Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/nRR7i404z5RVMJP9emF5qUhiiWQ.roa
File: nRR7i404z5RVMJP9emF5qUhiiWQ.roa (raw, json)
Hash identifier: r2qRKGe5QD4+IAS1A7oJ0gKLqqHpjbTNssXN3Od+dxU=
Subject key identifier: 9D:14:7B:8B:8D:38:CF:94:55:30:93:FD:7A:61:79:A9:48:62:89:64
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 019D76A2508C2CE2854DB661A0A7B0AA88EE
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/nRR7i404z5RVMJP9emF5qUhiiWQ.roa
Signing time: Fri 10 Apr 2026 09:04:02 +0000
ROA not before: Fri 10 Apr 2026 09:04:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3292
IP address blocks: 2.104.0.0/14 maxlen: 14
2.108.0.0/15 maxlen: 15
2.111.0.0/16 maxlen: 16
62.135.128.0/17 maxlen: 17
62.242.0.0/15 maxlen: 15
80.62.0.0/15 maxlen: 15
80.160.0.0/13 maxlen: 13
80.196.0.0/14 maxlen: 14
81.31.80.0/20 maxlen: 20
83.88.0.0/13 maxlen: 13
83.88.0.0/14 maxlen: 14
83.92.0.0/15 maxlen: 15
83.94.0.0/18 maxlen: 18
83.94.96.0/19 maxlen: 19
83.94.128.0/17 maxlen: 17
83.95.0.0/16 maxlen: 16
85.129.0.0/17 maxlen: 17
87.48.0.0/13 maxlen: 13
87.56.32.0/19 maxlen: 19
87.56.128.0/17 maxlen: 17
87.57.0.0/16 maxlen: 16
87.58.32.0/19 maxlen: 19
87.58.160.0/19 maxlen: 19
87.58.224.0/19 maxlen: 19
87.59.0.0/16 maxlen: 16
87.60.0.0/16 maxlen: 16
87.61.0.0/17 maxlen: 17
87.61.128.0/18 maxlen: 18
87.61.224.0/19 maxlen: 19
87.62.0.0/15 maxlen: 15
93.160.0.0/14 maxlen: 14
93.164.0.0/17 maxlen: 17
93.164.160.0/19 maxlen: 19
93.164.192.0/18 maxlen: 18
93.165.0.0/18 maxlen: 18
93.165.96.0/19 maxlen: 19
93.165.128.0/17 maxlen: 17
93.166.0.0/15 maxlen: 15
93.178.128.0/18 maxlen: 18
94.189.0.0/17 maxlen: 17
95.166.64.0/18 maxlen: 18
95.166.128.0/17 maxlen: 17
128.76.0.0/18 maxlen: 18
128.76.128.0/17 maxlen: 17
128.77.128.0/17 maxlen: 17
131.164.0.0/16 maxlen: 16
176.20.0.0/17 maxlen: 17
176.20.224.0/19 maxlen: 19
176.21.0.0/16 maxlen: 16
176.22.0.0/17 maxlen: 17
176.22.160.0/19 maxlen: 19
176.22.192.0/18 maxlen: 18
176.23.0.0/17 maxlen: 17
176.23.160.0/19 maxlen: 19
176.23.192.0/18 maxlen: 18
188.176.0.0/13 maxlen: 13
192.66.25.0/24 maxlen: 24
192.66.33.0/24 maxlen: 24
192.66.36.0/24 maxlen: 24
192.66.38.0/24 maxlen: 24
192.66.175.0/24 maxlen: 24
192.66.180.0/24 maxlen: 24
192.66.181.0/24 maxlen: 24
193.3.130.0/23 maxlen: 23
193.3.140.0/24 maxlen: 24
193.3.141.0/24 maxlen: 24
193.3.142.0/24 maxlen: 24
193.3.224.0/22 maxlen: 22
193.39.139.0/24 maxlen: 24
193.88.0.0/15 maxlen: 15
193.162.32.0/23 maxlen: 23
193.162.98.0/23 maxlen: 23
193.162.145.0/24 maxlen: 24
193.162.146.0/24 maxlen: 24
193.162.152.0/21 maxlen: 21
193.163.10.0/24 maxlen: 24
193.163.24.0/22 maxlen: 22
193.163.158.0/23 maxlen: 23
193.163.160.0/21 maxlen: 21
194.182.128.0/20 maxlen: 20
194.182.144.0/21 maxlen: 21
194.182.232.0/21 maxlen: 21
194.182.240.0/20 maxlen: 20
194.192.0.0/16 maxlen: 16
194.239.0.0/16 maxlen: 16
194.247.188.0/23 maxlen: 23
