Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/ys3yCdHJ9a3MjZY25yxTfQSZph0.roa
File: ys3yCdHJ9a3MjZY25yxTfQSZph0.roa (raw, json)
Hash identifier: KFDraXJKQVMV1BXHcMi/qwrvrU0UgboWj1cSJoeNNfk=
Subject key identifier: CA:CD:F2:09:D1:C9:F5:AD:CC:8D:96:36:E7:2C:53:7D:04:99:A6:1D
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 01A080013F42E057A76A474F16EE1A6E7D1E
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/ys3yCdHJ9a3MjZY25yxTfQSZph0.roa
Signing time: Tue 08 Sep 2026 07:52:40 +0000
ROA not before: Tue 08 Sep 2026 07:52:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42926
IP address blocks: 31.210.64.0/18 maxlen: 24
31.210.96.0/24 maxlen: 24
31.210.97.0/24 maxlen: 24
31.210.98.0/24 maxlen: 24
31.210.99.0/24 maxlen: 24
31.210.100.0/24 maxlen: 24
31.210.101.0/24 maxlen: 24
31.210.102.0/24 maxlen: 24
31.210.103.0/24 maxlen: 24
31.210.104.0/24 maxlen: 24
31.210.105.0/24 maxlen: 24
31.210.106.0/24 maxlen: 24
31.210.107.0/24 maxlen: 24
31.210.108.0/24 maxlen: 24
31.210.109.0/24 maxlen: 24
31.210.110.0/24 maxlen: 24
31.210.111.0/24 maxlen: 24
31.210.112.0/24 maxlen: 24
31.210.113.0/24 maxlen: 24
31.210.114.0/24 maxlen: 24
31.210.115.0/24 maxlen: 24
31.210.116.0/24 maxlen: 24
31.210.117.0/24 maxlen: 24
31.210.118.0/24 maxlen: 24
31.210.119.0/24 maxlen: 24
46.45.128.0/18 maxlen: 24
46.45.136.0/24 maxlen: 24
46.45.137.0/24 maxlen: 24
46.45.138.0/24 maxlen: 24
46.45.139.0/24 maxlen: 24
46.45.180.0/24 maxlen: 24
46.45.181.0/24 maxlen: 24
46.45.182.0/24 maxlen: 24
46.45.183.0/24 maxlen: 24
46.45.185.0/24 maxlen: 24
46.45.186.0/24 maxlen: 24
46.45.187.0/24 maxlen: 24
46.45.188.0/24 maxlen: 24
77.75.32.0/21 maxlen: 24
79.98.128.0/21 maxlen: 24
94.101.80.0/20 maxlen: 24
94.101.90.0/24 maxlen: 24
176.53.0.0/17 maxlen: 24
176.53.0.0/24 maxlen: 24
176.53.1.0/24 maxlen: 24
176.53.2.0/24 maxlen: 24
176.53.3.0/24 maxlen: 24
176.53.5.0/24 maxlen: 24
176.53.6.0/24 maxlen: 24
176.53.8.0/24 maxlen: 24
176.53.9.0/24 maxlen: 24
176.53.10.0/24 maxlen: 24
176.53.11.0/24 maxlen: 24
176.53.12.0/24 maxlen: 24
176.53.13.0/24 maxlen: 24
176.53.14.0/24 maxlen: 24
176.53.15.0/24 maxlen: 24
176.53.18.0/24 maxlen: 24
176.53.19.0/24 maxlen: 24
176.53.20.0/24 maxlen: 24
176.53.21.0/24 maxlen: 24
176.53.22.0/24 maxlen: 24
176.53.23.0/24 maxlen: 24
176.53.24.0/24 maxlen: 24
176.53.25.0/24 maxlen: 24
176.53.26.0/24 maxlen: 24
176.53.32.0/24 maxlen: 24
176.53.34.0/24 maxlen: 24
176.53.35.0/24 maxlen: 24
176.53.36.0/24 maxlen: 24
176.53.37.0/24 maxlen: 24
176.53.38.0/24 maxlen: 24
176.53.39.0/24 maxlen: 24
