Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/PQzuHXy5L5b0_yyO6eHIjUH6mi4.roa
File: PQzuHXy5L5b0_yyO6eHIjUH6mi4.roa (raw, json)
Hash identifier: V23nZz7mLpe9717HDXLwPI/8HSc0dvBjnJ7WCHyFfwE=
Subject key identifier: 3D:0C:EE:1D:7C:B9:2F:96:F4:FF:2C:8E:E9:E1:C8:8D:41:FA:9A:2E
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019E972D030BA85EDAE6AD55332221D5381C
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/PQzuHXy5L5b0_yyO6eHIjUH6mi4.roa
Signing time: Fri 05 Jun 2026 09:46:09 +0000
ROA not before: Fri 05 Jun 2026 09:46:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42772
IP address blocks: 37.17.0.0/17 maxlen: 17
37.17.6.0/23 maxlen: 23
37.17.8.0/21 maxlen: 21
37.17.16.0/22 maxlen: 22
37.17.20.0/22 maxlen: 22
37.17.24.0/21 maxlen: 21
37.17.32.0/21 maxlen: 21
37.17.40.0/21 maxlen: 21
37.17.48.0/20 maxlen: 20
37.17.64.0/19 maxlen: 19
37.17.96.0/20 maxlen: 20
37.17.112.0/22 maxlen: 22
37.17.117.0/24 maxlen: 24
37.17.118.0/24 maxlen: 24
37.17.119.0/24 maxlen: 24
37.17.120.0/21 maxlen: 21
46.53.128.0/21 maxlen: 21
46.53.128.0/24 maxlen: 24
46.53.129.0/24 maxlen: 24
46.53.130.0/24 maxlen: 24
46.53.131.0/24 maxlen: 24
46.53.132.0/24 maxlen: 24
46.53.133.0/24 maxlen: 24
46.53.134.0/24 maxlen: 24
46.53.135.0/24 maxlen: 24
46.53.136.0/21 maxlen: 21
46.53.136.0/24 maxlen: 24
46.53.137.0/24 maxlen: 24
46.53.138.0/24 maxlen: 24
46.53.139.0/24 maxlen: 24
46.53.140.0/24 maxlen: 24
46.53.141.0/24 maxlen: 24
46.53.142.0/23 maxlen: 23
46.53.142.0/24 maxlen: 24
46.53.143.0/24 maxlen: 24
46.53.144.0/21 maxlen: 21
46.53.144.0/24 maxlen: 24
46.53.145.0/24 maxlen: 24
46.53.146.0/24 maxlen: 24
46.53.147.0/24 maxlen: 24
46.53.148.0/24 maxlen: 24
46.53.149.0/24 maxlen: 24
46.53.150.0/24 maxlen: 24
46.53.151.0/24 maxlen: 24
46.53.152.0/21 maxlen: 21
46.53.160.0/21 maxlen: 21
46.53.163.0/24 maxlen: 24
46.53.164.0/24 maxlen: 24
46.53.165.0/24 maxlen: 24
46.53.167.0/24 maxlen: 24
46.53.168.0/21 maxlen: 21
46.53.173.0/24 maxlen: 24
46.53.174.0/23 maxlen: 23
46.53.176.0/22 maxlen: 22
46.53.180.0/22 maxlen: 22
46.53.184.0/21 maxlen: 21
46.53.184.0/23 maxlen: 23
46.53.186.0/24 maxlen: 24
46.53.189.0/24 maxlen: 24
46.53.190.0/23 maxlen: 23
46.53.192.0/22 maxlen: 22
46.53.192.0/24 maxlen: 24
46.53.193.0/24 maxlen: 24
46.53.194.0/24 maxlen: 24
46.53.195.0/24 maxlen: 24
46.53.197.0/24 maxlen: 24
46.53.198.0/23 maxlen: 23
