Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/1a_toOOiv8tXiZYffjGgfMuBA-8.roa
File: 1a_toOOiv8tXiZYffjGgfMuBA-8.roa (raw, json)
Hash identifier: pFz9qcCm/4iGepqsXHJ4CPP66DTUL1J4HSiyJSCbo88=
Subject key identifier: D5:AF:ED:A0:E3:A2:BF:CB:57:89:96:1F:7E:31:A0:7C:CB:81:03:EF
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 01A027EB9CEB647328FBA3708A08FD1460F4
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/1a_toOOiv8tXiZYffjGgfMuBA-8.roa
Signing time: Sat 22 Aug 2026 05:22:27 +0000
ROA not before: Sat 22 Aug 2026 05:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25145
IP address blocks: 31.40.240.0/24 maxlen: 24
77.92.96.0/19 maxlen: 19
77.92.96.0/24 maxlen: 24
77.92.97.0/24 maxlen: 24
77.92.98.0/24 maxlen: 24
77.92.99.0/24 maxlen: 24
77.92.100.0/22 maxlen: 22
77.92.100.0/24 maxlen: 24
77.92.101.0/24 maxlen: 24
77.92.102.0/24 maxlen: 24
77.92.103.0/24 maxlen: 24
77.92.104.0/24 maxlen: 24
77.92.105.0/24 maxlen: 24
77.92.106.0/24 maxlen: 24
77.92.107.0/24 maxlen: 24
77.92.108.0/22 maxlen: 22
77.92.108.0/24 maxlen: 24
77.92.109.0/24 maxlen: 24
77.92.110.0/24 maxlen: 24
77.92.111.0/24 maxlen: 24
77.92.112.0/22 maxlen: 22
77.92.112.0/24 maxlen: 24
77.92.113.0/24 maxlen: 24
77.92.114.0/24 maxlen: 24
77.92.115.0/24 maxlen: 24
77.92.116.0/24 maxlen: 24
77.92.117.0/24 maxlen: 24
77.92.118.0/24 maxlen: 24
77.92.119.0/24 maxlen: 24
77.92.120.0/24 maxlen: 24
77.92.121.0/24 maxlen: 24
77.92.122.0/24 maxlen: 24
77.92.123.0/24 maxlen: 24
77.92.124.0/24 maxlen: 24
77.92.125.0/24 maxlen: 24
77.92.126.0/24 maxlen: 24
77.92.127.0/24 maxlen: 24
185.115.208.0/24 maxlen: 24
185.115.210.0/24 maxlen: 24
185.115.211.0/24 maxlen: 24
213.144.96.0/19 maxlen: 19
213.144.96.0/22 maxlen: 22
213.144.96.0/24 maxlen: 24
213.144.97.0/24 maxlen: 24
213.144.98.0/24 maxlen: 24
213.144.99.0/24 maxlen: 24
213.144.100.0/24 maxlen: 24
213.144.101.0/24 maxlen: 24
213.144.103.0/24 maxlen: 24
213.144.104.0/22 maxlen: 22
213.144.104.0/24 maxlen: 24
213.144.105.0/24 maxlen: 24
213.144.106.0/24 maxlen: 24
213.144.107.0/24 maxlen: 24
213.144.108.0/22 maxlen: 22
213.144.108.0/24 maxlen: 24
213.144.109.0/24 maxlen: 24
213.144.110.0/24 maxlen: 24
213.144.111.0/24 maxlen: 24
213.144.112.0/22 maxlen: 22
213.144.112.0/24 maxlen: 24
213.144.113.0/24 maxlen: 24
213.144.114.0/24 maxlen: 24
213.144.115.0/24 maxlen: 24
213.144.116.0/22 maxlen: 22
213.144.116.0/24 maxlen: 24
213.144.117.0/24 maxlen: 24
