Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/h1iE3UV0Hx1OkYrS_MCC5Gaerao.roa
File: h1iE3UV0Hx1OkYrS_MCC5Gaerao.roa (raw, json)
Hash identifier: X9FYI5OuMYioUVHxm6JaKUWV8pSY9iIIga0YMTQwTyw=
Subject key identifier: 87:58:84:DD:45:74:1F:1D:4E:91:8A:D2:FC:C0:82:E4:66:9E:AD:AA
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 019CE68F83C2D55D97AEA2B9367064592629
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/h1iE3UV0Hx1OkYrS_MCC5Gaerao.roa
Signing time: Fri 13 Mar 2026 09:38:10 +0000
ROA not before: Fri 13 Mar 2026 09:38:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33915
IP address blocks: 24.132.0.0/16 maxlen: 16
24.132.0.0/17 maxlen: 17
24.132.128.0/17 maxlen: 17
31.151.0.0/16 maxlen: 16
31.151.0.0/17 maxlen: 17
31.151.128.0/17 maxlen: 17
46.129.0.0/16 maxlen: 16
46.129.0.0/17 maxlen: 17
46.129.128.0/17 maxlen: 17
62.100.0.0/18 maxlen: 18
62.108.0.0/19 maxlen: 19
62.108.0.0/20 maxlen: 20
62.108.16.0/20 maxlen: 20
62.163.0.0/16 maxlen: 16
62.163.0.0/17 maxlen: 17
62.163.128.0/17 maxlen: 17
62.194.0.0/15 maxlen: 15
62.194.0.0/16 maxlen: 16
62.195.0.0/16 maxlen: 16
77.248.0.0/14 maxlen: 14
77.248.0.0/15 maxlen: 15
77.250.0.0/15 maxlen: 15
80.56.0.0/15 maxlen: 15
80.56.0.0/16 maxlen: 16
80.57.0.0/16 maxlen: 16
80.85.32.0/20 maxlen: 20
80.113.0.0/16 maxlen: 16
80.113.0.0/17 maxlen: 17
80.113.128.0/17 maxlen: 17
80.248.32.0/20 maxlen: 20
80.248.32.0/21 maxlen: 21
80.248.40.0/21 maxlen: 21
81.175.64.0/18 maxlen: 18
81.175.64.0/19 maxlen: 19
81.175.96.0/19 maxlen: 19
84.41.128.0/17 maxlen: 17
88.211.128.0/18 maxlen: 18
89.98.0.0/15 maxlen: 15
89.98.0.0/16 maxlen: 16
89.99.0.0/16 maxlen: 16
89.220.0.0/17 maxlen: 17
92.108.0.0/14 maxlen: 14
92.108.0.0/15 maxlen: 15
92.110.0.0/15 maxlen: 15
95.96.0.0/15 maxlen: 15
95.96.0.0/16 maxlen: 16
95.97.0.0/16 maxlen: 16
178.84.0.0/15 maxlen: 15
178.84.0.0/16 maxlen: 16
178.85.0.0/16 maxlen: 16
185.94.92.0/22 maxlen: 22
185.137.200.0/22 maxlen: 22
185.137.200.0/23 maxlen: 23
185.137.202.0/23 maxlen: 23
195.18.64.0/18 maxlen: 18
212.67.160.0/19 maxlen: 19
212.83.64.0/19 maxlen: 19
212.83.64.0/20 maxlen: 20
212.83.80.0/20 maxlen: 20
212.178.32.0/19 maxlen: 19
212.178.32.0/20 maxlen: 20
212.178.48.0/20 maxlen: 20
212.187.0.0/17 maxlen: 17
212.187.0.0/18 maxlen: 18
212.187.64.0/18 maxlen: 18
213.34.0.0/19 maxlen: 19
213.34.0.0/20 maxlen: 20
213.34.16.0/20 maxlen: 20
213.46.0.0/16 maxlen: 16
213.46.0.0/17 maxlen: 17
213.46.128.0/17 maxlen: 17
213.46.228.0/24 maxlen: 24
213.93.0.0/16 maxlen: 16
213.93.0.0/17 maxlen: 17
213.93.128.0/17 maxlen: 17
213.124.160.0/19 maxlen: 19
213.124.160.0/20 maxlen: 20
213.124.176.0/20 maxlen: 20
213.124.192.0/18 maxlen: 18
213.124.192.0/19 maxlen: 19
213.124.224.0/19 maxlen: 19
213.126.128.0/17 maxlen: 17
213.126.128.0/18 maxlen: 18
213.126.192.0/18 maxlen: 18
213.127.0.0/16 maxlen: 16
213.127.0.0/17 maxlen: 17
213.127.128.0/17 maxlen: 17
213.160.192.0/19 maxlen: 19
213.160.192.0/20 maxlen: 20
213.160.208.0/20 maxlen: 20
213.160.248.0/21 maxlen: 21
213.160.248.0/22 maxlen: 22
213.160.252.0/22 maxlen: 22
217.17.128.0/20 maxlen: 20
217.63.128.0/18 maxlen: 18
217.63.128.0/19 maxlen: 19
217.63.160.0/19 maxlen: 19
217.102.0.0/17 maxlen: 17
217.102.0.0/18 maxlen: 18
217.102.64.0/18 maxlen: 18
217.103.0.0/16 maxlen: 16
217.103.0.0/17 maxlen: 17
217.103.128.0/17 maxlen: 17
