Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/XttFtfEtk9i86AsYFs1LztDewa0.roa
File: XttFtfEtk9i86AsYFs1LztDewa0.roa (raw, json)
Hash identifier: 5Vn8oMuSRYonnOniGTg2ibUKaR7iqVZANMu7pVE2FyU=
Subject key identifier: 5E:DB:45:B5:F1:2D:93:D8:BC:E8:0B:18:16:CD:4B:CE:D0:DE:C1:AD
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A0B0E31532A14BDB48ECED8CA1939033D8
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/XttFtfEtk9i86AsYFs1LztDewa0.roa
Signing time: Thu 17 Sep 2026 19:41:07 +0000
ROA not before: Thu 17 Sep 2026 19:41:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 9.142.0.0/16 maxlen: 24
9.142.64.0/20 maxlen: 20
9.142.76.0/23 maxlen: 23
9.142.78.0/24 maxlen: 24
9.142.79.0/24 maxlen: 24
9.142.80.0/21 maxlen: 21
9.142.92.0/23 maxlen: 23
9.142.94.0/24 maxlen: 24
9.142.95.0/24 maxlen: 24
9.142.128.0/19 maxlen: 19
9.142.160.0/19 maxlen: 19
9.142.224.0/20 maxlen: 20
9.142.224.0/21 maxlen: 21
9.142.236.0/23 maxlen: 23
9.142.238.0/24 maxlen: 24
9.142.239.0/24 maxlen: 24
9.142.240.0/21 maxlen: 21
9.142.248.0/22 maxlen: 22
9.142.252.0/23 maxlen: 23
9.142.254.0/24 maxlen: 24
9.142.255.0/24 maxlen: 24
9.151.128.0/18 maxlen: 18
9.151.236.0/22 maxlen: 22
9.232.80.0/20 maxlen: 20
9.232.96.0/19 maxlen: 19
9.249.0.0/21 maxlen: 21
9.249.8.0/21 maxlen: 21
9.249.24.0/22 maxlen: 22
9.249.72.0/22 maxlen: 22
135.132.0.0/19 maxlen: 24
135.132.97.0/24 maxlen: 24
135.132.99.0/24 maxlen: 24
135.132.100.0/24 maxlen: 24
135.132.102.0/24 maxlen: 24
135.132.104.0/23 maxlen: 23
135.132.106.0/24 maxlen: 24
135.132.108.0/23 maxlen: 23
135.132.110.0/24 maxlen: 24
135.132.112.0/24 maxlen: 24
135.132.114.0/23 maxlen: 23
135.132.117.0/24 maxlen: 24
135.132.118.0/24 maxlen: 24
135.132.120.0/23 maxlen: 23
135.132.123.0/24 maxlen: 24
135.132.124.0/24 maxlen: 24
135.132.126.0/24 maxlen: 24
135.132.160.0/20 maxlen: 20
138.226.32.0/20 maxlen: 20
138.226.80.0/21 maxlen: 21
138.226.120.0/21 maxlen: 21
138.226.128.0/18 maxlen: 18
138.226.200.0/21 maxlen: 21
151.145.128.0/21 maxlen: 21
151.145.136.0/21 maxlen: 21
151.145.144.0/21 maxlen: 21
151.145.152.0/21 maxlen: 21
151.145.160.0/19 maxlen: 19
158.120.48.0/24 maxlen: 24
158.120.49.0/24 maxlen: 24
158.120.50.0/24 maxlen: 24
158.120.51.0/24 maxlen: 24
158.120.52.0/24 maxlen: 24
158.120.53.0/24 maxlen: 24
158.120.54.0/24 maxlen: 24
158.120.55.0/24 maxlen: 24
158.120.56.0/24 maxlen: 24
158.120.57.0/24 maxlen: 24
158.120.58.0/24 maxlen: 24
158.120.59.0/24 maxlen: 24
158.120.60.0/24 maxlen: 24
158.120.61.0/24 maxlen: 24
158.120.62.0/24 maxlen: 24
158.120.63.0/24 maxlen: 24
170.100.148.0/23 maxlen: 23
170.100.150.0/23 maxlen: 23
170.100.152.0/21 maxlen: 21
170.100.152.0/22 maxlen: 22
