Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/98pyVUSP-3YD0M9jomfshbJFQVE.roa
File: 98pyVUSP-3YD0M9jomfshbJFQVE.roa (raw, json)
Hash identifier: HDKg8j9nXrhmetLV5gGWpJVaamFSbchAi6J311nU4CE=
Subject key identifier: F7:CA:72:55:44:8F:FB:76:03:D0:CF:63:A2:67:EC:85:B2:45:41:51
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019FD6B7239FFB1FC5241A8F9C6510B0CD1D
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/98pyVUSP-3YD0M9jomfshbJFQVE.roa
Signing time: Thu 06 Aug 2026 10:55:54 +0000
ROA not before: Thu 06 Aug 2026 10:55:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1764
IP address blocks: 77.237.32.0/19 maxlen: 24
81.16.96.0/21 maxlen: 24
81.16.144.0/20 maxlen: 24
82.103.0.0/18 maxlen: 24
83.68.128.0/22 maxlen: 24
83.68.132.0/23 maxlen: 24
83.68.136.0/21 maxlen: 24
83.68.144.0/20 maxlen: 24
83.229.64.0/24 maxlen: 24
83.229.93.0/24 maxlen: 24
83.229.109.0/24 maxlen: 24
91.204.216.0/22 maxlen: 24
91.216.247.0/24 maxlen: 24
92.60.0.0/20 maxlen: 24
109.70.96.0/21 maxlen: 24
130.0.68.0/22 maxlen: 24
185.43.12.0/22 maxlen: 24
185.81.212.0/22 maxlen: 24
185.86.24.0/22 maxlen: 24
185.106.48.0/22 maxlen: 24
185.106.248.0/22 maxlen: 24
185.208.12.0/22 maxlen: 24
193.228.32.0/21 maxlen: 24
193.228.40.0/23 maxlen: 24
193.228.42.0/24 maxlen: 24
194.0.72.0/22 maxlen: 24
195.39.200.0/23 maxlen: 24
195.69.172.0/22 maxlen: 24
213.208.128.0/19 maxlen: 24
213.255.198.0/24 maxlen: 24
213.255.205.0/24 maxlen: 24
213.255.208.0/24 maxlen: 24
213.255.218.0/23 maxlen: 24
217.15.0.0/20 maxlen: 24
217.175.193.0/24 maxlen: 24
217.175.195.0/24 maxlen: 24
217.175.196.0/22 maxlen: 24
217.175.200.0/21 maxlen: 24
217.194.145.0/24 maxlen: 24
217.194.146.0/23 maxlen: 24
217.194.149.0/24 maxlen: 24
217.194.150.0/24 maxlen: 24
217.194.154.0/23 maxlen: 24
217.194.156.0/24 maxlen: 24
2001:678:c1c::/48 maxlen: 48
2a01:190::/29 maxlen: 32
2a03:e600::/29 maxlen: 32
2a04:9300::/29 maxlen: 32
2a05:dd80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:b7:23:9f:fb:1f:c5:24:1a:8f:9c:65:10:b0:cd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Aug 6 10:55:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7ca7255448ffb7603d0cf63a267ec85b2454151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:35:73:9d:23:ba:56:0a:79:94:8e:8d:c6:fe:
09:12:a4:41:d2:e9:3e:e3:af:25:ab:2c:9b:5a:62:
4e:0a:f1:04:e8:73:6a:77:a6:03:57:f5:4f:83:17:
33:2a:e5:8c:5a:b1:28:3e:99:21:55:64:8a:ce:17:
a9:e9:3d:c9:b4:6a:9d:36:54:b4:36:c1:18:d2:d7:
5b:41:ea:c3:3f:2d:d9:e5:ba:26:10:e4:c4:9f:65:
84:45:8d:15:66:55:b2:1a:99:8f:ed:97:35:fd:64:
6c:27:04:1b:ff:e2:c9:a0:e8:d1:a7:3c:97:e0:74:
3c:b6:24:33:5d:4f:29:14:c8:07:ae:74:79:1e:82:
e2:cd:56:4b:4a:c8:bd:90:ec:c0:47:24:60:20:9a:
b7:05:89:45:79:08:37:74:c1:79:ee:1f:ac:94:28:
f7:41:cc:31:61:94:83:63:ee:42:f2:46:b1:94:72:
72:3a:fa:0a:22:0c:c5:76:c2:6d:ec:db:c9:fc:c4:
c7:82:73:7e:fd:23:d3:06:77:75:bf:bb:c7:18:ac:
02:a9:13:29:a5:dd:88:66:79:26:3c:dc:f5:0e:20:
95:15:fc:65:53:cd:35:2b:6e:91:43:56:3f:06:62:
31:57:c4:5e:53:41:fb:69:2f:67:55:a9:31:59:20:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CA:72:55:44:8F:FB:76:03:D0:CF:63:A2:67:EC:85:B2:45:41:51
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/98pyVUSP-3YD0M9jomfshbJFQVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.32.0/19
81.16.96.0/21
81.16.144.0/20
82.103.0.0/18
83.68.128.0-83.68.133.255
