Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cCwsIFxrbfgaELrP2szaGwS4jUA.roa
File: cCwsIFxrbfgaELrP2szaGwS4jUA.roa (raw, json)
Hash identifier: geipURluZ2qXgJmw5IqNiXSsOKZHO2Hxu6cwDPy47zs=
Subject key identifier: 70:2C:2C:20:5C:6B:6D:F8:1A:10:BA:CF:DA:CC:DA:1B:04:B8:8D:40
Certificate issuer: /CN=78f9b70628daad93af188a2239828db2c29c14ec
Certificate serial: 01A0D3A3FBA4B0AAB729C89813065F073020
Authority key identifier: 78:F9:B7:06:28:DA:AD:93:AF:18:8A:22:39:82:8D:B2:C2:9C:14:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cCwsIFxrbfgaELrP2szaGwS4jUA.roa
Signing time: Thu 24 Sep 2026 13:38:54 +0000
ROA not before: Thu 24 Sep 2026 13:38:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34758
IP address blocks: 31.6.80.0/20 maxlen: 20
31.6.80.0/24 maxlen: 24
31.6.81.0/24 maxlen: 24
31.6.82.0/24 maxlen: 24
31.6.83.0/24 maxlen: 24
31.6.84.0/24 maxlen: 24
31.6.85.0/24 maxlen: 24
31.6.86.0/24 maxlen: 24
31.6.87.0/24 maxlen: 24
31.6.88.0/24 maxlen: 24
31.6.89.0/24 maxlen: 24
31.6.90.0/24 maxlen: 24
31.6.91.0/24 maxlen: 24
31.6.92.0/24 maxlen: 24
31.6.93.0/24 maxlen: 24
31.6.94.0/24 maxlen: 24
31.6.95.0/24 maxlen: 24
45.13.88.0/22 maxlen: 22
45.13.88.0/24 maxlen: 24
45.13.89.0/24 maxlen: 24
45.13.90.0/24 maxlen: 24
45.13.91.0/24 maxlen: 24
45.93.36.0/22 maxlen: 22
45.93.36.0/24 maxlen: 24
45.93.37.0/24 maxlen: 24
45.93.38.0/24 maxlen: 24
45.93.39.0/24 maxlen: 24
46.229.80.0/20 maxlen: 20
46.229.80.0/24 maxlen: 24
46.229.81.0/24 maxlen: 24
46.229.82.0/24 maxlen: 24
46.229.83.0/24 maxlen: 24
46.229.84.0/24 maxlen: 24
46.229.85.0/24 maxlen: 24
46.229.86.0/24 maxlen: 24
46.229.87.0/24 maxlen: 24
46.229.88.0/24 maxlen: 24
46.229.89.0/24 maxlen: 24
46.229.90.0/24 maxlen: 24
46.229.91.0/24 maxlen: 24
46.229.92.0/24 maxlen: 24
46.229.93.0/24 maxlen: 24
46.229.94.0/24 maxlen: 24
46.229.95.0/24 maxlen: 24
80.70.116.0/22 maxlen: 22
80.70.116.0/24 maxlen: 24
80.70.117.0/24 maxlen: 24
80.70.118.0/24 maxlen: 24
80.70.119.0/24 maxlen: 24
82.163.32.0/22 maxlen: 22
82.163.32.0/24 maxlen: 24
82.163.33.0/24 maxlen: 24
82.163.34.0/24 maxlen: 24
82.163.35.0/24 maxlen: 24
84.234.100.0/22 maxlen: 22
84.234.100.0/24 maxlen: 24
84.234.101.0/24 maxlen: 24
84.234.102.0/24 maxlen: 24
84.234.103.0/24 maxlen: 24
89.189.32.0/20 maxlen: 20
89.189.32.0/24 maxlen: 24
89.189.33.0/24 maxlen: 24
89.189.34.0/24 maxlen: 24
89.189.35.0/24 maxlen: 24