170.100.156.0/22 maxlen: 22
192.6.64.0/23 maxlen: 23
192.6.66.0/23 maxlen: 23
192.6.172.0/23 maxlen: 23
192.6.174.0/23 maxlen: 23
192.6.252.0/23 maxlen: 23
192.6.254.0/23 maxlen: 23
192.25.180.0/23 maxlen: 23
192.25.182.0/23 maxlen: 23
192.25.200.0/23 maxlen: 23
192.25.202.0/23 maxlen: 23
192.25.208.0/23 maxlen: 23
192.25.210.0/23 maxlen: 23
192.25.232.0/23 maxlen: 23
192.25.234.0/23 maxlen: 23
192.25.244.0/23 maxlen: 23
192.25.246.0/23 maxlen: 23
192.46.184.0/21 maxlen: 21
192.46.184.0/22 maxlen: 22
192.46.188.0/24 maxlen: 24
192.46.200.0/22 maxlen: 22
192.53.64.0/22 maxlen: 22
192.53.68.0/22 maxlen: 22
192.53.136.0/22 maxlen: 22
192.53.140.0/22 maxlen: 22
192.137.24.0/23 maxlen: 23
192.137.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:e3:15:32:a1:4b:db:48:ec:ed:8c:a1:93:90:33:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 17 19:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5edb45b5f12d93d8bce80b1816cd4bced0dec1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:eb:29:7f:5b:e7:ab:ce:7a:bf:5b:fb:61:
01:72:d8:cf:66:aa:34:0d:48:0c:07:bb:0e:a7:b0:
bc:fa:14:2a:11:58:f6:a9:32:75:9f:62:9a:38:e9:
83:71:fc:c8:eb:ee:a4:29:48:07:e6:6b:3b:b4:e8:
0b:df:bb:fa:58:e2:ee:22:db:a4:5f:41:91:a3:1e:
bf:be:83:a3:36:34:da:d0:c8:e0:f6:db:b9:28:37:
4b:59:2f:14:ce:69:16:1c:87:7b:d3:bd:1e:ba:1d:
78:f0:75:2c:ce:99:d9:ab:80:9c:4a:a6:0e:80:b3:
47:db:8f:9d:3f:66:dd:d4:4c:06:3b:ff:39:9b:6e:
7f:0b:21:53:31:1d:ec:60:0e:95:f4:8a:11:11:62:
2d:58:e5:81:a4:c4:11:ce:58:67:9d:e9:d7:dd:64:
7e:3b:f6:db:d1:78:6e:34:97:0b:b4:fc:a1:38:66:
7f:01:2f:a6:6f:aa:40:ac:5b:14:10:12:9a:c6:6a:
ba:39:72:57:a5:ed:c4:7a:0d:0c:91:2e:ae:83:c3:
85:52:dc:6e:2f:e1:3b:47:a9:2a:c1:d5:20:a5:8d:
d1:00:0d:2f:d9:00:7f:9e:d4:bb:a8:e2:79:97:a3:
4b:b3:f1:25:aa:32:53:3f:f7:bf:c6:b2:19:4b:22:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DB:45:B5:F1:2D:93:D8:BC:E8:0B:18:16:CD:4B:CE:D0:DE:C1:AD
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/XttFtfEtk9i86AsYFs1LztDewa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.0.0/16
9.151.128.0/18
9.151.236.0/22
9.232.80.0-9.232.127.255
9.249.0.0/20
9.249.24.0/22
9.249.72.0/22
135.132.0.0/19
135.132.97.0/24
135.132.99.0-135.132.100.255
135.132.102.0/24
135.132.104.0-135.132.106.255
135.132.108.0-135.132.110.255
135.132.112.0/24
135.132.114.0/23
135.132.117.0-135.132.118.255
135.132.120.0/23
135.132.123.0-135.132.124.255
135.132.126.0/24
135.132.160.0/20
138.226.32.0/20
138.226.80.0/21
138.226.120.0-138.226.191.255
138.226.200.0/21
151.145.128.0/18
158.120.48.0/20
170.100.148.0-170.100.159.255
192.6.64.0/22
192.6.172.0/22
192.6.252.0/22
192.25.180.0/22
192.25.200.0/22
192.25.208.0/22
192.25.232.0/22
192.25.244.0/22
