Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/cLhMOaHsTiCbjcGDDECKr1VTwQY.roa
File: cLhMOaHsTiCbjcGDDECKr1VTwQY.roa (raw, json)
Hash identifier: Iqsn8kMpNh5UcFT7O/wgulPUF+XCyAq288IMTgURFHM=
Subject key identifier: 70:B8:4C:39:A1:EC:4E:20:9B:8D:C1:83:0C:40:8A:AF:55:53:C1:06
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 01A00F840DF6DB25BD2778ECA14D40809FEF
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/cLhMOaHsTiCbjcGDDECKr1VTwQY.roa
Signing time: Mon 17 Aug 2026 11:38:27 +0000
ROA not before: Mon 17 Aug 2026 11:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12552
IP address blocks: 62.102.144.0/22 maxlen: 22
62.109.32.0/19 maxlen: 19
62.209.160.0/19 maxlen: 19
65.99.128.0/18 maxlen: 18
80.252.160.0/19 maxlen: 19
82.96.0.0/18 maxlen: 18
82.96.28.0/22 maxlen: 22
82.96.43.0/24 maxlen: 24
82.99.0.0/18 maxlen: 18
82.99.36.0/23 maxlen: 23
82.99.62.0/24 maxlen: 24
83.140.0.0/16 maxlen: 16
83.140.30.0/24 maxlen: 24
83.140.95.0/24 maxlen: 24
83.140.96.0/23 maxlen: 23
83.140.99.0/24 maxlen: 24
83.140.108.0/22 maxlen: 22
83.140.113.0/24 maxlen: 24
83.140.156.0/23 maxlen: 23
83.140.171.0/24 maxlen: 24
83.140.221.0/24 maxlen: 24
83.140.231.0/24 maxlen: 24
83.140.249.0/24 maxlen: 24
83.145.0.0/18 maxlen: 18
85.112.160.0/19 maxlen: 19
85.112.184.0/22 maxlen: 22
93.158.64.0/18 maxlen: 18
93.158.68.0/22 maxlen: 22
93.158.76.0/24 maxlen: 24
93.158.78.0/24 maxlen: 24
93.158.88.0/22 maxlen: 22
93.158.92.0/23 maxlen: 23
93.158.95.0/24 maxlen: 24
93.158.98.0/23 maxlen: 23
93.158.100.0/24 maxlen: 24
93.158.102.0/23 maxlen: 23
93.158.107.0/24 maxlen: 24
93.158.108.0/23 maxlen: 23
93.189.240.0/21 maxlen: 21
94.136.64.0/19 maxlen: 19
94.246.64.0/18 maxlen: 18
146.185.8.0/21 maxlen: 21
178.248.24.0/22 maxlen: 22
185.165.80.0/22 maxlen: 22
185.165.172.0/22 maxlen: 22
185.165.172.0/24 maxlen: 24
185.178.140.0/22 maxlen: 22
185.178.143.0/24 maxlen: 24
185.181.216.0/22 maxlen: 22
185.182.84.0/22 maxlen: 22
185.183.144.0/22 maxlen: 22
185.183.152.0/22 maxlen: 22
185.190.144.0/22 maxlen: 22
185.199.168.0/22 maxlen: 22
185.205.224.0/22 maxlen: 22
185.205.226.0/24 maxlen: 24
185.211.136.0/22 maxlen: 22
195.140.200.0/22 maxlen: 22
212.16.160.0/19 maxlen: 19
212.37.0.0/19 maxlen: 19
212.112.160.0/19 maxlen: 19
213.80.0.0/18 maxlen: 18
213.80.64.0/19 maxlen: 19
213.132.96.0/19 maxlen: 19
213.132.101.0/24 maxlen: 24
213.132.107.0/24 maxlen: 24
213.132.111.0/24 maxlen: 24
213.132.114.0/24 maxlen: 24
213.132.119.0/24 maxlen: 24
213.185.224.0/19 maxlen: 19
213.212.0.0/18 maxlen: 18
