Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/8wSCaZ21xW7rhncFwph51IkOrvk.roa
File: 8wSCaZ21xW7rhncFwph51IkOrvk.roa (raw, json)
Hash identifier: ybPFDnycyF+4bCPCQDhyCreymCEGCX6EwWcT9ATxJCE=
Subject key identifier: F3:04:82:69:9D:B5:C5:6E:EB:86:77:05:C2:98:79:D4:89:0E:AE:F9
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 01A1830D755D75163C6430DDA38645554C57
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/8wSCaZ21xW7rhncFwph51IkOrvk.roa
Signing time: Wed 28 Oct 2026 15:07:39 +0000
ROA not before: Wed 28 Oct 2026 15:07:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1764
IP address blocks: 77.237.32.0/19 maxlen: 24
81.16.96.0/21 maxlen: 24
81.16.144.0/20 maxlen: 24
82.103.0.0/18 maxlen: 24
83.68.128.0/22 maxlen: 24
83.68.132.0/23 maxlen: 24
83.68.136.0/21 maxlen: 24
83.68.144.0/20 maxlen: 24
83.229.64.0/24 maxlen: 24
83.229.93.0/24 maxlen: 24
83.229.109.0/24 maxlen: 24
91.204.216.0/22 maxlen: 24
91.216.247.0/24 maxlen: 24
92.60.0.0/20 maxlen: 24
109.70.96.0/21 maxlen: 24
130.0.68.0/22 maxlen: 24
185.43.12.0/22 maxlen: 24
185.81.212.0/22 maxlen: 24
185.86.24.0/22 maxlen: 24
185.106.48.0/22 maxlen: 24
185.106.248.0/22 maxlen: 24
185.208.12.0/22 maxlen: 24
193.228.32.0/21 maxlen: 24
193.228.40.0/23 maxlen: 24
193.228.42.0/24 maxlen: 24
194.0.72.0/22 maxlen: 24
195.39.200.0/23 maxlen: 24
195.69.172.0/22 maxlen: 24
213.208.128.0/19 maxlen: 24
213.255.198.0/24 maxlen: 24
213.255.205.0/24 maxlen: 24
213.255.208.0/24 maxlen: 24
213.255.218.0/23 maxlen: 24
217.15.0.0/20 maxlen: 24
217.175.193.0/24 maxlen: 24
217.175.195.0/24 maxlen: 24
217.175.196.0/22 maxlen: 24
217.175.200.0/21 maxlen: 24
217.194.145.0/24 maxlen: 24
217.194.146.0/23 maxlen: 24
217.194.149.0/24 maxlen: 24
217.194.150.0/24 maxlen: 24
217.194.154.0/23 maxlen: 24
217.194.156.0/24 maxlen: 24
2001:678:c1c::/48 maxlen: 48
2a01:190::/29 maxlen: 32
2a01:192::/48 maxlen: 48
2a03:e600::/29 maxlen: 32
2a04:9300::/29 maxlen: 32
2a05:dd80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:0d:75:5d:75:16:3c:64:30:dd:a3:86:45:55:4c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Oct 28 15:07:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f30482699db5c56eeb867705c29879d4890eaef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7a:3d:75:04:83:7b:12:a6:4c:01:b8:93:10:
a3:ee:dc:cb:e0:d2:bf:cd:c3:92:f6:10:58:59:b4:
4c:33:b7:18:05:0c:01:e8:18:ce:b6:d2:a2:c7:3e:
cc:bc:80:03:d9:4f:db:16:73:cd:2a:25:5f:21:65:
6e:4a:de:b2:35:8d:bb:7d:91:04:72:32:b2:e3:2d:
3a:ce:64:e6:1e:68:a9:b9:a4:63:18:ac:65:bf:2b:
c6:f1:93:ad:ed:76:f2:d3:76:f7:f1:b6:17:99:03:
3e:cd:54:c0:7d:da:b7:af:b9:04:66:b4:7e:70:09:
c8:d3:ce:98:0f:16:ca:f2:52:49:dc:45:57:56:e1:
73:a0:90:bf:3b:06:21:5b:85:8c:c0:0f:f3:90:47:
b5:7e:fe:be:e1:af:7d:2f:aa:b1:ec:3c:0f:04:b0:
31:90:39:2d:4c:91:fa:74:55:33:47:44:a6:91:c0:
2c:fc:99:ce:99:d6:dd:4e:29:ef:de:d7:fe:03:cf:
4e:39:5d:13:57:0c:64:67:fe:ae:d8:b4:19:9d:ee:
30:a3:c6:c7:67:3f:b1:79:bf:cb:6e:a7:73:a5:62:
19:23:c5:7d:e0:5d:7b:22:7d:c5:b8:bf:d8:39:66:
ad:7c:23:57:61:e1:a7:16:46:bf:59:32:7b:a0:08:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:04:82:69:9D:B5:C5:6E:EB:86:77:05:C2:98:79:D4:89:0E:AE:F9
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/8wSCaZ21xW7rhncFwph51IkOrvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.32.0/19
81.16.96.0/21
81.16.144.0/20
82.103.0.0/18
83.68.128.0-83.68.133.255
