Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/yz9kj_FWQhCmpskN-2MCDdY5uBw.roa
File: yz9kj_FWQhCmpskN-2MCDdY5uBw.roa (raw, json)
Hash identifier: cgLL1yo6vIv8E9t7kQH/ixztHSmNjb1gmVnvmFzrVfo=
Subject key identifier: CB:3F:64:8F:F1:56:42:10:A6:A6:C9:0D:FB:63:02:0D:D6:39:B8:1C
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019C4E7ABE8BB476C9B8418D156559F933CC
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/yz9kj_FWQhCmpskN-2MCDdY5uBw.roa
Signing time: Wed 11 Feb 2026 20:53:12 +0000
ROA not before: Wed 11 Feb 2026 20:53:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200736
IP address blocks: 94.131.32.0/20 maxlen: 24
94.131.126.0/24 maxlen: 24
94.131.128.0/19 maxlen: 24
94.131.130.0/24 maxlen: 24
94.131.131.0/24 maxlen: 24
94.131.132.0/24 maxlen: 24
94.131.133.0/24 maxlen: 24
94.131.134.0/24 maxlen: 24
94.131.135.0/24 maxlen: 24
94.131.136.0/24 maxlen: 24
94.131.137.0/24 maxlen: 24
94.131.138.0/24 maxlen: 24
94.131.139.0/24 maxlen: 24
94.131.140.0/24 maxlen: 24
94.131.141.0/24 maxlen: 24
94.131.142.0/24 maxlen: 24
94.131.143.0/24 maxlen: 24
94.131.144.0/23 maxlen: 23
94.131.144.0/24 maxlen: 24
94.131.145.0/24 maxlen: 24
94.131.146.0/24 maxlen: 24
94.131.147.0/24 maxlen: 24
94.131.148.0/24 maxlen: 24
94.131.149.0/24 maxlen: 24
94.131.150.0/24 maxlen: 24
94.131.151.0/24 maxlen: 24
94.131.152.0/24 maxlen: 24
94.131.153.0/24 maxlen: 24
94.131.154.0/24 maxlen: 24
94.131.155.0/24 maxlen: 24
94.131.156.0/24 maxlen: 24
94.131.157.0/24 maxlen: 24
94.131.158.0/24 maxlen: 24
94.131.159.0/24 maxlen: 24
94.131.160.0/20 maxlen: 24
94.131.161.0/24 maxlen: 24
94.131.162.0/24 maxlen: 24
94.131.163.0/24 maxlen: 24
94.131.165.0/24 maxlen: 24
94.131.166.0/24 maxlen: 24
94.131.167.0/24 maxlen: 24
94.131.169.0/24 maxlen: 24
94.131.170.0/24 maxlen: 24
94.131.172.0/24 maxlen: 24
94.131.173.0/24 maxlen: 24
94.131.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4e:7a:be:8b:b4:76:c9:b8:41:8d:15:65:59:f9:33:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Feb 11 20:53:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb3f648ff1564210a6a6c90dfb63020dd639b81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:e4:24:00:aa:c0:58:c2:6c:26:e6:0c:a5:
43:46:27:8c:49:ee:1e:8b:1e:57:cc:f4:4e:cc:23:
f4:09:e3:4d:d5:27:e5:46:91:88:c2:a3:00:3b:39:
91:72:1f:c0:d6:de:3b:c5:ef:00:46:c8:7d:4c:0e:
fa:db:70:62:a8:95:7a:11:e0:fa:61:bd:1d:0b:c8:
aa:38:8a:16:4c:89:5f:34:81:9c:f4:09:fe:75:85:
07:c1:c3:e1:24:01:fd:c5:c6:36:be:3f:2b:fc:1c:
07:82:b6:bf:43:f5:2a:c5:29:60:b9:49:1f:39:22:
8f:23:a5:bf:12:44:80:a5:60:bd:23:36:19:0e:a3:
7b:b4:35:b1:ea:6f:77:69:0e:ef:10:6d:aa:34:40:
6e:85:19:49:19:d7:57:f4:15:e7:c2:9e:2b:8d:07:
72:3d:c4:bd:f4:ec:2f:26:a4:26:38:96:e3:1a:2d:
