Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/_NoPoUoovEHF7_g2mo_GVWos_Yk.roa
File: _NoPoUoovEHF7_g2mo_GVWos_Yk.roa (raw, json)
Hash identifier: WfV7LHKWbqBWomKa+gYdLJeTrP2nSVSjWaw254GPNZU=
Subject key identifier: FC:DA:0F:A1:4A:28:BC:41:C5:EF:F8:36:9A:8F:C6:55:6A:2C:FD:89
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 019FCC18F585503FDBCFB5810D86539A3A84
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/_NoPoUoovEHF7_g2mo_GVWos_Yk.roa
Signing time: Tue 04 Aug 2026 09:26:55 +0000
ROA not before: Tue 04 Aug 2026 09:26:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208677
IP address blocks: 31.40.248.0/23 maxlen: 23
37.18.8.0/23 maxlen: 23
37.18.10.0/24 maxlen: 24
37.18.22.0/24 maxlen: 24
37.18.72.0/23 maxlen: 23
37.18.100.0/23 maxlen: 23
37.18.102.0/24 maxlen: 24
37.18.107.0/24 maxlen: 24
37.18.108.0/22 maxlen: 22
37.18.112.0/23 maxlen: 23
37.18.114.0/24 maxlen: 24
37.18.115.0/24 maxlen: 24
37.18.116.0/22 maxlen: 22
37.18.120.0/23 maxlen: 23
37.18.122.0/24 maxlen: 24
37.44.196.0/23 maxlen: 23
37.44.198.0/24 maxlen: 24
37.230.139.0/24 maxlen: 24
37.230.179.0/24 maxlen: 24
37.230.180.0/23 maxlen: 23
37.230.180.0/24 maxlen: 24
37.230.184.0/23 maxlen: 23
37.230.186.0/24 maxlen: 24
37.230.192.0/21 maxlen: 21
37.230.224.0/24 maxlen: 24
37.230.233.0/24 maxlen: 24
45.9.24.0/22 maxlen: 22
45.89.224.0/22 maxlen: 22
45.132.176.0/22 maxlen: 22
45.136.146.0/23 maxlen: 23
45.151.30.0/23 maxlen: 23
45.155.204.0/23 maxlen: 23
46.16.36.0/24 maxlen: 24
46.243.141.0/24 maxlen: 24
46.243.142.0/23 maxlen: 23
46.243.172.0/24 maxlen: 24
46.243.201.0/24 maxlen: 24
46.243.205.0/24 maxlen: 24
46.243.206.0/24 maxlen: 24
46.243.226.0/23 maxlen: 23
46.243.244.0/23 maxlen: 23
46.253.132.0/24 maxlen: 24
62.233.43.0/24 maxlen: 24
82.202.136.0/21 maxlen: 21
82.202.156.0/22 maxlen: 22
84.54.56.0/22 maxlen: 22
85.208.85.0/24 maxlen: 24
85.208.86.0/23 maxlen: 23
85.208.209.0/24 maxlen: 24
85.208.210.0/23 maxlen: 23
85.209.149.0/24 maxlen: 24
85.209.150.0/23 maxlen: 23
85.235.82.0/23 maxlen: 24
85.235.83.0/24 maxlen: 24
87.242.84.0/22 maxlen: 22
87.242.88.0/21 maxlen: 21
87.242.100.0/22 maxlen: 22
87.242.116.0/22 maxlen: 22
87.242.120.0/21 maxlen: 21
88.218.65.0/24 maxlen: 24
88.218.66.0/23 maxlen: 23
89.232.160.0/21 maxlen: 21
89.232.168.0/22 maxlen: 22
89.232.176.0/22 maxlen: 22
91.214.120.0/23 maxlen: 23
91.224.86.0/23 maxlen: 23
94.139.252.0/22 maxlen: 22
94.158.22.0/23 maxlen: 23
