Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/9Vt8ZTAaKO3QL6--FGbzjNTndzA.roa
File: 9Vt8ZTAaKO3QL6--FGbzjNTndzA.roa (raw, json)
Hash identifier: sv+RJ5ALLGIO9zXRd8Tk3ufycF6GVb7tnAc57hDYdKU=
Subject key identifier: F5:5B:7C:65:30:1A:28:ED:D0:2F:AF:BE:14:66:F3:8C:D4:E7:77:30
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 01A05C5818B58ED1F12C97D127AF03EA11BF
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/9Vt8ZTAaKO3QL6--FGbzjNTndzA.roa
Signing time: Tue 01 Sep 2026 09:41:12 +0000
ROA not before: Tue 01 Sep 2026 09:41:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61173
IP address blocks: 5.182.44.0/24 maxlen: 24
5.182.45.0/24 maxlen: 24
5.182.46.0/24 maxlen: 24
45.159.112.0/24 maxlen: 24
45.159.113.0/24 maxlen: 24
45.159.114.0/24 maxlen: 24
45.159.115.0/24 maxlen: 24
62.3.42.0/24 maxlen: 24
85.208.252.0/24 maxlen: 24
85.208.253.0/24 maxlen: 24
85.208.254.0/24 maxlen: 24
85.208.255.0/24 maxlen: 24
185.4.28.0/24 maxlen: 24
185.4.29.0/24 maxlen: 24
185.4.30.0/24 maxlen: 24
185.4.31.0/24 maxlen: 24
185.50.37.0/24 maxlen: 24
185.50.38.0/24 maxlen: 24
185.50.39.0/24 maxlen: 24
185.116.160.0/24 maxlen: 24
185.116.161.0/24 maxlen: 24
185.116.162.0/24 maxlen: 24
185.116.163.0/24 maxlen: 24
185.213.164.0/24 maxlen: 24
185.213.165.0/24 maxlen: 24
185.213.166.0/24 maxlen: 24
185.213.167.0/24 maxlen: 24
185.255.88.0/24 maxlen: 24
185.255.89.0/24 maxlen: 24
185.255.90.0/24 maxlen: 24
185.255.91.0/24 maxlen: 24
193.141.64.0/24 maxlen: 24
193.141.65.0/24 maxlen: 24
193.141.126.0/24 maxlen: 24
193.141.127.0/24 maxlen: 24
2a05:ab80::/48 maxlen: 48
2a05:ab80:1::/48 maxlen: 48
2a05:ab80:3::/48 maxlen: 48
2a05:ab80:4::/48 maxlen: 48
2a05:ab80:100::/48 maxlen: 48
2a05:ab80:200::/48 maxlen: 48
2a05:ab80:300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:58:18:b5:8e:d1:f1:2c:97:d1:27:af:03:ea:11:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Sep 1 09:41:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f55b7c65301a28edd02fafbe1466f38cd4e77730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:89:92:6c:99:04:6d:5c:1c:86:c0:0c:a4:ed:
37:14:bd:6e:7e:73:2b:ea:8c:32:61:17:bb:17:e3:
42:56:54:51:00:82:bc:12:0a:73:d6:a3:5c:8a:6f:
97:82:fb:c1:07:b2:ea:42:4a:0f:93:d4:19:35:42:
2b:06:54:66:d3:a4:f4:7c:3f:6b:d2:8e:7b:39:d2:
3a:04:15:f9:18:83:ab:48:b1:be:d1:3e:95:e3:64:
7f:eb:f6:54:6e:52:ff:fd:a1:4d:1b:02:2b:dd:01:
62:1d:4d:f5:2c:0c:fd:af:f8:c3:eb:a3:75:4b:5e:
c5:3b:19:3a:a8:20:6b:15:a3:02:43:a2:df:79:27:
35:29:c7:87:08:93:3e:b6:d7:15:e7:43:7d:70:31:
82:e0:74:69:13:da:38:6b:d1:0c:ed:d8:a8:c1:ac:
b3:69:a1:e3:99:d6:a6:e5:4b:b7:2a:a7:4d:01:ff:
e0:ab:f0:0f:9d:81:81:39:60:7d:1e:64:31:87:b5:
82:d1:8f:8b:32:10:26:c1:6f:fc:06:ef:f6:73:cd:
52:80:e0:88:97:61:ee:84:4e:55:01:25:5c:7e:94:
49:65:ea:34:51:9f:21:0a:7c:f9:94:dc:f3:32:6b:
cf:80:be:6a:cf:f2:b3:52:82:40:3e:9a:a6:05:b0:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5B:7C:65:30:1A:28:ED:D0:2F:AF:BE:14:66:F3:8C:D4:E7:77:30
