Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/pTIdOhwN38ILsZQYi8bIDMjeY4U.roa
File: pTIdOhwN38ILsZQYi8bIDMjeY4U.roa (raw, json)
Hash identifier: GtMRQsNo+pmOf3YedJ1j8ncQIy9S7xqsYIsqepUk4Dw=
Subject key identifier: A5:32:1D:3A:1C:0D:DF:C2:0B:B1:94:18:8B:C6:C8:0C:C8:DE:63:85
Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial: 019D861492B780B0CF8F1010E39CCBBAE416
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/pTIdOhwN38ILsZQYi8bIDMjeY4U.roa
Signing time: Mon 13 Apr 2026 09:03:08 +0000
ROA not before: Mon 13 Apr 2026 09:03:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 172.216.13.0/24 maxlen: 24
172.216.14.0/24 maxlen: 24
172.216.15.0/24 maxlen: 24
172.216.18.0/24 maxlen: 24
172.216.19.0/24 maxlen: 24
172.216.20.0/24 maxlen: 24
172.216.21.0/24 maxlen: 24
172.216.22.0/24 maxlen: 24
172.216.23.0/24 maxlen: 24
172.216.24.0/24 maxlen: 24
172.216.25.0/24 maxlen: 24
172.216.26.0/24 maxlen: 24
172.216.27.0/24 maxlen: 24
172.216.28.0/24 maxlen: 24
172.216.29.0/24 maxlen: 24
172.216.30.0/24 maxlen: 24
172.216.31.0/24 maxlen: 24
172.216.32.0/24 maxlen: 24
172.216.33.0/24 maxlen: 24
172.216.34.0/24 maxlen: 24
172.216.35.0/24 maxlen: 24
172.216.36.0/24 maxlen: 24
172.216.37.0/24 maxlen: 24
172.216.38.0/24 maxlen: 24
172.216.39.0/24 maxlen: 24
172.216.40.0/24 maxlen: 24
172.216.41.0/24 maxlen: 24
172.216.42.0/24 maxlen: 24
172.216.43.0/24 maxlen: 24
172.216.44.0/24 maxlen: 24
172.216.45.0/24 maxlen: 24
172.216.46.0/24 maxlen: 24
172.216.47.0/24 maxlen: 24
172.216.48.0/24 maxlen: 24
172.216.49.0/24 maxlen: 24
172.216.50.0/24 maxlen: 24
172.216.61.0/24 maxlen: 24
172.216.62.0/24 maxlen: 24
172.216.63.0/24 maxlen: 24
172.216.64.0/24 maxlen: 24
172.216.65.0/24 maxlen: 24
172.216.66.0/24 maxlen: 24
172.216.67.0/24 maxlen: 24
172.216.68.0/24 maxlen: 24
172.216.69.0/24 maxlen: 24
172.216.70.0/24 maxlen: 24
172.216.71.0/24 maxlen: 24
172.216.72.0/24 maxlen: 24
172.216.73.0/24 maxlen: 24
172.216.74.0/24 maxlen: 24
172.216.75.0/24 maxlen: 24
172.216.76.0/24 maxlen: 24
172.216.77.0/24 maxlen: 24
172.216.78.0/24 maxlen: 24
172.216.79.0/24 maxlen: 24
172.216.80.0/24 maxlen: 24
172.216.81.0/24 maxlen: 24
172.216.82.0/24 maxlen: 24
172.216.83.0/24 maxlen: 24
172.216.84.0/24 maxlen: 24
172.216.85.0/24 maxlen: 24
172.216.86.0/24 maxlen: 24
172.216.87.0/24 maxlen: 24
172.216.88.0/24 maxlen: 24
172.216.89.0/24 maxlen: 24
172.216.90.0/24 maxlen: 24
172.216.91.0/24 maxlen: 24
172.216.92.0/24 maxlen: 24
172.216.93.0/24 maxlen: 24
172.216.94.0/24 maxlen: 24
172.216.95.0/24 maxlen: 24
172.216.96.0/24 maxlen: 24
172.216.97.0/24 maxlen: 24
172.216.98.0/24 maxlen: 24