95.174.88.0/21 maxlen: 21
131.222.134.0/23 maxlen: 24
141.101.151.0/24 maxlen: 24
141.101.152.0/24 maxlen: 24
141.101.201.0/24 maxlen: 24
152.89.196.0/24 maxlen: 24
168.113.252.0/22 maxlen: 24
168.222.176.0/22 maxlen: 24
168.222.176.0/24 maxlen: 24
168.222.177.0/24 maxlen: 24
168.222.178.0/24 maxlen: 24
168.222.179.0/24 maxlen: 24
176.108.240.0/20 maxlen: 20
176.109.96.0/20 maxlen: 24
176.123.160.0/21 maxlen: 21
178.170.191.0/24 maxlen: 24
178.170.192.0/22 maxlen: 22
178.170.196.0/23 maxlen: 23
178.170.242.0/24 maxlen: 24
185.50.200.0/22 maxlen: 22
185.234.11.0/24 maxlen: 24
185.241.57.0/24 maxlen: 24
188.72.96.0/24 maxlen: 24
188.72.106.0/23 maxlen: 23
188.72.108.0/23 maxlen: 23
188.72.117.0/24 maxlen: 24
188.72.118.0/24 maxlen: 24
192.144.12.0/22 maxlen: 22
192.144.28.0/24 maxlen: 24
193.42.116.0/23 maxlen: 23
193.105.4.0/24 maxlen: 24
193.163.94.0/24 maxlen: 24
193.201.8.0/24 maxlen: 24
194.5.92.0/23 maxlen: 23
194.26.228.0/24 maxlen: 24
194.50.72.0/24 maxlen: 24
194.113.34.0/23 maxlen: 23
195.128.152.0/24 maxlen: 24
213.171.24.0/21 maxlen: 21
213.178.153.0/24 maxlen: 24
213.178.154.0/24 maxlen: 24
2a0c:2b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:18:f5:85:50:3f:db:cf:b5:81:0d:86:53:9a:3a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Aug 4 09:26:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcda0fa14a28bc41c5eff8369a8fc6556a2cfd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:ae:ab:e4:1e:1e:44:67:f2:be:33:b5:a2:
24:91:da:15:12:b2:7d:15:62:55:0a:75:16:25:62:
54:79:a3:c4:a5:c1:1b:5e:45:df:aa:83:ab:88:4c:
9d:63:b2:5d:76:c6:da:8c:46:85:b0:ce:c8:e8:0a:
63:41:11:12:d3:8c:2a:f9:7f:0e:4f:60:52:b7:fc:
db:76:e0:ca:fa:66:30:6a:65:5b:74:44:aa:4b:5f:
3e:f9:63:2c:e7:2f:56:2f:65:ac:2f:1a:7f:97:22:
45:cd:53:b9:17:50:e3:66:3f:ba:e2:ff:9b:85:25:
ae:3e:8c:4f:bd:51:36:18:39:e2:ff:3a:b9:46:9c:
f7:82:b1:b9:af:e8:9d:68:60:17:87:b5:73:af:e1:
9c:e2:aa:c5:18:f1:54:b9:42:18:8b:53:45:2f:51:
45:41:d1:1b:d8:53:23:cc:68:35:a7:34:fb:fc:79:
6c:93:c1:48:99:92:ca:12:b4:a2:5e:c9:6b:ef:ec:
7c:88:7e:e9:88:6f:58:4e:26:82:12:39:58:34:80:
a9:73:2e:25:96:33:ab:4a:81:65:bf:d7:8c:24:03:
c8:0c:98:ee:bb:01:0e:cb:1b:b1:36:ec:26:1d:0b:
b0:bd:8f:1d:f3:bf:a5:e8:b1:e8:8c:e8:78:8e:3a:
88:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DA:0F:A1:4A:28:BC:41:C5:EF:F8:36:9A:8F:C6:55:6A:2C:FD:89
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/_NoPoUoovEHF7_g2mo_GVWos_Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.248.0/23
