Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/v9B_hIFSjd7D2MzEAR93KNa8TKg.roa
File: v9B_hIFSjd7D2MzEAR93KNa8TKg.roa (raw, json)
Hash identifier: tKLCN0mcUvi8tfhiTVqBFq8G6XNpAZNCgdhpUbbpwwA=
Subject key identifier: BF:D0:7F:84:81:52:8D:DE:C3:D8:CC:C4:01:1F:77:28:D6:BC:4C:A8
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019C8A14398B24425F0A4D93328396621247
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/v9B_hIFSjd7D2MzEAR93KNa8TKg.roa
Signing time: Mon 23 Feb 2026 10:38:27 +0000
ROA not before: Mon 23 Feb 2026 10:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 62.192.102.0/23 maxlen: 23
62.192.113.0/24 maxlen: 24
62.192.114.0/23 maxlen: 23
62.192.126.0/23 maxlen: 23
92.71.2.0/23 maxlen: 24
92.71.4.0/23 maxlen: 24
92.71.26.0/23 maxlen: 24
92.71.28.0/22 maxlen: 24
92.71.36.0/23 maxlen: 24
92.71.48.0/21 maxlen: 24
92.71.56.0/22 maxlen: 24
92.71.62.0/23 maxlen: 24
135.196.4.0/24 maxlen: 24
135.196.24.0/23 maxlen: 24
135.196.28.0/23 maxlen: 24
135.196.88.0/23 maxlen: 24
135.196.102.0/23 maxlen: 24
135.196.108.0/22 maxlen: 24
135.196.132.0/23 maxlen: 24
135.196.144.0/22 maxlen: 24
135.196.156.0/23 maxlen: 24
135.196.164.0/23 maxlen: 24
135.196.172.0/23 maxlen: 24
135.196.176.0/23 maxlen: 24
135.196.202.0/24 maxlen: 24
135.196.204.0/24 maxlen: 24
195.86.223.0/24 maxlen: 24
213.169.204.0/23 maxlen: 23
213.169.240.0/23 maxlen: 23
213.201.140.0/24 maxlen: 24
213.201.148.0/24 maxlen: 24
213.201.154.0/23 maxlen: 24
213.201.158.0/24 maxlen: 24
213.201.163.0/24 maxlen: 24
213.201.166.0/23 maxlen: 24
213.201.171.0/24 maxlen: 24
213.201.174.0/23 maxlen: 24
213.201.179.0/24 maxlen: 24
213.201.182.0/23 maxlen: 24
213.201.186.0/23 maxlen: 24
213.201.190.0/23 maxlen: 24
213.201.194.0/23 maxlen: 24
213.201.196.0/23 maxlen: 24
213.201.198.0/24 maxlen: 24
213.201.200.0/24 maxlen: 24
213.201.202.0/24 maxlen: 24
213.201.204.0/24 maxlen: 24
213.201.208.0/23 maxlen: 24
213.201.214.0/23 maxlen: 24
213.201.218.0/23 maxlen: 24
213.201.222.0/23 maxlen: 24
213.201.226.0/23 maxlen: 24
213.201.228.0/23 maxlen: 24
213.201.234.0/23 maxlen: 24
213.201.238.0/23 maxlen: 24
217.8.218.0/24 maxlen: 24
217.8.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:14:39:8b:24:42:5f:0a:4d:93:32:83:96:62:12:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Feb 23 10:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfd07f8481528ddec3d8ccc4011f7728d6bc4ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:dd:a0:3f:b9:c6:51:35:0b:04:b8:86:c5:
39:04:84:13:ca:76:3d:c3:e3:da:10:5c:1c:ee:bc:
ee:da:aa:16:7a:83:ef:55:6c:f7:24:cb:44:a8:b9:
e3:f0:8d:f6:10:33:dc:2a:83:43:cf:8e:62:b5:06:
e1:5c:b8:68:a5:54:14:e0:2a:e9:d2:ae:48:96:71:
d2:d4:82:6f:c2:32:2a:6c:3a:a5:54:cd:59:12:a9:
b6:4f:dc:f0:71:02:35:94:75:70:9e:c0:79:af:cd:
54:7b:75:d0:c5:0b:dd:8e:9c:ad:97:cf:c8:ab:40:
c2:79:04:11:2d:15:14:65:50:78:9c:14:94:a4:bf:
c5:4e:b3:88:61:a5:c7:67:23:6b:80:53:00:2f:91:
05:ee:b5:b4:7a:7f:92:aa:04:5d:75:cf:93:1f:9c:
d7:95:ff:13:a8:27:09:75:50:c0:22:27:c2:4f:ec:
35:f9:78:7d:00:ae:ce:2f:e2:a1:07:49:37:41:b8:
07:3d:30:3d:ce:fe:1d:aa:09:97:26:3f:c6:7b:89:
8e:b8:5c:57:4b:b6:4c:be:79:6b:1a:af:6f:27:23:
33:75:c3:60:18:65:47:48:53:e4:d5:e5:b6:03:ab:
f1:0f:7a:3e:2e:54:f0:0b:4d:95:a4:ff:04:c4:67:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D0:7F:84:81:52:8D:DE:C3:D8:CC:C4:01:1F:77:28:D6:BC:4C:A8
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/v9B_hIFSjd7D2MzEAR93KNa8TKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.102.0/23
62.192.113.0-62.192.115.255
62.192.126.0/23
92.71.2.0-92.71.5.255
92.71.26.0-92.71.31.255
92.71.36.0/23
92.71.48.0-92.71.59.255
92.71.62.0/23
135.196.4.0/24
135.196.24.0/23
135.196.28.0/23
135.196.88.0/23
135.196.102.0/23
135.196.108.0/22
135.196.132.0/23
135.196.144.0/22
135.196.156.0/23
135.196.164.0/23
135.196.172.0/23
135.196.176.0/23
135.196.202.0/24
135.196.204.0/24
195.86.223.0/24
213.169.204.0/23
213.169.240.0/23
213.201.140.0/24
213.201.148.0/24
213.201.154.0/23
213.201.158.0/24
213.201.163.0/24
213.201.166.0/23
213.201.171.0/24
213.201.174.0/23
213.201.179.0/24
213.201.182.0/23
213.201.186.0/23
213.201.190.0/23
213.201.194.0-213.201.198.255
213.201.200.0/24
213.201.202.0/24
213.201.204.0/24
213.201.208.0/23
213.201.214.0/23
213.201.218.0/23
213.201.222.0/23
213.201.226.0-213.201.229.255
213.201.234.0/23
213.201.238.0/23
217.8.218.0/24
217.8.222.0/23
Signature Algorithm: sha256WithRSAEncryption
36:a9:2a:6d:09:8b:d4:69:66:af:8a:e9:20:53:22:c2:e3:91:
39:92:17:ea:cb:cf:4e:74:0c:0e:c4:ce:d6:c2:48:f0:e9:8e:
02:53:79:de:dd:b2:7b:66:34:1f:59:b4:fb:cf:f3:e9:28:1b:
7f:ae:5a:69:7f:6c:be:b1:fe:8f:6b:83:e2:ea:e0:39:98:d8:
d9:ed:af:7b:bc:f6:e5:bb:65:47:4a:d6:62:eb:71:57:76:63:
