Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/9eh0oA3cAoWJHnfSAGF6Yv3O5tY.roa
File: 9eh0oA3cAoWJHnfSAGF6Yv3O5tY.roa (raw, json)
Hash identifier: N63iB+yWqE+JRqlcdwdt6/TnKx3Tm773TV6dqONwZRY=
Subject key identifier: F5:E8:74:A0:0D:DC:02:85:89:1E:77:D2:00:61:7A:62:FD:CE:E6:D6
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C9EAE95E74FD709831B5A73CD78C43501
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/9eh0oA3cAoWJHnfSAGF6Yv3O5tY.roa
Signing time: Fri 27 Feb 2026 10:39:27 +0000
ROA not before: Fri 27 Feb 2026 10:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 5.10.194.0/24 maxlen: 24
5.10.196.0/24 maxlen: 24
5.10.198.0/24 maxlen: 24
5.181.112.0/23 maxlen: 24
5.181.115.0/24 maxlen: 24
5.183.224.0/23 maxlen: 24
5.183.227.0/24 maxlen: 24
37.46.148.0/24 maxlen: 24
37.156.66.0/24 maxlen: 24
37.156.247.0/24 maxlen: 24
45.9.93.0/24 maxlen: 24
45.9.94.0/23 maxlen: 24
45.9.185.0/24 maxlen: 24
45.9.186.0/23 maxlen: 24
45.10.184.0/23 maxlen: 24
45.10.187.0/24 maxlen: 24
45.11.8.0/23 maxlen: 24
45.11.11.0/24 maxlen: 24
45.12.181.0/24 maxlen: 24
45.12.182.0/23 maxlen: 24
45.13.181.0/24 maxlen: 24
45.13.182.0/23 maxlen: 24
45.85.104.0/24 maxlen: 24
45.90.184.0/22 maxlen: 24
45.91.150.0/24 maxlen: 24
45.92.76.0/24 maxlen: 24
45.134.128.0/24 maxlen: 24
45.134.130.0/24 maxlen: 24
45.134.136.0/23 maxlen: 24
45.134.139.0/24 maxlen: 24
45.143.52.0/24 maxlen: 24
45.143.55.0/24 maxlen: 24
46.102.154.0/24 maxlen: 24
46.102.172.0/24 maxlen: 24
46.102.176.0/24 maxlen: 24
46.102.181.0/24 maxlen: 24
46.229.254.0/24 maxlen: 24
62.106.89.0/24 maxlen: 24
62.197.130.0/23 maxlen: 24
77.81.3.0/24 maxlen: 24
81.21.236.0/22 maxlen: 24
84.247.24.0/24 maxlen: 24
84.247.27.0/24 maxlen: 24
84.247.52.0/24 maxlen: 24
84.247.53.0/24 maxlen: 24
85.204.117.0/24 maxlen: 24
86.104.134.0/24 maxlen: 24
86.105.148.0/24 maxlen: 24
86.105.149.0/24 maxlen: 24
86.105.150.0/24 maxlen: 24
86.105.168.0/24 maxlen: 24
86.105.221.0/24 maxlen: 24
86.106.92.0/24 maxlen: 24
86.107.107.0/24 maxlen: 24
86.107.196.0/24 maxlen: 24
89.31.217.0/24 maxlen: 24
89.32.188.0/24 maxlen: 24
89.32.190.0/24 maxlen: 24
89.33.0.0/24 maxlen: 24
89.33.1.0/24 maxlen: 24
89.33.2.0/24 maxlen: 24
89.33.3.0/24 maxlen: 24
89.34.77.0/24 maxlen: 24
89.34.179.0/24 maxlen: 24
89.34.216.0/24 maxlen: 24
89.34.217.0/24 maxlen: 24
89.35.114.0/24 maxlen: 24
89.36.172.0/24 maxlen: 24
89.37.105.0/24 maxlen: 24
89.37.137.0/24 maxlen: 24
89.37.138.0/24 maxlen: 24
89.38.39.0/24 maxlen: 24
89.39.162.0/24 maxlen: 24
89.39.165.0/24 maxlen: 24
89.40.180.0/24 maxlen: 24
89.44.114.0/24 maxlen: 24
89.44.126.0/24 maxlen: 24
89.44.127.0/24 maxlen: 24
89.45.8.0/24 maxlen: 24
89.45.14.0/24 maxlen: 24
89.46.115.0/24 maxlen: 24
89.47.90.0/24 maxlen: 24
89.47.95.0/24 maxlen: 24
91.190.101.0/24 maxlen: 24
91.190.108.0/22 maxlen: 24
91.217.239.0/24 maxlen: 24
91.221.81.0/24 maxlen: 24
91.235.113.0/24 maxlen: 24
92.114.0.0/24 maxlen: 24
