Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/NACXqr5PEhLFNTXPqOr5Jd1WxoE.roa
File: NACXqr5PEhLFNTXPqOr5Jd1WxoE.roa (raw, json)
Hash identifier: y7FG6TVce6xsWRwawyAhANAnluoDpcuQi+mltgf7e1w=
Subject key identifier: 34:00:97:AA:BE:4F:12:12:C5:35:35:CF:A8:EA:F9:25:DD:56:C6:81
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 019E3B27FC27800C593E1FFB1BE5358002CF
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/NACXqr5PEhLFNTXPqOr5Jd1WxoE.roa
Signing time: Mon 18 May 2026 12:55:36 +0000
ROA not before: Mon 18 May 2026 12:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203346
IP address blocks: 37.156.64.0/24 maxlen: 24
37.156.65.0/24 maxlen: 24
46.102.182.0/24 maxlen: 24
46.102.183.0/24 maxlen: 24
77.81.84.0/23 maxlen: 23
77.81.86.0/24 maxlen: 24
77.81.89.0/24 maxlen: 24
86.104.222.0/23 maxlen: 23
86.104.224.0/23 maxlen: 23
86.105.2.0/24 maxlen: 24
86.105.6.0/24 maxlen: 24
86.105.176.0/24 maxlen: 24
86.105.178.0/24 maxlen: 24
86.105.185.0/24 maxlen: 24
86.105.229.0/24 maxlen: 24
86.105.230.0/24 maxlen: 24
86.105.242.0/24 maxlen: 24
86.106.10.0/24 maxlen: 24
86.106.13.0/24 maxlen: 24
86.106.14.0/23 maxlen: 23
86.106.94.0/24 maxlen: 24
86.106.95.0/24 maxlen: 24
86.106.106.0/23 maxlen: 23
86.106.110.0/23 maxlen: 23
86.106.140.0/23 maxlen: 23
86.106.174.0/24 maxlen: 24
86.106.175.0/24 maxlen: 24
86.107.72.0/24 maxlen: 24
86.107.193.0/24 maxlen: 24
86.107.194.0/23 maxlen: 23
89.32.43.0/24 maxlen: 24
89.32.170.0/24 maxlen: 24
89.33.46.0/24 maxlen: 24
89.33.47.0/24 maxlen: 24
89.33.134.0/24 maxlen: 24
89.33.206.0/24 maxlen: 24
89.33.250.0/24 maxlen: 24
89.33.251.0/24 maxlen: 24
89.33.254.0/24 maxlen: 24
89.33.255.0/24 maxlen: 24
89.34.102.0/24 maxlen: 24
89.34.104.0/24 maxlen: 24
89.34.105.0/24 maxlen: 24
89.35.89.0/24 maxlen: 24
89.35.90.0/24 maxlen: 24
89.36.39.0/24 maxlen: 24
89.36.136.0/24 maxlen: 24
89.36.138.0/24 maxlen: 24
89.36.141.0/24 maxlen: 24
89.37.92.0/24 maxlen: 24
89.37.96.0/24 maxlen: 24
89.38.240.0/24 maxlen: 24
89.39.69.0/24 maxlen: 24
89.39.215.0/24 maxlen: 24
89.40.141.0/24 maxlen: 24
89.40.207.0/24 maxlen: 24
89.40.209.0/24 maxlen: 24
89.41.50.0/23 maxlen: 23
89.45.82.0/24 maxlen: 24
89.46.47.0/24 maxlen: 24
91.218.236.0/23 maxlen: 23
91.218.238.0/23 maxlen: 23
91.235.130.0/23 maxlen: 23
91.235.130.0/24 maxlen: 24
91.235.131.0/24 maxlen: 24
93.114.51.0/24 maxlen: 24
93.114.52.0/23 maxlen: 23
93.114.54.0/24 maxlen: 24
93.114.58.0/24 maxlen: 24
93.114.59.0/24 maxlen: 24
93.115.59.0/24 maxlen: 24
93.119.118.0/23 maxlen: 23
93.119.120.0/23 maxlen: 23
93.119.124.0/24 maxlen: 24
94.177.126.0/24 maxlen: 24
176.126.192.0/23 maxlen: 23
176.126.194.0/24 maxlen: 24
176.223.116.0/23 maxlen: 23
176.223.118.0/24 maxlen: 24
176.223.161.0/24 maxlen: 24
188.208.48.0/22 maxlen: 22
188.208.52.0/22 maxlen: 22
188.208.222.0/24 maxlen: 24
188.209.120.0/22 maxlen: 22
188.209.124.0/22 maxlen: 22
188.213.206.0/24 maxlen: 24
188.213.207.0/24 maxlen: 24
188.213.214.0/24 maxlen: 24
188.213.215.0/24 maxlen: 24
188.213.248.0/22 maxlen: 22
188.213.252.0/22 maxlen: 22
193.30.254.0/24 maxlen: 24
193.32.66.0/24 maxlen: 24
193.32.67.0/24 maxlen: 24
193.254.48.0/22 maxlen: 22
193.254.54.0/23 maxlen: 23
193.254.56.0/23 maxlen: 23
193.254.60.0/22 maxlen: 22
194.41.60.0/24 maxlen: 24
