Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/KcPunzFhBZjGxiSntfHDdjlxspg.roa
File: KcPunzFhBZjGxiSntfHDdjlxspg.roa (raw, json)
Hash identifier: Vu6WnP3DTgWZlxUK1kicLkHb4wJxtlC6DqS6RD7zpbM=
Subject key identifier: 29:C3:EE:9F:31:61:05:98:C6:C6:24:A7:B5:F1:C3:76:39:71:B2:98
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019C7CD346DA018176AF5F7D639F2EF1B001
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/KcPunzFhBZjGxiSntfHDdjlxspg.roa
Signing time: Fri 20 Feb 2026 20:52:26 +0000
ROA not before: Fri 20 Feb 2026 20:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8400
IP address blocks: 5.154.225.0/24 maxlen: 24
31.14.33.0/24 maxlen: 24
37.153.174.0/24 maxlen: 24
37.153.175.0/24 maxlen: 24
46.17.120.0/21 maxlen: 21
46.235.96.0/21 maxlen: 21
62.101.128.0/20 maxlen: 20
62.240.24.0/21 maxlen: 21
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.34.2.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
89.42.12.0/24 maxlen: 24
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.148.64.0/18 maxlen: 18
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.60.224.0/24 maxlen: 24
92.60.225.0/24 maxlen: 24
92.60.226.0/24 maxlen: 24
92.60.227.0/24 maxlen: 24
92.60.228.0/24 maxlen: 24
92.60.229.0/24 maxlen: 24
92.60.230.0/24 maxlen: 24
92.60.231.0/24 maxlen: 24
92.60.232.0/24 maxlen: 24
92.60.233.0/24 maxlen: 24
92.60.234.0/23 maxlen: 23
92.60.236.0/24 maxlen: 24
92.60.237.0/24 maxlen: 24
92.60.238.0/24 maxlen: 24
92.60.239.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
93.113.250.0/24 maxlen: 24
93.113.251.0/24 maxlen: 24
94.228.224.0/22 maxlen: 22
94.228.229.0/24 maxlen: 24
94.228.230.0/24 maxlen: 24
94.228.231.0/24 maxlen: 24
94.228.232.0/23 maxlen: 23
94.228.234.0/24 maxlen: 24
94.228.235.0/24 maxlen: 24
94.228.236.0/24 maxlen: 24
94.228.237.0/24 maxlen: 24
94.228.238.0/23 maxlen: 23
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.94.228.0/22 maxlen: 22
109.94.232.0/21 maxlen: 21
109.122.64.0/18 maxlen: 24
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
176.67.192.0/21 maxlen: 21
176.67.200.0/23 maxlen: 23
176.67.202.0/23 maxlen: 23
176.67.204.0/24 maxlen: 24
176.67.205.0/24 maxlen: 24
176.67.206.0/23 maxlen: 23
176.67.208.0/23 maxlen: 23
176.67.210.0/24 maxlen: 24
176.67.211.0/24 maxlen: 24
176.67.212.0/23 maxlen: 23
176.67.214.0/24 maxlen: 24
176.67.215.0/24 maxlen: 24
176.67.216.0/24 maxlen: 24
176.67.217.0/24 maxlen: 24
176.67.218.0/24 maxlen: 24
176.67.219.0/24 maxlen: 24
176.67.220.0/24 maxlen: 24
176.67.221.0/24 maxlen: 24
176.67.222.0/24 maxlen: 24
176.67.223.0/24 maxlen: 24
178.17.16.0/21 maxlen: 21
178.17.24.0/22 maxlen: 22
178.17.28.0/23 maxlen: 23
178.17.30.0/24 maxlen: 24
178.17.31.0/24 maxlen: 24
178.79.0.0/18 maxlen: 18
178.79.16.0/23 maxlen: 23
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
178.237.208.0/20 maxlen: 20
178.250.136.0/21 maxlen: 21
185.10.140.0/22 maxlen: 22
185.26.172.0/22 maxlen: 22
185.27.128.0/24 maxlen: 24
