Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0pDTo0pK-SMCTvHVR2ZvVFXP1n0.roa
File: 0pDTo0pK-SMCTvHVR2ZvVFXP1n0.roa (raw, json)
Hash identifier: 0CuBOCMBUHwefSKC6rJ7TVbTe9+CIYz6zckDDaoI2+0=
Subject key identifier: D2:90:D3:A3:4A:4A:F9:23:02:4E:F1:D5:47:66:6F:54:55:CF:D6:7D
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01A163F50FCE5C90701E296375A5A6C83DDE
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0pDTo0pK-SMCTvHVR2ZvVFXP1n0.roa
Signing time: Thu 22 Oct 2026 14:12:47 +0000
ROA not before: Thu 22 Oct 2026 14:12:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 37.235.51.0/24 maxlen: 24
45.151.73.0/24 maxlen: 24
45.151.74.0/24 maxlen: 24
45.153.127.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
83.172.135.0/24 maxlen: 24
83.172.136.0/24 maxlen: 24
83.172.138.0/24 maxlen: 24
83.172.150.0/24 maxlen: 24
83.172.159.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.121.0/24 maxlen: 24
89.31.120.0/24 maxlen: 24
89.31.121.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.40.105.0/24 maxlen: 24
89.46.232.0/24 maxlen: 24
89.46.233.0/24 maxlen: 24
89.46.234.0/24 maxlen: 24
89.46.236.0/24 maxlen: 24
91.132.92.0/24 maxlen: 24
91.132.93.0/24 maxlen: 24
91.132.95.0/24 maxlen: 24
92.243.64.0/24 maxlen: 24
93.113.99.0/24 maxlen: 24
93.113.215.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
103.57.248.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.251.0/24 maxlen: 24
134.255.211.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
149.154.158.0/24 maxlen: 24
149.154.159.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.11.0/24 maxlen: 24
151.236.15.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.17.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.21.0/24 maxlen: 24
151.236.22.0/24 maxlen: 24
158.255.208.0/24 maxlen: 24
158.255.213.0/24 maxlen: 24
158.255.214.0/24 maxlen: 24
158.255.215.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.26.239.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.193.48.0/24 maxlen: 24
185.195.64.0/24 maxlen: 24
185.195.66.0/24 maxlen: 24
188.190.1.0/24 maxlen: 24
188.190.2.0/24 maxlen: 24
188.190.4.0/24 maxlen: 24
188.190.9.0/24 maxlen: 24
188.190.16.0/24 maxlen: 24
188.190.17.0/24 maxlen: 24
188.190.30.0/24 maxlen: 24
188.214.32.0/24 maxlen: 24
193.3.55.0/24 maxlen: 24
213.111.176.0/24 maxlen: 24
213.111.178.0/24 maxlen: 24
213.111.182.0/24 maxlen: 24
213.111.183.0/24 maxlen: 24
213.111.184.0/24 maxlen: 24
213.111.185.0/24 maxlen: 24
213.111.191.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
2a03:f80:32::/48 maxlen: 48
2a03:f80:33::/48 maxlen: 48
2a03:f80:39::/48 maxlen: 48
2a03:f80:40::/48 maxlen: 48
2a03:f80:41::/48 maxlen: 48
2a03:f80:44::/48 maxlen: 48
2a03:f80:45::/48 maxlen: 48
2a03:f80:46::/48 maxlen: 48
2a03:f80:47::/48 maxlen: 48