195.41.0.0/16 maxlen: 16
195.95.181.0/24 maxlen: 24
195.97.128.0/18 maxlen: 18
195.184.32.0/19 maxlen: 19
195.215.0.0/16 maxlen: 16
195.249.0.0/16 maxlen: 16
212.130.0.0/16 maxlen: 16
2001:6c8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:a2:50:8c:2c:e2:85:4d:b6:61:a0:a7:b0:aa:88:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Apr 10 09:04:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d147b8b8d38cf94553093fd7a6179a948628964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a2:ec:e8:29:e9:d3:17:40:5f:f6:4a:54:ad:
48:12:19:8f:87:51:d4:e0:1c:be:1c:90:48:4d:6a:
c2:74:d8:4c:6d:a9:e7:ad:c8:0e:62:5b:b4:85:f2:
7b:97:81:6d:1d:45:a8:9f:66:8a:bb:09:e4:c0:64:
5a:f6:56:d0:cd:c5:ee:72:f1:e5:47:34:1a:6e:cb:
26:0d:53:a7:af:39:4a:fa:73:5f:49:54:76:f7:0b:
f3:b5:5f:11:c8:8a:b2:4d:ef:73:67:5f:59:86:23:
9d:d6:35:e4:bd:14:e6:df:62:a2:f0:e9:18:6c:ca:
0a:6b:89:09:14:6f:2e:7b:c8:0e:51:1a:b7:1c:80:
72:ba:e3:ad:7f:43:f1:1d:54:c9:09:37:40:36:04:
11:83:a6:f4:39:be:9d:cf:67:24:2d:f8:0c:a4:98:
d4:ce:1b:03:2e:8a:13:5b:c4:0d:ec:5a:6d:45:51:
75:74:6f:d5:0a:14:3f:9e:54:92:1c:53:5e:50:3f:
fc:34:52:e7:08:49:e9:f6:1b:5f:af:da:b1:3e:eb:
76:34:33:22:d9:8b:08:37:26:62:1a:06:6d:ec:b8:
a9:7b:77:0d:e7:9a:cf:1c:ac:f9:0d:53:28:82:98:
5e:e9:81:f7:6a:6a:c0:af:c7:35:03:41:27:5e:91:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:14:7B:8B:8D:38:CF:94:55:30:93:FD:7A:61:79:A9:48:62:89:64
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/nRR7i404z5RVMJP9emF5qUhiiWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.104.0.0-2.109.255.255
2.111.0.0/16
62.135.128.0/17
62.242.0.0/15
80.62.0.0/15
80.160.0.0/13
80.196.0.0/14
81.31.80.0/20
83.88.0.0/13
85.129.0.0/17
87.48.0.0/13
87.56.32.0/19
87.56.128.0-87.57.255.255
87.58.32.0/19
87.58.160.0/19
87.58.224.0-87.61.191.255
87.61.224.0-87.63.255.255
93.160.0.0-93.164.127.255
93.164.160.0-93.165.63.255
93.165.96.0-93.167.255.255
93.178.128.0/18
94.189.0.0/17
95.166.64.0-95.166.255.255
128.76.0.0/18
128.76.128.0/17
128.77.128.0/17
131.164.0.0/16
176.20.0.0/17
176.20.224.0-176.22.127.255
176.22.160.0-176.23.127.255
176.23.160.0-176.23.255.255
188.176.0.0/13
192.66.25.0/24
192.66.33.0/24
192.66.36.0/24
192.66.38.0/24
192.66.175.0/24
192.66.180.0/23
193.3.130.0/23
193.3.140.0-193.3.142.255
193.3.224.0/22
193.39.139.0/24
193.88.0.0/15
193.162.32.0/23
193.162.98.0/23
193.162.145.0-193.162.146.255
193.162.152.0/21
193.163.10.0/24
193.163.24.0/22
193.163.158.0-193.163.167.255
194.182.128.0-194.182.151.255
194.182.232.0-194.182.255.255
194.192.0.0/16
194.239.0.0/16
194.247.188.0/23
195.41.0.0/16
195.95.181.0/24
195.97.128.0/18
195.184.32.0/19
195.215.0.0/16
195.249.0.0/16
212.130.0.0/16
IPv6:
2001:6c8::/29
Signature Algorithm: sha256WithRSAEncryption
b3:db:af:d7:81:fa:67:b4:9f:c5:fb:7f:74:8f:d8:23:fc:34:
d2:63:85:f9:01:bf:68:6b:ff:6e:a5:8d:0b:bf:4b:9a:4d:e7:
32:98:81:d8:65:34:52:5d:b7:81:ce:5a:fd:75:97:87:1e:6c:
a7:ba:b0:e1:24:c4:87:38:2f:97:bd:f3:04:de:a7:ec:ee:f0:
7d:43:63:ec:e0:79:39:17:29:8e:86:34:72:7a:cd:80:fb:ca:
4d:3d:54:48:8a:70:16:36:99:02:9b:75:e4:38:f5:bf:75:ab:
f6:e7:ad:47:e4:81:59:8f:ba:f3:19:a3:b1:46:a6:59:e4:d0:
0c:16:0e:af:6d:77:5e:d2:ac:c1:ec:cd:79:53:b9:5c:e0:9c:
7e:0a:1f:b6:fe:77:4c:e1:77:06:9b:12:6d:0f:d5:8b:d2:0b:
a0:54:21:bc:1e:e6:2a:34:68:1e:8b:6a:42:9b:40:4e:93:43:
21:07:f6:4b:c9:1f:9d:6f:a1:15:ec:73:75:54:1a:85:0c:9b:
ad:c7:f0:f1:73:4c:87:1c:e0:a2:07:d5:95:a5:e8:8a:f5:1e:
a3:85:b0:19:60:bb:44:67:bf:bf:aa:94:ba:ab:53:5b:e0:ac:
7a:5f:bb:66:5c:03:a2:7d:c1:67:23:ec:37:8c:d4:d9:d1:b8:
de:5d:bc:de
-----BEGIN CERTIFICATE-----
MIIG6zCCBdOgAwIBAgISAZ12olCMLOKFTbZhoKewqojuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOGIyNGM3NmFkODdhNmMxZmVkZmZhZjA4ZDliMTdiNDUy
NDk5OTEwHhcNMjYwNDEwMDkwNDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDE0N2I4YjhkMzhjZjk0NTUzMDkzZmQ3YTYxNzlhOTQ4NjI4OTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqLs6Cnp0xdAX/ZKVK1IEhmPh1HU
4By+HJBITWrCdNhMbannrcgOYlu0hfJ7l4FtHUWon2aKuwnkwGRa9lbQzcXucvHl
RzQabssmDVOnrzlK+nNfSVR29wvztV8RyIqyTe9zZ19ZhiOd1jXkvRTm32Ki8OkY
bMoKa4kJFG8ue8gOURq3HIByuuOtf0PxHVTJCTdANgQRg6b0Ob6dz2ckLfgMpJjU
zhsDLooTW8QN7FptRVF1dG/VChQ/nlSSHFNeUD/8NFLnCEnp9htfr9qxPut2NDMi
2YsINyZiGgZt7Lipe3cN55rPHKz5DVMogphe6YH3amrAr8c1A0EnXpE/oQIDAQAB
o4ID9zCCA/MwHQYDVR0OBBYEFJ0Ue4uNOM+UVTCT/XphealIYolkMB8GA1UdIwQY
MBaAFC6LJMdq2HpsH+3/rwjZsXtFJJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAt
OTExOTBhMDJkYjcwLzEvblJSN2k0MDR6NVJWTUpQOWVtRjVxVWhpaVdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAtOTExOTBhMDJkYjcw
LzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICCwYIKwYBBQUHAQcBAf8EggH6MIIB9jCCAeMEAgABMIIB
2zAKAwMDAmgDAwECbAMDAAJvAwQHPoeAAwMBPvIDAwFQPgMDA1CgAwMCUMQDBARR
H1ADAwNTWAMEB1WBAAMDA1cwAwQFVzggMAsDBAdXOIADAwFXOAMEBVc6IAMEBVc6
oDAMAwQFVzrgAwQGVz2AMAsDBAVXPeADAwZXADALAwMFXaADBAddpAAwDAMEBV2k
oAMEBl2lADALAwQFXaVgAwMDXaADBAZdsoADBAdevQAwCwMEBl+mQAMDAF+mAwQG
gEwAAwQHgEyAAwQHgE2AAwMAg6QDBAewFAAwDAMEBbAU4AMEB7AWADAMAwQFsBag
AwQHsBcAMAsDBAWwF6ADAwOwEAMDA7ywAwQAwEIZAwQAwEIhAwQAwEIkAwQAwEIm
AwQAwEKvAwQBwEK0AwQBwQOCMAwDBALBA4wDBADBA44DBALBA+ADBADBJ4sDAwHB
WAMEAcGiIAMEAcGiYjAMAwQAwaKRAwQAwaKSAwQDwaKYAwQAwaMKAwQCwaMYMAwD
BAHBo54DBAPBo6AwDAMEB8K2gAMEA8K2kDALAwQDwrboAwMAwrYDAwDCwAMDAMLv
AwQBwve8AwMAwykDBADDX7UDBAbDYYADBAXDuCADAwDD1wMDAMP5AwMA1IIwDQQC
AAIwBwMFAyABBsgwDQYJKoZIhvcNAQELBQADggEBALPbr9eB+me0n8X7f3SP2CP8
NNJjhfkBv2hr/26ljQu/S5pN5zKYgdhlNFJdt4HOWv11l4cebKe6sOEkxIc4L5e9
8wTep+zu8H1DY+zgeTkXKY6GNHJ6zYD7yk09VEiKcBY2mQKbdeQ49b91q/bnrUfk
gVmPuvMZo7FGplnk0AwWDq9td17SrMHszXlTuVzgnH4KH7b+d0zhdwabEm0P1YvS
C6BUIbwe5io0aB6LakKbQE6TQyEH9kvJH51voRXsc3VUGoUMm63H8PFzTIcc4KIH
1ZWl6Ir1HqOFsBlgu0Rnv7+qlLqrU1vgrHpfu2ZcA6J9wWcj7DeM1NnRuN5dvN4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:19 2026 by rpki-client