217.75.96.0/19 maxlen: 19
217.140.112.0/20 maxlen: 20
2001:16d8::/32 maxlen: 32
2a01:2b0::/29 maxlen: 29
2a01:6d0::/32 maxlen: 32
2a0a:6380::/29 maxlen: 29
2a0a:a040::/29 maxlen: 29
2a0a:a040::/32 maxlen: 32
2a0a:a041::/32 maxlen: 32
2a0a:d381::/32 maxlen: 32
2a0a:d381:100::/40 maxlen: 40
2a0a:d381:200::/40 maxlen: 40
2a0a:d381:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:84:0d:f6:db:25:bd:27:78:ec:a1:4d:40:80:9f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Aug 17 11:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70b84c39a1ec4e209b8dc1830c408aaf5553c106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:22:a1:b4:75:ab:cb:05:94:e8:c9:b7:12:
d3:4d:81:b7:fd:b8:54:cf:d5:f0:40:51:d1:a1:8a:
d4:f6:eb:1b:9e:16:4c:5b:bf:4e:26:7f:14:04:fe:
8e:15:8d:c6:e1:a5:d0:e4:8b:9d:3a:c4:e2:6d:7e:
cd:1d:29:d6:c5:9f:a9:28:22:3c:2c:63:1e:c5:b7:
7e:2b:3c:d2:9b:94:2c:ef:6b:32:6b:06:f2:c2:00:
ba:72:ae:7f:3d:20:0c:07:f1:fc:2c:6a:44:58:c5:
34:bb:4e:e1:5b:a1:e5:70:ca:8a:2f:8d:a3:6d:3d:
8c:07:05:05:2e:f3:ce:bd:f5:bd:cb:dd:b6:17:e2:
19:47:6d:f0:dd:c4:ff:7d:e3:1e:b3:7b:19:e2:03:
72:6c:32:52:32:0e:e6:1f:c8:49:cd:ae:12:47:56:
a3:71:a7:1f:7b:86:f8:b3:6e:09:78:fa:73:2e:33:
9c:7d:b4:69:1f:e1:21:68:c2:80:a2:8d:b4:5a:4a:
c4:63:04:be:a0:da:6b:b4:50:ce:21:6d:70:5c:05:
76:70:54:78:b8:ea:54:a2:dc:9c:ba:16:0f:64:8e:
65:e5:eb:a0:b0:fc:63:0a:04:24:b1:2b:f5:48:db:
13:52:56:19:1a:c3:31:4d:f4:dd:da:02:64:b3:11:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B8:4C:39:A1:EC:4E:20:9B:8D:C1:83:0C:40:8A:AF:55:53:C1:06
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/cLhMOaHsTiCbjcGDDECKr1VTwQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.102.144.0/22
62.109.32.0/19
62.209.160.0/19
65.99.128.0/18
80.252.160.0/19
82.96.0.0/18
82.99.0.0/18
83.140.0.0/16
83.145.0.0/18
85.112.160.0/19
93.158.64.0/18
93.189.240.0/21
94.136.64.0/19
94.246.64.0/18
146.185.8.0/21
178.248.24.0/22
185.165.80.0/22
185.165.172.0/22
185.178.140.0/22
185.181.216.0/22
185.182.84.0/22
185.183.144.0/22
185.183.152.0/22
185.190.144.0/22
185.199.168.0/22
185.205.224.0/22
185.211.136.0/22
195.140.200.0/22
212.16.160.0/19
212.37.0.0/19
212.112.160.0/19
213.80.0.0-213.80.95.255
213.132.96.0/19
213.185.224.0/19
213.212.0.0/18
217.75.96.0/19
217.140.112.0/20
IPv6:
2001:16d8::/32
2a01:2b0::/29
2a01:6d0::/32
2a0a:6380::/29
2a0a:a040::/29
2a0a:d381::/32
Signature Algorithm: sha256WithRSAEncryption
4f:31:2d:8a:eb:b6:7f:51:94:f1:cb:c9:fd:a4:20:39:f0:a8:
42:fd:99:d4:0d:b6:38:86:e7:be:fc:41:59:ce:8b:67:f8:d2:
