Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/Pg60ALp6BCafnXsx9z-yoclw0bI.roa
File: Pg60ALp6BCafnXsx9z-yoclw0bI.roa (raw, json)
Hash identifier: iALv/oo25fuxLU1XNf/xhypcKk44pYVDeW/xO+4voRI=
Subject key identifier: 3E:0E:B4:00:BA:7A:04:26:9F:9D:7B:31:F7:3F:B2:A1:C9:70:D1:B2
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 01A0ED3E5135A765AF6A9FED76213FE4D98D
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/Pg60ALp6BCafnXsx9z-yoclw0bI.roa
Signing time: Tue 29 Sep 2026 12:57:59 +0000
ROA not before: Tue 29 Sep 2026 12:57:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21183
IP address blocks: 66.186.198.0/23 maxlen: 24
80.78.64.0/20 maxlen: 20
91.132.172.0/22 maxlen: 22
109.69.0.0/21 maxlen: 21
109.69.0.0/24 maxlen: 24
109.69.1.0/24 maxlen: 24
109.69.2.0/24 maxlen: 24
109.69.3.0/24 maxlen: 24
109.69.4.0/23 maxlen: 23
109.69.5.0/24 maxlen: 24
109.69.6.0/24 maxlen: 24
109.69.7.0/24 maxlen: 24
141.98.140.0/22 maxlen: 24
141.98.140.0/23 maxlen: 23
141.98.142.0/23 maxlen: 23
185.62.174.0/23 maxlen: 24
185.200.212.0/22 maxlen: 22
217.73.128.0/20 maxlen: 20
217.73.128.0/24 maxlen: 24
217.73.129.0/24 maxlen: 24
217.73.130.0/24 maxlen: 24
217.73.131.0/24 maxlen: 24
217.73.132.0/24 maxlen: 24
217.73.133.0/24 maxlen: 24
217.73.135.0/24 maxlen: 24
217.73.136.0/24 maxlen: 24
217.73.137.0/24 maxlen: 24
217.73.138.0/24 maxlen: 24
217.73.139.0/24 maxlen: 24
217.73.141.0/24 maxlen: 24
217.73.142.0/24 maxlen: 24
217.73.143.0/24 maxlen: 24
2a04:eb40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:3e:51:35:a7:65:af:6a:9f:ed:76:21:3f:e4:d9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Sep 29 12:57:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e0eb400ba7a04269f9d7b31f73fb2a1c970d1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:44:1c:2d:b9:35:b6:4e:5f:ac:e6:64:93:
2d:fb:a1:97:c2:39:a4:50:2f:c1:f9:da:f7:e3:47:
ba:5b:62:d4:b1:12:3b:2a:9a:05:c8:6b:cc:e1:bb:
d5:4e:f1:bb:d4:48:4b:e4:1e:59:a1:20:ee:07:1e:
d8:02:66:a3:9e:0f:b8:f4:03:f7:7e:f7:04:fe:23:
20:80:fd:92:1f:9d:31:89:32:02:ef:8e:22:17:b1:
e4:9b:ca:3b:ab:4f:db:60:c2:19:ac:0a:6b:59:3b:
dc:58:ab:68:4b:5e:82:3f:f2:f5:34:d9:a3:67:bf:
fe:b0:3d:54:5d:7e:b4:b5:de:67:4f:09:b4:76:da:
e1:1d:a2:05:42:fb:4e:7f:88:9a:56:95:da:1f:f2:
ef:81:dc:b6:a1:09:f7:5b:e7:2a:3d:1c:bb:7e:87:
ac:e0:21:21:49:92:96:1a:db:06:a0:60:0b:53:06:
dd:7d:c2:65:c6:96:f3:d2:b1:83:3f:dc:ef:a5:ea:
75:33:da:a2:8b:b1:b3:be:04:1a:94:54:f1:f3:88:
57:6b:33:24:3a:13:8c:ad:a3:5e:1d:6c:35:d5:d5:
38:88:a0:04:92:8d:3e:5d:b1:92:29:91:ee:9e:62:
a7:48:79:24:9b:b8:8e:48:9a:49:25:6d:a6:4e:76:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0E:B4:00:BA:7A:04:26:9F:9D:7B:31:F7:3F:B2:A1:C9:70:D1:B2
