Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fOlAdUYW-f50ew0ptrn8o3hl7E4.roa
File: fOlAdUYW-f50ew0ptrn8o3hl7E4.roa (raw, json)
Hash identifier: Bh3sDWRSdvgTacjSm5AVs+ObaeVZsO9Y0YiZ8Ocdz3c=
Subject key identifier: 7C:E9:40:75:46:16:F9:FE:74:7B:0D:29:B6:B9:FC:A3:78:65:EC:4E
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01A17D90373995D73EBD85AE898757EF4187
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fOlAdUYW-f50ew0ptrn8o3hl7E4.roa
Signing time: Tue 27 Oct 2026 13:32:45 +0000
ROA not before: Tue 27 Oct 2026 13:32:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12716
IP address blocks: 37.63.0.0/20 maxlen: 20
37.63.16.0/22 maxlen: 22
37.63.20.0/22 maxlen: 24
37.63.24.0/22 maxlen: 22
37.63.28.0/22 maxlen: 24
37.63.32.0/22 maxlen: 24
37.63.96.0/22 maxlen: 22
62.204.154.0/23 maxlen: 23
78.90.18.0/23 maxlen: 23
78.90.44.0/23 maxlen: 23
78.90.62.0/24 maxlen: 24
78.90.73.0/24 maxlen: 24
78.90.124.0/24 maxlen: 24
78.90.188.0/22 maxlen: 22
78.90.218.0/23 maxlen: 23
83.97.30.0/24 maxlen: 24
84.252.40.0/23 maxlen: 23
85.118.64.0/22 maxlen: 22
85.118.68.0/23 maxlen: 24
85.118.70.0/24 maxlen: 24
85.118.71.0/24 maxlen: 24
85.118.72.0/23 maxlen: 23
85.118.74.0/24 maxlen: 24
85.118.76.0/22 maxlen: 22
85.118.80.0/22 maxlen: 22
85.118.84.0/24 maxlen: 24
85.118.92.0/24 maxlen: 24
85.118.93.0/24 maxlen: 24
89.215.62.0/23 maxlen: 23
151.251.44.0/22 maxlen: 22
151.251.68.0/22 maxlen: 22
151.251.121.0/24 maxlen: 24
151.251.126.0/23 maxlen: 23
151.251.192.0/22 maxlen: 22
151.251.196.0/24 maxlen: 24
151.251.200.0/22 maxlen: 22
151.251.204.0/22 maxlen: 22
151.251.238.0/24 maxlen: 24
151.251.239.0/24 maxlen: 24
151.251.240.0/20 maxlen: 20
176.222.0.0/20 maxlen: 24
185.151.156.0/22 maxlen: 22
185.224.160.0/23 maxlen: 23
212.104.116.0/22 maxlen: 24
213.226.17.0/24 maxlen: 24
213.226.19.0/24 maxlen: 24
213.226.36.0/24 maxlen: 24
213.226.40.0/24 maxlen: 24
213.226.51.0/24 maxlen: 24
213.226.56.0/24 maxlen: 24
213.226.57.0/24 maxlen: 24
213.226.59.0/24 maxlen: 24
2001:1ac8:1::/48 maxlen: 48
2001:1ac8:2800::/40 maxlen: 40
2001:1ac8:2900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:90:37:39:95:d7:3e:bd:85:ae:89:87:57:ef:41:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Oct 27 13:32:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ce940754616f9fe747b0d29b6b9fca37865ec4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:19:b3:b9:0c:58:5b:e4:11:29:5b:95:c5:
c2:a3:98:54:68:b1:7a:5f:56:11:8e:24:83:7e:7a:
bd:31:c0:89:5a:f0:ab:45:17:40:35:21:4e:0b:ce:
1e:f8:62:75:b1:ee:27:26:b2:e6:df:c8:13:29:ef:
d8:a5:67:52:04:a3:d3:82:d7:e2:30:bc:9c:c4:50:
d4:34:13:87:3b:3e:84:e2:f0:bd:cf:6a:23:49:43:
da:8a:e1:f0:e3:a5:08:ac:1d:5a:88:33:95:da:74:
89:c8:14:df:e5:2e:00:e8:04:2c:ce:ef:aa:e4:c1:
0c:c2:18:b6:7b:88:a7:90:05:90:ba:f2:a2:90:a7:
7b:1f:9d:0a:4e:0b:ce:82:56:48:51:ae:01:2a:d0:
eb:a5:12:6c:91:b5:33:be:e7:1c:0b:37:8b:bc:4d:
83:25:ce:f7:e8:f7:f0:e4:df:ae:0a:29:09:32:53:
29:9c:66:27:99:33:9d:79:13:55:ab:c2:55:2d:df:
0e:cf:2e:1e:ba:6d:f1:4d:63:41:1d:ce:35:44:53:
13:ac:14:4a:37:98:24:96:f0:c5:19:92:e5:36:66:
8f:a0:87:de:fa:c3:34:ef:46:7a:12:9b:20:b9:1b:
b3:a0:ac:d4:53:4c:3f:9a:8e:2d:b1:93:2c:42:11:
b7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E9:40:75:46:16:F9:FE:74:7B:0D:29:B6:B9:FC:A3:78:65:EC:4E
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fOlAdUYW-f50ew0ptrn8o3hl7E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.63.0.0-37.63.35.255
37.63.96.0/22
62.204.154.0/23
78.90.18.0/23
78.90.44.0/23
78.90.62.0/24
78.90.73.0/24
78.90.124.0/24
78.90.188.0/22
78.90.218.0/23
83.97.30.0/24
84.252.40.0/23
85.118.64.0-85.118.74.255
85.118.76.0-85.118.84.255
85.118.92.0/23
89.215.62.0/23
151.251.44.0/22
151.251.68.0/22
151.251.121.0/24
151.251.126.0/23
151.251.192.0-151.251.196.255
151.251.200.0/21
151.251.238.0-151.251.255.255
176.222.0.0/20
185.151.156.0/22
185.224.160.0/23
212.104.116.0/22
213.226.17.0/24
213.226.19.0/24
213.226.36.0/24
213.226.40.0/24
213.226.51.0/24
213.226.56.0/23
213.226.59.0/24
IPv6:
2001:1ac8:1::/48
2001:1ac8:2800::/39
Signature Algorithm: sha256WithRSAEncryption
2c:98:49:33:b4:e5:0a:81:e3:6c:3e:69:56:3e:47:66:f4:d7:
51:99:0c:57:3f:a8:8c:cf:0c:49:70:bd:ab:0d:87:87:4d:0f:
cd:7f:b9:dd:3b:b3:54:9c:89:e9:ac:7f:ca:7e:81:b4:45:59:
38:a3:c9:82:c0:d5:a1:da:e5:6c:4b:08:09:d0:56:f7:d4:c9:
d1:40:28:83:f2:55:a8:b4:fb:1b:b0:1b:30:82:86:0b:1b:42:
d0:d8:54:8a:81:87:e8:c1:d1:75:c3:8c:2b:37:91:aa:53:62:
9f:8f:f1:78:89:b2:6a:e4:07:68:74:cb:81:9e:3b:31:be:63:
7c:9f:fd:d9:67:1c:07:0a:09:53:fb:05:09:63:28:a0:85:a4:
a1:29:cd:e1:20:1d:ce:69:db:85:8c:f1:79:4a:4b:ba:95:99:
b8:34:12:8e:6c:e8:6f:89:04:36:54:d8:db:a7:65:f6:6c:41:
6c:9c:18:a4:03:dd:b2:e9:7c:f2:51:9c:52:ca:b0:6e:4b:f6:
e2:f4:47:eb:49:f0:f0:6b:1e:32:95:e9:c3:a6:cd:fb:dd:02:
67:c5:77:dd:24:da:1b:18:99:14:c5:df:42:cc:eb:38:5e:d7:
30:5b:8c:75:e7:3c:e8:1b:a3:5e:9a:33:8d:58:5f:72:d1:86:
9c:ee:46:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:48 2026 by rpki-client