46.53.200.0/22 maxlen: 22
46.53.204.0/24 maxlen: 24
46.53.205.0/24 maxlen: 24
46.53.206.0/24 maxlen: 24
46.53.207.0/24 maxlen: 24
46.53.208.0/22 maxlen: 22
46.53.208.0/24 maxlen: 24
46.53.209.0/24 maxlen: 24
46.53.210.0/24 maxlen: 24
46.53.211.0/24 maxlen: 24
46.53.212.0/22 maxlen: 22
46.53.216.0/21 maxlen: 21
46.53.216.0/22 maxlen: 22
46.53.216.0/24 maxlen: 24
46.53.217.0/24 maxlen: 24
46.53.218.0/24 maxlen: 24
46.53.219.0/24 maxlen: 24
46.53.220.0/22 maxlen: 22
46.53.220.0/24 maxlen: 24
46.53.221.0/24 maxlen: 24
46.53.222.0/24 maxlen: 24
46.53.223.0/24 maxlen: 24
46.53.224.0/21 maxlen: 21
46.53.224.0/22 maxlen: 22
46.53.228.0/22 maxlen: 22
46.53.232.0/21 maxlen: 21
46.53.240.0/21 maxlen: 21
46.53.240.0/22 maxlen: 22
46.53.248.0/21 maxlen: 21
46.53.248.0/22 maxlen: 22
46.56.129.0/24 maxlen: 24
46.56.130.0/23 maxlen: 23
46.56.132.0/24 maxlen: 24
46.56.133.0/24 maxlen: 24
46.56.134.0/24 maxlen: 24
46.56.135.0/24 maxlen: 24
46.56.136.0/23 maxlen: 23
46.56.138.0/23 maxlen: 23
46.56.140.0/22 maxlen: 22
46.56.144.0/20 maxlen: 20
46.56.160.0/21 maxlen: 21
46.56.168.0/21 maxlen: 21
46.56.176.0/20 maxlen: 20
46.56.176.0/21 maxlen: 21
46.56.184.0/21 maxlen: 21
46.56.192.0/21 maxlen: 21
46.56.200.0/21 maxlen: 21
46.56.208.0/24 maxlen: 24
46.56.209.0/24 maxlen: 24
46.56.210.0/24 maxlen: 24
46.56.211.0/24 maxlen: 24
46.56.212.0/24 maxlen: 24
46.56.213.0/24 maxlen: 24
46.56.214.0/23 maxlen: 23
46.56.214.0/24 maxlen: 24
46.56.216.0/21 maxlen: 21
46.56.224.0/21 maxlen: 21
46.56.232.0/21 maxlen: 21
46.56.240.0/21 maxlen: 21
46.56.248.0/21 maxlen: 21
46.182.48.0/21 maxlen: 21
77.74.32.0/21 maxlen: 21
77.74.34.0/24 maxlen: 24
77.74.35.0/24 maxlen: 24
77.74.36.0/24 maxlen: 24
77.74.37.0/24 maxlen: 24
77.74.38.0/24 maxlen: 24
77.74.39.0/24 maxlen: 24
93.191.96.0/22 maxlen: 22
93.191.100.0/24 maxlen: 24
93.191.101.0/24 maxlen: 24
93.191.102.0/24 maxlen: 24
93.191.103.0/24 maxlen: 24
128.65.0.0/18 maxlen: 18
128.65.0.0/24 maxlen: 24
128.65.1.0/24 maxlen: 24
128.65.2.0/23 maxlen: 23
128.65.4.0/23 maxlen: 23
128.65.6.0/23 maxlen: 23
128.65.8.0/21 maxlen: 21
128.65.16.0/22 maxlen: 22
128.65.20.0/22 maxlen: 22
128.65.24.0/21 maxlen: 21
128.65.24.0/22 maxlen: 22
128.65.28.0/22 maxlen: 22
128.65.32.0/21 maxlen: 21
128.65.40.0/21 maxlen: 21
128.65.48.0/20 maxlen: 20
128.65.56.0/21 maxlen: 21
128.65.56.0/22 maxlen: 22
128.65.60.0/22 maxlen: 22