83.68.136.0-83.68.159.255
83.229.64.0/24
83.229.93.0/24
83.229.109.0/24
91.204.216.0/22
91.216.247.0/24
92.60.0.0/20
109.70.96.0/21
130.0.68.0/22
185.43.12.0/22
185.81.212.0/22
185.86.24.0/22
185.106.48.0/22
185.106.248.0/22
185.208.12.0/22
193.228.32.0-193.228.42.255
194.0.72.0/22
195.39.200.0/23
195.69.172.0/22
213.208.128.0/19
213.255.198.0/24
213.255.205.0/24
213.255.208.0/24
213.255.218.0/23
217.15.0.0/20
217.175.193.0/24
217.175.195.0-217.175.207.255
217.194.145.0-217.194.147.255
217.194.149.0-217.194.150.255
217.194.154.0-217.194.156.255
IPv6:
2001:678:c1c::/48
2a01:190::/29
2a03:e600::/29
2a04:9300::/29
2a05:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
d5:36:45:d4:4b:29:84:c8:6e:99:00:a0:7c:d2:e4:b3:ec:80:
6f:42:40:88:57:4f:7f:e6:01:48:72:24:0f:dd:1f:3f:67:e0:
a8:25:96:71:48:99:fb:c0:b9:4e:d9:ad:3d:11:1d:c6:a3:fd:
20:66:60:43:e5:70:53:25:ef:2b:06:b0:22:02:30:a4:f0:cb:
92:85:c6:fb:02:1f:60:7a:4c:19:53:bf:4a:7d:c2:d9:a6:2f:
b0:6d:9c:64:4b:07:69:2c:c9:6a:ba:7c:9e:7b:26:24:82:33:
7b:be:6e:fa:7a:22:6d:a4:48:3a:1a:10:64:13:62:4c:31:19:
ca:cf:75:e1:1e:f0:c6:e8:79:cc:0c:98:79:df:c6:b6:47:60:
0d:1b:80:9d:f3:12:a9:ec:81:62:70:5c:67:f3:9f:6d:f9:77:
a8:0a:39:54:d7:11:32:fc:89:2f:68:25:bc:7d:a3:ef:1f:fb:
d2:b6:5c:57:1c:eb:d7:c5:87:d3:4e:3c:68:b6:09:1c:d2:2f:
bf:fe:64:0b:56:69:76:20:dd:82:bf:46:0c:38:d7:03:ce:4c:
15:33:9f:48:2e:98:7e:db:ce:f2:12:99:ba:3f:76:10:ce:a1:
69:ec:4c:f5:dc:5c:a9:42:74:3e:4c:52:ec:0b:dc:3a:6a:84:
ed:39:4d:d8
-----BEGIN CERTIFICATE-----
MIIGODCCBSCgAwIBAgISAZ/WtyOf+x/FJBqPnGUQsM0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw
YjQ1MDYwHhcNMjYwODA2MTA1NTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2NhNzI1NTQ0OGZmYjc2MDNkMGNmNjNhMjY3ZWM4NWIyNDU0MTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DVznSO6Vgp5lI6Nxv4JEqRB0uk+
468lqyybWmJOCvEE6HNqd6YDV/VPgxczKuWMWrEoPpkhVWSKzhep6T3JtGqdNlS0
NsEY0tdbQerDPy3Z5bomEOTEn2WERY0VZlWyGpmP7Zc1/WRsJwQb/+LJoOjRpzyX
4HQ8tiQzXU8pFMgHrnR5HoLizVZLSsi9kOzARyRgIJq3BYlFeQg3dMF57h+slCj3
QcwxYZSDY+5C8kaxlHJyOvoKIgzFdsJt7NvJ/MTHgnN+/SPTBnd1v7vHGKwCqRMp
pd2IZnkmPNz1DiCVFfxlU801K26RQ1Y/BmIxV8ReU0H7aS9nVakxWSC5twIDAQAB
o4IDRDCCA0AwHQYDVR0OBBYEFPfKclVEj/t2A9DPY6Jn7IWyRUFRMB8GA1UdIwQY
MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt
OGVlYjc1N2NmNTQ1LzEvOThweVZVU1AtM1lEME05am9tZnNoYkpGUVZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1
LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBWAYIKwYBBQUHAQcBAf8EggFHMIIBQzCCARIEAgABMIIB
CgMEBU3tIAMEA1EQYAMEBFEQkAMEBlJnADAMAwQHU0SAAwQBU0SEMAwDBANTRIgD
BAVTRIADBABT5UADBABT5V0DBABT5W0DBAJbzNgDBABb2PcDBARcPAADBANtRmAD
BAKCAEQDBAK5KwwDBAK5UdQDBAK5VhgDBAK5ajADBAK5avgDBAK50AwwDAMEBcHk
IAMEAMHkKgMEAsIASAMEAcMnyAMEAsNFrAMEBdXQgAMEANX/xgMEANX/zQMEANX/
0AMEAdX/2gMEBNkPAAMEANmvwTAMAwQA2a/DAwQE2a/AMAwDBADZwpEDBALZwpAw
DAMEANnClQMEANnCljAMAwQB2cKaAwQA2cKcMCsEAgACMCUDBwAgAQZ4DBwDBQMq
AQGQAwUDKgPmAAMFAyoEkwADBQMqBd2AMA0GCSqGSIb3DQEBCwUAA4IBAQDVNkXU
SymEyG6ZAKB80uSz7IBvQkCIV09/5gFIciQP3R8/Z+CoJZZxSJn7wLlO2a09ER3G
o/0gZmBD5XBTJe8rBrAiAjCk8MuShcb7Ah9gekwZU79KfcLZpi+wbZxkSwdpLMlq
unyeeyYkgjN7vm76eiJtpEg6GhBkE2JMMRnKz3XhHvDG6HnMDJh538a2R2ANG4Cd
8xKp7IFicFxn859t+XeoCjlU1xEy/IkvaCW8faPvH/vStlxXHOvXxYfTTjxotgkc
0i+//mQLVml2IN2Cv0YMONcDzkwVM59ILph+287yEpm6P3YQzqFp7Ez13FypQnQ+
TFLsC9w6aoTtOU3Y
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:49 2026 by rpki-client