176.53.40.0/24 maxlen: 24
176.53.41.0/24 maxlen: 24
176.53.42.0/24 maxlen: 24
176.53.43.0/24 maxlen: 24
176.53.44.0/24 maxlen: 24
176.53.45.0/24 maxlen: 24
176.53.46.0/24 maxlen: 24
176.53.47.0/24 maxlen: 24
176.53.48.0/24 maxlen: 24
176.53.49.0/24 maxlen: 24
176.53.51.0/24 maxlen: 24
176.53.55.0/24 maxlen: 24
176.53.57.0/24 maxlen: 24
176.53.59.0/24 maxlen: 24
176.53.61.0/24 maxlen: 24
176.53.66.0/24 maxlen: 24
176.53.67.0/24 maxlen: 24
176.53.70.0/24 maxlen: 24
176.53.71.0/24 maxlen: 24
176.53.72.0/24 maxlen: 24
176.53.73.0/24 maxlen: 24
176.53.74.0/24 maxlen: 24
176.53.77.0/24 maxlen: 24
176.53.78.0/24 maxlen: 24
176.53.79.0/24 maxlen: 24
176.53.80.0/24 maxlen: 24
176.53.81.0/24 maxlen: 24
176.53.83.0/24 maxlen: 24
176.53.84.0/24 maxlen: 24
176.53.85.0/24 maxlen: 24
176.53.86.0/24 maxlen: 24
176.53.87.0/24 maxlen: 24
176.53.88.0/24 maxlen: 24
176.53.89.0/24 maxlen: 24
176.53.90.0/24 maxlen: 24
176.53.91.0/24 maxlen: 24
176.53.92.0/24 maxlen: 24
176.53.93.0/24 maxlen: 24
176.53.94.0/24 maxlen: 24
176.53.95.0/24 maxlen: 24
176.53.96.0/24 maxlen: 24
176.53.99.0/24 maxlen: 24
176.53.100.0/24 maxlen: 24
176.53.101.0/24 maxlen: 24
176.53.102.0/24 maxlen: 24
176.53.104.0/24 maxlen: 24
176.53.105.0/24 maxlen: 24
176.53.106.0/24 maxlen: 24
176.53.107.0/24 maxlen: 24
176.53.112.0/24 maxlen: 24
176.53.125.0/24 maxlen: 24
176.53.126.0/24 maxlen: 24
176.53.127.0/24 maxlen: 24
178.211.32.0/19 maxlen: 24
178.211.61.0/24 maxlen: 24
185.25.100.0/22 maxlen: 22
185.25.100.0/24 maxlen: 24
185.25.101.0/24 maxlen: 24
185.25.102.0/24 maxlen: 24
185.25.103.0/24 maxlen: 24
185.157.40.0/24 maxlen: 24
185.157.41.0/24 maxlen: 24
185.157.42.0/24 maxlen: 24
185.157.43.0/24 maxlen: 24
185.184.208.0/22 maxlen: 24
213.128.64.0/24 maxlen: 24
213.128.65.0/24 maxlen: 24
213.128.66.0/24 maxlen: 24
213.128.67.0/24 maxlen: 24
213.128.68.0/24 maxlen: 24
213.128.69.0/24 maxlen: 24
213.128.70.0/24 maxlen: 24
213.128.71.0/24 maxlen: 24
213.128.72.0/24 maxlen: 24
213.128.73.0/24 maxlen: 24
213.128.74.0/24 maxlen: 24
213.128.75.0/24 maxlen: 24
213.128.76.0/24 maxlen: 24
213.128.77.0/24 maxlen: 24
213.128.78.0/24 maxlen: 24
213.128.79.0/24 maxlen: 24
213.128.80.0/24 maxlen: 24
213.128.81.0/24 maxlen: 24
213.128.82.0/24 maxlen: 24
213.128.83.0/24 maxlen: 24
213.128.84.0/24 maxlen: 24
213.128.85.0/24 maxlen: 24
213.128.86.0/24 maxlen: 24
213.128.87.0/24 maxlen: 24
213.128.88.0/24 maxlen: 24
213.128.89.0/24 maxlen: 24
213.128.90.0/24 maxlen: 24
213.128.93.0/24 maxlen: 24
213.128.94.0/24 maxlen: 24
213.128.95.0/24 maxlen: 24
