Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/8WhTqwvj7TDxbKG-QDRYuHQKXL4.roa
File: 8WhTqwvj7TDxbKG-QDRYuHQKXL4.roa (raw, json)
Hash identifier: t/Oe6Qxn1Q8l5QIgdUYlJOyiuVrQkJMwXy5rbKbKUCY=
Subject key identifier: F1:68:53:AB:0B:E3:ED:30:F1:6C:A1:BE:40:34:58:B8:74:0A:5C:BE
Certificate issuer: /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial: 019C4C8E22684A83E63399BDB13C6BFB2C85
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/8WhTqwvj7TDxbKG-QDRYuHQKXL4.roa
Signing time: Wed 11 Feb 2026 11:55:09 +0000
ROA not before: Wed 11 Feb 2026 11:55:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41201
IP address blocks: 87.199.0.0/18 maxlen: 32
87.199.0.0/24 maxlen: 24
87.199.1.0/24 maxlen: 24
87.199.2.0/24 maxlen: 24
87.199.3.0/24 maxlen: 24
87.199.4.0/24 maxlen: 24
87.199.5.0/24 maxlen: 24
87.199.6.0/24 maxlen: 24
87.199.7.0/24 maxlen: 24
87.199.8.0/24 maxlen: 24
87.199.9.0/24 maxlen: 24
87.199.10.0/24 maxlen: 24
87.199.11.0/24 maxlen: 24
87.199.12.0/24 maxlen: 24
87.199.13.0/24 maxlen: 24
87.199.14.0/24 maxlen: 24
87.199.15.0/24 maxlen: 24
87.199.16.0/24 maxlen: 24
87.199.17.0/24 maxlen: 24
87.199.18.0/24 maxlen: 24
87.199.19.0/24 maxlen: 24
87.199.20.0/24 maxlen: 24
87.199.21.0/24 maxlen: 24
87.199.22.0/24 maxlen: 24
87.199.23.0/24 maxlen: 24
87.199.24.0/24 maxlen: 24
87.199.25.0/24 maxlen: 24
87.199.26.0/24 maxlen: 24
87.199.27.0/24 maxlen: 24
87.199.28.0/24 maxlen: 24
87.199.29.0/24 maxlen: 24
87.199.30.0/24 maxlen: 24
87.199.31.0/24 maxlen: 24
87.199.32.0/24 maxlen: 24
87.199.33.0/24 maxlen: 24
87.199.34.0/24 maxlen: 24
87.199.35.0/24 maxlen: 24
87.199.36.0/24 maxlen: 24
87.199.37.0/24 maxlen: 24
87.199.38.0/24 maxlen: 24
87.199.39.0/24 maxlen: 24
87.199.40.0/24 maxlen: 24
87.199.41.0/24 maxlen: 24
87.199.42.0/24 maxlen: 24
87.199.43.0/24 maxlen: 24
87.199.44.0/24 maxlen: 24
87.199.45.0/24 maxlen: 24
87.199.46.0/24 maxlen: 24
87.199.47.0/24 maxlen: 24
87.199.48.0/24 maxlen: 24
87.199.49.0/24 maxlen: 24
87.199.50.0/24 maxlen: 24
87.199.51.0/24 maxlen: 24
87.199.52.0/24 maxlen: 24
87.199.53.0/24 maxlen: 24
87.199.54.0/24 maxlen: 24
87.199.55.0/24 maxlen: 24
87.199.56.0/24 maxlen: 24
87.199.57.0/24 maxlen: 24
87.199.58.0/24 maxlen: 24
87.199.59.0/24 maxlen: 24
87.199.60.0/24 maxlen: 24
87.199.61.0/24 maxlen: 24
87.199.62.0/24 maxlen: 24
87.199.63.0/24 maxlen: 24
87.199.64.0/19 maxlen: 32
87.199.64.0/24 maxlen: 24
87.199.65.0/24 maxlen: 24
87.199.66.0/24 maxlen: 24
87.199.67.0/24 maxlen: 24
87.199.68.0/24 maxlen: 24
87.199.69.0/24 maxlen: 24
87.199.70.0/24 maxlen: 24
87.199.71.0/24 maxlen: 24
87.199.72.0/24 maxlen: 24
87.199.73.0/24 maxlen: 24
87.199.74.0/24 maxlen: 24
87.199.75.0/24 maxlen: 24
87.199.76.0/24 maxlen: 24
87.199.77.0/24 maxlen: 24
87.199.78.0/24 maxlen: 24
87.199.79.0/24 maxlen: 24
87.199.80.0/24 maxlen: 24
87.199.81.0/24 maxlen: 24
