Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/aFk6_h4fj1-Wl6JpMidePR2r0PI.roa
File: aFk6_h4fj1-Wl6JpMidePR2r0PI.roa (raw, json)
Hash identifier: gEyuYQpJXkfOWVOGndFMHYmw63GBb0nDwvJT9xd/CYs=
Subject key identifier: 68:59:3A:FE:1E:1F:8F:5F:96:97:A2:69:32:27:5E:3D:1D:AB:D0:F2
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 01A134186F19882C6D843C60B3E8B3A50166
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/aFk6_h4fj1-Wl6JpMidePR2r0PI.roa
Signing time: Tue 13 Oct 2026 07:09:38 +0000
ROA not before: Tue 13 Oct 2026 07:09:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147049
IP address blocks: 185.135.45.0/24 maxlen: 24
186.247.37.0/24 maxlen: 24
186.247.38.0/24 maxlen: 24
186.247.39.0/24 maxlen: 24
186.247.40.0/24 maxlen: 24
186.247.41.0/24 maxlen: 24
186.247.47.0/24 maxlen: 24
186.247.171.0/24 maxlen: 24
186.247.175.0/24 maxlen: 24
187.13.6.0/24 maxlen: 24
187.13.10.0/24 maxlen: 24
187.13.243.0/24 maxlen: 24
187.13.244.0/24 maxlen: 24
187.13.252.0/24 maxlen: 24
187.13.253.0/24 maxlen: 24
187.14.57.0/24 maxlen: 24
187.14.60.0/24 maxlen: 24
187.14.61.0/24 maxlen: 24
187.14.62.0/24 maxlen: 24
187.14.63.0/24 maxlen: 24
187.14.87.0/24 maxlen: 24
187.14.88.0/24 maxlen: 24
187.14.248.0/24 maxlen: 24
187.14.249.0/24 maxlen: 24
187.15.92.0/24 maxlen: 24
187.15.93.0/24 maxlen: 24
187.15.94.0/24 maxlen: 24
187.15.95.0/24 maxlen: 24
187.15.96.0/24 maxlen: 24
187.15.98.0/24 maxlen: 24
187.15.99.0/24 maxlen: 24
187.15.103.0/24 maxlen: 24
187.15.107.0/24 maxlen: 24
187.15.108.0/24 maxlen: 24
187.15.121.0/24 maxlen: 24
187.15.122.0/24 maxlen: 24
187.15.141.0/24 maxlen: 24
187.15.142.0/24 maxlen: 24
187.15.153.0/24 maxlen: 24
187.15.154.0/24 maxlen: 24
187.15.155.0/24 maxlen: 24
187.40.227.0/24 maxlen: 24
187.40.232.0/24 maxlen: 24
187.40.234.0/24 maxlen: 24
187.40.235.0/24 maxlen: 24
187.40.240.0/24 maxlen: 24
2a13:240::/48 maxlen: 48
2a13:240:1500::/40 maxlen: 40
2a13:240:1600::/40 maxlen: 40
2a13:240:1700::/40 maxlen: 40
2a13:240:2100::/40 maxlen: 40
2a13:240:2900::/40 maxlen: 40
2a13:240:2c00::/40 maxlen: 40
2a13:240:3100::/40 maxlen: 40
2a13:240:3300::/40 maxlen: 40
2a13:240:3800::/40 maxlen: 40
2a13:240:4000::/40 maxlen: 40
2a13:240:5800::/40 maxlen: 40
2a13:240:5b00::/40 maxlen: 40
2a13:240:6300::/40 maxlen: 40
2a13:240:6e00::/40 maxlen: 40
2a13:240:7100::/40 maxlen: 40
2a13:240:7200::/40 maxlen: 40
2a13:240:7a00::/40 maxlen: 40
2a13:240:7c00::/40 maxlen: 40
2a13:240:8700::/40 maxlen: 40