185.27.129.0/24 maxlen: 24
185.27.130.0/23 maxlen: 23
185.34.92.0/22 maxlen: 22
185.36.255.0/24 maxlen: 24
185.71.88.0/22 maxlen: 22
185.103.136.0/22 maxlen: 22
185.112.20.0/22 maxlen: 22
185.157.104.0/22 maxlen: 22
185.179.136.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
188.215.30.0/24 maxlen: 24
188.240.88.0/24 maxlen: 24
188.240.200.0/24 maxlen: 24
188.240.201.0/24 maxlen: 24
195.178.32.0/19 maxlen: 19
195.252.82.0/24 maxlen: 24
195.252.88.0/24 maxlen: 24
195.252.92.0/22 maxlen: 22
212.62.59.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a00:8720::/32 maxlen: 32
2a01:b800::/32 maxlen: 32
2a02:61a0::/32 maxlen: 32
2a03:fc40::/32 maxlen: 32
2a04:1dc0::/29 maxlen: 29
2a06:5b00::/29 maxlen: 29
2a06:63c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7c:d3:46:da:01:81:76:af:5f:7d:63:9f:2e:f1:b0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Feb 20 20:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29c3ee9f31610598c6c624a7b5f1c3763971b298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:e0:3e:68:21:b1:41:54:6a:1a:80:1f:e4:
5d:24:83:99:0b:57:4f:b7:38:66:85:fb:fa:d2:4e:
0f:a0:44:23:82:fa:73:6c:59:34:3a:a1:5a:68:75:
75:55:e2:9b:52:89:bb:21:b7:1c:21:fe:b0:f2:cc:
e9:d8:7a:6c:a9:42:31:2a:62:5f:27:e3:ed:a5:b0:
1d:a1:09:59:c3:05:51:fb:ce:6a:70:05:56:6c:97:
6c:f0:a9:d9:e6:e9:45:10:ed:37:b0:e7:d4:f2:50:
f5:99:ea:ba:d7:f5:4e:4a:71:41:83:69:f5:58:31:
c2:0b:a9:92:e4:f5:3c:01:42:a4:9a:4a:80:fa:e7:
67:f9:9d:41:1d:99:d3:4a:4d:a1:2a:fc:00:eb:fc:
db:4f:a3:c1:af:6e:fe:7f:b4:0a:9c:fb:c9:76:95:
61:af:09:7d:72:df:6e:76:37:a2:38:5b:1b:b6:7e:
0e:1b:02:ab:54:19:77:c0:02:fd:15:c7:22:91:7d:
1b:50:25:1e:b3:55:b0:78:a4:93:e2:75:18:e0:aa:
8c:7f:ec:8e:51:07:1d:72:95:84:07:95:bd:6d:20:
be:5d:4f:d3:92:c8:af:2f:1b:95:ba:77:5f:0c:52:
39:c8:ae:12:f6:44:9c:67:ee:a7:80:10:2b:ed:b4:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C3:EE:9F:31:61:05:98:C6:C6:24:A7:B5:F1:C3:76:39:71:B2:98
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/KcPunzFhBZjGxiSntfHDdjlxspg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.225.0/24
31.14.33.0/24
37.153.174.0/23
46.17.120.0/21
46.235.96.0/21
62.101.128.0/20
62.240.24.0/21
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.34.2.0/24
89.39.144.0/23
89.42.12.0/24
89.46.126.0/23
89.47.40.0/23
91.148.64.0/18
91.150.64.0/18
92.60.224.0/20
92.244.128.0/19
93.86.0.0/15
93.113.250.0/23
94.228.224.0/22
94.228.229.0-94.228.239.255
109.72.48.0/20
109.92.0.0/15
109.94.228.0-109.94.239.255
109.122.64.0/18
109.198.0.0/19
176.67.192.0/19
178.17.16.0/20
178.79.0.0/18
178.220.0.0-178.223.223.255
178.237.208.0/20
178.250.136.0/21
185.10.140.0/22
185.26.172.0/22
185.27.128.0/22
185.34.92.0/22
185.36.255.0/24
185.71.88.0/22
185.103.136.0/22
185.112.20.0/22
185.157.104.0/22
185.179.136.0/22
185.190.152.0/22
188.215.30.0/24
188.240.88.0/24
188.240.200.0/23
195.178.32.0/19
195.252.82.0/24
195.252.88.0/24
195.252.92.0/22
212.62.59.0/24
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a00:8720::/32