37.18.8.0-37.18.10.255
37.18.22.0/24
37.18.72.0/23
37.18.100.0-37.18.102.255
37.18.107.0-37.18.122.255
37.44.196.0-37.44.198.255
37.230.139.0/24
37.230.179.0-37.230.181.255
37.230.184.0-37.230.186.255
37.230.192.0/21
37.230.224.0/24
37.230.233.0/24
45.9.24.0/22
45.89.224.0/22
45.132.176.0/22
45.136.146.0/23
45.151.30.0/23
45.155.204.0/23
46.16.36.0/24
46.243.141.0-46.243.143.255
46.243.172.0/24
46.243.201.0/24
46.243.205.0-46.243.206.255
46.243.226.0/23
46.243.244.0/23
46.253.132.0/24
62.233.43.0/24
82.202.136.0/21
82.202.156.0/22
84.54.56.0/22
85.208.85.0-85.208.87.255
85.208.209.0-85.208.211.255
85.209.149.0-85.209.151.255
85.235.82.0/23
87.242.84.0-87.242.95.255
87.242.100.0/22
87.242.116.0-87.242.127.255
88.218.65.0-88.218.67.255
89.232.160.0-89.232.171.255
89.232.176.0/22
91.214.120.0/23
91.224.86.0/23
94.139.252.0/22
94.158.22.0/23
95.174.88.0/21
131.222.134.0/23
141.101.151.0-141.101.152.255
141.101.201.0/24
152.89.196.0/24
168.113.252.0/22
168.222.176.0/22
176.108.240.0/20
176.109.96.0/20
176.123.160.0/21
178.170.191.0-178.170.197.255
178.170.242.0/24
185.50.200.0/22
185.234.11.0/24
185.241.57.0/24
188.72.96.0/24
188.72.106.0-188.72.109.255
188.72.117.0-188.72.118.255
192.144.12.0/22
192.144.28.0/24
193.42.116.0/23
193.105.4.0/24
193.163.94.0/24
193.201.8.0/24
194.5.92.0/23
194.26.228.0/24
194.50.72.0/24
194.113.34.0/23
195.128.152.0/24
213.171.24.0/21
213.178.153.0-213.178.154.255
IPv6:
2a0c:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
67:2d:5d:ec:fc:19:c6:6c:fb:5f:0d:24:8f:80:98:2c:45:60:
40:63:74:1a:8b:6c:13:dc:0e:ad:af:4e:f1:4c:2e:e8:d8:f3:
25:fa:e7:73:03:cb:c6:1d:fb:dc:bd:46:a9:02:ac:01:37:e4:
10:ed:c3:34:64:c1:db:ee:e5:3d:9d:b6:fd:03:ba:56:73:26:
f3:77:61:d0:6e:04:b5:b0:18:28:8e:12:d6:68:c8:75:05:2d:
b0:0a:5f:4a:0a:dd:7e:1d:fa:42:63:92:60:68:6c:a8:00:8e:
f1:c7:e1:fa:9c:85:33:dc:ad:ff:72:0b:c7:7c:75:74:ca:3a:
01:22:8a:59:0c:17:88:31:0f:55:36:db:31:dd:47:81:65:81:
b7:ee:7c:67:4f:d8:f7:cf:72:a2:eb:fc:74:03:ae:55:7b:47:
c9:d5:d7:16:10:95:ab:f2:d2:88:d7:b7:bc:8f:3a:68:07:1b:
fb:c3:b0:11:85:12:84:fc:e8:75:8c:0f:f1:af:5d:99:ce:b8:
7b:a4:6f:d5:2e:f5:1a:94:6b:12:c6:6e:e6:10:4b:47:71:e2:
37:5f:ca:77:fd:96:5f:ff:85:d4:04:d4:a0:84:e2:c8:b8:1b:
51:d7:d2:48:51:8c:eb:5c:c1:a7:13:78:74:14:b0:e8:f6:a7:
0e:74:a1:50
-----BEGIN CERTIFICATE-----
MIIHejCCBmKgAwIBAgISAZ/MGPWFUD/bz7WBDYZTmjqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTllMWYzZmU2OWI0ZWJkZmYwMmE5YTg1N2U3YzZjMmIy
