Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/9KC7Z8jI5mX3o4gP5sp0g81ADV4.roa
File: 9KC7Z8jI5mX3o4gP5sp0g81ADV4.roa (raw, json)
Hash identifier: EmOefmxW6e2iV2QEck3zwiB/hG7rOCuItqzH3uRAT+U=
Subject key identifier: F4:A0:BB:67:C8:C8:E6:65:F7:A3:88:0F:E6:CA:74:83:CD:40:0D:5E
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 01A10F9BE12682621AC7821736E7B1319F29
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/9KC7Z8jI5mX3o4gP5sp0g81ADV4.roa
Signing time: Tue 06 Oct 2026 05:07:16 +0000
ROA not before: Tue 06 Oct 2026 05:07:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6799
IP address blocks: 2.84.0.0/14 maxlen: 14
2.84.0.0/16 maxlen: 16
2.84.64.0/19 maxlen: 19
2.85.0.0/16 maxlen: 16
2.86.0.0/16 maxlen: 16
2.86.64.0/19 maxlen: 19
2.87.0.0/16 maxlen: 16
5.144.192.0/18 maxlen: 19
31.217.160.0/19 maxlen: 19
45.139.212.0/22 maxlen: 22
45.139.212.0/23 maxlen: 23
45.139.214.0/23 maxlen: 23
62.103.0.0/16 maxlen: 16
62.103.0.0/24 maxlen: 24
62.103.126.0/24 maxlen: 24
62.103.146.0/24 maxlen: 24
62.103.147.0/24 maxlen: 24
62.103.163.0/24 maxlen: 24
62.103.228.0/24 maxlen: 24
79.128.0.0/14 maxlen: 14
79.128.0.0/16 maxlen: 16
79.128.176.0/24 maxlen: 24
79.128.177.0/24 maxlen: 24
79.128.178.0/24 maxlen: 24
79.128.179.0/24 maxlen: 24
79.128.180.0/24 maxlen: 24
79.128.181.0/24 maxlen: 24
79.128.182.0/24 maxlen: 24
79.128.183.0/24 maxlen: 24
79.128.184.0/24 maxlen: 24
79.128.185.0/24 maxlen: 24
79.128.186.0/24 maxlen: 24
79.128.187.0/24 maxlen: 24
79.128.188.0/24 maxlen: 24
79.128.190.0/24 maxlen: 24
79.128.191.0/24 maxlen: 24
79.128.192.0/24 maxlen: 24
79.128.193.0/24 maxlen: 24
79.128.194.0/24 maxlen: 24
79.128.195.0/24 maxlen: 24
79.128.196.0/24 maxlen: 24
79.128.197.0/24 maxlen: 24
79.128.198.0/24 maxlen: 24
79.128.199.0/24 maxlen: 24
79.128.200.0/24 maxlen: 24
79.128.201.0/24 maxlen: 24
79.128.202.0/24 maxlen: 24
79.128.203.0/24 maxlen: 24
79.129.0.0/16 maxlen: 16
79.130.0.0/16 maxlen: 16
79.130.0.0/19 maxlen: 19
79.130.64.0/19 maxlen: 19
79.131.0.0/16 maxlen: 16
79.131.32.0/19 maxlen: 19
80.106.0.0/15 maxlen: 15
80.106.0.0/16 maxlen: 16
80.106.4.0/23 maxlen: 23
80.106.6.0/24 maxlen: 24
80.106.217.0/24 maxlen: 24
80.106.237.0/24 maxlen: 24
80.107.0.0/16 maxlen: 24
80.107.91.0/24 maxlen: 24
80.107.116.0/22 maxlen: 22
80.107.204.0/24 maxlen: 24
83.235.0.0/16 maxlen: 16
83.235.64.0/24 maxlen: 24
83.235.67.0/24 maxlen: 24
83.235.70.0/24 maxlen: 24
83.235.71.0/24 maxlen: 24
83.235.72.0/24 maxlen: 24
83.235.73.0/24 maxlen: 24
