Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Qtf5F9ucUa9WlYqI7LvBuxEYnRs.roa
File: Qtf5F9ucUa9WlYqI7LvBuxEYnRs.roa (raw, json)
Hash identifier: OXjlkamXcYzF43Cud75tu/YjQHgZmklUqcJzwAF1XGM=
Subject key identifier: 42:D7:F9:17:DB:9C:51:AF:56:95:8A:88:EC:BB:C1:BB:11:18:9D:1B
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019C6643EAB8EBDDC65A6C2D5D32677B9C99
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Qtf5F9ucUa9WlYqI7LvBuxEYnRs.roa
Signing time: Mon 16 Feb 2026 11:44:12 +0000
ROA not before: Mon 16 Feb 2026 11:44:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213807
IP address blocks: 37.202.224.0/22 maxlen: 24
37.202.228.0/22 maxlen: 24
37.202.232.0/22 maxlen: 24
37.202.235.0/24 maxlen: 24
37.202.236.0/22 maxlen: 24
37.202.240.0/23 maxlen: 24
37.202.241.0/24 maxlen: 24
37.202.242.0/24 maxlen: 24
37.202.244.0/22 maxlen: 24
37.202.248.0/24 maxlen: 24
37.202.249.0/24 maxlen: 24
37.202.251.0/24 maxlen: 24
94.182.81.0/24 maxlen: 24
94.182.101.0/24 maxlen: 24
94.182.103.0/24 maxlen: 24
94.182.104.0/22 maxlen: 24
94.182.108.0/24 maxlen: 24
94.182.109.0/24 maxlen: 24
94.182.114.0/24 maxlen: 24
94.182.116.0/24 maxlen: 24
94.182.128.0/23 maxlen: 24
94.182.131.0/24 maxlen: 24
94.182.132.0/24 maxlen: 24
94.182.134.0/24 maxlen: 24
94.182.135.0/24 maxlen: 24
94.182.136.0/23 maxlen: 24
94.182.144.0/24 maxlen: 24
94.182.145.0/24 maxlen: 24
94.182.147.0/24 maxlen: 24
94.182.149.0/24 maxlen: 24
94.182.150.0/24 maxlen: 24
94.182.151.0/24 maxlen: 24
94.182.152.0/24 maxlen: 24
94.182.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:43:ea:b8:eb:dd:c6:5a:6c:2d:5d:32:67:7b:9c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Feb 16 11:44:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42d7f917db9c51af56958a88ecbbc1bb11189d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:b7:e4:3b:f1:83:ff:4b:93:a8:b0:d4:e9:
3e:29:17:3d:21:03:c7:6f:39:a7:f0:54:dc:d1:86:
4d:58:86:56:4e:2e:d8:41:79:22:e7:2c:78:41:a6:
d6:2a:c3:0e:3b:a3:33:b2:f8:c1:96:01:4a:7e:77:
e3:86:c1:19:7e:5a:51:17:85:c1:ea:fe:54:61:bb:
2e:87:19:81:5f:df:32:b6:a7:9b:13:4e:be:29:a1:
22:4f:65:d9:cd:98:f2:13:37:ac:f1:80:de:5e:f6:
d9:ee:7a:8c:32:83:21:fd:e7:2d:9f:9f:07:29:7f:
ba:3f:e7:f5:63:c7:71:33:83:b6:10:53:f1:c5:d9:
1a:7c:55:0f:55:dc:a2:42:96:87:b4:d8:ab:63:0a:
86:ee:c7:cd:36:66:0f:bb:f4:01:be:23:05:20:45:
17:94:00:f0:8a:a4:48:ec:c9:54:41:3b:27:c4:69:
8e:14:42:df:a1:92:7d:37:fd:db:c7:b7:7b:48:02:
cd:a7:1c:be:0a:97:bf:bc:6c:95:9c:05:5e:86:00:
61:7a:cc:4a:1e:5e:bb:c3:43:b3:c2:70:fd:a7:6f:
7e:32:40:09:f8:ba:7f:ad:e7:41:f4:df:2d:fd:b8:
d7:82:50:56:df:73:84:68:1e:eb:f6:08:5d:03:1e:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D7:F9:17:DB:9C:51:AF:56:95:8A:88:EC:BB:C1:BB:11:18:9D:1B