2a03:f80:49::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:65::/48 maxlen: 48
2a03:f80:81::/48 maxlen: 48
2a03:f80:358::/48 maxlen: 48
2a03:f80:381::/48 maxlen: 48
2a03:f80:852::/48 maxlen: 48
2a03:f80:971::/48 maxlen: 48
2a03:f80:4416::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:f5:0f:ce:5c:90:70:1e:29:63:75:a5:a6:c8:3d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Oct 22 14:12:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d290d3a34a4af923024ef1d547666f5455cfd67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:19:10:0a:00:0e:c6:ee:37:4f:82:6b:05:
0b:5a:66:69:c1:31:5c:1f:d6:f1:7c:6a:bb:21:06:
16:51:3d:47:6d:d2:8c:d5:a5:83:33:55:1b:8f:86:
43:c0:05:b7:ec:14:e4:05:53:74:02:93:f1:f1:93:
29:c6:29:69:bc:e2:61:4e:34:64:d5:4a:3e:60:bf:
da:bc:31:13:32:4f:2f:1a:14:49:a5:e8:94:cc:11:
97:e9:63:b5:7d:51:af:55:4b:d6:0c:f5:a9:03:9c:
9f:01:eb:75:c5:78:ad:a8:0f:62:14:d1:12:5b:97:
57:16:74:d0:60:5b:5a:fc:03:b8:35:88:e2:d6:13:
7c:19:cf:73:e0:0e:be:cb:79:37:80:7f:0a:06:8a:
04:c3:9d:16:b5:bf:7e:a6:9a:dc:55:fe:85:19:57:
d9:6f:12:dd:4e:47:22:90:78:25:73:15:62:d6:5a:
d7:28:d0:4b:92:79:ce:be:41:c8:06:74:59:76:d4:
29:15:04:65:a8:d0:99:c8:0d:e7:5c:6a:4a:f8:63:
97:90:aa:9f:ce:44:69:56:a4:44:7f:5f:f7:b7:91:
fc:1f:54:85:1c:4b:da:38:b7:09:fa:10:b0:a2:85:
95:ae:0a:ac:4b:fa:b4:82:05:fd:52:28:6c:53:ac:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:90:D3:A3:4A:4A:F9:23:02:4E:F1:D5:47:66:6F:54:55:CF:D6:7D
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0pDTo0pK-SMCTvHVR2ZvVFXP1n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.51.0/24
45.151.73.0-45.151.74.255
45.153.127.0/24
46.183.187.0/24
83.172.135.0-83.172.136.255
83.172.138.0/24
83.172.150.0/24
83.172.159.0/24
83.243.120.0/23
89.31.120.0/23
89.31.123.0/24
89.40.105.0/24
89.46.232.0-89.46.234.255
89.46.236.0/24
91.132.92.0/23
91.132.95.0/24
92.243.64.0/24
93.113.99.0/24
93.113.215.0/24
95.156.207.0/24
103.57.248.0/23
103.57.251.0/24
134.255.211.0/24
149.154.157.0-149.154.159.255
151.236.4.0/24
151.236.11.0/24
151.236.15.0-151.236.18.255
151.236.20.0-151.236.22.255
158.255.208.0/24
158.255.213.0-158.255.215.255
185.26.236.0/24
185.26.238.0/23
185.76.78.0/23
185.122.187.0/24
185.193.48.0/24
185.195.64.0/24
185.195.66.0/24
188.190.1.0-188.190.2.255
188.190.4.0/24
188.190.9.0/24
188.190.16.0/23
188.190.30.0/24
188.214.32.0/24
193.3.55.0/24
213.111.176.0/24
213.111.178.0/24
213.111.182.0-213.111.185.255
213.111.191.0/24
213.183.55.0/24
IPv6:
2a03:f80:32::/47
2a03:f80:39::/48
2a03:f80:40::/47
2a03:f80:44::/46
2a03:f80:49::/48
2a03:f80:61::/48
2a03:f80:65::/48
2a03:f80:81::/48
2a03:f80:358::/48
2a03:f80:381::/48
2a03:f80:852::/48
2a03:f80:971::/48
2a03:f80:4416::/48
2a03:f80:ed51::/48
Signature Algorithm: sha256WithRSAEncryption
07:1a:46:19:6b:35:d8:c5:c8:e5:54:43:9f:a2:2e:b4:6c:c7:
04:0b:6a:36:f4:c3:7f:2d:44:be:55:2e:b5:99:ec:5c:b7:bd:
