/20
IPv6:
2001:4c48::/29
2a00:10d0::/32
2a00:1110::/29
2a02:738::/32
Signature Algorithm: sha256WithRSAEncryption
42:13:b1:6d:fd:0e:fa:7f:f4:6e:6a:c7:87:6c:90:0c:77:1b:
de:6b:02:48:4a:60:3b:3e:33:f4:a2:cb:44:4b:71:8f:7d:61:
97:d4:27:c7:36:2b:a7:03:4c:2e:a4:1a:83:5f:3e:fc:af:a1:
e6:c8:5b:c9:04:ad:52:08:9a:bc:89:2d:e7:03:50:56:f7:0d:
9a:8c:1f:13:11:35:67:a7:a7:56:f6:b8:45:72:88:e6:16:06:
fc:11:7e:63:ff:6b:0e:18:73:85:13:e7:0e:ad:38:36:13:37:
a1:09:5b:b0:b2:0f:f5:61:36:20:71:4a:cf:e3:7d:92:4c:e2:
1e:20:1b:0e:99:8f:cb:90:2b:4a:15:f0:af:f8:f4:7b:1b:61:
1a:25:1f:03:ee:1b:a7:5b:76:d5:7f:51:f6:eb:1f:16:f8:cc:
39:cd:ee:b4:ff:d2:bf:a1:c5:50:4a:a6:6a:ad:8f:7a:9f:74:
2b:76:04:28:5b:6a:cf:7d:45:3c:7b:24:e0:41:2f:f0:6c:23:
39:e8:a7:45:e5:9a:b8:14:98:bd:75:05:53:94:ed:97:d9:02:
b9:fc:f2:7b:96:7e:b4:4f:0b:1b:9c:51:e4:5a:d5:79:4c:af:
19:c1:7b:5b:76:7e:5e:cc:51:93:d4:58:05:44:e3:d7:c8:6f:
de:f4:14:a9
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgISAZ6B8rP/cY3qp8MCyXEupFSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjYwNjAxMDY1MDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWJmNGQ2MDQxYzA0ODk0M2NhYzA0YTQ2MTQyMjIyN2Y4NDAwYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykcmwuCBaJbCkexLvPsWbNmJF6Nt
OQzH9ZmgnLh67fZcV/5C84lNkZWnfwKqHETrbowTX5vuC4yoUQIS7QitPAe3wlQe
ScLK1DG9iH3XbqqQ1pWXt1I8++z976IDRtzc3nCVHZHxPQaSpIeDcUylcV3ck4mQ
kVyu4LZeXdOkgeTgMri0CfzRlDFlunUb4wotVnzgttjij4O2LROfDV4gezcL2ovm
ptUbc8IFh4x863DlJt0Gk477mB3rtRVESxkfKu5u+8AWTplGsfouFbBoGKP8t7kX
c7785DcXpUP9rD54bSZJJg9t1gxMoIsqSPBmqAt3YMXx0gLrpU/u5JjA5QIDAQAB
o4IDCzCCAwcwHQYDVR0OBBYEFLG/TWBBwEiUPKwEpGFCIif4QAx5MB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEvc2I5TllFSEFTSlE4ckFTa1lVSWlKX2hBREhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy
LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHwYIKwYBBQUHAQcBAf8EggEOMIIBCjCB4wQCAAEwgdwD
BAcFJoADBAcFu4ADAwAfLgMEByVMAAMDAC5rAwMALosDBAY+yUADAwBOXAMEAk95
ZAMEB096AAMEBFD5oAMDAVG2AwMCVAADBAdWO4ADBARXZXADAwBbeAMEBF1ZoAME
B14bgAMEB4b/AAMDAJHsAwQHlcgAAwMAnvkDBAK5NwwDBAK5QQgDAwC8BgMDALwk
AwMBvJwDBAXCJmADBAXCWCADBAbClQADBAXCsOADAwDDOAMEBcNGIAMDAMPkAwQG
1DNAAwQF1bJgAwQE2RSAAwQF2UFgAwQE2XQgMCIEAgACMBwDBQMgAUxIAwUAKgAQ
0AMFAyoAERADBQAqAgc4MA0GCSqGSIb3DQEBCwUAA4IBAQBCE7Ft/Q76f/RuaseH
bJAMdxveawJISmA7PjP0ostES3GPfWGX1CfHNiunA0wupBqDXz78r6HmyFvJBK1S
CJq8iS3nA1BW9w2ajB8TETVnp6dW9rhFcojmFgb8EX5j/2sOGHOFE+cOrTg2Ezeh
CVuwsg/1YTYgcUrP432STOIeIBsOmY/LkCtKFfCv+PR7G2EaJR8D7hunW3bVf1H2
6x8W+Mw5ze60/9K/ocVQSqZqrY96n3QrdgQoW2rPfUU8eyTgQS/wbCM56KdF5Zq4
FJi9dQVTlO2X2QK5/PJ7ln60TwsbnFHkWtV5TK8ZwXtbdn5ezFGT1FgFROPXyG/e
9BSp
-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:05 2026 by rpki-client