Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/teIJU3IzQjABNZdvAkf-RlLgbuA.roa
File: teIJU3IzQjABNZdvAkf-RlLgbuA.roa (raw, json)
Hash identifier: ccrV+63o7ehToisIPBsha0uUlXX9qqvCuMxenbqL9Is=
Subject key identifier: B5:E2:09:53:72:33:42:30:01:35:97:6F:02:47:FE:46:52:E0:6E:E0
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01A1C997948D06D3DA174071AD1089F28909
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/teIJU3IzQjABNZdvAkf-RlLgbuA.roa
Signing time: Wed 11 Nov 2026 07:51:56 +0000
ROA not before: Wed 11 Nov 2026 07:51:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64445
IP address blocks: 31.193.188.0/24 maxlen: 24
37.156.174.0/24 maxlen: 24
45.83.56.0/22 maxlen: 24
45.83.57.0/24 maxlen: 24
45.83.58.0/24 maxlen: 24
45.83.59.0/24 maxlen: 24
45.86.144.0/24 maxlen: 24
45.86.145.0/24 maxlen: 24
45.86.146.0/24 maxlen: 24
77.81.103.0/24 maxlen: 24
80.69.160.0/21 maxlen: 24
86.104.67.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
89.34.236.0/24 maxlen: 24
89.34.237.0/24 maxlen: 24
89.34.239.0/24 maxlen: 24
89.39.201.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
89.40.142.0/24 maxlen: 24
89.40.143.0/24 maxlen: 24
89.40.227.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.43.34.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
89.43.52.0/24 maxlen: 24
89.44.237.0/24 maxlen: 24
91.199.211.0/24 maxlen: 24
91.199.223.0/24 maxlen: 24
91.199.248.0/24 maxlen: 24
91.203.220.0/24 maxlen: 24
91.212.52.0/24 maxlen: 24
91.229.186.0/24 maxlen: 24
92.114.86.0/24 maxlen: 24
92.114.87.0/24 maxlen: 24
93.113.144.0/24 maxlen: 24
93.113.145.0/24 maxlen: 24
93.113.146.0/24 maxlen: 24
93.113.147.0/24 maxlen: 24
93.113.148.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
93.115.57.0/24 maxlen: 24
94.176.108.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
94.177.10.0/24 maxlen: 24
94.177.21.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
94.177.48.0/24 maxlen: 24
94.177.49.0/24 maxlen: 24
94.177.96.0/24 maxlen: 24
94.177.98.0/24 maxlen: 24
94.177.99.0/24 maxlen: 24
176.223.64.0/24 maxlen: 24
185.184.240.0/22 maxlen: 24
185.184.240.0/24 maxlen: 24
185.184.241.0/24 maxlen: 24
185.184.242.0/24 maxlen: 24
185.198.244.0/24 maxlen: 24
185.198.245.0/24 maxlen: 24
185.198.246.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
188.208.16.0/24 maxlen: 24
188.211.248.0/24 maxlen: 24
188.214.199.0/24 maxlen: 24
188.215.6.0/24 maxlen: 24
188.215.7.0/24 maxlen: 24
188.215.94.0/24 maxlen: 24
188.240.80.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
188.240.228.0/24 maxlen: 24
188.240.229.0/24 maxlen: 24
188.241.66.0/24 maxlen: 24
188.241.67.0/24 maxlen: 24
188.241.126.0/24 maxlen: 24
188.241.138.0/24 maxlen: 24
188.241.139.0/24 maxlen: 24
188.241.143.0/24 maxlen: 24
188.241.213.0/24 maxlen: 24
193.239.140.0/24 maxlen: 24
193.239.141.0/24 maxlen: 24
217.198.177.0/24 maxlen: 24