93.113.38.0/24 maxlen: 24
93.113.39.0/24 maxlen: 24
93.113.220.0/24 maxlen: 24
93.113.221.0/24 maxlen: 24
93.114.67.0/24 maxlen: 24
93.114.85.0/24 maxlen: 24
93.114.132.0/24 maxlen: 24
93.117.136.0/24 maxlen: 24
94.103.248.0/24 maxlen: 24
94.103.251.0/24 maxlen: 24
94.176.4.0/24 maxlen: 24
94.176.41.0/24 maxlen: 24
94.177.60.0/24 maxlen: 24
94.177.61.0/24 maxlen: 24
94.177.62.0/24 maxlen: 24
94.177.63.0/24 maxlen: 24
95.214.156.0/22 maxlen: 24
178.212.141.0/24 maxlen: 24
185.6.48.0/22 maxlen: 24
185.67.136.0/24 maxlen: 24
185.67.138.0/24 maxlen: 24
185.76.149.0/24 maxlen: 24
185.160.80.0/24 maxlen: 24
185.160.81.0/24 maxlen: 24
185.160.82.0/24 maxlen: 24
185.160.83.0/24 maxlen: 24
185.161.78.0/24 maxlen: 24
185.184.132.0/23 maxlen: 24
185.192.18.0/23 maxlen: 24
185.205.188.0/24 maxlen: 24
185.211.116.0/24 maxlen: 24
185.211.117.0/24 maxlen: 24
185.211.118.0/24 maxlen: 24
185.211.119.0/24 maxlen: 24
185.214.8.0/24 maxlen: 24
185.214.9.0/24 maxlen: 24
185.214.11.0/24 maxlen: 24
185.216.0.0/24 maxlen: 24
185.216.2.0/24 maxlen: 24
185.228.224.0/24 maxlen: 24
185.239.240.0/24 maxlen: 24
185.244.136.0/24 maxlen: 24
185.245.4.0/24 maxlen: 24
185.245.6.0/24 maxlen: 24
188.212.4.0/24 maxlen: 24
188.213.241.0/24 maxlen: 24
188.215.66.0/24 maxlen: 24
188.215.67.0/24 maxlen: 24
188.215.249.0/24 maxlen: 24
188.240.15.0/24 maxlen: 24
188.240.72.0/24 maxlen: 24
193.19.107.0/24 maxlen: 24
193.84.133.0/24 maxlen: 24
193.218.33.0/24 maxlen: 24
193.223.72.0/22 maxlen: 24
203.159.84.0/24 maxlen: 24
203.159.86.0/24 maxlen: 24
203.159.88.0/24 maxlen: 24
217.74.18.0/24 maxlen: 24
217.74.21.0/24 maxlen: 24
217.74.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:ae:95:e7:4f:d7:09:83:1b:5a:73:cd:78:c4:35:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 27 10:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5e874a00ddc0285891e77d200617a62fdcee6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:15:d6:3c:bf:76:90:5b:ab:32:7c:bf:47:
c0:40:92:ff:92:4e:38:7e:70:42:b2:82:b2:d8:4c:
4c:c3:6e:ff:8c:4d:bf:72:df:08:65:31:9e:fa:f7:
37:7d:13:4d:c1:c8:56:5d:e0:27:92:01:cc:c0:b7:
5d:26:95:a2:1a:d7:45:09:b0:0b:d6:67:f4:78:f2:
67:a1:83:64:4a:27:06:28:02:91:6d:d3:fa:18:95:
bd:31:07:95:10:4c:e2:5e:41:4e:4d:2a:a8:a5:28:
f0:8d:35:50:1f:75:4b:58:d7:07:ec:8e:f8:e8:58:
65:f0:e8:7d:71:e4:0a:4a:5f:c4:01:fd:8a:f3:d0:
5d:cc:d9:61:77:5d:97:7b:45:6c:94:6d:58:a9:8a:
c2:34:cf:e3:76:d6:39:5e:fa:1d:da:39:0c:18:cf:
3d:a8:47:d2:67:7f:1b:25:2e:c0:f3:2b:58:32:28:
e9:89:82:e6:dc:d8:48:e4:e3:b9:09:39:39:64:03:
0a:da:87:64:b1:bc:5c:2f:75:4d:ad:ed:73:42:d8:
db:6e:82:01:ae:a3:47:89:6f:66:99:65:6e:05:81:
7e:38:3f:4a:4a:b0:c7:b1:4f:fd:c4:92:52:bd:8c:
8f:5e:5b:1a:50:9f:e1:d2:29:ce:66:f1:2a:c4:6d:
f1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E8:74:A0:0D:DC:02:85:89:1E:77:D2:00:61:7A:62:FD:CE:E6:D6
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/9eh0oA3cAoWJHnfSAGF6Yv3O5tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.194.0/24
