Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/N9eJQft8E_Vlm9-92c34l9oVaOE.roa
File: N9eJQft8E_Vlm9-92c34l9oVaOE.roa (raw, json)
Hash identifier: STJ3sDAbNVIFBy9HmVpY5X7TsamKj7xapU3f0YN1wC0=
Subject key identifier: 37:D7:89:41:FB:7C:13:F5:65:9B:DF:BD:D9:CD:F8:97:DA:15:68:E1
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 019C8EA29A1CB2B345878A6FA86816C0915A
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/N9eJQft8E_Vlm9-92c34l9oVaOE.roa
Signing time: Tue 24 Feb 2026 07:52:26 +0000
ROA not before: Tue 24 Feb 2026 07:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9141
IP address blocks: 31.178.0.0/17 maxlen: 17
31.178.128.0/17 maxlen: 17
31.179.0.0/17 maxlen: 17
31.179.128.0/17 maxlen: 24
31.186.192.0/19 maxlen: 19
77.236.0.0/19 maxlen: 19
77.236.0.0/20 maxlen: 20
77.236.0.0/21 maxlen: 21
77.236.8.0/21 maxlen: 21
77.236.16.0/20 maxlen: 20
77.236.16.0/21 maxlen: 21
77.236.24.0/21 maxlen: 21
81.18.192.0/22 maxlen: 22
81.18.196.0/22 maxlen: 22
81.18.200.0/22 maxlen: 22
81.18.204.0/22 maxlen: 22
81.18.208.0/22 maxlen: 22
81.18.212.0/22 maxlen: 22
81.18.216.0/22 maxlen: 22
81.18.220.0/22 maxlen: 22
83.144.64.0/19 maxlen: 19
83.144.96.0/19 maxlen: 19
83.175.176.0/20 maxlen: 20
84.10.0.0/18 maxlen: 18
84.10.64.0/18 maxlen: 18
84.10.128.0/18 maxlen: 18
84.10.192.0/18 maxlen: 18
85.222.0.0/19 maxlen: 19
85.222.32.0/19 maxlen: 19
85.222.52.0/22 maxlen: 22
85.222.64.0/19 maxlen: 19
85.222.96.0/19 maxlen: 19
87.206.0.0/17 maxlen: 17
87.206.128.0/17 maxlen: 17
87.207.0.0/17 maxlen: 17
87.207.128.0/17 maxlen: 17
89.64.0.0/14 maxlen: 14
89.68.0.0/14 maxlen: 14
89.70.108.0/22 maxlen: 22
89.72.0.0/14 maxlen: 14
89.72.228.0/22 maxlen: 22
89.76.0.0/14 maxlen: 14
89.77.216.0/22 maxlen: 22
91.150.192.0/20 maxlen: 20
91.150.208.0/20 maxlen: 20
92.244.32.0/21 maxlen: 21
92.244.40.0/21 maxlen: 21
92.244.48.0/21 maxlen: 21
92.244.56.0/21 maxlen: 21
94.75.64.0/20 maxlen: 20
94.75.80.0/20 maxlen: 20
94.75.96.0/20 maxlen: 20
94.75.112.0/20 maxlen: 20
94.172.0.0/18 maxlen: 18
94.172.64.0/18 maxlen: 18
94.172.128.0/18 maxlen: 18
94.172.192.0/18 maxlen: 18
95.158.64.0/19 maxlen: 19
95.158.96.0/19 maxlen: 19
178.73.0.0/20 maxlen: 20
178.73.16.0/20 maxlen: 20
178.73.32.0/20 maxlen: 20
178.73.48.0/20 maxlen: 20
185.182.244.0/22 maxlen: 22
188.93.160.0/22 maxlen: 22
188.93.164.0/22 maxlen: 22
193.47.158.0/24 maxlen: 24
193.47.159.0/24 maxlen: 24
193.47.160.0/24 maxlen: 24
194.187.40.0/23 maxlen: 23
194.187.42.0/23 maxlen: 23
195.34.208.0/23 maxlen: 23
195.34.210.0/23 maxlen: 23
212.76.32.0/21 maxlen: 21
212.76.40.0/21 maxlen: 21
212.76.48.0/21 maxlen: 21
212.76.56.0/21 maxlen: 21
213.134.160.0/20 maxlen: 20
213.134.176.0/20 maxlen: 20
217.119.64.0/20 maxlen: 20
2001:4050::/34 maxlen: 34
2001:4050:4000::/34 maxlen: 34
2001:4050:8000::/34 maxlen: 34
2001:4050:c000::/34 maxlen: 34
2a02:a300::/29 maxlen: 29
2a02:a308::/29 maxlen: 29
2a02:a310::/32 maxlen: 32