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/9Vt8ZTAaKO3QL6--FGbzjNTndzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.44.0-5.182.46.255
45.159.112.0/22
62.3.42.0/24
85.208.252.0/22
185.4.28.0/22
185.50.37.0-185.50.39.255
185.116.160.0/22
185.213.164.0/22
185.255.88.0/22
193.141.64.0/23
193.141.126.0/23
IPv6:
2a05:ab80::/47
2a05:ab80:3::-2a05:ab80:4:ffff:ffff:ffff:ffff:ffff
2a05:ab80:100::/48
2a05:ab80:200::/48
2a05:ab80:300::/48
Signature Algorithm: sha256WithRSAEncryption
3c:12:25:f6:c5:ae:b3:32:21:09:50:82:22:af:22:da:88:8a:
b7:90:d4:63:5c:46:e6:b1:c1:da:51:02:08:a5:17:c6:ee:d1:
e0:80:57:20:4a:17:ca:c1:12:79:63:69:0c:5c:70:ed:53:8c:
3c:fd:4d:66:cf:d6:2f:15:23:72:e6:74:a4:ac:bd:ae:30:3f:
fc:15:02:f8:6a:8d:ef:3d:66:f4:3b:56:e3:fc:d5:4e:90:4e:
1b:2e:a0:7f:39:14:1c:b5:4f:90:ca:5d:26:d3:57:4e:a4:53:
21:3d:28:b6:6a:6b:b8:50:00:08:d1:1d:55:36:ad:d8:19:2f:
86:2b:81:4a:cb:54:bc:89:73:eb:70:51:96:59:c3:0e:9d:f0:
2d:f3:dd:e8:27:db:22:e6:3f:f9:cd:5f:50:4a:49:a1:b3:a0:
7e:e9:1d:75:99:e2:70:b5:37:e4:79:6f:0b:30:d2:49:62:df:
b5:a6:cb:67:e2:7f:1d:8b:77:a2:bd:3b:7e:ee:4f:2c:03:22:
68:0f:77:f9:ce:b3:9c:9a:39:bb:ae:7f:f2:7e:90:78:a7:f9:
d3:e0:9a:14:ff:4a:95:2c:2c:f5:3e:bb:8e:7c:ee:20:94:fb:
87:0b:57:25:b7:a3:54:b2:92:ea:dd:c1:8e:00:fe:33:2b:1a:
eb:2b:94:3d
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAaBcWBi1jtHxLJfRJ68D6hG/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmQzODA0ZTAwYjllMDZhODJjZWQ5ZjA3YjM0ZmUzZmQ4
MDM5NGUwHhcNMjYwOTAxMDk0MTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTViN2M2NTMwMWEyOGVkZDAyZmFmYmUxNDY2ZjM4Y2Q0ZTc3NzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhImSbJkEbVwchsAMpO03FL1ufnMr
6owyYRe7F+NCVlRRAIK8Egpz1qNcim+XgvvBB7LqQkoPk9QZNUIrBlRm06T0fD9r
0o57OdI6BBX5GIOrSLG+0T6V42R/6/ZUblL//aFNGwIr3QFiHU31LAz9r/jD66N1
S17FOxk6qCBrFaMCQ6LfeSc1KceHCJM+ttcV50N9cDGC4HRpE9o4a9EM7diowayz
aaHjmdam5Uu3KqdNAf/gq/APnYGBOWB9HmQxh7WC0Y+LMhAmwW/8Bu/2c81SgOCI
l2HuhE5VASVcfpRJZeo0UZ8hCnz5lNzzMmvPgL5qz/KzUoJAPpqmBbBQEwIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFPVbfGUwGijt0C+vvhRm84zU53cwMB8GA1UdIwQY
MBaAFBX9OATgC54GqCztnwezT+P9gDlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEt
NzgzNWQzMjA4Mzk2LzEvOVZ0OFpUQWFLTzNRTDYtLUZHYnpqTlRuZHpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEtNzgzNWQzMjA4Mzk2
LzEvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjBYBAIAATBSMAwDBAIF
tiwDBAAFti4DBAItn3ADBAA+AyoDBAJV0PwDBAK5BBwwDAMEALkyJQMEA7kyIAME
Arl0oAMEArnVpAMEArn/WAMEAcGNQAMEAcGNfjA+BAIAAjA4AwcBKgWrgAAAMBID
BwAqBauAAAMDBwAqBauAAAQDBwAqBauAAQADBwAqBauAAgADBwAqBauAAwAwDQYJ
KoZIhvcNAQELBQADggEBADwSJfbFrrMyIQlQgiKvItqIireQ1GNcRuaxwdpRAgil
F8bu0eCAVyBKF8rBEnljaQxccO1TjDz9TWbP1i8VI3LmdKSsva4wP/wVAvhqje89
ZvQ7VuP81U6QThsuoH85FBy1T5DKXSbTV06kUyE9KLZqa7hQAAjRHVU2rdgZL4Yr
gUrLVLyJc+twUZZZww6d8C3z3egn2yLmP/nNX1BKSaGzoH7pHXWZ4nC1N+R5bwsw
0kli37Wmy2fifx2Ld6K9O37uTywDImgPd/nOs5yaObuuf/J+kHin+dPgmhT/SpUs
LPU+u4587iCU+4cLVyW3o1SykurdwY4A/jMrGusrlD0=
-----END CERTIFICATE-----
Generated at Fri Sep 18 19:09:46 2026 by rpki-client