213.144.118.0/24 maxlen: 24
213.144.119.0/24 maxlen: 24
213.144.120.0/22 maxlen: 22
213.144.120.0/24 maxlen: 24
213.144.121.0/24 maxlen: 24
213.144.122.0/24 maxlen: 24
213.144.123.0/24 maxlen: 24
213.144.124.0/22 maxlen: 22
213.144.124.0/24 maxlen: 24
213.144.125.0/24 maxlen: 24
213.144.126.0/24 maxlen: 24
213.144.127.0/24 maxlen: 24
2a02:ac80::/29 maxlen: 29
2a02:ac80::/32 maxlen: 32
2a02:ac80::/48 maxlen: 48
2a02:ac80:10::/48 maxlen: 48
2a02:ac80:20::/48 maxlen: 48
2a02:ac80:30::/48 maxlen: 48
2a02:ac80:40::/48 maxlen: 48
2a02:ac80:50::/48 maxlen: 48
2a02:ac80:60::/48 maxlen: 48
2a02:ac80:6a::/48 maxlen: 48
2a02:ac80:70::/48 maxlen: 48
2a02:ac80:90::/48 maxlen: 48
2a02:ac80:91::/48 maxlen: 48
2a02:ac80:92::/48 maxlen: 48
2a02:ac80:93::/48 maxlen: 48
2a02:ac80:96::/48 maxlen: 48
2a02:ac80:97::/48 maxlen: 48
2a02:ac80:99::/48 maxlen: 48
2a02:ac80:a0::/48 maxlen: 48
2a02:ac80:b0::/48 maxlen: 48
2a02:ac80:c0::/48 maxlen: 48
2a02:ac80:d0::/48 maxlen: 48
2a02:ac80:e0::/48 maxlen: 48
2a02:ac80:f0::/48 maxlen: 48
2a02:ac80:100::/48 maxlen: 48
2a02:ac80:101::/48 maxlen: 48
2a02:ac80:102::/48 maxlen: 48
2a02:ac80:103::/48 maxlen: 48
2a02:ac80:104::/48 maxlen: 48
2a02:ac80:105::/48 maxlen: 48
2a02:ac80:117::/48 maxlen: 48
2a02:ac80:127::/48 maxlen: 48
2a02:ac80:200::/48 maxlen: 48
2a02:ac80:300::/48 maxlen: 48
2a02:ac80:400::/48 maxlen: 48
2a02:ac80:500::/48 maxlen: 48
2a02:ac80:600::/48 maxlen: 48
2a02:ac80:700::/48 maxlen: 48
2a02:ac80:a00::/48 maxlen: 48
2a02:ac80:b00::/48 maxlen: 48
2a02:ac80:c00::/48 maxlen: 48
2a02:ac80:d00::/48 maxlen: 48
2a02:ac80:e00::/48 maxlen: 48
2a02:ac80:f00::/48 maxlen: 48
2a02:ac80:1000::/48 maxlen: 48
2a02:ac80:2000::/48 maxlen: 48
2a02:ac80:3000::/48 maxlen: 48
2a02:ac80:4000::/48 maxlen: 48
2a02:ac80:5000::/48 maxlen: 48
2a02:ac80:6000::/48 maxlen: 48
2a02:ac80:6100::/48 maxlen: 48
2a02:ac80:6300::/48 maxlen: 48
2a02:ac80:7000::/48 maxlen: 48
2a02:ac80:7370::/48 maxlen: 48
2a02:ac80:9100::/48 maxlen: 48
2a02:ac80:9300::/48 maxlen: 48
2a02:ac80:a000::/48 maxlen: 48
2a02:ac80:b000::/48 maxlen: 48
2a02:ac80:c000::/48 maxlen: 48
2a02:ac80:d000::/48 maxlen: 48
2a02:ac80:e000::/48 maxlen: 48
2a02:ac80:f000::/48 maxlen: 48
2a02:ac81::/32 maxlen: 32
2a02:ac81:101::/48 maxlen: 48
2a02:ac81:102::/48 maxlen: 48
2a02:ac82::/32 maxlen: 32
2a02:ac83::/32 maxlen: 32
2a02:ac84::/32 maxlen: 32
2a02:ac85::/32 maxlen: 32
2a02:ac86::/32 maxlen: 32
2a02:ac87::/32 maxlen: 32