2a00:56a0::/32 maxlen: 48
2a01:790::/32 maxlen: 48
2a0b:5f40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:01:3f:42:e0:57:a7:6a:47:4f:16:ee:1a:6e:7d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Sep 8 07:52:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cacdf209d1c9f5adcc8d9636e72c537d0499a61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:66:d7:ab:0b:40:8f:7b:6a:ee:97:58:43:
36:1e:91:a6:c8:a9:6d:9e:77:29:b7:f2:16:81:10:
0a:db:a6:c3:66:20:4c:ee:c4:54:c1:16:d7:ea:24:
ff:c4:dd:ff:5d:0d:93:b2:c6:c1:1a:dc:5e:aa:af:
f9:21:c5:1d:b3:76:6d:3d:0a:84:2d:b5:c3:57:f6:
89:69:75:f1:7e:89:c5:c9:81:49:d6:83:5d:9c:38:
22:97:3a:74:80:2c:4f:97:2e:39:59:40:65:28:1c:
43:36:7f:51:55:f6:6c:93:03:2b:eb:1a:07:16:e3:
23:28:01:2c:bc:f8:24:c8:80:23:39:65:61:4e:48:
f0:d8:eb:59:7b:a4:28:6b:b1:a6:8e:4d:36:fb:50:
f2:ae:c7:83:f7:2a:0a:af:75:5c:c5:8e:c8:76:06:
41:80:47:63:d7:51:fa:4f:b3:9d:0c:36:43:28:96:
5a:3f:46:5e:ca:3c:57:43:62:d0:12:a9:07:14:43:
9f:a5:96:2a:d5:1d:c1:7d:c4:f5:94:f3:f4:78:43:
28:bd:c5:39:1d:78:74:a6:1c:ed:30:a4:68:a1:e0:
7a:2f:e7:c0:08:21:d6:12:0b:5e:53:b9:ce:9e:42:
b2:aa:56:84:fe:d0:04:4a:97:08:49:8c:58:5b:60:
55:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CD:F2:09:D1:C9:F5:AD:CC:8D:96:36:E7:2C:53:7D:04:99:A6:1D
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/ys3yCdHJ9a3MjZY25yxTfQSZph0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.64.0/18
46.45.128.0/18
77.75.32.0/21
79.98.128.0/21
94.101.80.0/20
176.53.0.0/17
178.211.32.0/19
185.25.100.0/22
185.157.40.0/22
185.184.208.0/22
213.128.64.0-213.128.90.255
213.128.93.0-213.128.95.255
IPv6:
2a00:56a0::/32
2a01:790::/32
2a0b:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
be:f7:f3:76:31:7a:9a:e1:d6:de:d2:94:82:29:f1:89:a0:76:
58:81:94:53:2e:c1:31:c5:93:93:5d:24:f5:37:aa:3d:83:d3:
a5:d5:06:2b:a9:1a:c1:d0:e3:b7:84:e0:c1:8a:62:7b:2c:2b:
b4:f8:60:6d:1b:06:ee:ad:cd:6d:2e:9d:62:4d:fe:b5:66:34:
79:2e:cb:d0:c3:88:38:e5:1c:75:36:c6:c5:07:be:a7:d8:c5:
03:08:b2:33:22:3c:0d:69:30:c4:a5:a7:e9:60:2f:8e:68:7b:
f2:ae:c7:44:8a:b5:1d:f5:b8:08:ac:5a:01:7b:09:2c:f4:a7:
0c:36:7f:a0:57:6c:dc:09:a8:84:e7:af:d2:b8:84:df:d6:34:
55:a5:33:e7:02:41:ee:73:97:41:2f:9a:1c:8d:81:57:6e:46:
ad:9a:df:e5:49:3d:da:8e:dc:b8:d5:07:cf:ea:39:6d:8d:09:
1e:e5:f1:d3:4c:cd:c2:33:bd:6f:ba:f7:d5:6d:22:11:8f:06:
35:f3:6c:32:ee:0b:84:93:37:70:fb:43:7c:09:35:6f:c6:41:
da:85:e1:26:bc:3f:31:ea:d8:4a:d9:94:68:40:98:0d:24:af:
65:7c:5d:23:91:2b:65:fb:15:4d:ac:77:9e:0b:db:a4:26:e7:
f7:34:76:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:13:59 2026 by rpki-client