2a04:68c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c9:97:94:8d:06:d3:da:17:40:71:ad:10:89:f2:89:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Nov 11 07:51:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5e20953723342300135976f0247fe4652e06ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:f3:b3:89:da:0d:5b:f5:b9:d9:76:b9:81:
9f:f4:30:9a:8f:db:46:67:94:b8:62:ad:57:f5:8d:
ef:61:4a:21:42:5d:8b:2e:df:b5:50:82:a7:a3:be:
b3:68:e9:e9:51:2b:c3:69:36:17:66:77:72:7b:9f:
44:52:b0:95:3d:b3:db:b3:8d:6f:4a:58:0d:0b:21:
b0:f5:81:47:ff:87:7f:e2:93:17:14:27:2e:10:00:
d3:ba:e4:4c:7b:7c:a3:d3:79:d9:8a:1c:fd:6c:4e:
1f:52:99:f0:f1:19:b3:04:64:af:af:cc:74:85:3d:
58:f1:49:93:50:14:7d:fa:23:c0:02:b7:18:28:cb:
60:2a:89:39:1e:e5:98:cb:ba:e0:b8:95:e2:ed:2f:
de:f2:77:02:34:29:64:aa:d0:4a:ec:56:7d:06:f4:
b3:30:a7:d6:a2:a3:97:64:f2:b8:35:18:3e:a8:56:
4e:22:f9:7e:98:0b:64:af:89:20:91:ea:6e:d0:ed:
80:18:b2:8c:f5:24:db:be:77:49:e1:3c:72:de:d8:
2e:22:ca:9d:bd:34:9e:1f:96:58:c4:60:51:0c:c7:
45:db:6a:75:a0:5e:df:9f:ee:58:d4:f5:4f:29:d8:
68:77:ba:cc:27:c2:76:ee:d2:75:1d:9f:a6:a0:8d:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E2:09:53:72:33:42:30:01:35:97:6F:02:47:FE:46:52:E0:6E:E0
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/teIJU3IzQjABNZdvAkf-RlLgbuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.188.0/24
37.156.174.0/24
45.83.56.0/22
45.86.144.0-45.86.146.255
77.81.103.0/24
80.69.160.0/21
86.104.67.0/24
86.107.110.0/24
89.34.236.0/23
89.34.239.0/24
89.39.201.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.34.0/23
89.43.52.0/24
89.44.237.0/24
91.199.211.0/24
91.199.223.0/24
91.199.248.0/24
91.203.220.0/24
91.212.52.0/24
91.229.186.0/24
92.114.86.0/23
93.113.144.0/21
93.115.57.0/24
94.176.108.0/24
94.176.212.0/24
94.177.10.0/24
94.177.21.0/24
94.177.48.0/23
94.177.96.0/24
94.177.98.0/23
176.223.64.0/24
185.184.240.0/22
185.198.244.0-185.198.246.255
188.208.16.0/23
188.211.248.0/24
188.214.199.0/24
188.215.6.0/23
188.215.94.0/24
188.240.80.0/24
188.240.228.0/23
188.241.66.0/23
188.241.126.0/24
188.241.138.0/23
188.241.143.0/24
188.241.213.0/24
193.239.140.0/23
217.198.177.0/24
IPv6:
2a04:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:7a:cc:a9:bf:33:f2:eb:ef:62:17:00:19:81:32:ad:56:9b:
aa:7f:4b:4a:85:b5:65:c4:b7:c9:70:88:3e:05:cf:8a:10:7c:
e7:20:08:f5:09:e3:c6:3a:0f:33:37:6d:df:9a:28:aa:bf:69:
f0:f4:8a:92:23:b7:d3:20:99:b4:6d:91:24:70:72:3b:c3:b6:
a6:eb:94:3f:0b:af:e4:37:e5:2c:53:ea:52:36:de:9e:a1:af:
0e:a6:17:ec:57:55:90:fa:b6:3d:24:35:42:77:2a:18:93:bf:
92:c3:e0:71:01:b4:30:ae:53:6c:91:27:fc:c7:3b:ad:6d:e3:
16:db:b0:81:5c:32:25:4b:f2:9f:d9:00:52:80:e8:fd:09:26:
40:db:b8:62:4e:aa:11:b3:2c:c8:00:d8:d6:ab:08:31:4d:4e:
b3:b3:10:9a:36:68:ed:1b:e4:8d:84:e7:4a:ae:99:21:79:89:
1f:a7:ad:20:b1:5b:82:ba:f1:4c:8a:32:b2:37:ae:b8:90:43:
c1:92:43:fe:ed:97:af:ab:55:91:38:43:28:1b:70:ca:55:32:
f1:eb:68:e5:2d:4b:9e:63:1d:0f:0f:ac:eb:ed:03:89:57:14:
b8:a2:2f:6e:b5:a6:6a:25:fc:d5:c1:51:f0:6b:12:ee:5d:7a:
9c:15:45:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:47:12 2026 by rpki-client