83.235.74.0/24 maxlen: 24
83.235.75.0/24 maxlen: 24
83.235.76.0/24 maxlen: 24
83.235.77.0/24 maxlen: 24
85.72.0.0/14 maxlen: 14
85.72.0.0/16 maxlen: 16
85.73.0.0/16 maxlen: 16
85.73.128.0/18 maxlen: 18
85.73.192.0/18 maxlen: 18
85.74.0.0/16 maxlen: 16
85.74.160.0/20 maxlen: 20
85.74.192.0/19 maxlen: 19
85.75.0.0/16 maxlen: 16
85.75.0.0/18 maxlen: 18
85.75.80.0/21 maxlen: 21
85.75.112.0/21 maxlen: 21
85.75.224.0/20 maxlen: 20
87.202.0.0/15 maxlen: 15
87.202.0.0/16 maxlen: 16
87.202.96.0/19 maxlen: 19
87.202.128.0/18 maxlen: 18
87.203.0.0/16 maxlen: 16
87.203.64.0/18 maxlen: 18
94.64.0.0/13 maxlen: 13
94.64.0.0/16 maxlen: 16
94.65.0.0/16 maxlen: 16
94.66.0.0/16 maxlen: 16
94.66.56.0/22 maxlen: 22
94.66.96.0/20 maxlen: 20
94.66.96.0/22 maxlen: 22
94.66.128.0/18 maxlen: 18
94.66.220.0/22 maxlen: 22
94.67.0.0/16 maxlen: 16
94.67.128.0/17 maxlen: 17
94.68.0.0/16 maxlen: 16
94.69.0.0/16 maxlen: 16
94.69.64.0/19 maxlen: 19
94.70.0.0/16 maxlen: 16
94.70.0.0/19 maxlen: 20
94.71.0.0/16 maxlen: 16
178.146.0.0/15 maxlen: 15
178.146.0.0/16 maxlen: 16
178.147.0.0/16 maxlen: 16
185.44.144.0/22 maxlen: 22
185.44.144.0/23 maxlen: 23
185.44.146.0/23 maxlen: 23
193.218.96.0/24 maxlen: 24
193.218.97.0/24 maxlen: 24
195.22.154.0/23 maxlen: 23
195.167.0.0/17 maxlen: 17
195.167.92.0/24 maxlen: 24
195.170.0.0/19 maxlen: 19
195.170.0.0/24 maxlen: 24
195.170.2.0/24 maxlen: 24
212.205.0.0/16 maxlen: 16
212.205.221.0/24 maxlen: 24
217.195.128.0/20 maxlen: 20
217.195.128.0/21 maxlen: 21
217.195.128.0/22 maxlen: 22
2a02:580::/29 maxlen: 29
2a02:582:1800::/38 maxlen: 38
2a02:582:4800::/38 maxlen: 38
2a02:582:5800::/38 maxlen: 38
2a02:582:7000::/38 maxlen: 38
2a02:586::/35 maxlen: 35
2a02:586:2000::/36 maxlen: 36
2a02:586:3000::/36 maxlen: 36
2a02:586:4000::/34 maxlen: 34
2a02:586:8000::/34 maxlen: 34
2a02:586:c000::/34 maxlen: 34
2a02:587::/35 maxlen: 35
2a02:587:1800::/38 maxlen: 38
2a02:587:2000::/36 maxlen: 36
2a02:587:3000::/36 maxlen: 36
2a02:587:4000::/34 maxlen: 34
2a02:587:4800::/38 maxlen: 38
2a02:587:4c00::/38 maxlen: 38
2a02:587:501a::/48 maxlen: 48
2a02:587:501d::/48 maxlen: 48
2a02:587:501e::/48 maxlen: 48
2a02:587:50da::/48 maxlen: 48
2a02:587:50f7::/48 maxlen: 48
2a02:587:50fa::/48 maxlen: 48
2a02:587:5400::/38 maxlen: 38
2a02:587:5800::/38 maxlen: 38
2a02:587:5c00::/38 maxlen: 38
2a02:587:6000::/38 maxlen: 38
2a02:587:6400::/38 maxlen: 38
2a02:587:8000::/34 maxlen: 34
2a02:587:8400::/40 maxlen: 40