2a02:a311::/32 maxlen: 32
2a02:a312::/32 maxlen: 32
2a02:a313::/32 maxlen: 32
2a02:a314::/30 maxlen: 30
2a02:a315:e500::/40 maxlen: 40
2a02:a316:e100::/40 maxlen: 40
2a02:a318::/30 maxlen: 30
2a02:a319:6000::/40 maxlen: 40
2a02:a31b:c400::/40 maxlen: 40
2a02:a31c::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:a2:9a:1c:b2:b3:45:87:8a:6f:a8:68:16:c0:91:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Feb 24 07:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37d78941fb7c13f5659bdfbdd9cdf897da1568e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:70:ba:48:91:09:ac:8f:6f:3e:11:c2:9a:
e8:e7:76:36:62:0b:7d:c7:de:7a:39:44:78:98:da:
df:e9:92:30:d5:c5:14:6b:3b:a4:13:82:43:56:0f:
21:26:36:72:73:ce:5e:b4:6c:ac:04:fc:60:1a:a1:
6b:c0:7c:e5:d0:50:1c:b2:c0:83:65:de:bb:ae:86:
df:97:23:2c:ad:80:d9:18:e0:b0:80:5a:f9:b2:e9:
ac:20:b5:f2:94:d4:c9:2a:56:0d:52:d0:72:98:4a:
ab:f3:87:5c:81:c5:c1:aa:49:71:45:1f:22:b4:41:
e2:e8:09:06:74:1c:48:21:ce:14:64:0c:d5:75:d8:
36:18:dc:47:46:92:75:30:70:fe:d5:f0:3e:00:37:
f8:5c:02:de:16:48:f0:89:8b:e4:17:a9:ce:c1:d3:
46:9b:a4:09:2a:58:e2:9d:d0:f3:be:87:81:cf:08:
bf:66:6b:41:88:9c:1c:88:ee:0f:c6:25:b9:fa:02:
37:72:47:af:27:d4:c8:d2:c8:2a:60:ff:4e:89:1a:
e4:7d:df:a8:a0:56:2a:56:43:28:87:21:c6:ee:4c:
8b:92:a5:75:03:bf:6a:61:65:b8:3b:96:d0:5d:da:
25:af:7d:4b:44:98:da:d6:44:d2:3c:76:4a:19:b6:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D7:89:41:FB:7C:13:F5:65:9B:DF:BD:D9:CD:F8:97:DA:15:68:E1
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/N9eJQft8E_Vlm9-92c34l9oVaOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.178.0.0/15
31.186.192.0/19
77.236.0.0/19
81.18.192.0/19
83.144.64.0/18
83.175.176.0/20
84.10.0.0/16
85.222.0.0/17
87.206.0.0/15
89.64.0.0/12
91.150.192.0/19
92.244.32.0/19
94.75.64.0/18
94.172.0.0/16
95.158.64.0/18
178.73.0.0/18
185.182.244.0/22
188.93.160.0/21
193.47.158.0-193.47.160.255
194.187.40.0/22
195.34.208.0/22
212.76.32.0/19
213.134.160.0/19
217.119.64.0/20
IPv6:
2001:4050::/32
2a02:a300::/27
Signature Algorithm: sha256WithRSAEncryption
64:35:bb:17:fc:92:1b:bb:57:18:c9:d7:e9:5e:3a:66:34:08:
0a:72:13:af:99:ae:bf:cd:d9:a8:4e:a4:ff:75:e5:65:2d:86:
1f:6f:e1:cd:0e:8c:63:f9:01:94:c0:98:a8:5a:9c:1d:4c:c5:
ab:6c:8f:f8:60:d8:c7:32:a5:18:3c:3d:0e:1a:ad:5c:cb:42:
4f:b0:b2:5e:62:20:2f:a7:5a:37:85:da:1a:13:2c:79:5a:33:
af:2d:d5:7f:92:b1:8e:a0:8c:a1:45:5d:84:90:a5:ef:5e:13:
87:68:b7:2f:2e:d5:01:3b:d2:bc:1d:1a:23:56:3d:e9:5d:17:
07:6f:2d:1f:8b:98:51:2a:cf:6d:cd:95:5e:8f:1c:ef:ed:6d:
1e:fd:a5:6d:6d:87:ce:54:de:85:d8:d5:9c:06:77:d9:7b:ef:
83:a2:bb:6b:60:f9:f7:58:6a:f6:d3:60:b1:e3:6d:b1:12:32:
2d:c5:fd:15:06:63:ab:34:18:06:37:1a:31:21:53:1e:87:3c:
b1:01:72:1d:90:be:cd:b7:c3:be:3f:e4:f0:23:d2:72:13:b3:
b0:7f:0f:5c:66:4f:df:25:a5:29:e4:7e:7c:4a:e1:27:b7:da:
97:51:a7:24:e3:59:da:da:0a:b1:46:f4:5b:0a:72:57:ae:8e:
94:dd:07:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:06:20 2026 by rpki-client