df:69:57:f0:24:4d:80:88:51:68:c5:13:57:1a:e0:17:7b:e5:
9c:82:73:ea:b5:da:29:c8:37:4e:e3:01:86:89:82:79:87:33:
bf:58:e5:53:ca:37:08:52:3b:b9:f5:b5:d7:8a:43:b1:ff:86:
e4:07:1e:66:d5:aa:df:07:eb:4e:61:8c:f0:7e:ee:d7:b6:55:
c7:2f:f7:40:80:14:a1:49:8c:31:95:fa:07:12:7a:fd:71:e3:
9c:8d:ba:32:db:d8:46:45:68:5a:90:de:72:9c:3a:81:5f:64:
0a:d3:2d:10:f5:a2:aa:67:bb:f2:be:ed:fc:7d:9c:b5:ca:3e:
9a:e7:dc:d9:29:de:77:7f:7f:39:c9:8c:f6:fa:13:37:bd:b6:
cd:bf:a1:a4:b5:cf:0e:c2:95:39:f3:57:6e:76:e7:27:ce:87:
4c:12:2c:3a:35:8b:e5:a1:1e:f8:38:5c:05:9f:7c:ea:ec:2f:
01:c7:6f:82:a4:24:76:cb:11:b9:3b:aa:00:70:23:c9:b8:73:
fc:65:30:ef:31:46:ce:99:85:e7:e0:61:fa:0a:e9:33:0d:5f:
ff:7b:6b:24
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgISAaAPhA322yW9J3jsoU1AgJ/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3
M2QwMmUwHhcNMjYwODE3MTEzODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGI4NGMzOWExZWM0ZTIwOWI4ZGMxODMwYzQwOGFhZjU1NTNjMTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWMiobR1q8sFlOjJtxLTTYG3/bhU
z9XwQFHRoYrU9usbnhZMW79OJn8UBP6OFY3G4aXQ5IudOsTibX7NHSnWxZ+pKCI8
LGMexbd+KzzSm5Qs72syawbywgC6cq5/PSAMB/H8LGpEWMU0u07hW6HlcMqKL42j
bT2MBwUFLvPOvfW9y922F+IZR23w3cT/feMes3sZ4gNybDJSMg7mH8hJza4SR1aj
cacfe4b4s24JePpzLjOcfbRpH+EhaMKAoo20WkrEYwS+oNprtFDOIW1wXAV2cFR4
uOpUotycuhYPZI5l5eugsPxjCgQksSv1SNsTUlYZGsMxTfTd2gJksxEjawIDAQAB
o4IDITCCAx0wHQYDVR0OBBYEFHC4TDmh7E4gm43BgwxAiq9VU8EGMB8GA1UdIwQY
MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt
M2I4YjBkMWE1OWE5LzEvY0xoTU9hSHNUaUNiamNHRERFQ0tyMVZUd1FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5
LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNQYIKwYBBQUHAQcBAf8EggEkMIIBIDCB6wQCAAEwgeQD
BAI+ZpADBAU+bSADBAU+0aADBAZBY4ADBAVQ/KADBAZSYAADBAZSYwADAwBTjAME
BlORAAMEBVVwoAMEBl2eQAMEA1298AMEBV6IQAMEBl72QAMEA5K5CAMEArL4GAME
ArmlUAMEArmlrAMEArmyjAMEArm12AMEArm2VAMEArm3kAMEArm3mAMEArm+kAME
ArnHqAMEArnN4AMEArnTiAMEAsOMyAMEBdQQoAMEBdQlAAMEBdRwoDALAwME1VAD
BAXVUEADBAXVhGADBAXVueADBAbV1AADBAXZS2ADBATZjHAwMAQCAAIwKgMFACAB
FtgDBQMqAQKwAwUAKgEG0AMFAyoKY4ADBQMqCqBAAwUAKgrTgTANBgkqhkiG9w0B
AQsFAAOCAQEATzEtiuu2f1GU8cvJ/aQgOfCoQv2Z1A22OIbnvvxBWc6LZ/jS32lX
8CRNgIhRaMUTVxrgF3vlnIJz6rXaKcg3TuMBhomCeYczv1jlU8o3CFI7ufW114pD
sf+G5AceZtWq3wfrTmGM8H7u17ZVxy/3QIAUoUmMMZX6BxJ6/XHjnI26MtvYRkVo
WpDecpw6gV9kCtMtEPWiqme78r7t/H2ctco+mufc2Sned39/OcmM9voTN722zb+h
pLXPDsKVOfNXbnbnJ86HTBIsOjWL5aEe+DhcBZ986uwvAcdvgqQkdssRuTuqAHAj
ybhz/GUw7zFGzpmF5+Bh+grpMw1f/3trJA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:09:55 2026 by rpki-client