217.104.128.0/17 maxlen: 17
217.104.128.0/18 maxlen: 18
217.104.192.0/18 maxlen: 18
217.105.0.0/18 maxlen: 18
217.105.0.0/19 maxlen: 19
217.105.32.0/19 maxlen: 19
217.105.224.0/19 maxlen: 19
217.105.224.0/20 maxlen: 20
217.105.240.0/20 maxlen: 20
217.112.112.0/20 maxlen: 20
2a02:938::/29 maxlen: 29
2a02:a200::/27 maxlen: 27
2a02:a200::/28 maxlen: 28
2a02:a210::/28 maxlen: 28
2a03:4aa0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:8f:83:c2:d5:5d:97:ae:a2:b9:36:70:64:59:26:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Mar 13 09:38:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=875884dd45741f1d4e918ad2fcc082e4669eadaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:49:14:19:7c:da:32:36:6c:e1:a2:b1:c2:09:
7b:32:1d:b8:3a:3a:2e:55:57:ea:1c:1a:b8:aa:4f:
d9:27:98:55:55:f0:5e:9c:16:df:76:08:fa:7e:81:
75:6a:d9:fb:8c:76:5a:ee:a7:11:a9:29:bf:1b:ef:
11:35:2b:15:50:e8:84:7a:10:60:4b:a8:48:3a:87:
61:97:cb:5d:9f:28:63:84:e1:8a:15:4d:ff:a6:5e:
71:b9:a5:c1:b2:da:a5:12:ef:9c:fe:14:ae:fd:e5:
97:69:13:4c:48:57:ca:ff:93:ae:f9:f1:ef:0f:80:
ae:9d:4c:2a:c8:1c:d6:a3:d0:a3:6c:77:99:a4:3c:
2c:0d:ce:4f:5a:28:6a:69:4b:87:44:cf:c5:e9:b2:
c1:f7:e9:14:7a:37:cd:c3:ad:f8:1c:17:8b:d1:f1:
a9:d9:92:91:7d:82:9f:d3:45:ce:a0:5b:d1:cc:ca:
0f:5f:e3:a7:a5:04:b7:f6:88:49:1a:c0:3b:44:37:
68:3f:df:4d:43:a1:39:7a:e9:0b:c0:34:3b:06:4c:
45:1e:e9:7c:ca:50:e8:28:0e:37:37:e2:86:1d:70:
7b:cd:22:5b:a9:b6:79:5b:61:b7:58:f5:55:de:01:
03:64:ce:44:89:2d:42:03:22:6d:9b:8c:4c:71:5d:
60:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:58:84:DD:45:74:1F:1D:4E:91:8A:D2:FC:C0:82:E4:66:9E:AD:AA
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/h1iE3UV0Hx1OkYrS_MCC5Gaerao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.132.0.0/16
31.151.0.0/16
46.129.0.0/16
62.100.0.0/18
62.108.0.0/19
62.163.0.0/16
62.194.0.0/15
77.248.0.0/14
80.56.0.0/15
80.85.32.0/20
80.113.0.0/16
80.248.32.0/20
81.175.64.0/18
84.41.128.0/17
88.211.128.0/18
89.98.0.0/15
89.220.0.0/17
92.108.0.0/14
95.96.0.0/15
178.84.0.0/15
185.94.92.0/22
185.137.200.0/22
195.18.64.0/18
212.67.160.0/19
212.83.64.0/19
212.178.32.0/19
212.187.0.0/17
213.34.0.0/19
213.46.0.0/16
213.93.0.0/16
213.124.160.0-213.124.255.255
213.126.128.0-213.127.255.255
213.160.192.0/19
213.160.248.0/21
217.17.128.0/20
217.63.128.0/18
217.102.0.0/17
217.103.0.0/16
217.104.128.0-217.105.63.255
217.105.224.0/19
217.112.112.0/20
IPv6:
2a02:938::/29
2a02:a200::/27
2a03:4aa0::/29
Signature Algorithm: sha256WithRSAEncryption
60:c3:46:42:32:7f:e5:f0:33:4a:3d:db:87:04:61:be:f8:5e:
e2:6e:fb:60:25:37:81:d8:c2:74:14:57:f6:23:15:e8:c2:6c:
62:e6:be:7f:8d:5a:32:fa:78:ea:cc:57:2f:8d:b4:36:8e:e3:
0f:63:95:da:63:5c:c7:53:87:aa:9d:19:b0:7a:4f:8a:f4:a0:
9c:58:b6:78:24:69:1f:06:d7:15:31:05:4e:55:59:28:91:2f:
88:c4:42:58:39:74:69:c3:76:5e:f2:fa:02:56:91:63:61:ad:
c7:83:73:44:05:99:6a:c9:3d:d3:c5:fb:4d:29:cb:a7:a5:93:
8c:ec:e6:c3:63:12:e9:57:0a:93:7e:3f:c1:9f:50:38:e2:f6:
06:3d:4d:4a:9c:ad:17:77:16:81:1e:90:23:fe:6b:b5:f3:f5:
f5:6d:ab:d3:70:f5:59:e8:a4:65:08:ee:0f:05:b8:f6:a5:30:
12:6c:39:38:b8:84:7c:9a:f0:fa:d7:41:dc:cb:68:b7:9d:07:
51:5b:46:02:15:4f:ef:ea:95:50:71:30:72:ed:07:af:a4:4b:
33:23:8b:cb:85:a3:85:3f:a1:6a:67:eb:3e:0f:5b:01:2d:97:
c4:24:34:65:ac:ed:57:8b:6e:57:b0:e0:7f:46:ba:e5:f5:39:
67:f1:a2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:53:58 2026 by rpki-client