2a01:b800::/32
2a02:61a0::/32
2a03:fc40::/32
2a04:1dc0::/29
2a06:5b00::/29
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
54:1e:b6:84:35:4e:d5:d9:09:f8:5d:31:e0:67:6c:7d:11:bb:
8a:8e:07:8d:f8:6a:3c:ee:16:63:a9:f4:a4:d6:fc:bc:04:1d:
cd:ce:b0:30:02:5f:dd:b8:08:4a:97:f7:52:d5:87:d6:b0:9e:
1c:1f:d5:5f:29:c6:22:72:6d:4a:19:d2:f8:09:ed:7b:00:19:
0f:46:02:71:cc:c1:cd:05:76:cc:05:b2:9f:5d:3c:d4:ae:fd:
19:f0:d8:c7:fd:10:59:a1:75:98:cc:b6:74:9c:4e:3a:ab:0f:
dc:9b:77:f1:49:6c:3e:ff:8c:a9:06:03:ca:a7:97:c2:42:39:
ef:d0:c0:6a:89:2b:a1:ce:e2:12:75:0e:61:d6:4c:c7:19:bf:
df:50:01:d0:c6:d6:40:d6:ca:ef:ed:75:4f:4b:f4:80:50:32:
42:87:04:8e:e9:4a:92:a8:f8:6c:db:6a:a7:4a:94:06:3e:c7:
e7:0f:3b:76:9a:56:bf:68:3c:56:86:c1:da:ff:b3:d7:2a:4a:
53:aa:85:47:10:27:fb:04:28:3b:86:ca:b2:ca:c6:26:f4:c0:
69:4b:48:63:a1:da:cf:a0:69:a1:34:ff:83:aa:d2:20:1d:19:
42:ca:f4:00:a5:84:00:7c:04:3a:f7:fb:ba:41:f4:39:db:a3:
dc:cb:fc:a2
-----BEGIN CERTIFICATE-----
MIIGnjCCBYagAwIBAgISAZx800baAYF2r199Y58u8bABMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi
NmJkZjcwHhcNMjYwMjIwMjA1MjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWMzZWU5ZjMxNjEwNTk4YzZjNjI0YTdiNWYxYzM3NjM5NzFiMjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxfgPmghsUFUahqAH+RdJIOZC1dP
tzhmhfv60k4PoEQjgvpzbFk0OqFaaHV1VeKbUom7IbccIf6w8szp2HpsqUIxKmJf
J+PtpbAdoQlZwwVR+85qcAVWbJds8KnZ5ulFEO03sOfU8lD1meq61/VOSnFBg2n1
WDHCC6mS5PU8AUKkmkqA+udn+Z1BHZnTSk2hKvwA6/zbT6PBr27+f7QKnPvJdpVh
rwl9ct9udjeiOFsbtn4OGwKrVBl3wAL9FccikX0bUCUes1WweKST4nUY4KqMf+yO
UQcdcpWEB5W9bSC+XU/TksivLxuVundfDFI5yK4S9kScZ+6ngBAr7bSZRQIDAQAB
o4IDqjCCA6YwHQYDVR0OBBYEFCnD7p8xYQWYxsYkp7Xxw3Y5cbKYMB8GA1UdIwQY
MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt
ZDNlMjgwMGJkNjQwLzEvS2NQdW56RmhCWmpHeGlTbnRmSERkamx4c3BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw
LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBvgYIKwYBBQUHAQcBAf8EggGtMIIBqTCCAWUEAgABMIIB
XQMEAAWa4QMEAB8OIQMEASWZrgMEAy4ReAMEAy7rYAMEBD5lgAMEAz7wGAMEB00u
gAMDAE9lAwQFV/ogAwQAWSICAwQBWSeQAwQAWSoMAwQBWS5+AwQBWS8oAwQGW5RA
AwQGW5ZAAwQEXDzgAwQFXPSAAwMBXVYDBAFdcfoDBAJe5OAwDAMEAF7k5QMEBF7k
4AMEBG1IMAMDAW1cMAwDBAJtXuQDBARtXuADBAZtekADBAVtxgADBAWwQ8ADBASy
ERADBAayTwAwCwMDArLcAwQFst/AAwQEsu3QAwQDsvqIAwQCuQqMAwQCuRqsAwQC
uRuAAwQCuSJcAwQAuST/AwQCuUdYAwQCuWeIAwQCuXAUAwQCuZ1oAwQCubOIAwQC
ub6YAwQAvNceAwQAvPBYAwQBvPDIAwQFw7IgAwQAw/xSAwQAw/xYAwQCw/xcAwQA
1D47AwMA1MgDBATVxGAwPgQCAAIwOAMFACoADpADBQAqAIcgAwUAKgG4AAMFACoC
YaADBQAqA/xAAwUDKgQdwAMFAyoGWwADBQMqBmPAMA0GCSqGSIb3DQEBCwUAA4IB
AQBUHraENU7V2Qn4XTHgZ2x9EbuKjgeN+Go87hZjqfSk1vy8BB3NzrAwAl/duAhK
l/dS1YfWsJ4cH9VfKcYicm1KGdL4Ce17ABkPRgJxzMHNBXbMBbKfXTzUrv0Z8NjH
/RBZoXWYzLZ0nE46qw/cm3fxSWw+/4ypBgPKp5fCQjnv0MBqiSuhzuISdQ5h1kzH
Gb/fUAHQxtZA1srv7XVPS/SAUDJChwSO6UqSqPhs22qnSpQGPsfnDzt2mla/aDxW
hsHa/7PXKkpTqoVHECf7BCg7hsqyysYm9MBpS0hjodrPoGmhNP+DqtIgHRlCyvQA
pYQAfAQ69/u6QfQ526Pcy/yi
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:12:35 2026 by rpki-client