192.46.184.0/21
192.46.200.0/22
192.53.64.0/21
192.53.136.0/21
192.137.24.0/22
Signature Algorithm: sha256WithRSAEncryption
86:3b:6c:f6:ad:48:55:68:c8:b9:7e:68:c8:1c:27:47:8f:94:
05:6b:d6:f4:27:d2:1a:70:2f:fd:8e:46:37:b6:be:19:d4:02:
c4:af:47:ca:0a:f0:20:cc:e5:1d:62:af:81:dc:c3:6d:40:22:
5d:29:10:9d:a4:c7:3a:25:8f:5d:7f:1d:16:74:0d:ca:3e:a4:
de:78:c1:96:df:eb:ed:9b:e0:2c:a5:4b:2d:d4:78:5c:38:a7:
84:aa:73:75:d9:59:15:08:18:d4:df:3e:5a:3b:1e:4e:42:2d:
90:55:d2:db:ca:ad:b7:ad:86:7e:2f:67:fc:88:be:f5:24:d4:
2d:4a:c4:a6:73:0e:db:5a:9c:82:24:d5:e9:2b:71:26:67:ed:
6c:48:15:98:7f:68:94:52:69:a8:83:ad:b5:53:c7:51:f7:d8:
81:65:03:57:57:d6:2e:54:9b:6c:62:2f:e5:f5:fe:ba:55:20:
d9:5d:87:ed:47:af:45:ff:20:dc:9a:09:7f:c3:e6:14:12:07:
5c:55:c0:64:cd:62:44:8c:00:7f:aa:9e:a9:fe:ac:94:a4:b0:
87:91:22:69:55:a7:4d:b6:39:0a:4e:a1:dd:52:84:ae:16:2c:
0a:70:70:0b:7c:4b:64:89:47:d0:22:58:8f:d8:b6:6d:2c:1a:
c9:88:17:08
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgISAaCw4xUyoUvbSOztjKGTkDPYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjYwOTE3MTk0MTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWRiNDViNWYxMmQ5M2Q4YmNlODBiMTgxNmNkNGJjZWQwZGVjMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujTrKX9b56vOer9b+2EBctjPZqo0
DUgMB7sOp7C8+hQqEVj2qTJ1n2KaOOmDcfzI6+6kKUgH5ms7tOgL37v6WOLuItuk
X0GRox6/voOjNjTa0Mjg9tu5KDdLWS8UzmkWHId7070euh148HUszpnZq4CcSqYO
gLNH24+dP2bd1EwGO/85m25/CyFTMR3sYA6V9IoREWItWOWBpMQRzlhnnenX3WR+
O/bb0XhuNJcLtPyhOGZ/AS+mb6pArFsUEBKaxmq6OXJXpe3Eeg0MkS6ug8OFUtxu
L+E7R6kqwdUgpY3RAA0v2QB/ntS7qOJ5l6NLs/ElqjJTP/e/xrIZSyJv5QIDAQAB
o4IDPDCCAzgwHQYDVR0OBBYEFF7bRbXxLZPYvOgLGBbNS87Q3sGtMB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvWHR0RnRmRXRrOWk4NkFzWUZzMUx6dERld2EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBUAYIKwYBBQUHAQcBAf8EggE/MIIBOzCCATcEAgABMIIB
LwMDAAmOAwQGCZeAAwQCCZfsMAwDBAQJ6FADBAcJ6AADBAQJ+QADBAIJ+RgDBAIJ
+UgDBAWHhAADBACHhGEwDAMEAIeEYwMEAIeEZAMEAIeEZjAMAwQDh4RoAwQAh4Rq
MAwDBAKHhGwDBACHhG4DBACHhHADBAGHhHIwDAMEAIeEdQMEAIeEdgMEAYeEeDAM
AwQAh4R7AwQAh4R8AwQAh4R+AwQEh4SgAwQEiuIgAwQDiuJQMAwDBAOK4ngDBAaK
4oADBAOK4sgDBAaXkYADBASeeDAwDAMEAqpklAMEBapkgAMEAsAGQAMEAsAGrAME
AsAG/AMEAsAZtAMEAsAZyAMEAsAZ0AMEAsAZ6AMEAsAZ9AMEA8AuuAMEAsAuyAME
A8A1QAMEA8A1iAMEAsCJGDANBgkqhkiG9w0BAQsFAAOCAQEAhjts9q1IVWjIuX5o
yBwnR4+UBWvW9CfSGnAv/Y5GN7a+GdQCxK9HygrwIMzlHWKvgdzDbUAiXSkQnaTH
OiWPXX8dFnQNyj6k3njBlt/r7ZvgLKVLLdR4XDinhKpzddlZFQgY1N8+WjseTkIt
kFXS28qtt62Gfi9n/Ii+9STULUrEpnMO21qcgiTV6StxJmftbEgVmH9olFJpqIOt
tVPHUffYgWUDV1fWLlSbbGIv5fX+ulUg2V2H7UevRf8g3JoJf8PmFBIHXFXAZM1i
RIwAf6qeqf6slKSwh5EiaVWnTbY5Ck6h3VKErhYsCnBwC3xLZIlH0CJYj9i2bSwa
yYgXCA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:59:05 2026 by rpki-client