Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/1A3M617VwrbmalIgAjoMypqQULs.roa
File: 1A3M617VwrbmalIgAjoMypqQULs.roa (raw, json)
Hash identifier: YIHAhwkDZTgNA7/i+1iNC8t5clQJMXMLVmrl1H4s4ho=
Subject key identifier: D4:0D:CC:EB:5E:D5:C2:B6:E6:6A:52:20:02:3A:0C:CA:9A:90:50:BB
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 01A0E7890F73FECCD3EC19BFF7DE24F410F4
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/1A3M617VwrbmalIgAjoMypqQULs.roa
Signing time: Mon 28 Sep 2026 10:21:54 +0000
ROA not before: Mon 28 Sep 2026 10:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214036
IP address blocks: 31.172.80.0/24 maxlen: 32
31.172.83.0/24 maxlen: 32
31.172.87.0/24 maxlen: 32
79.133.41.0/24 maxlen: 32
79.133.42.0/24 maxlen: 24
79.133.46.0/24 maxlen: 32
79.133.51.0/24 maxlen: 32
79.133.56.0/24 maxlen: 32
79.133.57.0/24 maxlen: 32
84.200.16.0/24 maxlen: 32
84.200.17.0/24 maxlen: 32
84.200.24.0/24 maxlen: 32
84.200.27.0/24 maxlen: 32
84.200.73.0/24 maxlen: 32
84.200.77.0/24 maxlen: 32
84.200.80.0/24 maxlen: 32
84.200.81.0/24 maxlen: 32
84.200.87.0/24 maxlen: 32
84.200.89.0/24 maxlen: 32
84.200.91.0/24 maxlen: 32
84.200.125.0/24 maxlen: 32
84.200.128.0/24 maxlen: 32
84.200.154.0/24 maxlen: 32
84.200.192.0/24 maxlen: 32
84.200.193.0/24 maxlen: 32
84.200.205.0/24 maxlen: 32
84.201.4.0/24 maxlen: 32
84.201.5.0/24 maxlen: 32
84.201.6.0/24 maxlen: 32
84.201.14.0/24 maxlen: 24
84.201.20.0/24 maxlen: 32
84.201.21.0/24 maxlen: 24
84.201.25.0/24 maxlen: 24
159.100.6.0/24 maxlen: 32
159.100.9.0/24 maxlen: 32
159.100.13.0/24 maxlen: 32
159.100.14.0/24 maxlen: 32
159.100.17.0/24 maxlen: 32
159.100.18.0/24 maxlen: 32
159.100.19.0/24 maxlen: 32
159.100.20.0/24 maxlen: 32
159.100.22.0/24 maxlen: 32
159.100.29.0/24 maxlen: 32
159.100.30.0/24 maxlen: 32
212.224.86.0/24 maxlen: 32
212.224.88.0/24 maxlen: 32
212.224.93.0/24 maxlen: 32
212.224.107.0/24 maxlen: 32
212.224.112.0/24 maxlen: 24
212.224.125.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:89:0f:73:fe:cc:d3:ec:19:bf:f7:de:24:f4:10:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Sep 28 10:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d40dcceb5ed5c2b6e66a5220023a0cca9a9050bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:40:02:01:f0:a1:76:51:fc:2f:4e:fb:a7:
7a:db:ba:51:9c:e6:29:2d:8f:ce:3f:fc:0b:df:74:
76:80:33:69:c1:3d:35:0b:9c:40:f9:34:27:75:a9:
7f:1a:a3:39:bf:55:41:a6:6d:e9:20:05:e2:a5:b3:
0e:12:6b:ce:52:a2:16:ef:6d:57:f7:4c:26:3e:7a:
47:aa:39:f7:ff:d8:fc:60:92:d4:78:e6:38:43:11:
02:66:c3:47:42:e7:9d:39:2d:80:13:23:fc:45:d9:
41:d7:c5:12:d4:bb:e3:19:80:06:55:75:bb:09:c5:
6a:b7:86:3e:05:56:a6:17:e4:3b:9b:9e:d1:78:2d:
3c:6d:67:ae:c8:2c:1c:3a:95:05:83:b5:43:dc:d0:
c4:47:d0:47:b6:bf:c4:6f:d1:56:11:35:df:f5:e5:
a8:28:3a:c9:34:16:78:6c:5b:98:e9:b2:8b:05:65:
d8:88:6a:bc:72:95:42:24:a4:6a:31:f6:11:74:55:
83:5d:1d:f4:2e:a5:7c:37:a2:7f:c6:31:1a:49:1b:
e6:da:3a:11:27:10:32:1f:c7:0b:9e:62:6a:4e:58:
70:42:85:68:57:27:f3:85:bb:8b:d6:7b:bf:a2:3d:
63:1f:db:9e:6c:71:a8:ba:b1:93:83:97:05:31:e9:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0D:CC:EB:5E:D5:C2:B6:E6:6A:52:20:02:3A:0C:CA:9A:90:50:BB
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/1A3M617VwrbmalIgAjoMypqQULs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.80.0/24
31.172.83.0/24
31.172.87.0/24