89.189.36.0/24 maxlen: 24
89.189.37.0/24 maxlen: 24
89.189.38.0/24 maxlen: 24
89.189.39.0/24 maxlen: 24
89.189.40.0/24 maxlen: 24
89.189.41.0/24 maxlen: 24
89.189.42.0/24 maxlen: 24
89.189.43.0/24 maxlen: 24
89.189.44.0/24 maxlen: 24
89.189.45.0/24 maxlen: 24
89.189.46.0/24 maxlen: 24
89.189.47.0/24 maxlen: 24
89.189.56.0/21 maxlen: 21
89.189.56.0/24 maxlen: 24
89.189.57.0/24 maxlen: 24
89.189.58.0/24 maxlen: 24
89.189.59.0/24 maxlen: 24
89.189.60.0/24 maxlen: 24
89.189.61.0/24 maxlen: 24
89.189.62.0/24 maxlen: 24
89.189.63.0/24 maxlen: 24
92.246.96.0/21 maxlen: 21
92.246.96.0/24 maxlen: 24
92.246.97.0/24 maxlen: 24
92.246.98.0/24 maxlen: 24
92.246.99.0/24 maxlen: 24
92.246.100.0/24 maxlen: 24
92.246.101.0/24 maxlen: 24
92.246.102.0/24 maxlen: 24
92.246.103.0/24 maxlen: 24
92.246.112.0/20 maxlen: 20
92.246.112.0/24 maxlen: 24
92.246.113.0/24 maxlen: 24
92.246.114.0/24 maxlen: 24
92.246.115.0/24 maxlen: 24
92.246.116.0/24 maxlen: 24
92.246.117.0/24 maxlen: 24
92.246.118.0/24 maxlen: 24
92.246.119.0/24 maxlen: 24
92.246.120.0/24 maxlen: 24
92.246.121.0/24 maxlen: 24
92.246.122.0/24 maxlen: 24
92.246.123.0/24 maxlen: 24
92.246.124.0/24 maxlen: 24
92.246.125.0/24 maxlen: 24
92.246.126.0/24 maxlen: 24
92.246.127.0/24 maxlen: 24
93.93.16.0/21 maxlen: 21
93.93.16.0/24 maxlen: 24
93.93.17.0/24 maxlen: 24
93.93.18.0/24 maxlen: 24
93.93.19.0/24 maxlen: 24
93.93.20.0/24 maxlen: 24
93.93.21.0/24 maxlen: 24
93.93.22.0/24 maxlen: 24
93.93.23.0/24 maxlen: 24
109.234.136.0/21 maxlen: 21
109.234.136.0/24 maxlen: 24
109.234.137.0/24 maxlen: 24
109.234.138.0/24 maxlen: 24
109.234.139.0/24 maxlen: 24
109.234.140.0/24 maxlen: 24
109.234.141.0/24 maxlen: 24
109.234.142.0/24 maxlen: 24
109.234.143.0/24 maxlen: 24
146.255.160.0/21 maxlen: 21
146.255.160.0/24 maxlen: 24
146.255.161.0/24 maxlen: 24
146.255.162.0/24 maxlen: 24
146.255.163.0/24 maxlen: 24
146.255.164.0/24 maxlen: 24
146.255.165.0/24 maxlen: 24
146.255.166.0/24 maxlen: 24
146.255.167.0/24 maxlen: 24
159.255.156.0/22 maxlen: 22
159.255.156.0/24 maxlen: 24
159.255.157.0/24 maxlen: 24
159.255.158.0/24 maxlen: 24
159.255.159.0/24 maxlen: 24
185.23.84.0/22 maxlen: 22
185.23.84.0/24 maxlen: 24
185.23.85.0/24 maxlen: 24
185.23.86.0/24 maxlen: 24
185.23.87.0/24 maxlen: 24
185.103.80.0/22 maxlen: 22
185.103.80.0/24 maxlen: 24
185.103.81.0/24 maxlen: 24