5.10.196.0/24
5.10.198.0/24
5.181.112.0/23
5.181.115.0/24
5.183.224.0/23
5.183.227.0/24
37.46.148.0/24
37.156.66.0/24
37.156.247.0/24
45.9.93.0-45.9.95.255
45.9.185.0-45.9.187.255
45.10.184.0/23
45.10.187.0/24
45.11.8.0/23
45.11.11.0/24
45.12.181.0-45.12.183.255
45.13.181.0-45.13.183.255
45.85.104.0/24
45.90.184.0/22
45.91.150.0/24
45.92.76.0/24
45.134.128.0/24
45.134.130.0/24
45.134.136.0/23
45.134.139.0/24
45.143.52.0/24
45.143.55.0/24
46.102.154.0/24
46.102.172.0/24
46.102.176.0/24
46.102.181.0/24
46.229.254.0/24
62.106.89.0/24
62.197.130.0/23
77.81.3.0/24
81.21.236.0/22
84.247.24.0/24
84.247.27.0/24
84.247.52.0/23
85.204.117.0/24
86.104.134.0/24
86.105.148.0-86.105.150.255
86.105.168.0/24
86.105.221.0/24
86.106.92.0/24
86.107.107.0/24
86.107.196.0/24
89.31.217.0/24
89.32.188.0/24
89.32.190.0/24
89.33.0.0/22
89.34.77.0/24
89.34.179.0/24
89.34.216.0/23
89.35.114.0/24
89.36.172.0/24
89.37.105.0/24
89.37.137.0-89.37.138.255
89.38.39.0/24
89.39.162.0/24
89.39.165.0/24
89.40.180.0/24
89.44.114.0/24
89.44.126.0/23
89.45.8.0/24
89.45.14.0/24
89.46.115.0/24
89.47.90.0/24
89.47.95.0/24
91.190.101.0/24
91.190.108.0/22
91.217.239.0/24
91.221.81.0/24
91.235.113.0/24
92.114.0.0/24
93.113.38.0/23
93.113.220.0/23
93.114.67.0/24
93.114.85.0/24
93.114.132.0/24
93.117.136.0/24
94.103.248.0/24
94.103.251.0/24
94.176.4.0/24
94.176.41.0/24
94.177.60.0/22
95.214.156.0/22
178.212.141.0/24
185.6.48.0/22
185.67.136.0/24
185.67.138.0/24
185.76.149.0/24
185.160.80.0/22
185.161.78.0/24
185.184.132.0/23
185.192.18.0/23
185.205.188.0/24
185.211.116.0/22
185.214.8.0/23
185.214.11.0/24
185.216.0.0/24
185.216.2.0/24
185.228.224.0/24
185.239.240.0/24
185.244.136.0/24
185.245.4.0/24
185.245.6.0/24
188.212.4.0/24
188.213.241.0/24
188.215.66.0/23
188.215.249.0/24
188.240.15.0/24
188.240.72.0/24
193.19.107.0/24
193.84.133.0/24
193.218.33.0/24
193.223.72.0/22
203.159.84.0/24
203.159.86.0/24
203.159.88.0/24
217.74.18.0/24
217.74.21.0-217.74.23.255
Signature Algorithm: sha256WithRSAEncryption
15:d2:6d:30:9c:88:ff:4d:69:86:3a:5b:45:9b:61:db:b7:f2:
93:92:d4:07:45:02:e4:89:2d:ff:c7:35:02:81:c5:be:a9:38:
86:ee:cf:19:2a:1e:e3:5e:1a:f7:3b:4f:73:d5:09:81:09:bb:
5a:77:25:ba:94:2f:f9:17:70:2c:e4:6c:99:a9:05:88:e4:0a:
68:bc:bd:cd:60:c7:70:b9:40:23:eb:52:65:92:dc:94:0c:a8:
39:f2:fd:3b:2f:3a:62:3c:5b:bc:0d:28:4b:c5:8a:da:b3:7a:
37:20:68:ab:b3:29:3e:85:6d:3e:09:a9:5a:9e:9c:cb:b1:49:
88:34:09:87:51:44:8b:08:3e:5d:f8:9a:fd:aa:fc:73:71:e2:
29:f4:58:a3:0e:2a:86:7f:5c:b8:a7:a4:6e:5d:27:a8:1a:0f:
d7:24:3d:fc:b8:ad:fd:5b:ba:f4:e1:31:19:31:8a:f6:19:f3:
6d:69:72:3f:fd:29:77:a6:ca:5b:aa:f2:e1:da:ba:10:54:ec:
ad:2b:e9:69:f7:1b:29:ef:a9:d4:43:18:20:42:88:dc:b9:24:
e0:59:ac:1c:bc:23:75:0f:58:6d:eb:1b:04:ef:da:cf:4f:1b:
66:31:df:64:d1:a5:46:7d:51:8b:16:68:50:94:78:b2:84:00:
ed:1d:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:25:10 2026 by rpki-client