Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/B-sLjpx83UsSR_PrR-sj7Ngpf3I.roa
File: B-sLjpx83UsSR_PrR-sj7Ngpf3I.roa (raw, json)
Hash identifier: nPcb4B02aO68ZUJwsCzJ8p3WXEStKvfVgzVo6Uj1B0Y=
Subject key identifier: 07:EB:0B:8E:9C:7C:DD:4B:12:47:F3:EB:47:EB:23:EC:D8:29:7F:72
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01A0337088244BB71685DD0B7521961E77A9
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/B-sLjpx83UsSR_PrR-sj7Ngpf3I.roa
Signing time: Mon 24 Aug 2026 11:03:27 +0000
ROA not before: Mon 24 Aug 2026 11:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29648
IP address blocks: 31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.119.0/24 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.160.0/24 maxlen: 24
77.233.161.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
78.109.112.0/20 maxlen: 20
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
78.109.123.0/24 maxlen: 24
78.109.124.0/24 maxlen: 24
78.109.125.0/24 maxlen: 24
78.109.126.0/24 maxlen: 24
78.109.127.0/24 maxlen: 24
80.75.80.0/24 maxlen: 24
80.75.81.0/24 maxlen: 24
80.75.82.0/24 maxlen: 24
80.75.83.0/24 maxlen: 24
80.75.84.0/24 maxlen: 24
80.75.85.0/24 maxlen: 24
80.75.86.0/24 maxlen: 24
80.75.87.0/24 maxlen: 24
80.75.88.0/24 maxlen: 24
80.75.89.0/24 maxlen: 24
80.75.90.0/24 maxlen: 24
80.75.91.0/24 maxlen: 24
80.75.92.0/24 maxlen: 24
80.75.93.0/24 maxlen: 24
80.75.94.0/24 maxlen: 24
80.75.95.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
86.109.192.0/19 maxlen: 19
86.109.192.0/20 maxlen: 20
86.109.193.0/24 maxlen: 24
86.109.195.0/24 maxlen: 24
86.109.200.0/23 maxlen: 23
86.109.208.0/24 maxlen: 24
86.109.210.0/24 maxlen: 24
86.109.212.0/24 maxlen: 24
86.109.213.0/24 maxlen: 24
86.109.214.0/24 maxlen: 24
86.109.215.0/24 maxlen: 24
86.109.216.0/24 maxlen: 24
86.109.218.0/23 maxlen: 23
86.109.220.0/24 maxlen: 24
86.109.222.0/24 maxlen: 24
86.109.223.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.98.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
178.178.160.0/24 maxlen: 24
188.94.168.0/24 maxlen: 24
188.94.169.0/24 maxlen: 24
188.94.170.0/24 maxlen: 24
188.94.171.0/24 maxlen: 24
188.94.172.0/24 maxlen: 24
188.94.173.0/24 maxlen: 24
188.94.174.0/24 maxlen: 24
188.94.175.0/24 maxlen: 24
188.170.96.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.98.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
188.170.108.0/24 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.125.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
195.149.111.0/24 maxlen: 24
217.115.80.0/20 maxlen: 20
217.115.80.0/24 maxlen: 24
217.115.81.0/24 maxlen: 24
217.115.91.0/24 maxlen: 24
217.115.94.0/24 maxlen: 24
2a03:d000:9004::/46 maxlen: 46
2a03:d005::/40 maxlen: 40
2a03:d005:100::/40 maxlen: 40
2a03:d005:200::/40 maxlen: 40
2a03:d005:300::/40 maxlen: 40
2a03:d005:400::/40 maxlen: 40
2a03:d005:500::/40 maxlen: 40
2a03:d005:600::/40 maxlen: 40
2a03:d005:700::/40 maxlen: 40
2a03:d005:800::/40 maxlen: 40
2a03:d005:900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:70:88:24:4b:b7:16:85:dd:0b:75:21:96:1e:77:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Aug 24 11:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07eb0b8e9c7cdd4b1247f3eb47eb23ecd8297f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:95:16:a4:f1:e9:4e:a8:f6:c0:de:63:e4:
8f:14:aa:9c:8b:c1:16:75:ac:ac:d4:b0:60:b5:14:
94:e3:15:43:21:aa:51:14:cb:48:47:55:d3:db:70:
e4:2b:fa:96:87:c6:22:ef:e9:63:1e:2c:c8:9f:7d:
7c:86:98:58:62:25:89:2c:d6:b1:7a:5c:e1:f3:75:
c8:b9:99:ab:83:b4:50:f7:b0:af:3a:84:59:2a:cf:
d0:d4:5f:6c:12:4a:ef:91:81:7c:6c:30:b6:4e:6a:
13:fb:38:4f:d0:8b:43:2a:0a:06:c5:2b:de:ee:7b:
37:ea:7c:7f:f1:bc:e1:c3:ab:f7:e8:49:57:0d:ac:
46:b1:c0:7e:f6:9e:27:a5:1c:dd:ea:a6:b6:85:98:
85:a8:2a:40:f4:10:bd:9d:e2:8b:48:a7:f4:97:59:
db:21:88:60:48:e0:a9:e9:ba:f3:c6:c9:c4:e1:4d:
2b:ac:78:5c:ca:41:d0:e1:bd:60:27:f0:c7:6e:b2:
bb:ec:90:a8:59:5c:6e:16:e4:d3:da:0d:f7:de:0d:
9c:43:42:06:86:fe:04:ef:e3:bf:61:97:cd:70:f1:
84:f0:3d:b5:97:c1:f6:00:cd:96:17:b5:3d:f2:04:
35:99:6e:f5:4f:d1:a9:0e:e3:dd:a7:ed:1c:74:89:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EB:0B:8E:9C:7C:DD:4B:12:47:F3:EB:47:EB:23:EC:D8:29:7F:72
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/B-sLjpx83UsSR_PrR-sj7Ngpf3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.112.0/20
80.75.80.0/20
83.169.217.0-83.169.223.255
86.109.192.0/19
178.176.96.0/21
178.176.114.0-178.176.127.255
178.178.160.0/24
188.94.168.0/21
188.170.96.0/19
195.149.111.0/24
217.115.80.0/20
IPv6:
2a03:d000:9004::/46
2a03:d005::-2a03:d005:9ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
52:ed:f3:bc:a4:3e:34:d5:4d:5f:f6:b7:61:ab:6d:1e:07:66:
1b:2c:3c:a6:67:a9:72:9b:e0:e7:c3:8f:bb:9d:5c:11:85:8c:
86:36:7e:60:29:ce:c3:ba:d5:8d:fe:bf:ec:df:16:95:28:af:
7a:dc:de:10:43:02:a9:d9:5a:3e:1a:f9:36:86:f1:1b:f8:c5:
67:b7:18:73:2d:b1:f0:b0:df:d7:60:9c:3a:5a:f2:78:c1:e1:
e1:5f:b4:d9:ee:98:7f:57:30:3b:a9:7e:7b:30:06:22:56:e7:
c1:8d:f6:a6:cf:cd:57:11:a6:0f:9d:04:bb:5e:4b:08:d0:25:
41:de:20:96:52:ba:4b:63:83:87:63:2e:17:12:4a:16:7a:8a:
3c:4e:2d:49:a7:86:80:db:66:75:ba:22:25:80:9f:92:1a:75:
fb:57:b3:9a:a7:7a:66:e4:1a:90:f0:01:b6:f8:26:c9:ee:c9:
18:18:c8:df:36:68:d0:5e:a4:a5:f4:2c:12:82:75:73:c6:a6:
59:4d:34:9e:56:7c:7d:16:e8:04:72:dd:6d:b1:b6:90:32:79:
78:53:b7:3b:e2:15:8c:98:ad:b6:45:ef:62:05:50:e1:b0:ff:
a6:e1:81:7e:e1:f9:ab:dd:20:f5:46:d1:2d:d0:93:c1:74:de:
ee:8c:d1:25
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgISAaAzcIgkS7cWhd0LdSGWHnepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjYwODI0MTEwMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2ViMGI4ZTljN2NkZDRiMTI0N2YzZWI0N2ViMjNlY2Q4Mjk3ZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/eVFqTx6U6o9sDeY+SPFKqci8EW
days1LBgtRSU4xVDIapRFMtIR1XT23DkK/qWh8Yi7+ljHizIn318hphYYiWJLNax
elzh83XIuZmrg7RQ97CvOoRZKs/Q1F9sEkrvkYF8bDC2TmoT+zhP0ItDKgoGxSve
7ns36nx/8bzhw6v36ElXDaxGscB+9p4npRzd6qa2hZiFqCpA9BC9neKLSKf0l1nb
IYhgSOCp6brzxsnE4U0rrHhcykHQ4b1gJ/DHbrK77JCoWVxuFuTT2g333g2cQ0IG
hv4E7+O/YZfNcPGE8D21l8H2AM2WF7U98gQ1mW71T9GpDuPdp+0cdIm3TQIDAQAB
o4ICjjCCAoowHQYDVR0OBBYEFAfrC46cfN1LEkfz60frI+zYKX9yMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvQi1zTGpweDgzVXNTUl9QclItc2o3TmdwZjNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDBsBAIAATBmMAwDBAMf
rWgDBAMfrXADBAVN6aADBARObXADBARQS1AwDAMEAFOp2QMEBVOpwAMEBVZtwAME
A7KwYDAMAwQBsrByAwQHsrAAAwQAsrKgAwQDvF6oAwQFvKpgAwQAw5VvAwQE2XNQ
MCAEAgACMBoDBwIqA9AAkAQwDwMFACoD0AUDBgEqA9AFCDANBgkqhkiG9w0BAQsF
AAOCAQEAUu3zvKQ+NNVNX/a3YattHgdmGyw8pmepcpvg58OPu51cEYWMhjZ+YCnO
w7rVjf6/7N8WlSivetzeEEMCqdlaPhr5NobxG/jFZ7cYcy2x8LDf12CcOlryeMHh
4V+02e6Yf1cwO6l+ezAGIlbnwY32ps/NVxGmD50Eu15LCNAlQd4gllK6S2ODh2Mu
FxJKFnqKPE4tSaeGgNtmdboiJYCfkhp1+1ezmqd6ZuQakPABtvgmye7JGBjI3zZo
0F6kpfQsEoJ1c8amWU00nlZ8fRboBHLdbbG2kDJ5eFO3O+IVjJittkXvYgVQ4bD/
puGBfuH5q90g9UbRLdCTwXTe7ozRJQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 05:16:31 2026 by rpki-client