185.103.82.0/24 maxlen: 24
185.103.83.0/24 maxlen: 24
185.126.140.0/22 maxlen: 22
185.126.140.0/23 maxlen: 23
185.126.140.0/24 maxlen: 24
185.126.141.0/24 maxlen: 24
185.126.142.0/24 maxlen: 24
185.126.143.0/24 maxlen: 24
185.138.36.0/22 maxlen: 22
185.138.36.0/23 maxlen: 23
185.138.36.0/24 maxlen: 24
185.138.37.0/24 maxlen: 24
185.138.38.0/23 maxlen: 23
185.138.38.0/24 maxlen: 24
185.138.39.0/24 maxlen: 24
185.158.28.0/22 maxlen: 22
185.158.28.0/24 maxlen: 24
185.158.29.0/24 maxlen: 24
185.158.30.0/24 maxlen: 24
185.158.31.0/24 maxlen: 24
185.171.36.0/22 maxlen: 22
185.171.36.0/24 maxlen: 24
185.171.37.0/24 maxlen: 24
185.171.38.0/24 maxlen: 24
185.171.39.0/24 maxlen: 24
185.178.12.0/22 maxlen: 22
185.178.12.0/24 maxlen: 24
185.178.13.0/24 maxlen: 24
185.178.14.0/24 maxlen: 24
185.178.15.0/24 maxlen: 24
193.238.136.0/22 maxlen: 22
193.238.136.0/24 maxlen: 24
193.238.137.0/24 maxlen: 24
193.238.138.0/24 maxlen: 24
193.238.139.0/24 maxlen: 24
195.225.224.0/22 maxlen: 22
195.225.224.0/24 maxlen: 24
195.225.225.0/24 maxlen: 24
195.225.226.0/24 maxlen: 24
195.225.227.0/24 maxlen: 24
213.178.192.0/20 maxlen: 20
213.178.192.0/24 maxlen: 24
213.178.193.0/24 maxlen: 24
213.178.194.0/24 maxlen: 24
213.178.195.0/24 maxlen: 24
213.178.196.0/24 maxlen: 24
213.178.197.0/24 maxlen: 24
213.178.198.0/24 maxlen: 24
213.178.199.0/24 maxlen: 24
213.178.200.0/24 maxlen: 24
213.178.201.0/24 maxlen: 24
213.178.202.0/24 maxlen: 24
213.178.203.0/24 maxlen: 24
213.178.204.0/24 maxlen: 24
213.178.205.0/24 maxlen: 24
213.178.206.0/24 maxlen: 24
213.178.207.0/24 maxlen: 24
217.72.32.0/21 maxlen: 21
217.72.32.0/24 maxlen: 24
217.72.33.0/24 maxlen: 24
217.72.34.0/24 maxlen: 24
217.72.35.0/24 maxlen: 24
217.72.36.0/24 maxlen: 24
217.72.37.0/24 maxlen: 24
217.72.38.0/24 maxlen: 24
217.72.39.0/24 maxlen: 24
2a01:7540::/32 maxlen: 32
2a04:2080::/29 maxlen: 48
2a06:c2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:a3:fb:a4:b0:aa:b7:29:c8:98:13:06:5f:07:30:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78f9b70628daad93af188a2239828db2c29c14ec
Validity
Not Before: Sep 24 13:38:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=702c2c205c6b6df81a10bacfdaccda1b04b88d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5e:58:d5:7c:1c:d2:66:73:b0:d9:cb:c9:6f:
9c:34:ac:21:04:5a:63:a2:18:f1:06:5e:9e:7f:b7:
f9:ec:02:e4:41:31:3b:04:64:b4:fd:bf:b5:4e:8f:
82:55:8c:c3:d9:2a:b2:a9:60:a9:ca:24:73:bd:69:
aa:b0:8a:86:51:e4:8a:67:c5:5d:64:c8:f4:c7:a0:
cb:c6:f0:d4:72:ab:3a:b9:e1:bd:0a:66:21:50:6a:
90:a8:e0:57:2c:f9:c5:6d:32:df:54:d0:48:98:f3:
3e:7a:d5:ce:50:3f:f7:7c:2f:ed:b1:bf:31:3e:5c:
7c:90:1a:f9:7c:6d:7c:8e:1b:91:c2:28:80:4b:a2:
46:37:ba:bd:fc:16:f3:b9:58:e9:c6:22:07:69:54:
6d:fa:50:00:fc:75:fd:7c:70:50:72:02:e4:b7:0c:
40:af:8b:85:e0:1d:15:62:ca:72:95:94:51:1e:0e:
f0:82:1a:3a:6c:db:90:90:13:f7:26:7f:49:f0:00:
11:e9:33:50:65:17:6d:ec:be:aa:a5:90:07:98:98:
9a:96:42:31:cd:f8:1d:ce:82:08:51:d3:3f:78:23:
70:0c:51:5f:11:43:dc:08:7d:39:11:d0:0a:ac:04:
dc:ac:dd:e2:1c:cb:d1:96:20:bf:47:fb:be:a5:e8:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2C:2C:20:5C:6B:6D:F8:1A:10:BA:CF:DA:CC:DA:1B:04:B8:8D:40
X509v3 Authority Key Identifier:
keyid:78:F9:B7:06:28:DA:AD:93:AF:18:8A:22:39:82:8D:B2:C2:9C:14:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cCwsIFxrbfgaELrP2szaGwS4jUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.80.0/20
45.13.88.0/22
45.93.36.0/22
46.229.80.0/20
80.70.116.0/22
82.163.32.0/22
84.234.100.0/22
89.189.32.0/20
89.189.56.0/21
92.246.96.0/21
92.246.112.0/20
93.93.16.0/21
109.234.136.0/21
146.255.160.0/21
159.255.156.0/22
185.23.84.0/22
185.103.80.0/22
185.126.140.0/22
185.138.36.0/22
185.158.28.0/22
185.171.36.0/22
185.178.12.0/22
193.238.136.0/22
195.225.224.0/22
213.178.192.0/20
217.72.32.0/21
IPv6:
2a01:7540::/32
2a04:2080::/29
2a06:c2c0::/29
Signature Algorithm: sha256WithRSAEncryption
2c:ef:36:7d:3d:f0:c4:6b:c5:8c:50:c2:2f:72:5b:7c:38:cb:
ed:37:6c:d6:7c:ab:cf:46:61:da:c4:84:e9:89:ae:0e:7c:23:
40:69:c9:1a:f7:c8:db:19:29:de:79:b0:cc:81:e6:65:ec:69:
7e:36:92:9f:53:5a:7a:a8:26:14:e7:26:46:9b:07:81:47:28:
19:58:32:7c:08:ab:03:83:e7:82:80:e0:7e:1b:31:08:7e:a5:
5a:07:2d:0e:9e:b2:4f:bc:fd:16:2d:b9:84:9f:0c:02:fa:6d:
11:95:52:c2:c2:a4:93:8c:94:b3:63:4a:17:e0:04:ab:eb:69:
b3:56:5e:4f:76:8c:b5:90:8b:9e:52:5f:ed:a6:a1:1f:e6:a3:
8c:e5:25:dc:63:9e:c5:2f:95:0b:da:af:fc:f9:90:9e:ad:93:
1f:96:32:67:97:c1:90:e5:d4:9f:16:c4:9a:20:f1:e4:fa:5d:
4e:81:a7:fc:4b:82:2c:9c:d5:ae:05:a0:6e:0c:30:b2:45:31:
2e:cb:84:ec:4b:72:1a:25:b5:7c:62:16:92:52:c3:e3:f0:67:
20:39:d3:84:c1:b5:7e:60:2f:79:5f:7b:ca:7c:d0:93:cc:3c:
20:79:ca:17:0b:dd:2e:8d:13:7d:a7:5a:c1:2f:48:ee:00:74:
fd:56:7c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:19:26 2026 by rpki-client