Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/9D8zRooL7GIRssyQDERj2pjLTEg.roa
File: 9D8zRooL7GIRssyQDERj2pjLTEg.roa (raw, json)
Hash identifier: ou/519X40RGEgsg6xFxzjP5mJ508RHz7Yy+VOx34VIY=
Subject key identifier: F4:3F:33:46:8A:0B:EC:62:11:B2:CC:90:0C:44:63:DA:98:CB:4C:48
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019FA7F05A1FEC0E423F3E238A2398C2B940
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/9D8zRooL7GIRssyQDERj2pjLTEg.roa
Signing time: Tue 28 Jul 2026 08:56:14 +0000
ROA not before: Tue 28 Jul 2026 08:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203061
IP address blocks: 72.63.4.0/23 maxlen: 23
72.63.16.0/23 maxlen: 23
72.63.36.0/23 maxlen: 23
72.63.52.0/23 maxlen: 23
72.63.76.0/23 maxlen: 23
72.63.84.0/23 maxlen: 23
72.63.96.0/23 maxlen: 23
72.63.108.0/23 maxlen: 23
72.63.128.0/23 maxlen: 23
72.63.212.0/23 maxlen: 23
72.63.244.0/23 maxlen: 23
72.63.252.0/23 maxlen: 23
189.81.10.0/23 maxlen: 23
189.81.12.0/23 maxlen: 23
189.81.24.0/23 maxlen: 23
189.81.100.0/23 maxlen: 23
189.81.102.0/23 maxlen: 23
189.81.114.0/23 maxlen: 23
189.81.124.0/23 maxlen: 23
189.81.126.0/23 maxlen: 23
189.81.144.0/23 maxlen: 23
189.81.150.0/23 maxlen: 23
189.81.156.0/23 maxlen: 23
189.81.162.0/23 maxlen: 23
189.81.192.0/23 maxlen: 23
189.81.210.0/23 maxlen: 23
189.81.214.0/23 maxlen: 23
189.81.224.0/23 maxlen: 23
189.81.236.0/23 maxlen: 23
189.81.238.0/23 maxlen: 23
189.104.20.0/23 maxlen: 23
189.104.46.0/23 maxlen: 23
189.104.50.0/23 maxlen: 23
189.104.52.0/23 maxlen: 23
189.104.84.0/23 maxlen: 23
189.104.90.0/23 maxlen: 23
189.104.92.0/23 maxlen: 23
189.104.108.0/23 maxlen: 23
189.104.156.0/23 maxlen: 23
189.104.178.0/23 maxlen: 23
189.104.180.0/23 maxlen: 23
189.104.198.0/23 maxlen: 23
189.104.208.0/23 maxlen: 23
189.104.212.0/23 maxlen: 23
189.104.220.0/23 maxlen: 23
189.104.238.0/23 maxlen: 23
189.104.244.0/23 maxlen: 23
189.104.246.0/23 maxlen: 23
193.84.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f0:5a:1f:ec:0e:42:3f:3e:23:8a:23:98:c2:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jul 28 08:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f43f33468a0bec6211b2cc900c4463da98cb4c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:76:61:9b:aa:36:55:0f:ea:fc:eb:7f:87:
40:cc:66:29:e1:01:5e:e7:63:ab:a8:81:55:34:f7:
8c:64:92:f1:2b:76:80:c6:85:58:78:9c:73:c7:f3:
09:9f:23:ef:70:da:ef:a9:2d:bd:41:32:42:3b:44:
e1:5f:f1:80:a7:50:7e:a4:35:d9:f7:bb:86:64:27:
c7:07:6a:02:ca:bc:cc:ee:ea:1d:15:b8:21:bf:a1:
65:b2:94:7e:d2:6b:4b:f9:6d:5d:4b:99:b9:43:44:
91:be:12:de:64:b8:ef:e9:08:d1:cd:6d:cc:16:9a:
c3:10:ba:da:c3:d1:76:39:3d:ee:ec:44:1f:f8:db:
79:47:cf:cd:64:fd:61:8a:3d:42:94:bb:95:bd:3a:
c6:44:a5:e2:9b:bc:24:5d:07:bf:53:4e:7a:ff:ab:
f0:31:f0:ac:24:5b:39:3a:ac:f8:66:a5:a0:a1:98:
f4:07:ba:73:87:42:b2:5c:9e:5d:38:c5:4a:fd:16:
fb:4e:5f:9b:d0:77:ea:bd:a5:22:95:e5:6f:85:45:
d6:c0:d4:1d:e7:ac:aa:62:28:e9:c2:c8:13:0d:24:
7d:7b:f1:10:4b:47:ea:9e:9c:9c:0b:70:be:f1:a9:
fc:88:0f:84:bf:32:9f:23:c6:9b:d7:3a:53:5d:a6:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3F:33:46:8A:0B:EC:62:11:B2:CC:90:0C:44:63:DA:98:CB:4C:48
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/9D8zRooL7GIRssyQDERj2pjLTEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.63.4.0/23
72.63.16.0/23
72.63.36.0/23
72.63.52.0/23
72.63.76.0/23