128.140.240.0/20 maxlen: 20
128.140.240.0/24 maxlen: 24
128.140.244.0/22 maxlen: 22
128.140.248.0/22 maxlen: 22
178.163.128.0/17 maxlen: 17
178.163.128.0/24 maxlen: 24
178.163.129.0/24 maxlen: 24
178.163.130.0/24 maxlen: 24
178.163.131.0/24 maxlen: 24
178.163.132.0/24 maxlen: 24
178.163.133.0/24 maxlen: 24
178.163.134.0/24 maxlen: 24
178.163.135.0/24 maxlen: 24
178.163.136.0/24 maxlen: 24
178.163.138.0/24 maxlen: 24
178.163.140.0/22 maxlen: 22
178.163.144.0/21 maxlen: 21
178.163.152.0/21 maxlen: 21
178.163.160.0/24 maxlen: 24
178.163.161.0/24 maxlen: 24
178.163.162.0/24 maxlen: 24
178.163.163.0/24 maxlen: 24
178.163.168.0/21 maxlen: 21
178.163.176.0/21 maxlen: 21
178.163.184.0/21 maxlen: 21
178.163.192.0/22 maxlen: 22
178.163.196.0/22 maxlen: 22
178.163.200.0/23 maxlen: 23
178.163.202.0/23 maxlen: 23
178.163.204.0/23 maxlen: 23
178.163.206.0/23 maxlen: 23
178.163.208.0/21 maxlen: 21
178.163.216.0/22 maxlen: 22
185.61.104.0/23 maxlen: 23
185.61.105.0/24 maxlen: 24
185.61.106.0/23 maxlen: 23
195.222.64.0/20 maxlen: 20
195.222.64.0/24 maxlen: 24
195.222.66.0/24 maxlen: 24
195.222.67.0/24 maxlen: 24
195.222.68.0/24 maxlen: 24
195.222.70.0/24 maxlen: 24
195.222.71.0/24 maxlen: 24
195.222.72.0/24 maxlen: 24
195.222.73.0/24 maxlen: 24
195.222.79.0/24 maxlen: 24
195.222.80.0/21 maxlen: 21
195.222.80.0/24 maxlen: 24
195.222.81.0/24 maxlen: 24
195.222.82.0/24 maxlen: 24
195.222.88.0/23 maxlen: 23
195.222.90.0/24 maxlen: 24
195.222.91.0/24 maxlen: 24
195.222.92.0/22 maxlen: 22
195.222.92.0/24 maxlen: 24
195.222.95.0/24 maxlen: 24
2a00:1760::/32 maxlen: 32
2a00:1760:8000::/40 maxlen: 40
2a00:1760:8100::/40 maxlen: 40
2a00:1760:c000::/40 maxlen: 40
2a00:1760:c100::/40 maxlen: 40
2a00:1760:c200::/40 maxlen: 40
2a00:1760:c300::/40 maxlen: 40
2a00:1761::/32 maxlen: 32
2a00:1761:a000::/35 maxlen: 35
2a00:1761:a000::/40 maxlen: 40
2a00:1761:a100::/40 maxlen: 40
2a00:1761:a200::/40 maxlen: 40
2a00:1761:a300::/40 maxlen: 40
2a00:1762::/32 maxlen: 32
2a00:1762:8000::/40 maxlen: 40
2a00:1762:8100::/40 maxlen: 40
2a00:1763::/32 maxlen: 32
2a00:1763:8000::/40 maxlen: 40
2a00:1763:8100::/40 maxlen: 40
2a00:1765::/32 maxlen: 32
2a00:1765:8000::/40 maxlen: 40
2a00:1765:8100::/40 maxlen: 40