87.199.82.0/24 maxlen: 24
87.199.83.0/24 maxlen: 24
87.199.84.0/24 maxlen: 24
87.199.85.0/24 maxlen: 24
87.199.86.0/24 maxlen: 24
87.199.87.0/24 maxlen: 24
87.199.88.0/24 maxlen: 24
87.199.89.0/24 maxlen: 24
87.199.90.0/24 maxlen: 24
87.199.96.0/20 maxlen: 32
87.199.112.0/21 maxlen: 32
87.199.120.0/22 maxlen: 32
87.199.126.0/24 maxlen: 24
87.199.128.0/20 maxlen: 32
87.199.148.0/22 maxlen: 32
87.199.152.0/22 maxlen: 32
87.199.214.0/24 maxlen: 24
87.199.215.0/24 maxlen: 24
87.199.216.0/24 maxlen: 24
87.199.217.0/24 maxlen: 24
87.199.218.0/24 maxlen: 24
87.199.219.0/24 maxlen: 24
87.199.220.0/24 maxlen: 24
87.199.221.0/24 maxlen: 24
87.199.222.0/24 maxlen: 24
87.199.223.0/24 maxlen: 24
87.199.224.0/24 maxlen: 24
87.199.225.0/24 maxlen: 24
87.199.226.0/24 maxlen: 24
87.199.227.0/24 maxlen: 24
87.199.228.0/24 maxlen: 24
87.199.229.0/24 maxlen: 24
87.199.230.0/24 maxlen: 24
87.199.231.0/24 maxlen: 24
87.199.232.0/24 maxlen: 24
87.199.233.0/24 maxlen: 24
87.199.234.0/24 maxlen: 24
87.199.235.0/24 maxlen: 24
87.199.236.0/24 maxlen: 24
87.199.237.0/24 maxlen: 24
87.199.238.0/24 maxlen: 24
87.199.239.0/24 maxlen: 24
87.199.240.0/24 maxlen: 24
87.199.241.0/24 maxlen: 24
87.199.242.0/24 maxlen: 24
87.199.243.0/24 maxlen: 24
87.199.244.0/24 maxlen: 24
87.199.245.0/24 maxlen: 24
87.199.246.0/24 maxlen: 24
87.199.247.0/24 maxlen: 24
87.199.248.0/24 maxlen: 24
87.199.249.0/24 maxlen: 24
87.199.250.0/24 maxlen: 24
87.199.251.0/24 maxlen: 24
87.199.252.0/24 maxlen: 24
87.199.253.0/24 maxlen: 24
87.199.254.0/24 maxlen: 24
87.199.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:8e:22:68:4a:83:e6:33:99:bd:b1:3c:6b:fb:2c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Validity
Not Before: Feb 11 11:55:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f16853ab0be3ed30f16ca1be403458b8740a5cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:26:4e:40:3e:81:6e:b0:5e:e1:09:03:4c:
4a:70:63:e3:51:41:fa:24:64:2d:ee:fd:c1:56:30:
78:8f:11:3d:f9:32:3b:b4:a1:c3:a0:ca:14:36:d5:
68:73:00:4e:60:81:02:66:7f:a8:e1:9a:dc:c3:b9:
4d:2b:a9:a1:66:d0:aa:d7:10:c7:c2:f5:a6:62:c4:
52:76:e0:d0:2b:17:b1:38:ad:0c:35:1a:8d:ac:ba:
ec:22:05:bc:41:7b:34:f9:a0:a0:ae:6c:95:c5:f4:
c8:a0:fd:cb:18:85:84:83:79:d2:ee:33:4a:75:fe:
32:6c:cd:2f:69:ac:57:a0:d9:2e:42:17:ab:2a:60:
ad:43:98:37:2f:96:9b:8d:a1:f3:4b:22:b2:01:e3:
77:f8:17:fc:16:99:84:3f:e7:83:9a:1b:37:80:7d:
e6:1f:ad:79:42:a3:07:b7:6d:02:c6:04:2e:7d:fb:
7a:84:40:24:83:7a:7b:5a:96:82:b1:5d:fb:a6:7f:
64:86:95:da:1a:58:a4:a6:6d:31:15:0e:97:3e:35:
21:15:41:b4:b8:08:aa:4d:d0:92:a4:44:c9:44:5e:
05:09:f9:66:bf:0e:81:e3:c1:c5:98:75:ca:7f:49:
71:c0:57:9d:2b:be:28:9d:cf:cf:d8:db:a8:78:1d:
0f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:68:53:AB:0B:E3:ED:30:F1:6C:A1:BE:40:34:58:B8:74:0A:5C:BE
X509v3 Authority Key Identifier:
keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/8WhTqwvj7TDxbKG-QDRYuHQKXL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.0.0-87.199.123.255
87.199.126.0/24
87.199.128.0/20
87.199.148.0-87.199.155.255
87.199.214.0-87.199.255.255
Signature Algorithm: sha256WithRSAEncryption
97:a8:a9:2f:af:5f:a1:e3:22:d6:4d:60:c3:64:84:93:37:ea:
6f:5a:52:30:9c:a3:f0:d1:fd:38:c1:e2:1c:60:8e:8d:85:33:
8f:33:9f:52:3b:6a:b2:b1:47:9a:25:94:82:5b:0a:fb:8b:06:
24:fc:ca:ec:80:a1:43:cf:44:d4:44:67:43:c8:65:0d:c2:3c:
f1:82:cb:1c:fe:02:5b:d2:f3:f5:31:d8:57:b2:0e:01:a4:42:
7b:c2:9e:6d:11:7c:bc:01:d6:9a:e2:1c:32:c6:78:ef:8c:b3:
9c:4a:96:1f:f9:c2:4e:e3:9c:38:53:44:0e:4c:f1:d0:80:04:
ff:b3:42:fd:62:d1:03:35:0a:31:d4:ea:0e:c2:df:62:9d:a3:
16:e2:ad:33:9d:41:a5:e1:e0:06:18:6d:e5:56:a1:56:ed:c0:
a4:d9:f8:63:8c:27:28:8c:83:94:04:8f:80:e7:0a:52:62:6f:
66:da:bd:b2:b7:97:e6:7b:1e:2d:0d:8c:fb:f7:ad:63:f0:e6:
b7:45:ca:d0:15:42:ef:cb:f7:3a:ec:04:ec:bf:15:45:b6:d6:
3c:65:86:c5:74:1c:2f:bf:ba:1f:a7:66:5e:0c:07:02:00:0a:
8a:c0:d0:cc:5f:d5:c0:8a:61:ae:81:00:77:72:e8:f5:4b:e2:
b3:94:35:f8
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZxMjiJoSoPmM5m9sTxr+yyFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNzA4NDcxMmZkZWJiMWJmYzVhOGMwMjYyZDkxOWE4YWE0
NDA2MDMwHhcNMjYwMjExMTE1NTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTY4NTNhYjBiZTNlZDMwZjE2Y2ExYmU0MDM0NThiODc0MGE1Y2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWwmTkA+gW6wXuEJA0xKcGPjUUH6
JGQt7v3BVjB4jxE9+TI7tKHDoMoUNtVocwBOYIECZn+o4Zrcw7lNK6mhZtCq1xDH
wvWmYsRSduDQKxexOK0MNRqNrLrsIgW8QXs0+aCgrmyVxfTIoP3LGIWEg3nS7jNK
df4ybM0vaaxXoNkuQherKmCtQ5g3L5abjaHzSyKyAeN3+Bf8FpmEP+eDmhs3gH3m
H615QqMHt20CxgQufft6hEAkg3p7WpaCsV37pn9khpXaGlikpm0xFQ6XPjUhFUG0
uAiqTdCSpETJRF4FCflmvw6B48HFmHXKf0lxwFedK74onc/P2NuoeB0PNwIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFPFoU6sL4+0w8WyhvkA0WLh0Cly+MB8GA1UdIwQY
MBaAFCNwhHEv3rsb/FqMAmLZGaiqRAYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTNDRWNTX2V1eHY4V293Q1l0a1pxS3BFQmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lN2U5ZWUtMTdkOC00ZTdlLWJjMjgt
N2UxMzI5ZTA1ZmY0LzEvOFdoVHF3dmo3VER4YktHLVFEUll1SFFLWEw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lN2U5ZWUtMTdkOC00ZTdlLWJjMjgtN2UxMzI5ZTA1ZmY0
LzEvSTNDRWNTX2V1eHY4V293Q1l0a1pxS3BFQmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAsDAwBXxwME
AlfHeAMEAFfHfgMEBFfHgDAMAwQCV8eUAwQCV8eYMAsDBAFXx9YDAwNXwDANBgkq
hkiG9w0BAQsFAAOCAQEAl6ipL69foeMi1k1gw2SEkzfqb1pSMJyj8NH9OMHiHGCO
jYUzjzOfUjtqsrFHmiWUglsK+4sGJPzK7IChQ89E1ERnQ8hlDcI88YLLHP4CW9Lz
9THYV7IOAaRCe8KebRF8vAHWmuIcMsZ474yznEqWH/nCTuOcOFNEDkzx0IAE/7NC
/WLRAzUKMdTqDsLfYp2jFuKtM51BpeHgBhht5VahVu3ApNn4Y4wnKIyDlASPgOcK
UmJvZtq9sreX5nseLQ2M+/etY/Dmt0XK0BVC78v3OuwE7L8VRbbWPGWGxXQcL7+6
H6dmXgwHAgAKisDQzF/VwIphroEAd3Lo9Uvis5Q1+A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:32:20 2026 by rpki-client