Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jPKbRKqxQcc-TeYLY55wh8L6Gb4.roa
File: jPKbRKqxQcc-TeYLY55wh8L6Gb4.roa (raw, json)
Hash identifier: bi2a6T8IhKyfkU7Q4ZuJv4eycXz2uGTC5YBOhanvUKU=
Subject key identifier: 8C:F2:9B:44:AA:B1:41:C7:3E:4D:E6:0B:63:9E:70:87:C2:FA:19:BE
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A1964F5DB1B2D14EC266A24BABB77F4003
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jPKbRKqxQcc-TeYLY55wh8L6Gb4.roa
Signing time: Sun 01 Nov 2026 08:52:26 +0000
ROA not before: Sun 01 Nov 2026 08:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 2.56.173.0/24 maxlen: 24
5.180.22.0/24 maxlen: 24
5.180.24.0/24 maxlen: 24
5.180.29.0/24 maxlen: 24
5.180.30.0/24 maxlen: 24
5.180.45.0/24 maxlen: 24
5.180.55.0/24 maxlen: 24
5.253.40.0/24 maxlen: 24
5.253.41.0/24 maxlen: 24
5.253.43.0/24 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.129.0/24 maxlen: 24
45.12.130.0/24 maxlen: 24
45.12.131.0/24 maxlen: 24
45.12.132.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.12.149.0/24 maxlen: 24
45.12.150.0/23 maxlen: 24
45.15.126.0/23 maxlen: 24
45.15.131.0/24 maxlen: 24
45.15.140.0/24 maxlen: 24
45.15.141.0/24 maxlen: 24
45.15.142.0/24 maxlen: 24
45.15.144.0/24 maxlen: 24
45.15.152.0/24 maxlen: 24
45.15.153.0/24 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.165.0/24 maxlen: 24
45.15.166.0/24 maxlen: 24
45.15.167.0/24 maxlen: 24
45.15.168.0/22 maxlen: 24
45.15.176.0/24 maxlen: 24
45.15.178.0/24 maxlen: 24
45.15.184.0/24 maxlen: 24
45.15.185.0/24 maxlen: 24
45.15.187.0/24 maxlen: 24
45.82.245.0/24 maxlen: 24
45.82.246.0/24 maxlen: 24
45.82.247.0/24 maxlen: 24
45.82.249.0/24 maxlen: 24
45.82.250.0/24 maxlen: 24
45.82.251.0/24 maxlen: 24
45.82.252.0/24 maxlen: 24
45.82.254.0/24 maxlen: 24
45.82.255.0/24 maxlen: 24
45.83.20.0/24 maxlen: 24
45.83.21.0/24 maxlen: 24
45.83.22.0/24 maxlen: 24
45.83.129.0/24 maxlen: 24
45.83.130.0/24 maxlen: 24
45.83.131.0/24 maxlen: 24
45.83.140.0/22 maxlen: 24
45.83.148.0/24 maxlen: 24
45.89.107.0/24 maxlen: 24
45.89.108.0/22 maxlen: 24
45.89.196.0/24 maxlen: 24
45.92.162.0/24 maxlen: 24
45.128.48.0/24 maxlen: 24
45.128.50.0/24 maxlen: 24
45.128.52.0/24 maxlen: 24
45.128.54.0/24 maxlen: 24
45.128.72.0/24 maxlen: 24
45.128.75.0/24 maxlen: 24
45.136.128.0/23 maxlen: 24
45.136.149.0/24 maxlen: 24
85.208.109.0/24 maxlen: 24
85.208.110.0/24 maxlen: 24
85.209.153.0/24 maxlen: 24
85.209.154.0/24 maxlen: 24
85.209.195.0/24 maxlen: 24
171.22.110.0/24 maxlen: 24
171.22.112.0/24 maxlen: 24
171.22.113.0/24 maxlen: 24
171.22.116.0/23 maxlen: 24
171.22.118.0/24 maxlen: 24
171.22.120.0/24 maxlen: 24
171.22.122.0/24 maxlen: 24
171.22.123.0/24 maxlen: 24
171.22.124.0/22 maxlen: 24