2a03:3000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:2d:03:0b:a8:5e:da:e6:ad:55:33:22:21:d5:38:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Jun 5 09:46:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d0cee1d7cb92f96f4ff2c8ee9e1c88d41fa9a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:b9:1a:25:32:13:42:bc:32:7b:b3:0f:70:
03:59:3c:6a:e5:1a:3a:21:e2:e5:6a:39:d1:a3:da:
86:67:2f:2b:04:0c:e4:2d:bb:73:81:02:7f:46:63:
8c:cc:57:89:3f:66:81:c5:1b:e9:67:1f:61:c6:4e:
dd:82:e6:ee:b8:13:c2:eb:a8:8d:51:3f:6b:a4:75:
4e:5f:16:49:bc:a4:4d:e5:d2:70:db:3f:3b:3b:d1:
13:a0:a9:89:94:c9:92:a2:a6:e9:b5:7d:36:91:7c:
47:1c:a8:5a:0b:3f:9e:d7:b2:71:89:c4:d1:ba:a2:
49:e8:a8:a0:28:71:07:ad:62:f3:b3:59:5e:b4:88:
28:c3:fb:37:65:a3:ae:09:d9:d8:c7:38:c9:89:4b:
d5:35:d7:7e:f9:bb:b7:84:35:eb:f0:2d:19:3a:f6:
e9:66:65:ca:3b:82:b2:86:94:50:66:55:67:be:33:
60:69:81:e4:fa:1f:25:bc:8a:78:b2:ab:ba:12:26:
89:7b:11:0e:cc:ed:d4:9e:0b:5d:41:81:15:51:07:
56:d8:58:b6:43:de:ba:cb:e1:3a:41:c8:ee:b6:30:
12:de:05:39:02:05:d8:01:de:8f:47:06:e9:4b:52:
5f:5c:ce:f3:3c:9f:98:18:43:25:4b:ef:02:5b:e9:
8a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0C:EE:1D:7C:B9:2F:96:F4:FF:2C:8E:E9:E1:C8:8D:41:FA:9A:2E
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/PQzuHXy5L5b0_yyO6eHIjUH6mi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.0.0/17
46.53.128.0-46.53.195.255
46.53.197.0-46.53.255.255
46.56.129.0-46.56.255.255
46.182.48.0/21
77.74.32.0/21
93.191.96.0/21
128.65.0.0/18
128.140.240.0/20
178.163.128.0/17
185.61.104.0/22
195.222.64.0/19
IPv6:
2a00:1760::/30
2a00:1765::/32
2a03:3000::/32
Signature Algorithm: sha256WithRSAEncryption
a2:47:51:77:30:3b:98:ff:fa:cb:91:dd:a2:82:1f:c3:5f:6c:
03:95:34:38:83:89:6f:b2:0e:1e:93:ff:8f:8b:a7:dd:7f:b6:
b0:39:8b:15:c4:de:60:e4:69:62:d9:fd:58:a7:88:91:9b:1c:
c4:47:22:f4:b4:b2:52:ad:93:99:48:4f:1b:cb:5c:95:0e:d7:
65:be:87:5f:82:ef:9e:77:23:b8:59:b7:9f:2c:a8:9e:a2:51:
e4:22:60:8b:62:04:22:9d:da:db:57:01:98:87:f3:be:86:0d:
00:2f:68:4a:d4:b7:c9:90:67:de:f9:8b:4b:4b:fe:e8:a6:2a:
2c:dd:1e:52:2d:85:00:66:68:6d:f9:23:6c:b8:d0:6b:0d:31:
17:d4:02:06:36:c4:ea:60:06:7b:ad:65:57:e3:e4:7c:c3:13:
63:93:35:45:6a:30:63:98:62:86:59:0c:59:2c:74:75:8f:af:
69:2f:c8:e0:28:ed:8e:90:05:dc:62:c3:84:60:00:a9:5c:89:
e4:87:43:82:10:73:ce:40:42:61:33:5d:c8:cd:e8:a4:d1:e3:
a7:d8:70:c7:77:fc:11:7d:a5:a7:69:d7:99:b5:8d:a5:cb:90:
40:36:b1:f1:6a:7e:f0:6e:b5:2b:8f:2f:a5:b1:23:44:a1:92:
2f:9e:02:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:38 2026 by rpki-client