172.216.99.0/24 maxlen: 24
172.216.100.0/24 maxlen: 24
172.216.101.0/24 maxlen: 24
172.216.102.0/24 maxlen: 24
172.216.103.0/24 maxlen: 24
172.216.104.0/24 maxlen: 24
172.216.105.0/24 maxlen: 24
172.216.106.0/24 maxlen: 24
172.216.107.0/24 maxlen: 24
172.216.108.0/24 maxlen: 24
172.216.109.0/24 maxlen: 24
172.216.110.0/24 maxlen: 24
172.216.111.0/24 maxlen: 24
172.216.112.0/24 maxlen: 24
172.216.113.0/24 maxlen: 24
172.216.114.0/24 maxlen: 24
172.216.115.0/24 maxlen: 24
172.216.116.0/24 maxlen: 24
172.216.117.0/24 maxlen: 24
172.216.118.0/24 maxlen: 24
172.216.119.0/24 maxlen: 24
172.216.120.0/24 maxlen: 24
172.216.121.0/24 maxlen: 24
172.216.122.0/24 maxlen: 24
172.216.123.0/24 maxlen: 24
172.216.124.0/24 maxlen: 24
172.216.125.0/24 maxlen: 24
172.216.126.0/24 maxlen: 24
172.216.127.0/24 maxlen: 24
172.216.128.0/24 maxlen: 24
172.216.129.0/24 maxlen: 24
172.216.130.0/24 maxlen: 24
172.216.131.0/24 maxlen: 24
172.216.132.0/24 maxlen: 24
172.216.133.0/24 maxlen: 24
172.216.134.0/24 maxlen: 24
172.216.135.0/24 maxlen: 24
172.216.136.0/24 maxlen: 24
172.216.137.0/24 maxlen: 24
172.216.138.0/24 maxlen: 24
172.216.139.0/24 maxlen: 24
172.216.140.0/24 maxlen: 24
172.216.141.0/24 maxlen: 24
172.216.142.0/24 maxlen: 24
172.216.143.0/24 maxlen: 24
172.216.144.0/24 maxlen: 24
172.216.145.0/24 maxlen: 24
172.216.146.0/24 maxlen: 24
172.216.147.0/24 maxlen: 24
172.216.148.0/24 maxlen: 24
172.216.149.0/24 maxlen: 24
172.216.156.0/24 maxlen: 24
172.216.157.0/24 maxlen: 24
172.216.158.0/24 maxlen: 24
172.216.159.0/24 maxlen: 24
172.216.160.0/24 maxlen: 24
172.216.161.0/24 maxlen: 24
172.216.162.0/24 maxlen: 24
172.216.163.0/24 maxlen: 24
172.216.164.0/24 maxlen: 24
172.216.165.0/24 maxlen: 24
172.216.166.0/24 maxlen: 24
172.216.167.0/24 maxlen: 24
172.216.168.0/24 maxlen: 24
172.216.173.0/24 maxlen: 24
172.216.175.0/24 maxlen: 24
172.216.176.0/24 maxlen: 24
172.216.177.0/24 maxlen: 24
172.216.178.0/24 maxlen: 24
172.216.179.0/24 maxlen: 24
172.216.180.0/24 maxlen: 24
172.216.181.0/24 maxlen: 24
172.216.182.0/24 maxlen: 24
172.216.183.0/24 maxlen: 24
172.216.184.0/24 maxlen: 24
172.216.187.0/24 maxlen: 24
172.216.188.0/24 maxlen: 24
172.216.189.0/24 maxlen: 24
172.216.190.0/24 maxlen: 24
172.216.191.0/24 maxlen: 24
172.216.192.0/24 maxlen: 24
172.216.193.0/24 maxlen: 24
172.216.194.0/24 maxlen: 24
172.216.195.0/24 maxlen: 24
172.216.196.0/24 maxlen: 24
172.216.207.0/24 maxlen: 24
172.216.208.0/24 maxlen: 24
172.216.209.0/24 maxlen: 24
172.216.210.0/24 maxlen: 24
172.216.211.0/24 maxlen: 24
172.216.212.0/24 maxlen: 24
172.216.215.0/24 maxlen: 24
172.216.216.0/24 maxlen: 24