e5:ef:00:08:29:2f:01:e1:13:c6:5b:d1:15:64:90:ad:23:98:
99:d9:53:51:7f:1e:5c:9d:bb:42:3e:3f:07:6c:b7:a8:87:aa:
f9:85:96:01:9a:a7:de:2a:a7:45:9a:3b:e0:72:5e:fa:92:68:
da:cd:50:88:34:77:7c:8d:5f:ac:46:17:13:bb:1b:bb:18:9b:
56:1e:db:8e:db:ac:69:1c:3f:c9:ac:49:15:6d:54:ed:1a:b9:
6d:6f:88:ee:90:2e:c4:ef:f6:31:e1:46:3b:f0:3a:1a:8c:21:
82:4e:ed:ee:aa:d0:f7:b6:39:07:35:4b:80:b2:55:da:4a:f3:
85:63:43:01:0f:ea:3a:73:d1:8a:4e:31:7d:4f:cf:69:c3:34:
f5:93:91:25:42:0d:95:73:ac:2a:1c:d8:b4:51:07:5e:e2:69:
de:92:ce:23:b9:63:60:46:69:18:df:07:58:e9:23:59:74:ad:
c2:c7:92:7c:99:e2:57:6e:cc:dc:8a:08:f5:73:f0:c7:8c:15:
79:11:70:06:c0:b6:64:9a:9d:16:1f:cb:e6:5b:16:69:00:8b:
d5:6a:87:08
-----BEGIN CERTIFICATE-----
MIIG9jCCBd6gAwIBAgISAaFj9Q/OXJBwHiljdaWmyD3eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj
MjhmNmEwHhcNMjYxMDIyMTQxMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjkwZDNhMzRhNGFmOTIzMDI0ZWYxZDU0NzY2NmY1NDU1Y2ZkNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t4ZEAoADsbuN0+CawULWmZpwTFc
H9bxfGq7IQYWUT1HbdKM1aWDM1Ubj4ZDwAW37BTkBVN0ApPx8ZMpxilpvOJhTjRk
1Uo+YL/avDETMk8vGhRJpeiUzBGX6WO1fVGvVUvWDPWpA5yfAet1xXitqA9iFNES
W5dXFnTQYFta/AO4NYji1hN8Gc9z4A6+y3k3gH8KBooEw50Wtb9+pprcVf6FGVfZ
bxLdTkcikHglcxVi1lrXKNBLknnOvkHIBnRZdtQpFQRlqNCZyA3nXGpK+GOXkKqf
zkRpVqREf1/3t5H8H1SFHEvaOLcJ+hCwooWVrgqsS/q0ggX9UihsU6wSHwIDAQAB
o4IEAjCCA/4wHQYDVR0OBBYEFNKQ06NKSvkjAk7x1Udmb1RVz9Z9MB8GA1UdIwQY
MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt
YjM4ZTI2NzdiM2RjLzEvMHBEVG8wcEstU01DVHZIVlIyWnZWRlhQMW4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj
LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICFgYIKwYBBQUHAQcBAf8EggIFMIICATCCAXYEAgABMIIB
bgMEACXrMzAMAwQALZdJAwQALZdKAwQALZl/AwQALre7MAwDBABTrIcDBABTrIgD
BABTrIoDBABTrJYDBABTrJ8DBAFT83gDBAFZH3gDBABZH3sDBABZKGkwDAMEA1ku
6AMEAFku6gMEAFku7AMEAVuEXAMEAFuEXwMEAFzzQAMEAF1xYwMEAF1x1wMEAF+c
zwMEAWc5+AMEAGc5+wMEAIb/0zAMAwQAlZqdAwQFlZqAAwQAl+wEAwQAl+wLMAwD
BACX7A8DBACX7BIwDAMEApfsFAMEAJfsFgMEAJ7/0DAMAwQAnv/VAwQDnv/QAwQA
uRrsAwQBuRruAwQBuUxOAwQAuXq7AwQAucEwAwQAucNAAwQAucNCMAwDBAC8vgED
BAC8vgIDBAC8vgQDBAC8vgkDBAG8vhADBAC8vh4DBAC81iADBADBAzcDBADVb7AD
BADVb7IwDAMEAdVvtgMEAdVvuAMEANVvvwMEANW3NzCBhAQCAAIwfgMHASoDD4AA
MgMHACoDD4AAOQMHASoDD4AAQAMHAioDD4AARAMHACoDD4AASQMHACoDD4AAYQMH
ACoDD4AAZQMHACoDD4AAgQMHACoDD4ADWAMHACoDD4ADgQMHACoDD4AIUgMHACoD
D4AJcQMHACoDD4BEFgMHACoDD4DtUTANBgkqhkiG9w0BAQsFAAOCAQEABxpGGWs1
2MXI5VRDn6IutGzHBAtqNvTDfy1EvlUutZnsXLe95e8ACCkvAeETxlvRFWSQrSOY
mdlTUX8eXJ27Qj4/B2y3qIeq+YWWAZqn3iqnRZo74HJe+pJo2s1QiDR3fI1frEYX
E7sbuxibVh7bjtusaRw/yaxJFW1U7Rq5bW+I7pAuxO/2MeFGO/A6Gowhgk7t7qrQ
97Y5BzVLgLJV2krzhWNDAQ/qOnPRik4xfU/PacM09ZORJUINlXOsKhzYtFEHXuJp
3pLOI7ljYEZpGN8HWOkjWXStwseSfJniV27M3IoI9XPwx4wVeRFwBsC2ZJqdFh/L
5lsWaQCL1WqHCA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:07:53 2026 by rpki-client