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Qtf5F9ucUa9WlYqI7LvBuxEYnRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.224.0-37.202.242.255
37.202.244.0-37.202.249.255
37.202.251.0/24
94.182.81.0/24
94.182.101.0/24
94.182.103.0-94.182.109.255
94.182.114.0/24
94.182.116.0/24
94.182.128.0/23
94.182.131.0-94.182.132.255
94.182.134.0-94.182.137.255
94.182.144.0/23
94.182.147.0/24
94.182.149.0-94.182.152.255
94.182.223.0/24
Signature Algorithm: sha256WithRSAEncryption
85:32:2f:bb:7f:c9:8c:3e:1c:94:a9:92:3e:65:0c:7a:f2:4f:
8d:c1:f1:b3:d1:d1:d0:39:a1:43:13:66:31:80:9a:97:e7:a9:
30:be:a0:6f:28:7f:e3:27:6f:50:b9:7a:6c:95:e8:ec:e5:9e:
c5:b6:43:eb:41:a4:0a:a4:10:8b:86:b4:9d:3c:58:eb:28:3c:
1b:eb:a6:19:17:38:4a:cf:8b:9a:36:34:42:2d:d6:6a:34:16:
dd:8d:e2:1c:ed:09:ee:d7:c1:dd:65:df:2e:21:4a:63:d1:6b:
6a:f2:29:ba:c1:50:9a:a6:1d:b1:8b:65:96:a8:a6:ae:c7:4b:
56:76:eb:11:5e:05:a9:2b:17:d3:b2:b0:46:2c:98:ac:bf:22:
f5:e0:92:b2:4c:58:c6:cc:5e:7e:f4:dc:95:ba:8d:d9:67:46:
1e:d0:34:07:a2:b1:a9:6c:d2:ef:f8:17:9e:ab:0a:a4:f5:dd:
bd:88:ce:43:9d:81:97:2d:26:4a:6f:18:88:8b:ce:a4:42:81:
6e:b6:94:9c:42:3a:32:cb:3e:a7:61:b8:60:98:de:8b:99:b2:
a9:0f:65:e8:b5:5c:09:1d:0e:09:4e:56:29:c1:c0:5a:06:b0:
46:1c:23:da:28:b4:99:dc:59:d9:c8:bd:a1:51:93:d5:55:c5:
0a:77:3f:20
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAZxmQ+q4693GWmwtXTJne5yZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjYwMjE2MTE0NDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmQ3ZjkxN2RiOWM1MWFmNTY5NThhODhlY2JiYzFiYjExMTg5ZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy635Dvxg/9Lk6iw1Ok+KRc9IQPH
bzmn8FTc0YZNWIZWTi7YQXki5yx4QabWKsMOO6MzsvjBlgFKfnfjhsEZflpRF4XB
6v5UYbsuhxmBX98ytqebE06+KaEiT2XZzZjyEzes8YDeXvbZ7nqMMoMh/ectn58H
KX+6P+f1Y8dxM4O2EFPxxdkafFUPVdyiQpaHtNirYwqG7sfNNmYPu/QBviMFIEUX
lADwiqRI7MlUQTsnxGmOFELfoZJ9N/3bx7d7SALNpxy+Cpe/vGyVnAVehgBhesxK
Hl67w0OzwnD9p29+MkAJ+Lp/redB9N8t/bjXglBW33OEaB7r9ghdAx404QIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFELX+RfbnFGvVpWKiOy7wbsRGJ0bMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvUXRmNUY5dWNVYTlXbFlxSTdMdkJ1eEVZblJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYowDAME
BSXK4AMEACXK8jAMAwQCJcr0AwQBJcr4AwQAJcr7AwQAXrZRAwQAXrZlMAwDBABe
tmcDBAFetmwDBABetnIDBABetnQDBAFetoAwDAMEAF62gwMEAF62hDAMAwQBXraG
AwQBXraIAwQBXraQAwQAXraTMAwDBABetpUDBABetpgDBABett8wDQYJKoZIhvcN
AQELBQADggEBAIUyL7t/yYw+HJSpkj5lDHryT43B8bPR0dA5oUMTZjGAmpfnqTC+
oG8of+Mnb1C5emyV6OzlnsW2Q+tBpAqkEIuGtJ08WOsoPBvrphkXOErPi5o2NEIt
1mo0Ft2N4hztCe7Xwd1l3y4hSmPRa2ryKbrBUJqmHbGLZZaopq7HS1Z26xFeBakr
F9OysEYsmKy/IvXgkrJMWMbMXn703JW6jdlnRh7QNAeisals0u/4F56rCqT13b2I
zkOdgZctJkpvGIiLzqRCgW62lJxCOjLLPqdhuGCY3ouZsqkPZei1XAkdDglOVinB
wFoGsEYcI9ootJncWdnIvaFRk9VVxQp3PyA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:18:19 2026 by rpki-client