72.63.84.0/23
72.63.96.0/23
72.63.108.0/23
72.63.128.0/23
72.63.212.0/23
72.63.244.0/23
72.63.252.0/23
189.81.10.0-189.81.13.255
189.81.24.0/23
189.81.100.0/22
189.81.114.0/23
189.81.124.0/22
189.81.144.0/23
189.81.150.0/23
189.81.156.0/23
189.81.162.0/23
189.81.192.0/23
189.81.210.0/23
189.81.214.0/23
189.81.224.0/23
189.81.236.0/22
189.104.20.0/23
189.104.46.0/23
189.104.50.0-189.104.53.255
189.104.84.0/23
189.104.90.0-189.104.93.255
189.104.108.0/23
189.104.156.0/23
189.104.178.0-189.104.181.255
189.104.198.0/23
189.104.208.0/23
189.104.212.0/23
189.104.220.0/23
189.104.238.0/23
189.104.244.0/22
193.84.183.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f0:7d:ec:02:95:07:cd:48:14:fc:1b:3b:5f:75:12:f7:82:
ce:3c:56:bf:2f:a5:c6:1a:7f:e3:9b:22:65:7e:09:4d:8b:e9:
34:80:27:73:76:90:f3:f3:e0:d0:f3:62:65:37:d2:1b:66:43:
1c:27:b2:fb:09:20:e0:af:f4:02:48:de:a7:49:f2:9b:0b:d8:
25:1e:90:b5:ba:e9:72:1e:19:a1:02:ad:31:b4:d4:a9:e9:bd:
4b:27:0c:8c:bc:a4:54:85:f5:a6:b8:2e:e7:7f:ac:c4:f7:a4:
0a:c2:69:08:53:3c:15:f1:f4:3a:6f:e7:e3:26:2a:14:3a:f7:
3b:2a:82:74:23:8c:0f:a2:2e:bd:18:87:d9:4e:2a:81:e6:a4:
61:29:18:bd:ab:de:2c:f0:74:9f:bc:c2:cd:3e:84:3e:78:06:
4a:c7:67:7d:23:f6:2d:7e:ad:05:07:69:81:80:c3:e6:05:ac:
79:74:2d:aa:2f:2f:2b:c3:f9:b6:42:5e:a9:17:d7:04:eb:d7:
50:89:61:ac:52:51:c0:6d:a7:5f:f2:f3:02:10:70:8a:35:f7:
ec:0a:e0:cb:f2:a1:dd:c8:6e:01:4e:66:af:59:28:f6:08:da:
bd:ef:a2:f0:e7:ae:38:d1:3a:4c:32:91:70:71:3a:6b:b9:dc:
3f:40:66:77
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgISAZ+n8Fof7A5CPz4jiiOYwrlAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw
Njc5NTQwHhcNMjYwNzI4MDg1NjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDNmMzM0NjhhMGJlYzYyMTFiMmNjOTAwYzQ0NjNkYTk4Y2I0YzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNh2YZuqNlUP6vzrf4dAzGYp4QFe
52OrqIFVNPeMZJLxK3aAxoVYeJxzx/MJnyPvcNrvqS29QTJCO0ThX/GAp1B+pDXZ
97uGZCfHB2oCyrzM7uodFbghv6FlspR+0mtL+W1dS5m5Q0SRvhLeZLjv6QjRzW3M
FprDELraw9F2OT3u7EQf+Nt5R8/NZP1hij1ClLuVvTrGRKXim7wkXQe/U056/6vw
MfCsJFs5Oqz4ZqWgoZj0B7pzh0KyXJ5dOMVK/Rb7Tl+b0HfqvaUileVvhUXWwNQd
56yqYijpwsgTDSR9e/EQS0fqnpycC3C+8an8iA+EvzKfI8ab1zpTXaYmxwIDAQAB
o4IDIzCCAx8wHQYDVR0OBBYEFPQ/M0aKC+xiEbLMkAxEY9qYy0xIMB8GA1UdIwQY
MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt
NmVhYzYyZTYwZGY3LzEvOUQ4elJvb0w3R0lSc3N5UURFUmoycGpMVEVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3
LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNwYIKwYBBQUHAQcBAf8EggEmMIIBIjCCAR4EAgABMIIB
FgMEAUg/BAMEAUg/EAMEAUg/JAMEAUg/NAMEAUg/TAMEAUg/VAMEAUg/YAMEAUg/
bAMEAUg/gAMEAUg/1AMEAUg/9AMEAUg//DAMAwQBvVEKAwQBvVEMAwQBvVEYAwQC
vVFkAwQBvVFyAwQCvVF8AwQBvVGQAwQBvVGWAwQBvVGcAwQBvVGiAwQBvVHAAwQB
vVHSAwQBvVHWAwQBvVHgAwQCvVHsAwQBvWgUAwQBvWguMAwDBAG9aDIDBAG9aDQD
BAG9aFQwDAMEAb1oWgMEAb1oXAMEAb1obAMEAb1onDAMAwQBvWiyAwQBvWi0AwQB
vWjGAwQBvWjQAwQBvWjUAwQBvWjcAwQBvWjuAwQCvWj0AwQAwVS3MA0GCSqGSIb3
DQEBCwUAA4IBAQA98H3sApUHzUgU/Bs7X3US94LOPFa/L6XGGn/jmyJlfglNi+k0
gCdzdpDz8+DQ82JlN9IbZkMcJ7L7CSDgr/QCSN6nSfKbC9glHpC1uulyHhmhAq0x
tNSp6b1LJwyMvKRUhfWmuC7nf6zE96QKwmkIUzwV8fQ6b+fjJioUOvc7KoJ0I4wP
oi69GIfZTiqB5qRhKRi9q94s8HSfvMLNPoQ+eAZKx2d9I/Ytfq0FB2mBgMPmBax5
dC2qLy8rw/m2Ql6pF9cE69dQiWGsUlHAbadf8vMCEHCKNffsCuDL8qHdyG4BTmav
WSj2CNq976Lw56440TpMMpFwcTprudw/QGZ3
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:20:11 2026 by rpki-client