2a13:240:8c00::/40 maxlen: 40
2a13:240:8d00::/40 maxlen: 40
2a13:240:9100::/40 maxlen: 40
2a13:240:9200::/40 maxlen: 40
2a13:240:9300::/40 maxlen: 40
2a13:240:b600::/40 maxlen: 40
2a13:240:b700::/40 maxlen: 40
2a13:240:b800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:18:6f:19:88:2c:6d:84:3c:60:b3:e8:b3:a5:01:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Oct 13 07:09:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68593afe1e1f8f5f9697a26932275e3d1dabd0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:30:5c:7e:9a:bc:f3:7f:29:e1:f9:56:a0:
30:e5:d1:1a:ce:a4:4c:36:18:38:03:80:c6:7d:aa:
85:a5:8e:15:13:f5:9b:63:54:7a:72:61:92:06:4d:
45:92:67:39:45:d4:56:af:f2:54:f6:76:4f:8c:be:
cc:d5:4b:87:b0:a1:03:0a:33:d4:c1:b2:e2:24:2a:
a5:33:79:21:2e:b6:f7:05:71:20:bc:02:1d:24:f2:
e3:4a:f9:2e:e3:f7:90:6f:08:b3:99:16:d9:b5:bc:
6a:6b:46:c7:d4:53:a3:9c:b8:2c:95:2d:aa:25:e9:
5f:3d:d5:c1:18:cd:f7:df:eb:b1:9e:1e:a9:09:15:
c4:12:6c:30:b5:0b:72:75:cc:ea:7f:34:21:a1:74:
58:a3:f4:1e:e8:50:c7:8e:5d:e7:3d:2c:0d:c0:3d:
02:a9:5d:ce:81:d8:24:fa:64:7d:e3:bf:67:8f:ec:
26:63:9e:43:2e:c9:f8:06:99:f5:92:87:a9:31:43:
c4:80:a3:a5:b3:3f:1b:8a:31:da:88:9e:2a:d4:94:
9d:16:3a:24:62:55:4c:54:8d:02:19:bb:f6:90:08:
bb:b1:80:3f:7a:76:b9:27:a7:73:c2:c0:88:8f:69:
09:e3:7a:0b:2f:0e:15:98:e9:2c:f4:fc:c1:7b:f1:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:59:3A:FE:1E:1F:8F:5F:96:97:A2:69:32:27:5E:3D:1D:AB:D0:F2
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/aFk6_h4fj1-Wl6JpMidePR2r0PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.45.0/24
186.247.37.0-186.247.41.255
186.247.47.0/24
186.247.171.0/24
186.247.175.0/24
187.13.6.0/24
187.13.10.0/24
187.13.243.0-187.13.244.255
187.13.252.0/23
187.14.57.0/24
187.14.60.0/22
187.14.87.0-187.14.88.255
187.14.248.0/23
187.15.92.0-187.15.96.255
187.15.98.0/23
187.15.103.0/24
187.15.107.0-187.15.108.255
187.15.121.0-187.15.122.255
187.15.141.0-187.15.142.255
187.15.153.0-187.15.155.255
187.40.227.0/24
187.40.232.0/24
187.40.234.0/23
187.40.240.0/24
IPv6:
2a13:240::/48
2a13:240:1500::-2a13:240:17ff:ffff:ffff:ffff:ffff:ffff
2a13:240:2100::/40
2a13:240:2900::/40
2a13:240:2c00::/40
2a13:240:3100::/40
2a13:240:3300::/40
2a13:240:3800::/40
2a13:240:4000::/40
2a13:240:5800::/40
2a13:240:5b00::/40
2a13:240:6300::/40
2a13:240:6e00::/40
2a13:240:7100::-2a13:240:72ff:ffff:ffff:ffff:ffff:ffff
2a13:240:7a00::/40
2a13:240:7c00::/40
2a13:240:8700::/40
2a13:240:8c00::/39