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/Pg60ALp6BCafnXsx9z-yoclw0bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.186.198.0/23
80.78.64.0/20
91.132.172.0/22
109.69.0.0/21
141.98.140.0/22
185.62.174.0/23
185.200.212.0/22
217.73.128.0/20
IPv6:
2a04:eb40::/29
Signature Algorithm: sha256WithRSAEncryption
71:24:cf:f2:dd:0e:19:dc:fd:54:81:78:59:52:1c:08:62:b6:
76:d5:d5:91:67:a6:7e:c6:43:e2:c3:7f:0e:17:a1:d5:e8:37:
2b:27:df:e4:61:26:27:20:85:53:f7:be:9a:25:e5:14:a0:ce:
d1:c4:be:c2:6a:cb:fb:a3:a3:b5:42:2d:30:f6:7c:59:44:13:
63:94:03:4d:4e:98:e9:37:79:b6:5c:07:2c:1b:b4:8c:a2:2a:
e7:26:ff:d4:9b:af:67:e2:1c:65:2a:79:7f:bb:d6:36:3e:b0:
a2:a1:8d:af:fe:af:6f:f2:f1:74:f4:9a:27:bf:9b:4b:5d:d8:
d4:8c:fe:41:d8:93:6f:6f:f3:02:e3:33:77:5e:8e:f9:e9:66:
0c:37:13:33:5d:4a:f2:a8:58:a0:c2:0f:b7:f4:b2:6d:95:40:
67:c6:9c:cc:f5:b0:7e:72:ee:49:03:97:df:7c:dc:6a:a7:86:
d0:e1:00:ce:1f:3b:8b:24:01:ce:6e:22:86:7a:64:e7:95:7c:
fa:86:8f:6c:33:55:7d:82:43:e5:ad:e3:29:87:f8:95:80:a6:
78:26:3d:2e:31:76:bc:4b:33:e2:fb:69:d4:10:86:97:b7:a4:
80:1a:ec:64:92:10:fb:f9:bb:b3:8c:2e:97:8b:d5:03:5c:fa:
7a:bf:16:20
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAaDtPlE1p2Wvap/tdiE/5NmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODg3N2YzYzU1YjUyOGUxYTI5ZGIzZDc5OTIwNjU2ZjBj
NjZhZWIwHhcNMjYwOTI5MTI1NzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTBlYjQwMGJhN2EwNDI2OWY5ZDdiMzFmNzNmYjJhMWM5NzBkMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvelEHC25NbZOX6zmZJMt+6GXwjmk
UC/B+dr340e6W2LUsRI7KpoFyGvM4bvVTvG71EhL5B5ZoSDuBx7YAmajng+49AP3
fvcE/iMggP2SH50xiTIC744iF7Hkm8o7q0/bYMIZrAprWTvcWKtoS16CP/L1NNmj
Z7/+sD1UXX60td5nTwm0dtrhHaIFQvtOf4iaVpXaH/Lvgdy2oQn3W+cqPRy7foes
4CEhSZKWGtsGoGALUwbdfcJlxpbz0rGDP9zvpep1M9qii7GzvgQalFTx84hXazMk
OhOMraNeHWw11dU4iKAEko0+XbGSKZHunmKnSHkkm7iOSJpJJW2mTnY5rwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFD4OtAC6egQmn517Mfc/sqHJcNGyMB8GA1UdIwQY
MBaAFN+Id/PFW1KOGinbPXmSBlbwxmrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODkt
MjU0NTVhOGRkZDQ1LzEvUGc2MEFMcDZCQ2FmblhzeDl6LXlvY2x3MGJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODktMjU0NTVhOGRkZDQ1
LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQBQrrGAwQE
UE5AAwQCW4SsAwQDbUUAAwQCjWKMAwQBuT6uAwQCucjUAwQE2UmAMA0EAgACMAcD
BQMqBOtAMA0GCSqGSIb3DQEBCwUAA4IBAQBxJM/y3Q4Z3P1UgXhZUhwIYrZ21dWR
Z6Z+xkPiw38OF6HV6DcrJ9/kYSYnIIVT976aJeUUoM7RxL7Casv7o6O1Qi0w9nxZ
RBNjlANNTpjpN3m2XAcsG7SMoirnJv/Um69n4hxlKnl/u9Y2PrCioY2v/q9v8vF0
9Jonv5tLXdjUjP5B2JNvb/MC4zN3Xo756WYMNxMzXUryqFigwg+39LJtlUBnxpzM
9bB+cu5JA5fffNxqp4bQ4QDOHzuLJAHObiKGemTnlXz6ho9sM1V9gkPlreMph/iV
gKZ4Jj0uMXa8SzPi+2nUEIaXt6SAGuxkkhD7+buzjC6Xi9UDXPp6vxYg
-----END CERTIFICATE-----
Generated at Mon Nov 2 14:28:31 2026 by rpki-client