57:db:4e:e0:e2:45:44:e4:7f:4a:71:71:26:8e:f0:
e1:59:c5:6f:9b:c0:c9:d1:75:19:37:61:55:5e:ce:
d3:88:37:58:84:8d:75:2a:b4:d0:3d:ae:1e:30:e8:
1d:07:6b:73:dc:88:58:ad:32:21:2d:e0:ab:e4:49:
a3:f6:35:18:5b:80:04:dc:a0:6a:f5:64:91:32:72:
e5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3F:64:8F:F1:56:42:10:A6:A6:C9:0D:FB:63:02:0D:D6:39:B8:1C
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/yz9kj_FWQhCmpskN-2MCDdY5uBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.32.0/20
94.131.126.0/24
94.131.128.0-94.131.175.255
Signature Algorithm: sha256WithRSAEncryption
9b:bf:70:cf:e1:f3:d8:2a:80:74:2d:f5:19:a2:af:ad:0f:5e:
6c:ef:5d:92:a2:16:a0:48:70:e3:6f:f2:9f:55:1a:96:f8:2d:
af:82:d6:e9:1a:55:d1:7d:ae:00:4d:99:77:d5:06:c9:c5:2b:
c1:51:f5:4a:96:91:a0:5d:ab:3e:15:8a:9e:00:53:36:97:28:
74:12:44:4a:03:ef:9c:6c:b6:8c:f6:4a:96:ea:40:d7:3f:3a:
3d:22:89:9a:e8:77:73:94:fb:ee:43:f3:bf:71:84:8f:e8:69:
a9:46:86:82:bc:eb:cf:99:c6:cf:14:26:be:ab:87:c7:30:6f:
bd:84:68:fe:7e:37:9f:20:85:a8:24:68:e8:98:8e:28:24:c0:
7f:1d:f0:fd:83:14:f9:d4:cf:9d:7f:25:3c:b7:11:4e:d3:ce:
83:74:af:e0:17:6e:8f:f8:da:58:67:b1:d1:0b:0d:e3:d3:bd:
ac:ac:e2:32:88:67:dd:71:fd:ae:2a:2c:c5:44:8d:df:84:3f:
38:3a:b7:27:8c:7c:3d:25:ed:cf:f2:d7:a8:90:17:aa:96:96:
c8:92:2a:fe:c3:22:ac:46:50:0d:e5:9e:42:8e:9d:a6:57:62:
35:ef:b0:72:c3:03:fb:b6:f1:1b:46:14:35:53:2f:7e:9f:3f:
4e:93:ff:af
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZxOer6LtHbJuEGNFWVZ+TPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjYwMjExMjA1MzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjNmNjQ4ZmYxNTY0MjEwYTZhNmM5MGRmYjYzMDIwZGQ2MzliODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxezkJACqwFjCbCbmDKVDRieMSe4e
ix5XzPROzCP0CeNN1SflRpGIwqMAOzmRch/A1t47xe8ARsh9TA7623BiqJV6EeD6
Yb0dC8iqOIoWTIlfNIGc9An+dYUHwcPhJAH9xcY2vj8r/BwHgra/Q/UqxSlguUkf
OSKPI6W/EkSApWC9IzYZDqN7tDWx6m93aQ7vEG2qNEBuhRlJGddX9BXnwp4rjQdy
PcS99OwvJqQmOJbjGi1X207g4kVE5H9KcXEmjvDhWcVvm8DJ0XUZN2FVXs7TiDdY
hI11KrTQPa4eMOgdB2tz3IhYrTIhLeCr5Emj9jUYW4AE3KBq9WSRMnLlnQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFMs/ZI/xVkIQpqbJDftjAg3WObgcMB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEveXo5a2pfRldRaENtcHNrTi0yTUNEZFk1dUJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQEXoMgAwQA
XoN+MAwDBAdeg4ADBAReg6AwDQYJKoZIhvcNAQELBQADggEBAJu/cM/h89gqgHQt
9Rmir60PXmzvXZKiFqBIcONv8p9VGpb4La+C1ukaVdF9rgBNmXfVBsnFK8FR9UqW
kaBdqz4Vip4AUzaXKHQSREoD75xstoz2SpbqQNc/Oj0iiZrod3OU++5D879xhI/o
aalGhoK868+Zxs8UJr6rh8cwb72EaP5+N58ghagkaOiYjigkwH8d8P2DFPnUz51/
JTy3EU7TzoN0r+AXbo/42lhnsdELDePTvays4jKIZ91x/a4qLMVEjd+EPzg6tyeM
fD0l7c/y16iQF6qWlsiSKv7DIqxGUA3lnkKOnaZXYjXvsHLDA/u28RtGFDVTL36f
P06T/68=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:20 2026 by rpki-client