Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/1mTMnKrTYICS3CSSA4Jt6jigjqg.roa
File: 1mTMnKrTYICS3CSSA4Jt6jigjqg.roa (raw, json)
Hash identifier: g53/R8UhIDhaIB6fQZ6/O2ua81mx5QUdwBLxQYAcd1A=
Subject key identifier: D6:64:CC:9C:AA:D3:60:80:92:DC:24:92:03:82:6D:EA:38:A0:8E:A8
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01A0C2658132EC73D20891AB13EAFF52956B
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/1mTMnKrTYICS3CSSA4Jt6jigjqg.roa
Signing time: Mon 21 Sep 2026 05:17:07 +0000
ROA not before: Mon 21 Sep 2026 05:17:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48159
IP address blocks: 2.176.128.0/17 maxlen: 17
2.177.0.0/16 maxlen: 16
2.182.0.0/16 maxlen: 24
2.182.128.0/21 maxlen: 21
2.185.0.0/16 maxlen: 16
2.185.0.0/20 maxlen: 20
2.185.18.0/24 maxlen: 24
2.185.40.0/21 maxlen: 21
2.185.88.0/22 maxlen: 22
2.185.160.0/19 maxlen: 19
2.185.164.0/24 maxlen: 24
2.188.0.0/24 maxlen: 24
2.188.1.0/24 maxlen: 24
2.188.22.0/24 maxlen: 24
2.188.28.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.188.76.0/24 maxlen: 24
2.188.179.0/24 maxlen: 24
2.188.184.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.187.0/24 maxlen: 24
2.189.40.0/23 maxlen: 23
2.189.40.48/28 maxlen: 28
2.189.40.64/28 maxlen: 28
2.189.42.0/23 maxlen: 23
2.189.42.0/24 maxlen: 24
2.189.42.16/29 maxlen: 29
2.189.42.24/30 maxlen: 30
2.189.42.28/30 maxlen: 30
2.189.42.36/30 maxlen: 30
2.189.42.40/30 maxlen: 30
2.189.42.48/29 maxlen: 29
2.189.42.64/30 maxlen: 30
2.189.42.72/29 maxlen: 29
2.189.43.0/24 maxlen: 24
2.189.56.0/24 maxlen: 24
2.189.58.0/24 maxlen: 24
2.189.68.0/24 maxlen: 24
2.189.72.0/24 maxlen: 24
2.189.79.96/29 maxlen: 29
2.189.187.0/24 maxlen: 24
2.189.188.0/25 maxlen: 25
2.189.188.128/25 maxlen: 25
2.191.0.0/16 maxlen: 16
78.38.0.0/16 maxlen: 24
78.38.160.0/19 maxlen: 19
78.38.243.0/24 maxlen: 24
78.38.246.0/24 maxlen: 24
78.38.248.0/24 maxlen: 24
78.38.250.0/24 maxlen: 24
78.38.251.0/24 maxlen: 24
78.38.254.0/24 maxlen: 24
78.39.0.0/16 maxlen: 24
78.39.40.0/24 maxlen: 24
78.39.43.0/24 maxlen: 24
78.39.46.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
78.39.48.0/24 maxlen: 24
78.39.49.0/24 maxlen: 24
78.39.50.0/24 maxlen: 24
78.39.51.0/24 maxlen: 24
78.39.53.0/24 maxlen: 24
78.39.54.0/24 maxlen: 24
78.39.55.0/24 maxlen: 24
78.39.56.0/24 maxlen: 24
78.39.57.0/24 maxlen: 24
78.39.58.0/24 maxlen: 24
78.39.59.0/24 maxlen: 24
78.39.62.0/23 maxlen: 24
78.39.149.0/24 maxlen: 24
78.39.150.0/24 maxlen: 24
78.39.151.0/24 maxlen: 24
78.39.153.0/24 maxlen: 24
78.39.155.0/24 maxlen: 24
78.39.156.0/24 maxlen: 24
78.39.240.0/24 maxlen: 24
80.191.0.0/16 maxlen: 16
80.191.56.0/24 maxlen: 24
217.218.0.0/16 maxlen: 24
217.218.67.0/24 maxlen: 24
217.219.0.0/16 maxlen: 24
217.219.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:65:81:32:ec:73:d2:08:91:ab:13:ea:ff:52:95:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Sep 21 05:17:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d664cc9caad3608092dc249203826dea38a08ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:7e:c4:ee:d3:aa:88:85:f7:96:42:f1:02:
b6:9b:00:79:ba:41:bd:22:a5:a5:a4:30:1a:c5:45:
38:03:ce:f9:92:c9:83:49:af:f4:13:a4:78:32:1f:
12:70:01:92:7b:52:eb:34:be:46:c5:71:0a:23:5b:
d9:57:29:7c:76:d7:09:29:cc:00:f0:57:e1:1e:28:
c4:4e:ee:52:3d:91:79:3a:71:81:29:14:37:c6:ff:
01:66:c0:12:4c:e2:bf:e6:c0:db:c5:c4:61:8b:58:
