Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/cZ8kvN2zYx2_I2osJ7iM_ygXnTw.roa
File: cZ8kvN2zYx2_I2osJ7iM_ygXnTw.roa (raw, json)
Hash identifier: Po1Sl6+19ysmuX4vxEqFxRVJ7iUNhtQroKjjE4MBrwI=
Subject key identifier: 71:9F:24:BC:DD:B3:63:1D:BF:23:6A:2C:27:B8:8C:FF:28:17:9D:3C
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 01A0232CB60F6160EFC1B9444468E689757B
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/cZ8kvN2zYx2_I2osJ7iM_ygXnTw.roa
Signing time: Fri 21 Aug 2026 07:15:27 +0000
ROA not before: Fri 21 Aug 2026 07:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20904
IP address blocks: 5.61.94.0/24 maxlen: 24
37.35.80.0/21 maxlen: 24
46.254.208.0/22 maxlen: 22
46.254.208.0/24 maxlen: 24
46.254.210.0/24 maxlen: 24
46.254.211.0/24 maxlen: 24
77.95.242.0/24 maxlen: 24
77.95.245.0/24 maxlen: 24
77.95.246.0/23 maxlen: 23
80.75.96.0/20 maxlen: 20
80.75.106.0/24 maxlen: 24
93.174.192.0/21 maxlen: 22
149.126.176.0/21 maxlen: 21
164.5.160.0/19 maxlen: 22
164.5.208.0/21 maxlen: 21
185.16.168.0/22 maxlen: 22
185.25.76.0/22 maxlen: 24
185.67.80.0/22 maxlen: 22
188.64.0.0/21 maxlen: 21
2a00:1a58::/32 maxlen: 32
2a00:74a0::/32 maxlen: 32
2a04:240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:2c:b6:0f:61:60:ef:c1:b9:44:44:68:e6:89:75:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: Aug 21 07:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=719f24bcddb3631dbf236a2c27b88cff28179d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:22:58:97:68:9f:19:31:17:6b:9c:5f:04:
f9:69:25:06:db:f7:f3:26:21:7e:bf:56:15:d1:49:
2b:45:7e:cf:59:e9:de:bb:4d:c4:0d:3f:4c:36:ff:
b2:ab:24:a4:92:5c:a0:50:ff:71:80:a2:10:25:fc:
9c:77:e9:f4:49:61:d0:98:6a:72:09:bf:61:73:62:
fe:a6:73:21:af:d6:1a:bc:34:d7:8f:05:5d:d0:dc:
8b:81:a4:24:d3:eb:40:e0:59:43:51:3a:1e:2c:a5:
52:15:24:c9:64:64:e2:02:14:46:ce:b0:8f:4b:f2:
f6:5a:c8:c6:f9:c6:f2:40:84:a5:ca:53:02:ab:6a:
30:f1:b5:c7:15:96:9b:86:04:fa:82:9d:7e:d5:8c:
1a:36:9c:ee:48:10:d9:dc:de:39:c3:ab:8c:3b:8c:
ec:9f:dd:cf:d1:83:18:89:00:cf:30:9a:45:29:43:
61:1b:02:4a:67:5f:89:56:8a:b4:82:ed:04:40:40:
7f:fe:20:cd:23:b1:6c:37:fa:30:b5:bd:94:74:96:
10:90:60:79:c0:3c:3f:14:45:f9:92:0b:85:97:be:
09:7c:f5:91:2e:44:d2:ca:87:fb:90:b8:95:d7:f3:
c4:3d:ea:87:07:24:c7:9c:a8:35:b2:3e:21:6e:44:
ae:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9F:24:BC:DD:B3:63:1D:BF:23:6A:2C:27:B8:8C:FF:28:17:9D:3C
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/cZ8kvN2zYx2_I2osJ7iM_ygXnTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.94.0/24
37.35.80.0/21
46.254.208.0/22
77.95.242.0/24
77.95.245.0-77.95.247.255
80.75.96.0/20
93.174.192.0/21
149.126.176.0/21
164.5.160.0/19
164.5.208.0/21
185.16.168.0/22
185.25.76.0/22
185.67.80.0/22
188.64.0.0/21
IPv6:
2a00:1a58::/32