213.59.115.0/24 maxlen: 24
213.59.116.0/24 maxlen: 24
213.59.117.0/24 maxlen: 24
213.59.118.0/24 maxlen: 24
213.59.121.0/24 maxlen: 24
213.59.122.0/24 maxlen: 24
213.59.123.0/24 maxlen: 24
2a06:e5c0::/29 maxlen: 29
2a0e:300::/29 maxlen: 29
2a0e:4640::/29 maxlen: 29
2a0e:4e00::/29 maxlen: 29
2a0e:6300::/29 maxlen: 29
2a0e:9bc0::/29 maxlen: 29
2a0e:a100::/29 maxlen: 29
2a0e:b3c0::/29 maxlen: 29
2a0e:cf80::/29 maxlen: 29
2a0e:e200::/29 maxlen: 29
2a0f:1c0::/29 maxlen: 29
2a0f:240::/29 maxlen: 29
2a0f:c40::/29 maxlen: 29
2a0f:cc0::/29 maxlen: 29
2a0f:d40::/29 maxlen: 29
2a0f:dc0::/29 maxlen: 29
2a0f:e40::/29 maxlen: 29
2a0f:1040::/29 maxlen: 29
2a0f:1240::/29 maxlen: 29
2a0f:12c0::/29 maxlen: 29
2a0f:2040::/29 maxlen: 29
2a0f:20c0::/29 maxlen: 29
2a0f:2140::/29 maxlen: 29
2a0f:21c0::/29 maxlen: 29
2a0f:2240::/29 maxlen: 29
2a0f:2ac0::/29 maxlen: 29
2a0f:2b40::/29 maxlen: 29
2a0f:2bc0::/29 maxlen: 29
2a0f:5b80::/29 maxlen: 29
2a0f:e480::/29 maxlen: 29
2a0f:f380::/29 maxlen: 29
2a0f:f480::/29 maxlen: 29
2a0f:f580::/29 maxlen: 29
2a0f:f680::/29 maxlen: 29
2a0f:f780::/29 maxlen: 29
2a0f:f980::/29 maxlen: 29
2a0f:fa80::/29 maxlen: 29
2a0f:fb80::/29 maxlen: 29
2a0f:fbc0::/29 maxlen: 29
2a0f:fc40::/29 maxlen: 29
2a0f:fcc0::/29 maxlen: 29
2a0f:fd40::/29 maxlen: 29
2a0f:fe80::/29 maxlen: 29
2a10:16c0::/29 maxlen: 29
2a10:2480::/29 maxlen: 29
2a10:2f80::/29 maxlen: 29
2a10:4200::/29 maxlen: 29
2a10:4300::/29 maxlen: 29
2a10:4400::/29 maxlen: 29
2a10:4500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:4f:5d:b1:b2:d1:4e:c2:66:a2:4b:ab:b7:7f:40:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Nov 1 08:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cf29b44aab141c73e4de60b639e7087c2fa19be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9b:81:55:65:79:3d:83:f1:99:35:1b:0b:a2:
ca:4e:fc:ae:85:d1:37:a4:ce:3a:7f:ea:4e:ab:e1:
22:ef:84:54:d5:32:b6:1d:16:a2:f0:ec:e9:00:ef:
c2:97:06:06:54:14:9d:f9:22:ef:24:96:0d:2a:63:
af:95:16:0e:f1:a9:11:7c:f7:ad:d3:b1:42:ad:10:
50:73:95:6f:35:05:ca:37:dc:85:8e:cf:4f:7d:a3:
54:a3:59:2e:91:43:a4:78:7c:93:1a:84:ae:aa:7a:
c1:a3:a0:54:30:a5:e3:c9:40:4a:a9:2b:91:1a:54:
a5:af:b3:a7:7b:45:7d:6c:8a:81:f7:6d:a0:71:b3:
33:6f:5d:fa:7c:8f:24:cf:fe:5e:12:2b:b2:07:2e:
ae:d4:ac:66:b1:55:e3:45:ff:c2:e4:87:09:7a:96:
c9:5d:e7:0a:cd:e1:82:ca:f3:ad:92:d2:7b:91:ba:
28:78:e5:f2:ce:70:49:a4:89:0f:c0:dd:de:4d:0a:
a9:e7:de:54:6a:ad:21:6c:78:f3:1f:93:88:b8:1e:
8e:20:6e:ba:4e:03:0b:f1:51:de:f8:91:6b:ae:50:
f4:b6:99:19:59:a8:6d:82:b5:b0:87:9a:0e:0b:83:
58:29:f2:c7:92:d6:af:28:ed:ba:1b:9e:28:20:3e:
9f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F2:9B:44:AA:B1:41:C7:3E:4D:E6:0B:63:9E:70:87:C2:FA:19:BE