79.133.41.0-79.133.42.255
79.133.46.0/24
79.133.51.0/24
79.133.56.0/23
84.200.16.0/23
84.200.24.0/24
84.200.27.0/24
84.200.73.0/24
84.200.77.0/24
84.200.80.0/23
84.200.87.0/24
84.200.89.0/24
84.200.91.0/24
84.200.125.0/24
84.200.128.0/24
84.200.154.0/24
84.200.192.0/23
84.200.205.0/24
84.201.4.0-84.201.6.255
84.201.14.0/24
84.201.20.0/23
84.201.25.0/24
159.100.6.0/24
159.100.9.0/24
159.100.13.0-159.100.14.255
159.100.17.0-159.100.20.255
159.100.22.0/24
159.100.29.0-159.100.30.255
212.224.86.0/24
212.224.88.0/24
212.224.93.0/24
212.224.107.0/24
212.224.112.0/24
212.224.125.0/24
Signature Algorithm: sha256WithRSAEncryption
26:04:15:13:b5:5d:37:51:db:40:93:ed:96:81:e9:39:ba:36:
0d:7e:8e:b4:a7:d9:1e:0c:d0:a1:7c:f7:4d:ea:04:c2:17:54:
50:c7:1a:b0:c4:d3:17:f9:04:45:f1:6c:96:4e:8a:9f:85:b4:
52:fc:86:0d:8e:fa:0d:85:b0:69:7c:e0:99:75:ed:d5:c7:dc:
6f:90:e2:6e:5d:40:bc:18:a3:fd:87:6d:ee:13:1e:85:68:a8:
05:a7:69:63:a4:ee:e4:4f:fe:f2:13:66:13:8d:2b:78:f2:92:
80:26:5e:43:b5:9c:e4:53:08:7d:aa:d2:43:31:84:09:8e:65:
94:4f:84:14:a5:77:bd:e2:01:3e:72:b8:3e:70:2f:4d:ac:32:
89:4b:b7:b8:80:ee:c5:c2:73:06:28:37:67:50:0d:18:d3:d1:
37:77:b5:20:30:54:50:a6:aa:1e:7b:00:5d:2b:97:cb:eb:b0:
3b:f1:2c:7b:18:f0:48:d4:9f:81:2a:8f:c1:2e:76:c6:4e:df:
1d:af:43:cd:85:41:da:cf:39:77:d6:d1:57:7a:df:6c:1d:9f:
6c:0e:eb:49:5f:47:47:3b:98:fa:63:2f:a6:b9:74:c4:d9:90:
fa:9e:47:c0:26:cb:b2:be:0f:34:75:ba:82:c4:75:96:de:1f:
4d:eb:96:22
-----BEGIN CERTIFICATE-----
MIIGBzCCBO+gAwIBAgISAaDniQ9z/szT7Bm/994k9BD0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWRjNTBhNGI1MjZkZjE4ZThiMGE2NTY1ZDdiOWQ1OGE3
NWQzMTUwHhcNMjYwOTI4MTAyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDBkY2NlYjVlZDVjMmI2ZTY2YTUyMjAwMjNhMGNjYTlhOTA1MGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmutAAgHwoXZR/C9O+6d627pRnOYp
LY/OP/wL33R2gDNpwT01C5xA+TQndal/GqM5v1VBpm3pIAXipbMOEmvOUqIW721X
90wmPnpHqjn3/9j8YJLUeOY4QxECZsNHQuedOS2AEyP8RdlB18US1LvjGYAGVXW7
CcVqt4Y+BVamF+Q7m57ReC08bWeuyCwcOpUFg7VD3NDER9BHtr/Eb9FWETXf9eWo
KDrJNBZ4bFuY6bKLBWXYiGq8cpVCJKRqMfYRdFWDXR30LqV8N6J/xjEaSRvm2joR
JxAyH8cLnmJqTlhwQoVoVyfzhbuL1nu/oj1jH9uebHGourGTg5cFMenN+QIDAQAB
o4IDEzCCAw8wHQYDVR0OBBYEFNQNzOte1cK25mpSIAI6DMqakFC7MB8GA1UdIwQY
MBaAFKodxQpLUm3xjosKZWXXudWKddMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMt
MzNkNzI4NDMzYzExLzEvMUEzTTYxN1Z3cmJtYWxJZ0Fqb015cHFRVUxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMtMzNkNzI4NDMzYzEx
LzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBJwYIKwYBBQUHAQcBAf8EggEWMIIBEjCCAQ4EAgABMIIB
BgMEAB+sUAMEAB+sUwMEAB+sVzAMAwQAT4UpAwQAT4UqAwQAT4UuAwQAT4UzAwQB
T4U4AwQBVMgQAwQAVMgYAwQAVMgbAwQAVMhJAwQAVMhNAwQBVMhQAwQAVMhXAwQA
VMhZAwQAVMhbAwQAVMh9AwQAVMiAAwQAVMiaAwQBVMjAAwQAVMjNMAwDBAJUyQQD
BABUyQYDBABUyQ4DBAFUyRQDBABUyRkDBACfZAYDBACfZAkwDAMEAJ9kDQMEAJ9k
DjAMAwQAn2QRAwQAn2QUAwQAn2QWMAwDBACfZB0DBACfZB4DBADU4FYDBADU4FgD
BADU4F0DBADU4GsDBADU4HADBADU4H0wDQYJKoZIhvcNAQELBQADggEBACYEFRO1
XTdR20CT7ZaB6Tm6Ng1+jrSn2R4M0KF8903qBMIXVFDHGrDE0xf5BEXxbJZOip+F
tFL8hg2O+g2FsGl84Jl17dXH3G+Q4m5dQLwYo/2Hbe4THoVoqAWnaWOk7uRP/vIT
ZhONK3jykoAmXkO1nORTCH2q0kMxhAmOZZRPhBSld73iAT5yuD5wL02sMolLt7iA
7sXCcwYoN2dQDRjT0Td3tSAwVFCmqh57AF0rl8vrsDvxLHsY8EjUn4Eqj8EudsZO
3x2vQ82FQdrPOXfW0Vd632wdn2wO60lfR0c7mPpjL6a5dMTZkPqeR8Amy7K+DzR1
uoLEdZbeH03rliI=
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:01:19 2026 by rpki-client