Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/S1jD-5Utb5l_TqOf3xp9hNVbAZM.roa
File: S1jD-5Utb5l_TqOf3xp9hNVbAZM.roa (raw, json)
Hash identifier: 4N3FFL4AzILL7Go78JFJIpXyx5xR/Ad8cvO6bVYZZv0=
Subject key identifier: 4B:58:C3:FB:95:2D:6F:99:7F:4E:A3:9F:DF:1A:7D:84:D5:5B:01:93
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 019C55D6002C631E52354F901BAA21780949
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/S1jD-5Utb5l_TqOf3xp9hNVbAZM.roa
Signing time: Fri 13 Feb 2026 07:10:13 +0000
ROA not before: Fri 13 Feb 2026 07:10:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15557
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.128.0.0/13 maxlen: 24
77.136.0.0/16 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.140.0.0/15 maxlen: 24
77.142.0.0/16 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.174.192.0/18 maxlen: 24
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.118.4.0/24 maxlen: 24
80.124.0.0/15 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.65.0.0/16 maxlen: 16
81.185.0.0/16 maxlen: 24
81.220.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
85.68.0.0/15 maxlen: 24
85.168.0.0/14 maxlen: 24
86.64.0.0/12 maxlen: 24
86.66.127.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
88.136.0.0/13 maxlen: 24
88.136.0.0/14 maxlen: 24
88.140.0.0/15 maxlen: 24
88.142.0.0/16 maxlen: 24
88.143.251.0/24 maxlen: 24
88.143.252.0/24 maxlen: 24
88.143.253.0/24 maxlen: 24
88.143.254.0/24 maxlen: 24
88.143.255.0/24 maxlen: 24
88.219.0.0/16 maxlen: 16
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
91.68.0.0/14 maxlen: 24
91.68.0.0/22 maxlen: 22
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
93.191.80.0/21 maxlen: 21
95.157.192.0/18 maxlen: 18
109.0.0.0/11 maxlen: 24
141.170.216.0/21 maxlen: 24
185.147.204.0/22 maxlen: 24
194.6.128.0/19 maxlen: 19
194.183.192.0/19 maxlen: 19
194.242.176.0/20 maxlen: 20
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:6200::/29 maxlen: 48
2a00:8d80::/32 maxlen: 32
2a00:9380::/32 maxlen: 32
2a00:b280::/32 maxlen: 32
2a00:c780::/32 maxlen: 32
2a00:cc80::/32 maxlen: 32
2a00:d780::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400::/48 maxlen: 48
2a02:8400:11::/48 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a04:800::/29 maxlen: 29
2a04:800::/30 maxlen: 30
2a04:807::/48 maxlen: 48
2a04:807:1::/48 maxlen: 48
2a04:807:2::/48 maxlen: 48
2a04:807:3::/48 maxlen: 48
2a04:807:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:55:d6:00:2c:63:1e:52:35:4f:90:1b:aa:21:78:09:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Feb 13 07:10:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b58c3fb952d6f997f4ea39fdf1a7d84d55b0193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:23:f6:17:3b:bc:b1:ed:03:8c:7e:39:65:eb:
15:27:e8:a1:43:66:11:17:28:5f:f2:14:b1:56:21:
54:0f:6c:04:cf:c0:40:34:b7:8a:81:a9:c3:27:e8:
b4:4f:89:24:e5:4e:ba:6b:c7:1e:da:c8:ec:27:0a:
f1:0c:8e:0d:25:d4:c9:36:95:9f:99:b8:d4:15:ab:
d5:eb:58:b2:20:5c:12:90:93:a5:f7:46:7f:69:7b:
44:5b:2d:27:06:8a:1b:fd:e4:37:a9:d8:0f:bd:0f:
ec:f5:00:aa:55:97:57:69:fb:3f:a7:7a:e6:4f:31:
d1:19:57:47:f3:10:d0:0c:26:2e:40:6f:30:03:21:
7d:9e:84:ec:98:53:d3:eb:7e:cc:f7:18:24:56:18:
d1:f0:11:b4:b8:c8:74:87:bb:31:4f:b6:7c:0a:af:
29:a1:c7:2b:55:c5:f1:e7:25:55:c0:17:87:ec:80:
41:dc:10:2a:fa:4e:db:6f:94:af:4d:bc:f9:25:72:
a4:37:c2:89:a3:51:e6:1c:74:bd:c6:03:77:34:9c:
e9:90:d6:b5:66:09:3b:62:93:50:e3:5f:4e:33:67:
a9:b4:ac:45:c2:21:81:e8:a0:53:83:77:83:14:2b:
1c:33:66:35:3a:bd:ee:a2:6a:f8:ab:b6:5f:81:af:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:58:C3:FB:95:2D:6F:99:7F:4E:A3:9F:DF:1A:7D:84:D5:5B:01:93
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/S1jD-5Utb5l_TqOf3xp9hNVbAZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.142.255.255
77.144.0.0/12
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.191.80.0/21
95.157.192.0/18
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:8d80::/32
2a00:9380::/32
2a00:b280::/32
2a00:c780::/32
2a00:cc80::/32
2a00:d780::/32
2a00:ec80::/32
2a02:8400::/25
2a04:800::/29
Signature Algorithm: sha256WithRSAEncryption
02:10:76:49:b5:2c:e0:28:76:17:24:55:e1:47:f7:78:0e:34:
f2:55:fd:96:f5:e3:10:72:04:e7:93:0e:36:6a:74:f4:f9:29:
3b:19:f7:b5:06:a3:06:c7:f7:f0:8b:0c:2f:01:41:89:b2:bc:
7e:82:5d:2b:f3:e3:ce:4e:b5:4b:f7:60:0b:a2:1d:2a:3b:33:
2d:77:9c:27:5d:58:86:e9:28:13:77:1f:42:64:91:af:f9:9f:
29:fb:50:e0:81:47:33:9f:76:d2:0a:61:34:64:56:f4:6e:de:
03:ae:4f:83:62:9d:50:ca:66:d1:f7:0b:1c:1a:58:7e:0b:f0:
d4:43:26:db:79:03:50:08:32:7c:8b:ac:49:62:7d:13:02:bd:
e0:b3:a8:17:1c:2f:05:3c:0d:32:f8:f9:e2:3e:39:78:0a:a9:
4a:68:d0:5a:e9:c5:e7:2a:f5:ac:ca:5b:b4:8a:6d:e8:b7:ca:
46:9b:fc:ee:2c:f1:03:37:e4:a2:06:10:41:e6:8f:c8:7a:f9:
95:a8:49:dc:5a:d9:57:9b:cf:f3:4b:d9:8f:ea:53:33:18:73:
ec:6e:77:70:c6:80:c2:b1:c6:91:9e:3e:43:66:96:04:a6:c2:
51:ee:2c:79:dc:0d:3a:0a:10:03:34:47:ee:fe:29:7c:46:ac:
c2:2d:de:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:54:56 2026 by rpki-client