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jPKbRKqxQcc-TeYLY55wh8L6Gb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.173.0/24
5.180.22.0/24
5.180.24.0/24
5.180.29.0-5.180.30.255
5.180.45.0/24
5.180.55.0/24
5.253.40.0/23
5.253.43.0/24
45.12.108.0/22
45.12.129.0-45.12.147.255
45.12.149.0-45.12.151.255
45.15.126.0/23
45.15.131.0/24
45.15.140.0-45.15.142.255
45.15.144.0/24
45.15.152.0/23
45.15.160.0/22
45.15.165.0-45.15.171.255
45.15.176.0/24
45.15.178.0/24
45.15.184.0/23
45.15.187.0/24
45.82.245.0-45.82.247.255
45.82.249.0-45.82.252.255
45.82.254.0/23
45.83.20.0-45.83.22.255
45.83.129.0-45.83.131.255
45.83.140.0/22
45.83.148.0/24
45.89.107.0-45.89.111.255
45.89.196.0/24
45.92.162.0/24
45.128.48.0/24
45.128.50.0/24
45.128.52.0/24
45.128.54.0/24
45.128.72.0/24
45.128.75.0/24
45.136.128.0/23
45.136.149.0/24
85.208.109.0-85.208.110.255
85.209.153.0-85.209.154.255
85.209.195.0/24
171.22.110.0/24
171.22.112.0/23
171.22.116.0-171.22.118.255
171.22.120.0/24
171.22.122.0-171.22.127.255
213.59.115.0-213.59.118.255
213.59.121.0-213.59.123.255
IPv6:
2a06:e5c0::/29
2a0e:300::/29
2a0e:4640::/29
2a0e:4e00::/29
2a0e:6300::/29
2a0e:9bc0::/29
2a0e:a100::/29
2a0e:b3c0::/29
2a0e:cf80::/29
2a0e:e200::/29
2a0f:1c0::/29
2a0f:240::/29
2a0f:c40::/29
2a0f:cc0::/29
2a0f:d40::/29
2a0f:dc0::/29
2a0f:e40::/29
2a0f:1040::/29
2a0f:1240::/29
2a0f:12c0::/29
2a0f:2040::/29
2a0f:20c0::/29
2a0f:2140::/29
2a0f:21c0::/29
2a0f:2240::/29
2a0f:2ac0::/29
2a0f:2b40::/29
2a0f:2bc0::/29
2a0f:5b80::/29
2a0f:e480::/29
2a0f:f380::/29
2a0f:f480::/29
2a0f:f580::/29
2a0f:f680::/29
2a0f:f780::/29
2a0f:f980::/29
2a0f:fa80::/29
2a0f:fb80::/29
2a0f:fbc0::/29
2a0f:fc40::/29
2a0f:fcc0::/29
2a0f:fd40::/29
2a0f:fe80::/29
2a10:16c0::/29
2a10:2480::/29
2a10:2f80::/29
2a10:4200::/29
2a10:4300::/29
2a10:4400::/29
2a10:4500::/29
Signature Algorithm: sha256WithRSAEncryption
cc:98:f4:55:75:ba:a9:bb:66:56:fe:6c:13:e8:bf:41:bf:6f:
2b:79:cf:49:27:29:0e:73:ed:5b:c7:e0:29:17:31:1c:1b:64:
c3:83:75:b3:ae:fa:f5:48:fb:8d:9c:91:42:62:e1:c1:0c:e4:
33:76:90:09:ca:c9:cd:9b:ae:14:f1:a3:6b:ce:e8:1e:29:10:
a0:77:61:45:4d:71:b2:0c:4f:45:de:75:24:13:e3:b7:0a:82:
1a:9f:60:cb:49:6d:6f:ba:5b:97:18:6c:00:8f:61:d1:cb:01:
7b:65:4f:c2:99:2d:88:ac:27:4e:08:22:36:69:3d:65:5e:90:
29:d7:3c:04:1d:68:67:c1:df:a7:ef:87:28:d4:e0:2c:69:73:
fe:b9:f4:e3:ed:90:55:2f:81:0e:22:c9:23:94:83:cd:7a:17:
56:4e:97:94:65:bb:3a:ac:02:7f:3d:77:8f:bc:88:39:55:8b:
77:5f:bc:9b:8e:b1:f8:2d:8c:fc:fb:95:db:a0:f2:04:e7:4b:
f0:76:94:b1:6d:7e:34:f3:a6:ac:b3:2b:35:9c:30:80:e8:26:
4a:ff:ca:37:68:23:ac:e0:03:93:3d:6a:a4:52:70:e0:f5:d0:
7d:e1:09:87:8b:46:46:74:48:4f:b5:f0:65:0d:ad:62:5a:67:
86:63:65:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:10:09 2026 by rpki-client