172.216.217.0/24 maxlen: 24
172.216.218.0/24 maxlen: 24
172.216.219.0/24 maxlen: 24
172.216.220.0/24 maxlen: 24
172.216.221.0/24 maxlen: 24
172.216.222.0/24 maxlen: 24
172.216.223.0/24 maxlen: 24
172.216.224.0/24 maxlen: 24
172.216.225.0/24 maxlen: 24
172.216.230.0/24 maxlen: 24
172.216.231.0/24 maxlen: 24
172.216.232.0/24 maxlen: 24
172.216.233.0/24 maxlen: 24
172.216.234.0/24 maxlen: 24
172.216.235.0/24 maxlen: 24
172.216.236.0/24 maxlen: 24
172.216.237.0/24 maxlen: 24
172.216.238.0/24 maxlen: 24
172.216.239.0/24 maxlen: 24
172.216.240.0/24 maxlen: 24
172.216.241.0/24 maxlen: 24
172.216.242.0/24 maxlen: 24
172.216.243.0/24 maxlen: 24
172.216.244.0/24 maxlen: 24
172.216.246.0/24 maxlen: 24
172.216.247.0/24 maxlen: 24
172.216.249.0/24 maxlen: 24
172.216.253.0/24 maxlen: 24
2a09:a702:24::/48 maxlen: 48
2a09:a702:ae::/48 maxlen: 48
2a09:a702:af::/48 maxlen: 48
2a09:a702:b2::/48 maxlen: 48
2a09:a702:b3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:14:92:b7:80:b0:cf:8f:10:10:e3:9c:cb:ba:e4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Validity
Not Before: Apr 13 09:03:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5321d3a1c0ddfc20bb194188bc6c80cc8de6385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:50:8c:13:7a:5e:ee:96:a0:c1:39:31:a5:
eb:7d:73:e9:84:bc:8f:9f:01:52:85:c0:9f:56:3e:
0e:fc:b8:c3:83:74:7a:b3:76:76:0c:eb:1a:4b:1f:
2e:61:4a:a6:22:5a:78:52:ed:a4:2e:e2:e7:e0:68:
53:0d:f3:03:b4:44:d7:e4:e6:76:54:ba:41:96:72:
34:0b:52:86:a9:25:76:e9:a4:ab:31:fb:14:d2:cb:
13:87:b7:30:69:a2:fe:f6:ad:55:c8:b9:83:57:63:
aa:76:d5:33:f2:eb:7d:33:78:8c:eb:78:3c:52:d3:
da:59:3f:45:7c:7e:c1:31:77:d5:6f:51:e0:46:7b:
cb:98:3d:b2:c3:f4:6f:f0:e3:f7:2a:69:53:1f:e2:
29:ee:04:3a:cf:58:33:f4:ae:49:b5:e0:a0:c8:8a:
1b:60:e0:7b:fd:ce:4a:01:3d:8b:5a:cc:10:5e:9f:
5a:05:03:4b:48:35:9d:54:69:a1:c4:92:ae:bf:90:
0d:ec:61:98:72:a4:59:9b:28:b2:e7:9f:56:c1:97:
64:7c:49:05:1a:ce:fb:cc:1d:74:8a:3e:09:87:46:
50:1a:23:05:4e:32:1e:3c:b7:23:bf:07:74:b2:ed:
0c:a3:7b:a4:09:dd:2a:ee:35:ea:57:9c:9b:d4:00:
9a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:32:1D:3A:1C:0D:DF:C2:0B:B1:94:18:8B:C6:C8:0C:C8:DE:63:85
X509v3 Authority Key Identifier:
keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/pTIdOhwN38ILsZQYi8bIDMjeY4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.216.13.0-172.216.15.255
172.216.18.0-172.216.50.255
172.216.61.0-172.216.149.255
172.216.156.0-172.216.168.255
172.216.173.0/24
172.216.175.0-172.216.184.255
172.216.187.0-172.216.196.255
172.216.207.0-172.216.212.255
172.216.215.0-172.216.225.255
172.216.230.0-172.216.244.255
172.216.246.0/23
172.216.249.0/24