2a02:587:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:9b:e1:26:82:62:1a:c7:82:17:36:e7:b1:31:9f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Oct 6 05:07:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4a0bb67c8c8e665f7a3880fe6ca7483cd400d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:c8:1a:16:60:93:8b:54:81:98:1e:63:6d:
fd:47:6e:3f:e0:f5:1e:66:b1:62:39:3c:0a:59:b3:
7b:b9:15:1d:8f:9f:45:c2:36:74:db:88:ad:26:14:
e2:1f:be:28:b1:c3:0a:0c:37:99:96:dc:9e:2c:ad:
a6:40:18:35:08:2e:9d:c8:93:6c:b4:d4:27:99:80:
e4:0d:3a:05:f2:19:e8:3b:18:fb:b9:fc:5d:e2:1c:
6b:9a:26:31:d2:e7:f8:1e:53:26:85:3b:18:b6:fe:
8b:ee:73:54:07:aa:39:0e:ed:25:a8:f2:9b:64:9f:
cd:f2:10:fc:c7:61:db:90:36:e0:a5:7c:38:95:a0:
8f:ad:1c:bc:1e:66:80:5d:e3:eb:32:32:08:0d:f2:
45:2d:6a:71:b7:64:f4:31:65:bc:96:22:19:eb:8f:
98:04:e4:da:35:84:ee:c6:55:ce:22:95:0a:1d:5e:
f0:96:88:0d:27:6d:6a:08:5e:31:21:af:9c:69:07:
31:6b:5d:1b:eb:76:c5:08:a6:73:d4:d7:89:b3:cc:
96:db:fe:1c:f5:91:a8:b4:d9:0a:b4:d4:ef:6d:b8:
9e:04:10:fd:24:4d:87:95:98:0b:32:f5:44:68:8a:
0a:8b:59:c9:4e:2c:1f:b4:3e:49:2f:a3:0f:24:80:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A0:BB:67:C8:C8:E6:65:F7:A3:88:0F:E6:CA:74:83:CD:40:0D:5E
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/9KC7Z8jI5mX3o4gP5sp0g81ADV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.84.0.0/14
5.144.192.0/18
31.217.160.0/19
45.139.212.0/22
62.103.0.0/16
79.128.0.0/14
80.106.0.0/15
83.235.0.0/16
85.72.0.0/14
87.202.0.0/15
94.64.0.0/13
178.146.0.0/15
185.44.144.0/22
193.218.96.0/23
195.22.154.0/23
195.167.0.0/17
195.170.0.0/19
212.205.0.0/16
217.195.128.0/20
IPv6:
2a02:580::/29
Signature Algorithm: sha256WithRSAEncryption
57:c0:9c:93:86:b0:1a:00:37:b7:83:8f:54:e3:ea:64:c8:58:
a7:e2:9a:38:a1:7b:13:68:ae:07:45:ca:4b:bd:ca:4d:62:28:
bc:d1:92:3d:df:99:c3:df:c6:f3:fc:e3:eb:89:60:cb:66:67:
33:cd:c0:40:93:8a:2c:cf:ba:60:32:b7:01:3d:b2:4a:a0:64:
cd:64:4a:75:1d:8c:88:a7:54:dd:6a:f3:49:85:3a:46:f2:93:
5c:40:7f:d5:59:f3:f0:61:06:d3:bf:6e:79:12:01:d0:2e:7a:
20:10:b8:6f:19:ff:97:dd:a9:a1:bb:6c:c0:50:3f:10:ad:0b:
e3:76:e7:5b:8b:41:d4:cf:71:94:78:71:d8:dd:19:9c:ce:9f:
8c:0d:d8:8e:84:2e:c3:ea:c4:9c:5a:bc:22:71:42:57:d2:07:
aa:00:02:5d:57:ff:61:5a:fa:59:e0:4f:b7:72:26:0d:be:a2:
91:f1:96:b8:86:52:7f:f0:9d:ab:c9:5f:3e:a3:9d:15:04:81:
c1:1a:50:aa:7f:e1:b0:4b:6c:61:5a:98:28:bb:7d:31:c6:a1:
ed:3d:60:3a:9e:81:f4:92:7f:86:d9:6e:94:bd:2e:4b:32:a9:
8a:9e:8d:44:2d:0c:f8:25:a8:82:5e:7a:e5:06:ee:06:3c:cb:
ac:31:9a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:53:41 2026 by rpki-client