NTMwMWEwHhcNMjYwODA0MDkyNjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2RhMGZhMTRhMjhiYzQxYzVlZmY4MzY5YThmYzY1NTZhMmNmZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36Ouq+QeHkRn8r4ztaIkkdoVErJ9
FWJVCnUWJWJUeaPEpcEbXkXfqoOriEydY7JddsbajEaFsM7I6ApjQRES04wq+X8O
T2BSt/zbduDK+mYwamVbdESqS18++WMs5y9WL2WsLxp/lyJFzVO5F1DjZj+64v+b
hSWuPoxPvVE2GDni/zq5Rpz3grG5r+idaGAXh7Vzr+Gc4qrFGPFUuUIYi1NFL1FF
QdEb2FMjzGg1pzT7/Hlsk8FImZLKErSiXslr7+x8iH7piG9YTiaCEjlYNICpcy4l
ljOrSoFlv9eMJAPIDJjuuwEOyxuxNuwmHQuwvY8d87+l6LHojOh4jjqIywIDAQAB
o4IEhjCCBIIwHQYDVR0OBBYEFPzaD6FKKLxBxe/4NpqPxlVqLP2JMB8GA1UdIwQY
MBaAFPkZ4fP+abTr3/AqmoV+fGwrJTAaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Sbmg4XzVwdE92ZjhDcWFoWDU4YkNzbE1Cby5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAz
LWRhZDA0MjBiODVkMy8xL19Ob1BvVW9vdkVIRjdfZzJtb19HVldvc19Zay5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAzLWRhZDA0MjBiODVk
My8xLzEtUm5oOF81cHRPdmY4Q3FhaFg1OGJDc2xNQm8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwggKYBggrBgEFBQcBBwEB/wSCAocwggKDMIICcAQCAAEw
ggJoAwQBHyj4MAwDBAMlEggDBAAlEgoDBAAlEhYDBAElEkgwDAMEAiUSZAMEACUS
ZjAMAwQAJRJrAwQAJRJ6MAwDBAIlLMQDBAAlLMYDBAAl5oswDAMEACXmswMEASXm
tDAMAwQDJea4AwQAJea6AwQDJebAAwQAJebgAwQAJebpAwQCLQkYAwQCLVngAwQC
LYSwAwQBLYiSAwQBLZceAwQBLZvMAwQALhAkMAwDBAAu840DBAQu84ADBAAu86wD
BAAu88kwDAMEAC7zzQMEAC7zzgMEAS7z4gMEAS7z9AMEAC79hAMEAD7pKwMEA1LK
iAMEAlLKnAMEAlQ2ODAMAwQAVdBVAwQDVdBQMAwDBABV0NEDBAJV0NAwDAMEAFXR
lQMEA1XRkAMEAVXrUjAMAwQCV/JUAwQFV/JAAwQCV/JkMAwDBAJX8nQDBAdX8gAw
DAMEAFjaQQMEAljaQDAMAwQFWeigAwQCWeioAwQCWeiwAwQBW9Z4AwQBW+BWAwQC
Xov8AwQBXp4WAwQDX65YAwQBg96GMAwDBACNZZcDBACNZZgDBACNZckDBACYWcQD
BAKocfwDBAKo3rADBASwbPADBASwbWADBAOwe6AwDAMEALKqvwMEAbKqxAMEALKq
8gMEArkyyAMEALnqCwMEALnxOQMEALxIYDAMAwQBvEhqAwQBvEhsMAwDBAC8SHUD
BAC8SHYDBALAkAwDBADAkBwDBAHBKnQDBADBaQQDBADBo14DBADByQgDBAHCBVwD
BADCGuQDBADCMkgDBAHCcSIDBADDgJgDBAPVqxgwDAMEANWymQMEANWymjANBAIA
AjAHAwUDKgwrgDANBgkqhkiG9w0BAQsFAAOCAQEAZy1d7PwZxmz7Xw0kj4CYLEVg
QGN0GotsE9wOra9O8Uwu6NjzJfrncwPLxh373L1GqQKsATfkEO3DNGTB2+7lPZ22
/QO6VnMm83dh0G4EtbAYKI4S1mjIdQUtsApfSgrdfh36QmOSYGhsqACO8cfh+pyF
M9yt/3ILx3x1dMo6ASKKWQwXiDEPVTbbMd1HgWWBt+58Z0/Y989youv8dAOuVXtH
ydXXFhCVq/LSiNe3vI86aAcb+8OwEYUShPzodYwP8a9dmc64e6Rv1S71GpRrEsZu
5hBLR3HiN1/Kd/2WX/+F1ATUoITiyLgbUdfSSFGM61zBpxN4dBSw6PanDnShUA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:35:52 2026 by rpki-client