2a00:74a0::/32
2a04:240::/29
Signature Algorithm: sha256WithRSAEncryption
39:c2:21:e6:f0:99:d4:c5:7c:4b:db:cc:c9:c4:d2:bf:b7:80:
3d:ef:79:89:77:4c:2a:1b:4e:71:2f:1f:f9:3f:1e:f5:0b:97:
0a:b8:0a:1f:96:47:40:93:20:e5:34:62:75:8c:b2:1e:cc:1b:
0d:2a:ae:2a:78:1e:f0:7c:87:5f:b1:39:5e:09:e5:c1:84:ec:
5b:c3:da:86:2f:ce:ba:64:a1:37:a6:69:84:ea:56:0a:20:31:
8c:29:0c:88:b3:d5:21:a4:30:b4:ca:fa:9a:68:44:ba:f9:6b:
ef:39:35:04:82:f2:56:31:aa:78:71:17:fd:bb:ca:39:ce:72:
16:ac:e5:47:0f:f5:4f:a8:92:10:3c:f6:25:29:9c:da:82:c0:
36:1a:24:7a:3b:e7:bd:8b:97:8b:2f:b3:79:c0:1d:3f:f1:11:
98:df:7b:e0:46:c3:c8:9b:df:36:e5:86:d1:ca:ed:3d:70:49:
43:ee:33:7a:74:20:6a:82:ca:c1:b6:78:fa:d7:25:24:a4:fe:
46:35:de:be:f0:45:ea:6c:be:16:c0:30:72:a2:cb:93:48:7d:
40:4d:17:c9:a9:3f:b3:15:65:fb:b7:1f:5a:c3:a1:66:ff:49:
ca:5e:88:69:d4:42:64:c9:c7:ea:17:ff:16:5e:b0:e8:cb:cd:
ef:0f:09:bf
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAaAjLLYPYWDvwblERGjmiXV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMzFiY2Y5MjNjNWYyNWNhZmJkYWJkZmRkNDZlNTExZjk1
ZGYwZDEwHhcNMjYwODIxMDcxNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTlmMjRiY2RkYjM2MzFkYmYyMzZhMmMyN2I4OGNmZjI4MTc5ZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB0iWJdonxkxF2ucXwT5aSUG2/fz
JiF+v1YV0UkrRX7PWeneu03EDT9MNv+yqySkklygUP9xgKIQJfycd+n0SWHQmGpy
Cb9hc2L+pnMhr9YavDTXjwVd0NyLgaQk0+tA4FlDUToeLKVSFSTJZGTiAhRGzrCP
S/L2WsjG+cbyQISlylMCq2ow8bXHFZabhgT6gp1+1YwaNpzuSBDZ3N45w6uMO4zs
n93P0YMYiQDPMJpFKUNhGwJKZ1+JVoq0gu0EQEB//iDNI7FsN/owtb2UdJYQkGB5
wDw/FEX5kguFl74JfPWRLkTSyof7kLiV1/PEPeqHByTHnKg1sj4hbkSuiQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFHGfJLzds2MdvyNqLCe4jP8oF508MB8GA1UdIwQY
MBaAFLoxvPkjxfJcr72r391G5RH5XfDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWpHOC1TUEY4bHl2dmF2ZjNVYmxFZmxkOE5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83NmE3ZjEtNzQ4ZC00MDZjLWE1MWYt
MWJhMzQzZjE3ZWMyLzEvY1o4a3ZOMnpZeDJfSTJvc0o3aU1feWdYblR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83NmE3ZjEtNzQ4ZC00MDZjLWE1MWYtMWJhMzQzZjE3ZWMy
LzEvdWpHOC1TUEY4bHl2dmF2ZjNVYmxFZmxkOE5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTBiBAIAATBcAwQABT1e
AwQDJSNQAwQCLv7QAwQATV/yMAwDBABNX/UDBANNX/ADBARQS2ADBANdrsADBAOV
frADBAWkBaADBAOkBdADBAK5EKgDBAK5GUwDBAK5Q1ADBAO8QAAwGwQCAAIwFQMF
ACoAGlgDBQAqAHSgAwUDKgQCQDANBgkqhkiG9w0BAQsFAAOCAQEAOcIh5vCZ1MV8
S9vMycTSv7eAPe95iXdMKhtOcS8f+T8e9QuXCrgKH5ZHQJMg5TRidYyyHswbDSqu
Knge8HyHX7E5XgnlwYTsW8Pahi/OumShN6ZphOpWCiAxjCkMiLPVIaQwtMr6mmhE
uvlr7zk1BILyVjGqeHEX/bvKOc5yFqzlRw/1T6iSEDz2JSmc2oLANhokejvnvYuX
iy+zecAdP/ERmN974EbDyJvfNuWG0crtPXBJQ+4zenQgaoLKwbZ4+tclJKT+RjXe
vvBF6my+FsAwcqLLk0h9QE0Xyak/sxVl+7cfWsOhZv9Jyl6IadRCZMnH6hf/Fl6w
6MvN7w8Jvw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 20:43:57 2026 by rpki-client