76:0b:57:9e:48:85:10:52:25:a7:8c:61:69:90:6f:
9c:99:9e:1a:be:13:b5:9a:7e:1a:76:c7:eb:05:78:
a5:cd:33:36:a8:de:bf:8a:9a:7b:8e:6a:21:db:d9:
bf:bb:be:5e:93:ae:6c:53:b5:ac:dc:c5:f4:80:3b:
04:eb:fc:52:9a:6a:58:4e:4f:69:49:86:ff:33:da:
32:92:5d:96:6c:2d:21:ca:51:a0:a3:ac:79:11:ff:
25:54:24:8c:82:9c:87:31:9c:6e:3d:fa:c0:7d:6b:
da:af:86:7f:e9:c4:38:83:b0:69:50:2f:18:d7:3c:
1f:67:26:be:14:cc:e1:e2:f7:12:05:34:15:1e:04:
b2:0c:f8:84:a3:ca:38:84:ed:17:32:3c:9c:3b:4e:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:64:CC:9C:AA:D3:60:80:92:DC:24:92:03:82:6D:EA:38:A0:8E:A8
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/1mTMnKrTYICS3CSSA4Jt6jigjqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.128.0-2.177.255.255
2.182.0.0/16
2.185.0.0/16
2.188.0.0/23
2.188.22.0/24
2.188.28.0/24
2.188.64.0/21
2.188.76.0/24
2.188.179.0/24
2.188.184.0/23
2.188.187.0/24
2.189.40.0/22
2.189.56.0/24
2.189.58.0/24
2.189.68.0/24
2.189.72.0/24
2.189.79.96/29
2.189.187.0-2.189.188.255
2.191.0.0/16
78.38.0.0/15
80.191.0.0/16
217.218.0.0/15
Signature Algorithm: sha256WithRSAEncryption
8b:ed:7c:c8:8c:ab:38:fa:b8:2b:96:b5:4b:f0:01:17:62:00:
fd:3c:63:91:29:8f:8f:27:05:00:8f:e0:a0:89:3d:3a:b5:fc:
36:94:c7:1b:44:30:bb:a7:13:98:77:30:4d:47:fd:ee:9b:ea:
40:4d:3b:05:02:65:14:af:4c:f6:3a:38:b0:69:03:a4:a2:76:
34:4f:98:5c:15:4a:bd:3e:44:1c:90:34:70:f5:6e:25:4b:f4:
a3:2d:86:8d:5e:81:6b:90:85:44:28:90:c9:ce:58:34:c9:ff:
22:2f:e4:ec:d9:82:3c:be:18:5d:17:82:36:8c:57:7a:76:9b:
57:1a:6c:29:e5:89:61:b4:b5:d9:10:9b:86:f1:17:e9:da:29:
36:d3:1e:75:36:71:a1:02:af:ad:13:b8:c2:49:25:95:81:1f:
86:8b:42:1e:2f:c0:14:32:9a:bd:ed:59:40:e1:43:94:d6:30:
6b:11:51:23:26:62:d5:1f:be:78:63:2f:f0:0a:fb:8e:d4:2a:
e5:25:7b:6a:91:97:0a:5d:00:c9:9d:37:74:08:31:8d:70:c2:
2c:36:c8:ce:66:b9:ca:fd:a8:66:10:04:e9:d4:f2:27:1a:c6:
33:79:0c:37:08:81:69:40:31:47:06:d7:bb:9a:5f:fe:4b:af:
9e:1f:f1:93
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgISAaDCZYEy7HPSCJGrE+r/UpVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjYwOTIxMDUxNzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjY0Y2M5Y2FhZDM2MDgwOTJkYzI0OTIwMzgyNmRlYTM4YTA4ZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+Z+xO7TqoiF95ZC8QK2mwB5ukG9
IqWlpDAaxUU4A875ksmDSa/0E6R4Mh8ScAGSe1LrNL5GxXEKI1vZVyl8dtcJKcwA
8FfhHijETu5SPZF5OnGBKRQ3xv8BZsASTOK/5sDbxcRhi1h2C1eeSIUQUiWnjGFp
kG+cmZ4avhO1mn4adsfrBXilzTM2qN6/ipp7jmoh29m/u75ek65sU7Ws3MX0gDsE
6/xSmmpYTk9pSYb/M9oykl2WbC0hylGgo6x5Ef8lVCSMgpyHMZxuPfrAfWvar4Z/
6cQ4g7BpUC8Y1zwfZya+FMzh4vcSBTQVHgSyDPiEo8o4hO0XMjycO07JBQIDAQAB
o4ICljCCApIwHQYDVR0OBBYEFNZkzJyq02CAktwkkgOCbeo4oI6oMB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEvMW1UTW5LclRZSUNTM0NTU0E0SnQ2amlnanFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4wCwME
BwKwgAMDAQKwAwMAArYDAwACuQMEAQK8AAMEAAK8FgMEAAK8HAMEAwK8QAMEAAK8
TAMEAAK8swMEAQK8uAMEAAK8uwMEAgK9KAMEAAK9OAMEAAK9OgMEAAK9RAMEAAK9
SAMFAwK9T2AwDAMEAAK9uwMEAAK9vAMDAAK/AwMBTiYDAwBQvwMDAdnaMA0GCSqG
SIb3DQEBCwUAA4IBAQCL7XzIjKs4+rgrlrVL8AEXYgD9PGORKY+PJwUAj+CgiT06
tfw2lMcbRDC7pxOYdzBNR/3um+pATTsFAmUUr0z2OjiwaQOkonY0T5hcFUq9PkQc
kDRw9W4lS/SjLYaNXoFrkIVEKJDJzlg0yf8iL+Ts2YI8vhhdF4I2jFd6dptXGmwp
5YlhtLXZEJuG8Rfp2ik20x51NnGhAq+tE7jCSSWVgR+Gi0IeL8AUMpq97VlA4UOU
1jBrEVEjJmLVH754Yy/wCvuO1CrlJXtqkZcKXQDJnTd0CDGNcMIsNsjOZrnK/ahm
EATp1PInGsYzeQw3CIFpQDFHBte7ml/+S6+eH/GT
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:04:30 2026 by rpki-client