83.68.136.0-83.68.159.255
83.229.64.0/24
83.229.93.0/24
83.229.109.0/24
91.204.216.0/22
91.216.247.0/24
92.60.0.0/20
109.70.96.0/21
130.0.68.0/22
185.43.12.0/22
185.81.212.0/22
185.86.24.0/22
185.106.48.0/22
185.106.248.0/22
185.208.12.0/22
193.228.32.0-193.228.42.255
194.0.72.0/22
195.39.200.0/23
195.69.172.0/22
213.208.128.0/19
213.255.198.0/24
213.255.205.0/24
213.255.208.0/24
213.255.218.0/23
217.15.0.0/20
217.175.193.0/24
217.175.195.0-217.175.207.255
217.194.145.0-217.194.147.255
217.194.149.0-217.194.150.255
217.194.154.0-217.194.156.255
IPv6:
2001:678:c1c::/48
2a01:190::/29
2a03:e600::/29
2a04:9300::/29
2a05:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
84:42:eb:69:6f:95:14:54:32:f2:6d:ed:f7:e6:a8:2a:3a:cb:
6d:9e:c8:68:cc:7c:d7:f0:e5:0f:f1:6e:9e:5c:04:10:4e:53:
10:7d:6f:7b:5c:69:77:8e:df:9e:f2:ce:f0:8f:0d:cf:d1:56:
5d:89:8a:03:dc:8f:25:19:ba:9c:ae:2c:9f:f8:37:2e:14:2e:
77:3c:f1:05:e3:5d:a3:75:db:29:f3:57:40:ff:f2:e4:a6:83:
59:12:e3:b0:df:90:22:f7:fd:10:2f:d6:ff:e9:99:06:f0:6f:
92:0e:c3:5a:83:39:d5:7c:86:db:d9:3c:98:52:ad:1d:97:96:
75:83:a0:37:4d:c5:75:ca:24:3d:3c:ea:29:ea:70:c2:2d:44:
50:be:80:61:63:e5:d0:2a:29:b5:a4:96:61:af:ba:59:33:7c:
08:3f:53:6c:77:f0:50:9f:83:d7:af:c2:91:80:fb:e8:1c:17:
34:ce:24:e3:56:2e:82:e3:cc:25:a6:6a:54:41:05:ce:84:ad:
38:3b:8d:44:89:a3:ad:df:8b:47:7c:f2:53:40:f5:d2:3c:60:
cb:6d:01:df:ef:26:ea:ed:a7:9e:4f:75:0e:41:b5:7b:d8:fa:
03:4b:fb:34:bc:4f:1a:7f:25:1a:8d:99:3c:69:da:bf:99:4a:
c6:f8:a1:e6
-----BEGIN CERTIFICATE-----
MIIGODCCBSCgAwIBAgISAaGDDXVddRY8ZDDdo4ZFVUxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw
YjQ1MDYwHhcNMjYxMDI4MTUwNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzA0ODI2OTlkYjVjNTZlZWI4Njc3MDVjMjk4NzlkNDg5MGVhZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3o9dQSDexKmTAG4kxCj7tzL4NK/
zcOS9hBYWbRMM7cYBQwB6BjOttKixz7MvIAD2U/bFnPNKiVfIWVuSt6yNY27fZEE
cjKy4y06zmTmHmipuaRjGKxlvyvG8ZOt7Xby03b38bYXmQM+zVTAfdq3r7kEZrR+
cAnI086YDxbK8lJJ3EVXVuFzoJC/OwYhW4WMwA/zkEe1fv6+4a99L6qx7DwPBLAx
kDktTJH6dFUzR0SmkcAs/JnOmdbdTinv3tf+A89OOV0TVwxkZ/6u2LQZne4wo8bH
Zz+xeb/LbqdzpWIZI8V94F17In3FuL/YOWatfCNXYeGnFka/WTJ7oAhePQIDAQAB
o4IDRDCCA0AwHQYDVR0OBBYEFPMEgmmdtcVu64Z3BcKYedSJDq75MB8GA1UdIwQY
MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt
OGVlYjc1N2NmNTQ1LzEvOHdTQ2FaMjF4VzdyaG5jRndwaDUxSWtPcnZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1
LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBWAYIKwYBBQUHAQcBAf8EggFHMIIBQzCCARIEAgABMIIB
CgMEBU3tIAMEA1EQYAMEBFEQkAMEBlJnADAMAwQHU0SAAwQBU0SEMAwDBANTRIgD
BAVTRIADBABT5UADBABT5V0DBABT5W0DBAJbzNgDBABb2PcDBARcPAADBANtRmAD
BAKCAEQDBAK5KwwDBAK5UdQDBAK5VhgDBAK5ajADBAK5avgDBAK50AwwDAMEBcHk
IAMEAMHkKgMEAsIASAMEAcMnyAMEAsNFrAMEBdXQgAMEANX/xgMEANX/zQMEANX/
0AMEAdX/2gMEBNkPAAMEANmvwTAMAwQA2a/DAwQE2a/AMAwDBADZwpEDBALZwpAw
DAMEANnClQMEANnCljAMAwQB2cKaAwQA2cKcMCsEAgACMCUDBwAgAQZ4DBwDBQMq
AQGQAwUDKgPmAAMFAyoEkwADBQMqBd2AMA0GCSqGSIb3DQEBCwUAA4IBAQCEQutp
b5UUVDLybe335qgqOsttnshozHzX8OUP8W6eXAQQTlMQfW97XGl3jt+e8s7wjw3P
0VZdiYoD3I8lGbqcriyf+DcuFC53PPEF412jddsp81dA//LkpoNZEuOw35Ai9/0Q
L9b/6ZkG8G+SDsNagznVfIbb2TyYUq0dl5Z1g6A3TcV1yiQ9POop6nDCLURQvoBh
Y+XQKim1pJZhr7pZM3wIP1Nsd/BQn4PXr8KRgPvoHBc0ziTjVi6C48wlpmpUQQXO
hK04O41EiaOt34tHfPJTQPXSPGDLbQHf7ybq7aeeT3UOQbV72PoDS/s0vE8afyUa
jZk8adq/mUrG+KHm
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:55:37 2026 by rpki-client