194.41.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:27:fc:27:80:0c:59:3e:1f:fb:1b:e5:35:80:02:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: May 18 12:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=340097aabe4f1212c53535cfa8eaf925dd56c681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:91:b6:33:24:0d:05:aa:5d:12:b1:a4:02:
57:28:27:13:36:05:71:9a:1d:83:d4:8b:7c:b3:62:
32:f7:64:5b:da:89:31:d7:ee:88:a4:4e:4d:5c:b3:
6e:ad:13:ce:92:bf:63:1f:fe:71:c0:ce:79:5c:0d:
fb:5b:c1:85:5c:4f:30:11:91:ad:68:e8:bf:ed:86:
13:f3:1d:7b:cb:0d:b7:56:42:f9:d8:ab:9b:e3:ce:
4e:9b:41:d8:33:20:bc:26:11:bc:2b:cb:2e:a8:dd:
79:a6:85:4f:60:61:4d:19:a1:fb:af:d5:ec:fc:26:
eb:e5:3d:8f:5d:a2:cb:42:bc:20:f7:84:23:6e:21:
6a:89:95:95:61:44:83:e5:a6:71:0c:c4:10:33:79:
b2:95:d3:aa:d9:9f:66:85:2d:2a:5e:a5:9d:3c:28:
dc:f5:47:fd:5a:37:42:9d:7b:74:ae:94:f9:a0:1e:
6c:1d:d5:f2:8b:f7:b8:f0:e9:bf:14:bf:1b:57:6d:
92:5d:67:67:cd:28:23:14:4b:c2:f9:11:c4:80:a0:
9e:72:02:bd:c8:51:98:83:cc:17:e4:75:20:fc:db:
2c:c3:9c:e4:53:20:6d:93:d8:07:d7:df:e9:bb:1c:
81:2a:48:28:7d:f5:11:68:75:fd:67:2f:8e:1d:eb:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:00:97:AA:BE:4F:12:12:C5:35:35:CF:A8:EA:F9:25:DD:56:C6:81
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/NACXqr5PEhLFNTXPqOr5Jd1WxoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.64.0/23
46.102.182.0/23
77.81.84.0-77.81.86.255
77.81.89.0/24
86.104.222.0-86.104.225.255
86.105.2.0/24
86.105.6.0/24
86.105.176.0/24
86.105.178.0/24
86.105.185.0/24
86.105.229.0-86.105.230.255
86.105.242.0/24
86.106.10.0/24
86.106.13.0-86.106.15.255
86.106.94.0/23
86.106.106.0/23
86.106.110.0/23
86.106.140.0/23
86.106.174.0/23
86.107.72.0/24
86.107.193.0-86.107.195.255
89.32.43.0/24
89.32.170.0/24
89.33.46.0/23
89.33.134.0/24
89.33.206.0/24
89.33.250.0/23
89.33.254.0/23
89.34.102.0/24
89.34.104.0/23
89.35.89.0-89.35.90.255
89.36.39.0/24
89.36.136.0/24
89.36.138.0/24
89.36.141.0/24
89.37.92.0/24
89.37.96.0/24
89.38.240.0/24
89.39.69.0/24
89.39.215.0/24
89.40.141.0/24
89.40.207.0/24
89.40.209.0/24
89.41.50.0/23
89.45.82.0/24
89.46.47.0/24
91.218.236.0/22
91.235.130.0/23
93.114.51.0-93.114.54.255
93.114.58.0/23
93.115.59.0/24
93.119.118.0-93.119.121.255
93.119.124.0/24
94.177.126.0/24
176.126.192.0-176.126.194.255
176.223.116.0-176.223.118.255
176.223.161.0/24
188.208.48.0/21
188.208.222.0/24
188.209.120.0/21
188.213.206.0/23
188.213.214.0/23
188.213.248.0/21
193.30.254.0/24
193.32.66.0/23
193.254.48.0/22
193.254.54.0-193.254.57.255
193.254.60.0/22
194.41.60.0/23
Signature Algorithm: sha256WithRSAEncryption
97:b8:fe:55:b3:b8:9c:30:f2:17:3c:86:81:f8:da:f8:6e:0b:
57:8f:87:bf:98:41:a9:4b:bf:35:84:84:3f:ed:d8:00:5c:e6:
64:51:f2:94:c6:52:76:c9:23:c2:a0:a6:bd:05:d8:26:62:33:
b8:9a:75:20:e4:04:7c:31:41:03:bb:e0:1d:cd:fc:59:58:da:
d0:79:dc:65:ac:bb:ab:28:a1:f9:0a:f7:b2:58:1f:7d:d9:f0:
40:5a:b5:de:e2:81:db:05:57:da:b5:63:65:bb:26:b4:f2:9e:
04:02:c1:4c:7a:d3:5e:4c:00:dd:36:f9:a9:f1:28:b0:d8:05:
d2:98:e5:19:e6:27:24:c5:a8:e6:71:5e:fc:dd:8b:ec:3f:a2:
42:d0:36:75:9e:ac:56:10:b1:5b:4d:51:fb:30:2d:7d:17:25:
12:a0:11:c1:03:df:1a:26:4b:fb:b1:cd:b6:0a:f2:8e:ea:a0:
e5:8d:7c:b4:26:23:b8:3a:af:77:31:38:b8:04:5f:ff:86:4e:
5f:ea:9a:fe:e2:16:61:0d:a6:c2:dd:5f:3a:85:8b:7b:0d:e3:
40:53:3c:3e:2f:c6:b2:80:6b:70:cb:ea:a0:16:bd:0a:14:ac:
e1:b4:81:af:4f:b3:54:30:b9:08:6e:38:ec:38:cc:ed:95:1c:
3e:73:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:56:16 2026 by rpki-client