2a02:ac87:5900::/48 maxlen: 48
2a02:ac87:59cb::/48 maxlen: 48
2a02:ac87:ac87::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:27:eb:9c:eb:64:73:28:fb:a3:70:8a:08:fd:14:60:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Aug 22 05:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5afeda0e3a2bfcb5789961f7e31a07ccb8103ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:72:3f:51:b6:50:cb:e4:71:9d:71:26:3f:a8:
cc:d9:da:30:e3:db:00:2c:30:78:31:f3:42:fc:a8:
63:66:06:b7:c2:b6:05:6d:79:87:67:ac:4c:ba:4b:
91:73:63:b5:b5:5d:cf:cd:a7:a5:63:95:43:f4:f0:
a2:79:34:85:a6:1a:86:c5:cf:06:4f:dc:7c:ef:91:
99:5a:3d:fe:0b:5a:36:86:60:2c:60:ec:b2:4e:92:
a2:3e:ed:4b:d9:cb:5b:34:55:fb:9f:3d:70:04:de:
bc:af:fe:9c:22:63:e4:46:0a:0c:82:3c:78:77:d1:
33:1d:ac:29:fa:8f:c2:ee:58:99:a5:cc:ac:0f:2e:
87:b2:ea:6d:72:c3:34:0c:13:ee:21:ac:cc:96:ea:
c8:1d:6d:2d:a1:5a:2e:0d:63:a6:f4:5f:67:ed:56:
75:22:73:4b:bc:02:90:a3:24:52:2e:f8:bc:28:bd:
b7:03:e0:b9:98:fd:b0:03:3e:39:e0:0f:56:62:b9:
fa:69:9c:4c:4b:6c:24:58:79:10:48:89:79:86:6f:
79:a1:fe:de:2b:ef:cd:b4:54:d3:79:a6:0a:1a:6c:
6c:d1:17:d1:e5:35:f6:ed:e7:f7:62:fa:7c:8a:8e:
0f:80:6e:dc:aa:2b:b0:cf:12:f4:c4:33:8c:f0:f6:
fc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AF:ED:A0:E3:A2:BF:CB:57:89:96:1F:7E:31:A0:7C:CB:81:03:EF
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/1a_toOOiv8tXiZYffjGgfMuBA-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.240.0/24
77.92.96.0/19
185.115.208.0/24
185.115.210.0/23
213.144.96.0/19
IPv6:
2a02:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
b6:8a:2f:94:24:d5:0f:7b:95:7e:89:f1:e4:96:2d:f0:71:7e:
09:2f:32:7e:c5:9d:6c:8a:b6:e4:ad:48:a1:60:69:dc:08:97:
d1:e7:62:06:ff:f6:7f:a3:48:ae:e3:bf:53:18:b1:a0:e2:64:
62:fa:2f:87:c8:e5:36:8d:99:af:79:f5:8b:12:18:c5:0a:b9:
b5:38:e0:2e:91:61:d2:83:1d:9f:43:2b:6f:a9:2f:7d:8e:bc:
7e:4e:ea:57:8b:83:13:41:28:df:8b:07:5f:ac:35:e2:0e:c9:
44:30:b3:72:74:6b:1e:25:64:03:27:47:5f:ab:c2:94:31:ef:
44:75:17:bd:3e:7f:f6:08:61:e5:53:0b:13:03:fa:98:ac:a9:
42:d7:e9:91:30:ea:51:81:2e:ad:4a:50:ee:c0:9f:48:ed:16:
29:69:0d:5a:38:a4:75:75:75:1d:36:1d:b9:2a:e2:e9:94:39:
65:d7:2b:0f:39:32:3a:b5:b0:ef:e2:31:cb:3a:80:42:c3:38:
c7:e9:00:b5:64:19:8b:ad:e2:11:e8:c6:33:0a:e8:22:37:1d:
03:40:24:c8:26:2d:f7:99:34:84:d8:a9:38:ba:d0:dc:e9:53:
dd:6e:14:90:63:58:f2:52:56:b8:28:9f:fa:74:66:80:2a:ab:
98:54:26:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:17:48 2026 by rpki-client