Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/E6tHexMZ4Ig_Ep66qZIqgSd5Tpw.roa
File: E6tHexMZ4Ig_Ep66qZIqgSd5Tpw.roa (raw, json)
Hash identifier: z4yZx6M+tyF5ynApm7/OTC4vvmherSg0WahA4OzG2R0=
Subject key identifier: 13:AB:47:7B:13:19:E0:88:3F:12:9E:BA:A9:92:2A:81:27:79:4E:9C
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019C8C0385808ECDEB090F8A8BFD39FFD98D
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/E6tHexMZ4Ig_Ep66qZIqgSd5Tpw.roa
Signing time: Mon 23 Feb 2026 19:39:26 +0000
ROA not before: Mon 23 Feb 2026 19:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209372
IP address blocks: 89.19.56.0/24 maxlen: 24
89.19.57.0/24 maxlen: 24
89.19.58.0/24 maxlen: 24
89.19.59.0/24 maxlen: 24
185.24.110.0/23 maxlen: 24
185.59.232.0/22 maxlen: 24
185.68.245.0/24 maxlen: 24
185.71.144.0/23 maxlen: 24
185.71.212.0/23 maxlen: 24
185.79.48.0/22 maxlen: 24
185.79.51.0/24 maxlen: 24
185.79.76.0/23 maxlen: 24
185.79.78.0/23 maxlen: 24
185.79.79.0/24 maxlen: 24
185.81.146.0/24 maxlen: 24
185.81.147.0/24 maxlen: 24
185.81.172.0/24 maxlen: 24
185.81.173.0/24 maxlen: 24
185.81.174.0/23 maxlen: 24
185.81.174.0/24 maxlen: 24
185.81.184.0/23 maxlen: 24
185.81.186.0/23 maxlen: 24
185.88.96.0/23 maxlen: 24
185.89.40.0/24 maxlen: 24
185.89.104.0/22 maxlen: 22
185.89.108.0/22 maxlen: 24
185.95.100.0/23 maxlen: 24
185.95.102.0/23 maxlen: 24
185.96.39.0/24 maxlen: 24
185.96.80.0/24 maxlen: 24
185.96.81.0/24 maxlen: 24
185.96.82.0/24 maxlen: 24
185.96.83.0/24 maxlen: 24
185.96.132.0/24 maxlen: 24
185.96.133.0/24 maxlen: 24
185.96.134.0/23 maxlen: 24
185.97.0.0/22 maxlen: 24
185.98.43.0/24 maxlen: 24
185.101.203.0/24 maxlen: 24
185.104.151.0/24 maxlen: 24
185.105.44.0/23 maxlen: 24
185.112.56.0/23 maxlen: 24
185.168.210.0/23 maxlen: 24
185.175.224.0/23 maxlen: 24
185.175.226.0/23 maxlen: 24
185.180.110.0/23 maxlen: 24
185.182.128.0/23 maxlen: 24
185.185.144.0/22 maxlen: 24
185.185.147.0/24 maxlen: 24
193.221.212.0/23 maxlen: 24
193.221.214.0/23 maxlen: 24
193.221.215.0/24 maxlen: 24
213.170.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8c:03:85:80:8e:cd:eb:09:0f:8a:8b:fd:39:ff:d9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Feb 23 19:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13ab477b1319e0883f129ebaa9922a8127794e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:b5:7b:22:8c:3c:fc:8b:3b:60:5e:3f:8a:
d3:41:21:fc:78:bf:0f:f2:7f:31:85:68:23:da:82:
4a:e0:86:fc:54:96:36:14:e9:64:7c:50:17:92:cc:
44:5d:d2:2e:8c:65:c5:1e:b6:48:81:bb:9a:d7:74:
5d:07:ac:1b:28:21:b3:49:a9:c4:09:c1:ab:45:54:
83:4e:36:2b:d9:0f:11:35:2c:d1:80:15:9d:df:79:
4c:be:c6:33:c0:8a:06:66:3f:b2:64:66:c3:dc:f5:
cb:6c:d9:d6:03:21:dc:f3:7a:32:10:0a:8b:3d:9b:
31:98:4d:51:ec:1e:5a:a1:e7:5e:76:4b:fa:8b:50:
92:f7:ef:dd:40:1c:cb:5f:99:63:9f:0f:4c:bb:e5:
78:61:79:15:2e:52:cf:1f:95:cd:1a:1c:0c:a0:71:
4c:d3:e9:48:48:e7:ec:51:4e:d2:d5:af:2a:75:f1:
f4:ca:9c:6c:b7:18:ee:03:e0:ee:e6:02:fb:a8:0c:
14:6a:7a:f9:ee:13:d3:dc:87:76:ae:cd:97:65:35:
e5:91:8f:05:cd:91:cb:d7:e1:5b:83:bc:81:0a:44:
3a:6a:c7:d4:1f:74:01:cf:10:9d:94:b5:fb:91:27:
37:01:96:6b:da:58:13:c2:2b:de:b1:a0:b6:58:a9:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AB:47:7B:13:19:E0:88:3F:12:9E:BA:A9:92:2A:81:27:79:4E:9C
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/E6tHexMZ4Ig_Ep66qZIqgSd5Tpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.56.0/22
185.24.110.0/23
185.59.232.0/22
185.68.245.0/24
185.71.144.0/23
185.71.212.0/23
185.79.48.0/22
185.79.76.0/22
185.81.146.0/23
185.81.172.0/22
185.81.184.0/22
185.88.96.0/23
185.89.40.0/24
185.89.104.0/21
185.95.100.0/22
185.96.39.0/24
185.96.80.0/22
185.96.132.0/22
185.97.0.0/22
185.98.43.0/24
185.101.203.0/24
185.104.151.0/24
185.105.44.0/23
185.112.56.0/23
185.168.210.0/23
185.175.224.0/22
185.180.110.0/23
185.182.128.0/23
185.185.144.0/22
193.221.212.0/22
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ea:98:91:fb:43:f8:78:7e:9f:53:18:e5:22:05:35:f6:94:
81:64:ab:d5:0c:60:e5:d5:be:01:e3:7d:0c:03:d2:f6:a2:a0:
a0:21:d4:1a:58:31:67:14:ce:fa:72:a8:a0:35:92:94:fe:cc:
bd:e0:f9:48:56:02:cb:f9:81:18:88:7f:3d:9d:56:3e:0a:a3:
50:12:f9:86:86:dc:2c:5f:48:d0:00:32:2b:8e:da:79:4c:d2:
9f:73:5c:32:99:ec:9f:bd:2b:b0:7e:da:10:ac:82:96:b1:ec:
3b:4a:13:31:6d:a7:7d:f2:73:96:c2:30:04:be:fd:80:c5:23:
c8:4c:1a:08:b4:0b:ff:ee:f3:ab:01:51:e0:39:2f:19:1b:df:
ba:6d:62:f0:26:6c:65:71:fd:a1:84:f6:e6:a8:1c:d7:ec:5f:
19:9f:91:61:9f:cd:7f:81:dd:45:b7:c1:3d:0e:ec:30:3a:7f:
47:21:8a:93:bf:fe:cc:88:48:dc:83:71:b4:72:5d:39:9f:c9:
b3:39:88:5f:a3:ae:45:57:e8:d0:ee:9a:97:69:90:63:8d:8b:
03:c9:ed:55:9d:98:74:bd:c3:cb:a5:22:99:13:0e:08:89:f3:
88:2b:f8:38:2f:b3:0f:b2:f3:12:1d:73:f6:d5:5c:d4:8f:42:
1c:d3:70:2d
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgISAZyMA4WAjs3rCQ+Ki/05/9mNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjYwMjIzMTkzOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2FiNDc3YjEzMTllMDg4M2YxMjllYmFhOTkyMmE4MTI3Nzk0ZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sy1eyKMPPyLO2BeP4rTQSH8eL8P
8n8xhWgj2oJK4Ib8VJY2FOlkfFAXksxEXdIujGXFHrZIgbua13RdB6wbKCGzSanE
CcGrRVSDTjYr2Q8RNSzRgBWd33lMvsYzwIoGZj+yZGbD3PXLbNnWAyHc83oyEAqL
PZsxmE1R7B5aoededkv6i1CS9+/dQBzLX5ljnw9Mu+V4YXkVLlLPH5XNGhwMoHFM
0+lISOfsUU7S1a8qdfH0ypxstxjuA+Du5gL7qAwUanr57hPT3Id2rs2XZTXlkY8F
zZHL1+Fbg7yBCkQ6asfUH3QBzxCdlLX7kSc3AZZr2lgTwivesaC2WKkh6wIDAQAB
o4ICwjCCAr4wHQYDVR0OBBYEFBOrR3sTGeCIPxKeuqmSKoEneU6cMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvRTZ0SGV4TVo0SWdfRXA2NnFaSXFnU2Q1VHB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHXBggrBgEFBQcBBwEB/wSBxzCBxDCBwQQCAAEwgboDBAJZ
EzgDBAG5GG4DBAK5O+gDBAC5RPUDBAG5R5ADBAG5R9QDBAK5TzADBAK5T0wDBAG5
UZIDBAK5UawDBAK5UbgDBAG5WGADBAC5WSgDBAO5WWgDBAK5X2QDBAC5YCcDBAK5
YFADBAK5YIQDBAK5YQADBAC5YisDBAC5ZcsDBAC5aJcDBAG5aSwDBAG5cDgDBAG5
qNIDBAK5r+ADBAG5tG4DBAG5toADBAK5uZADBALB3dQDBADVqt8wDQYJKoZIhvcN
AQELBQADggEBACHqmJH7Q/h4fp9TGOUiBTX2lIFkq9UMYOXVvgHjfQwD0vaioKAh
1BpYMWcUzvpyqKA1kpT+zL3g+UhWAsv5gRiIfz2dVj4Ko1AS+YaG3CxfSNAAMiuO
2nlM0p9zXDKZ7J+9K7B+2hCsgpax7DtKEzFtp33yc5bCMAS+/YDFI8hMGgi0C//u
86sBUeA5Lxkb37ptYvAmbGVx/aGE9uaoHNfsXxmfkWGfzX+B3UW3wT0O7DA6f0ch
ipO//syISNyDcbRyXTmfybM5iF+jrkVX6NDumpdpkGONiwPJ7VWdmHS9w8ulIpkT
DgiJ84gr+Dgvsw+y8xIdc/bVXNSPQhzTcC0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:58 2026 by rpki-client