172.216.253.0/24
IPv6:
2a09:a702:24::/48
2a09:a702:ae::/47
2a09:a702:b2::/47
Signature Algorithm: sha256WithRSAEncryption
47:f7:b8:f0:2b:3a:bd:9f:de:a6:3e:6b:8b:8d:81:d6:8e:5b:
e2:14:df:69:2d:a5:c7:7b:d0:33:2f:df:16:81:ba:c1:d9:60:
61:b6:4a:bf:3a:30:85:59:43:d3:54:58:52:6f:7b:27:0a:dc:
19:2d:85:cf:f9:c2:db:5a:27:cd:ad:2f:87:4a:47:c9:d0:01:
2d:bb:e0:a8:61:28:86:ef:7e:dc:74:05:57:fd:c3:9f:19:80:
f3:27:cf:46:b3:3d:c6:40:7f:f9:30:8c:97:d9:85:cf:f1:81:
99:ed:7d:e1:3b:d5:ad:bb:f6:db:4a:c8:3d:3e:f1:52:17:dd:
f0:43:55:2d:91:ce:52:f1:9a:18:59:86:36:53:58:92:11:e5:
aa:6c:60:41:2a:71:80:3a:8f:94:ca:a3:b5:49:57:eb:c4:63:
0d:2a:e8:0a:f0:25:fa:e3:55:a2:63:a8:f0:63:1e:b9:bc:f9:
c2:95:1d:17:08:18:ed:2c:e8:6b:3e:d4:46:cc:3b:2f:1f:e9:
1b:b9:a6:bf:0e:2b:5b:1a:73:46:a1:7e:8c:1b:e0:de:bc:71:
82:42:68:fc:46:34:2c:a4:a7:d3:a5:a4:9f:60:7c:b9:bb:ef:
77:f7:67:73:fc:d9:3b:a8:65:0b:7b:ab:27:18:e8:da:4f:86:
d1:62:8d:7e
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISAZ2GFJK3gLDPjxAQ45zLuuQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0
YmY4MDAwHhcNMjYwNDEzMDkwMzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTMyMWQzYTFjMGRkZmMyMGJiMTk0MTg4YmM2YzgwY2M4ZGU2Mzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV1QjBN6Xu6WoME5MaXrfXPphLyP
nwFShcCfVj4O/LjDg3R6s3Z2DOsaSx8uYUqmIlp4Uu2kLuLn4GhTDfMDtETX5OZ2
VLpBlnI0C1KGqSV26aSrMfsU0ssTh7cwaaL+9q1VyLmDV2OqdtUz8ut9M3iM63g8
UtPaWT9FfH7BMXfVb1HgRnvLmD2yw/Rv8OP3KmlTH+Ip7gQ6z1gz9K5JteCgyIob
YOB7/c5KAT2LWswQXp9aBQNLSDWdVGmhxJKuv5AN7GGYcqRZmyiy559WwZdkfEkF
Gs77zB10ij4Jh0ZQGiMFTjIePLcjvwd0su0Mo3ukCd0q7jXqV5yb1ACaCwIDAQAB
o4ICwTCCAr0wHQYDVR0OBBYEFKUyHTocDd/CC7GUGIvGyAzI3mOFMB8GA1UdIwQY
MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt
NDhkNWZmNGJhMjU1LzEvcFRJZE9od04zOElMc1pRWWk4YklETWplWTRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1
LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHWBggrBgEFBQcBBwEB/wSBxjCBwzCBnQQCAAEwgZYwDAME
AKzYDQMEBKzYADAMAwQBrNgSAwQArNgyMAwDBACs2D0DBAGs2JQwDAMEAqzYnAME
AKzYqAMEAKzYrTAMAwQArNivAwQArNi4MAwDBACs2LsDBACs2MQwDAMEAKzYzwME
AKzY1DAMAwQArNjXAwQBrNjgMAwDBAGs2OYDBACs2PQDBAGs2PYDBACs2PkDBACs
2P0wIQQCAAIwGwMHACoJpwIAJAMHASoJpwIArgMHASoJpwIAsjANBgkqhkiG9w0B
AQsFAAOCAQEAR/e48Cs6vZ/epj5ri42B1o5b4hTfaS2lx3vQMy/fFoG6wdlgYbZK
vzowhVlD01RYUm97JwrcGS2Fz/nC21onza0vh0pHydABLbvgqGEohu9+3HQFV/3D
nxmA8yfPRrM9xkB/+TCMl9mFz/GBme194TvVrbv220rIPT7xUhfd8ENVLZHOUvGa
GFmGNlNYkhHlqmxgQSpxgDqPlMqjtUlX68RjDSroCvAl+uNVomOo8GMeubz5wpUd
FwgY7Szoaz7URsw7Lx/pG7mmvw4rWxpzRqF+jBvg3rxxgkJo/EY0LKSn06Wkn2B8
ubvvd/dnc/zZO6hlC3urJxjo2k+G0WKNfg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:14 2026 by rpki-client