5c:de:30:3f:c9:bf:da:7b:05:6a:3e:b5:44:0d:69:16:36:1d:
9a:fe:1d:64:c3:46:86:f4:ba:a9:76:1f:b0:e6:f5:5d:c7:85:
97:e1:01:8c:33:ae:8a:f0:e6:34:e0:41:b1:87:e5:b5:9d:fe:
60:f3:aa:94:c7:91:5e:73:8d:58:c7:f1:17:28:ce:1f:a7:45:
a7:9f:d2:be:db:56:11:7d:6e:6b:54:c9:22:7f:b1:6f:7c:87:
1d:ca:99:c3:bc:b9:a6:c9:be:00:e6:2d:86:c7:cb:7c:09:5f:
85:14:fa:39:5f:1d:7d:83:75:9d:cb:fb:54:7d:99:c1:92:80:
08:2c:76:32:cc:c8:a5:91:32:f2:ad:ff:10:77:fe:f9:60:fa:
57:d2:69:1b:32:33:b8:33:28:4a:f7:d0:63:b9:28:ee:55:ca:
4e:85:60:12
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgISAZyKFDmLJEJfCk2TMoOWYhJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwMjIzMTAzODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmQwN2Y4NDgxNTI4ZGRlYzNkOGNjYzQwMTFmNzcyOGQ2YmM0Y2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iLdoD+5xlE1CwS4hsU5BIQTynY9
w+PaEFwc7rzu2qoWeoPvVWz3JMtEqLnj8I32EDPcKoNDz45itQbhXLhopVQU4Crp
0q5IlnHS1IJvwjIqbDqlVM1ZEqm2T9zwcQI1lHVwnsB5r81Ue3XQxQvdjpytl8/I
q0DCeQQRLRUUZVB4nBSUpL/FTrOIYaXHZyNrgFMAL5EF7rW0en+SqgRddc+TH5zX
lf8TqCcJdVDAIifCT+w1+Xh9AK7OL+KhB0k3QbgHPTA9zv4dqgmXJj/Ge4mOuFxX
S7ZMvnlrGq9vJyMzdcNgGGVHSFPk1eW2A6vxD3o+LlTwC02VpP8ExGcfSwIDAQAB
o4IDaTCCA2UwHQYDVR0OBBYEFL/Qf4SBUo3ew9jMxAEfdyjWvEyoMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvdjlCX2hJRlNqZDdEMk16RUFSOTNLTmE4VEtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBfQYIKwYBBQUHAQcBAf8EggFsMIIBaDCCAWQEAgABMIIB
XAMEAT7AZjAMAwQAPsBxAwQCPsBwAwQBPsB+MAwDBAFcRwIDBAFcRwQwDAMEAVxH
GgMEBVxHAAMEAVxHJDAMAwQEXEcwAwQCXEc4AwQBXEc+AwQAh8QEAwQBh8QYAwQB
h8QcAwQBh8RYAwQBh8RmAwQCh8RsAwQBh8SEAwQCh8SQAwQBh8ScAwQBh8SkAwQB
h8SsAwQBh8SwAwQAh8TKAwQAh8TMAwQAw1bfAwQB1anMAwQB1anwAwQA1cmMAwQA
1cmUAwQB1cmaAwQA1cmeAwQA1cmjAwQB1cmmAwQA1cmrAwQB1cmuAwQA1cmzAwQB
1cm2AwQB1cm6AwQB1cm+MAwDBAHVycIDBADVycYDBADVycgDBADVycoDBADVycwD
BAHVydADBAHVydYDBAHVydoDBAHVyd4wDAMEAdXJ4gMEAdXJ5AMEAdXJ6gMEAdXJ
7gMEANkI2gMEAdkI3jANBgkqhkiG9w0BAQsFAAOCAQEANqkqbQmL1Glmr4rpIFMi
wuOROZIX6svPTnQMDsTO1sJI8OmOAlN53t2ye2Y0H1m0+8/z6Sgbf65aaX9svrH+
j2uD4urgOZjY2e2ve7z25btlR0rWYutxV3ZjXN4wP8m/2nsFaj61RA1pFjYdmv4d
ZMNGhvS6qXYfsOb1XceFl+EBjDOuivDmNOBBsYfltZ3+YPOqlMeRXnONWMfxFyjO
H6dFp5/SvttWEX1ua1TJIn+xb3yHHcqZw7y5psm+AOYthsfLfAlfhRT6OV8dfYN1
ncv7VH2ZwZKACCx2MszIpZEy8q3/EHf++WD6V9JpGzIzuDMoSvfQY7ko7lXKToVg
Eg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:43 2026 by rpki-client