Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/IfRiqMphaLplUPGpWpObS1e2KMo.roa
File: IfRiqMphaLplUPGpWpObS1e2KMo.roa (raw, json)
Hash identifier: 18od/qTDkDCDKoM2Wkmkqv9ywzWmFllmRV5axBYQtqs=
Subject key identifier: 21:F4:62:A8:CA:61:68:BA:65:50:F1:A9:5A:93:9B:4B:57:B6:28:CA
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A196596FD72B94CF233B44CEAD22B73F77
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/IfRiqMphaLplUPGpWpObS1e2KMo.roa
Signing time: Sun 01 Nov 2026 09:03:25 +0000
ROA not before: Sun 01 Nov 2026 09:03:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 2.56.118.0/24 maxlen: 24
2.56.119.0/24 maxlen: 24
2.56.120.0/24 maxlen: 24
2.56.121.0/24 maxlen: 24
2.56.122.0/24 maxlen: 24
2.56.123.0/24 maxlen: 24
2.56.124.0/24 maxlen: 24
2.56.125.0/24 maxlen: 24
2.56.126.0/24 maxlen: 24
2.56.127.0/24 maxlen: 24
2.56.172.0/24 maxlen: 24
2.56.174.0/24 maxlen: 24
2.56.175.0/24 maxlen: 24
2.56.176.0/24 maxlen: 24
2.56.177.0/24 maxlen: 24
2.56.179.0/24 maxlen: 24
45.83.23.0/24 maxlen: 24
45.83.24.0/24 maxlen: 24
45.83.25.0/24 maxlen: 24
45.83.26.0/24 maxlen: 24
45.83.27.0/24 maxlen: 24
45.83.84.0/24 maxlen: 24
45.83.85.0/24 maxlen: 24
45.83.86.0/24 maxlen: 24
45.83.87.0/24 maxlen: 24
45.86.65.0/24 maxlen: 24
45.86.67.0/24 maxlen: 24
45.86.68.0/24 maxlen: 24
45.86.69.0/24 maxlen: 24
45.86.70.0/24 maxlen: 24
45.86.72.0/24 maxlen: 24
45.86.74.0/24 maxlen: 24
45.86.75.0/24 maxlen: 24
45.86.78.0/24 maxlen: 24
45.86.79.0/24 maxlen: 24
45.88.161.0/24 maxlen: 24
45.88.162.0/24 maxlen: 24
45.88.163.0/24 maxlen: 24
45.88.168.0/24 maxlen: 24
45.88.169.0/24 maxlen: 24
45.88.176.0/24 maxlen: 24
45.88.177.0/24 maxlen: 24
45.88.182.0/24 maxlen: 24
171.22.114.0/24 maxlen: 24
171.22.119.0/24 maxlen: 24
171.22.128.0/24 maxlen: 24
171.22.129.0/24 maxlen: 24
171.22.130.0/24 maxlen: 24
171.22.131.0/24 maxlen: 24
171.22.132.0/24 maxlen: 24
185.156.108.0/24 maxlen: 24
185.156.109.0/24 maxlen: 24
185.156.110.0/24 maxlen: 24
185.156.111.0/24 maxlen: 24
185.203.4.0/24 maxlen: 24
185.203.5.0/24 maxlen: 24
185.203.6.0/24 maxlen: 24
185.203.7.0/24 maxlen: 24
194.55.188.0/24 maxlen: 24
194.59.244.0/24 maxlen: 24
194.76.136.0/24 maxlen: 24
194.76.137.0/24 maxlen: 24
194.76.138.0/24 maxlen: 24
194.76.139.0/24 maxlen: 24
213.59.113.0/24 maxlen: 24
213.59.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:59:6f:d7:2b:94:cf:23:3b:44:ce:ad:22:b7:3f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Nov 1 09:03:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21f462a8ca6168ba6550f1a95a939b4b57b628ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:45:f2:e9:d8:31:ac:0a:3f:63:58:98:5d:
8d:59:b1:d8:fc:49:fd:f6:c7:48:31:62:b9:94:bc:
64:c9:2d:f3:4f:6a:a7:51:a1:e5:d8:11:57:e2:9b:
9f:c2:56:ed:ed:71:e9:c8:ab:b7:99:0b:8c:a8:e8:
b7:23:88:87:a1:3d:be:73:8d:22:c5:86:97:a0:d9:
7e:bb:84:51:18:e3:f1:a0:6c:f9:83:56:3c:d4:b8:
a5:1c:54:35:86:a8:4e:76:47:fa:1b:0a:1f:1d:b8:
b9:c3:a1:d5:f6:0e:a6:ee:a6:30:7d:18:28:f5:7e:
ff:6a:b1:c3:26:d2:21:a1:36:83:a9:86:de:2d:39:
4f:f0:25:a7:63:95:95:ac:95:b8:45:92:f3:f8:44:
b4:92:19:97:d9:6e:d6:3f:9d:fc:5c:0a:24:13:41:
06:41:b7:c8:6b:13:11:67:94:af:5c:a7:e8:94:86:
db:c0:7c:a7:b0:73:a1:28:0e:5e:26:0f:07:ef:ad:
38:19:37:8a:aa:18:11:33:d5:1a:9a:de:06:7e:0b:
03:6a:87:da:c1:35:e2:8a:7c:08:83:9b:d8:a1:f5:
65:35:5c:cf:8e:0e:64:dd:66:00:d4:02:31:39:20:
06:e8:bf:65:96:f8:39:1e:3b:b0:b0:fe:67:d0:ef:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F4:62:A8:CA:61:68:BA:65:50:F1:A9:5A:93:9B:4B:57:B6:28:CA
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/IfRiqMphaLplUPGpWpObS1e2KMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.118.0-2.56.127.255
2.56.172.0/24
2.56.174.0-2.56.177.255
2.56.179.0/24
45.83.23.0-45.83.27.255
45.83.84.0/22
45.86.65.0/24
45.86.67.0-45.86.70.255
45.86.72.0/24
45.86.74.0/23
45.86.78.0/23
45.88.161.0-45.88.163.255
45.88.168.0/23
45.88.176.0/23
45.88.182.0/24
171.22.114.0/24
171.22.119.0/24
171.22.128.0-171.22.132.255
185.156.108.0/22
185.203.4.0/22
194.55.188.0/24
194.59.244.0/24
194.76.136.0/22
213.59.113.0-213.59.114.255
Signature Algorithm: sha256WithRSAEncryption
c1:16:ef:cc:8f:7d:ae:8a:bb:7d:0e:4d:31:73:80:53:f8:ab:
59:7c:5b:c6:ff:ab:fa:04:f9:b4:30:ad:f5:42:0d:80:bb:2b:
fd:36:2d:10:3c:47:d6:b3:8a:4d:0e:40:46:0c:a2:ff:ad:e4:
d1:31:cb:b4:8a:52:f3:ad:ef:a1:04:98:7d:03:02:7c:b6:4a:
a6:b2:4d:28:34:f5:f2:9b:8a:52:17:e6:64:be:a4:5a:af:65:
35:05:26:4a:1e:f0:d3:61:86:5b:d1:d1:10:49:0e:f0:e0:a8:
4f:f0:6a:28:d6:9b:51:82:fa:8e:43:d7:c6:7c:e3:e3:59:34:
dd:c9:0c:1f:50:52:6c:17:af:ce:04:de:53:73:85:38:27:ee:
83:b9:8e:9e:7b:ac:3e:29:fa:30:77:c5:ee:6f:61:b2:98:42:
87:a7:fe:55:2f:1e:e5:5a:f9:54:1c:03:64:1a:c1:58:38:9a:
d0:a6:82:da:40:45:58:a2:5a:e1:ee:34:24:f5:81:f5:b0:88:
a9:13:e8:fd:73:6a:c6:e3:1e:ad:56:b5:3b:b0:a4:93:b6:67:
d4:ff:cd:14:da:1a:21:f6:09:8c:5b:57:02:1e:0b:6f:fe:7b:
61:fa:d7:4b:b6:ff:fa:54:e0:25:1b:8c:18:7d:fe:49:9b:ec:
5d:1e:8a:32
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgISAaGWWW/XK5TPIztEzq0itz93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYxMTAxMDkwMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWY0NjJhOGNhNjE2OGJhNjU1MGYxYTk1YTkzOWI0YjU3YjYyOGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8lF8unYMawKP2NYmF2NWbHY/En9
9sdIMWK5lLxkyS3zT2qnUaHl2BFX4pufwlbt7XHpyKu3mQuMqOi3I4iHoT2+c40i
xYaXoNl+u4RRGOPxoGz5g1Y81LilHFQ1hqhOdkf6GwofHbi5w6HV9g6m7qYwfRgo
9X7/arHDJtIhoTaDqYbeLTlP8CWnY5WVrJW4RZLz+ES0khmX2W7WP538XAokE0EG
QbfIaxMRZ5SvXKfolIbbwHynsHOhKA5eJg8H7604GTeKqhgRM9Uamt4GfgsDaofa
wTXiinwIg5vYofVlNVzPjg5k3WYA1AIxOSAG6L9llvg5HjuwsP5n0O8UjwIDAQAB
o4IC0DCCAswwHQYDVR0OBBYEFCH0YqjKYWi6ZVDxqVqTm0tXtijKMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvSWZSaXFNcGhhTHBsVVBHcFdwT2JTMWUyS01vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHlBggrBgEFBQcBBwEB/wSB1TCB0jCBzwQCAAEwgcgwDAME
AQI4dgMEBwI4AAMEAAI4rDAMAwQBAjiuAwQBAjiwAwQAAjizMAwDBAAtUxcDBAIt
UxgDBAItU1QDBAAtVkEwDAMEAC1WQwMEAC1WRgMEAC1WSAMEAS1WSgMEAS1WTjAM
AwQALVihAwQCLVigAwQBLVioAwQBLViwAwQALVi2AwQAqxZyAwQAqxZ3MAwDBAer
FoADBACrFoQDBAK5nGwDBAK5ywQDBADCN7wDBADCO/QDBALCTIgwDAMEANU7cQME
ANU7cjANBgkqhkiG9w0BAQsFAAOCAQEAwRbvzI99roq7fQ5NMXOAU/irWXxbxv+r
+gT5tDCt9UINgLsr/TYtEDxH1rOKTQ5ARgyi/63k0THLtIpS863voQSYfQMCfLZK
prJNKDT18puKUhfmZL6kWq9lNQUmSh7w02GGW9HREEkO8OCoT/BqKNabUYL6jkPX
xnzj41k03ckMH1BSbBevzgTeU3OFOCfug7mOnnusPin6MHfF7m9hsphCh6f+VS8e
5Vr5VBwDZBrBWDia0KaC2kBFWKJa4e40JPWB9bCIqRPo/XNqxuMerVa1O7Ckk7Zn
1P/NFNoaIfYJjFtXAh4Lb/57YfrXS7b/+lTgJRuMGH3+SZvsXR6KMg==
-----END CERTIFICATE-----
Generated at Tue Nov 10 01:21:56 2026 by rpki-client