2a13:240:9100::-2a13:240:93ff:ffff:ffff:ffff:ffff:ffff
2a13:240:b600::-2a13:240:b8ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6e:6d:3c:e7:d9:43:ba:24:46:29:f0:4b:fd:fa:7f:18:01:a7:
82:a2:29:4e:90:e7:97:20:0c:d6:42:25:23:ed:24:c3:86:e5:
f4:e7:c2:79:4f:66:2f:fb:d8:79:aa:92:17:9b:4f:ee:2c:ed:
e1:d9:fd:81:11:4e:4b:17:f0:84:09:86:a8:39:49:c1:9f:0f:
98:28:80:7c:f1:fc:40:9d:3a:5c:dc:a8:e9:a0:b3:92:fb:31:
9a:d8:f4:b7:f1:9c:bd:a7:4c:28:17:51:42:4a:73:81:d1:e4:
c1:15:a7:1d:24:0d:9e:cd:92:48:a8:72:f1:ae:c2:61:00:db:
01:d8:db:b2:6e:14:74:d6:bc:e8:b2:3c:11:d2:9f:55:c6:96:
a7:aa:89:75:69:f0:26:45:eb:b8:af:8b:45:c5:79:6f:c0:49:
03:2f:aa:4a:61:2a:fa:0e:81:6f:79:42:8e:a4:eb:89:f6:e5:
c3:2c:09:89:81:bc:b4:8b:ac:83:67:be:4d:3e:b3:d1:06:41:
25:c7:8a:65:d3:58:ac:eb:65:37:53:b1:16:ef:a2:89:c3:b4:
8d:e6:76:98:32:58:85:eb:05:71:60:50:28:71:84:d4:26:91:
d8:f0:c7:f9:e2:ac:da:84:13:78:33:ae:88:fd:cd:9f:bc:88:
4f:cb:7d:26
-----BEGIN CERTIFICATE-----
MIIGojCCBYqgAwIBAgISAaE0GG8ZiCxthDxgs+izpQFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3
Mjk3Y2EwHhcNMjYxMDEzMDcwOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODU5M2FmZTFlMWY4ZjVmOTY5N2EyNjkzMjI3NWUzZDFkYWJkMGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNswXH6avPN/KeH5VqAw5dEazqRM
Nhg4A4DGfaqFpY4VE/WbY1R6cmGSBk1Fkmc5RdRWr/JU9nZPjL7M1UuHsKEDCjPU
wbLiJCqlM3khLrb3BXEgvAIdJPLjSvku4/eQbwizmRbZtbxqa0bH1FOjnLgslS2q
JelfPdXBGM333+uxnh6pCRXEEmwwtQtydczqfzQhoXRYo/Qe6FDHjl3nPSwNwD0C
qV3Ogdgk+mR9479nj+wmY55DLsn4Bpn1koepMUPEgKOlsz8bijHaiJ4q1JSdFjok
YlVMVI0CGbv2kAi7sYA/ena5J6dzwsCIj2kJ43oLLw4VmOks9PzBe/G0AQIDAQAB
o4IDrjCCA6owHQYDVR0OBBYEFGhZOv4eH49flpeiaTInXj0dq9DyMB8GA1UdIwQY
MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt
NTM1ODQwMWZiNzk2LzEvYUZrNl9oNGZqMS1XbDZKcE1pZGVQUjJyMFBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2
LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBwgYIKwYBBQUHAQcBAf8EggGxMIIBrTCB1wQCAAEwgdAD
BAC5hy0wDAMEALr3JQMEAbr3KAMEALr3LwMEALr3qwMEALr3rwMEALsNBgMEALsN
CjAMAwQAuw3zAwQAuw30AwQBuw38AwQAuw45AwQCuw48MAwDBAC7DlcDBAC7DlgD
BAG7DvgwDAMEArsPXAMEALsPYAMEAbsPYgMEALsPZzAMAwQAuw9rAwQAuw9sMAwD
BAC7D3kDBAC7D3owDAMEALsPjQMEALsPjjAMAwQAuw+ZAwQCuw+YAwQAuyjjAwQA
uyjoAwQBuyjqAwQAuyjwMIHQBAIAAjCByQMHACoTAkAAADAQAwYAKhMCQBUDBgMq
EwJAEAMGACoTAkAhAwYAKhMCQCkDBgAqEwJALAMGACoTAkAxAwYAKhMCQDMDBgAq
EwJAOAMGACoTAkBAAwYAKhMCQFgDBgAqEwJAWwMGACoTAkBjAwYAKhMCQG4wEAMG
ACoTAkBxAwYAKhMCQHIDBgAqEwJAegMGACoTAkB8AwYAKhMCQIcDBgEqEwJAjDAQ
AwYAKhMCQJEDBgIqEwJAkDAQAwYBKhMCQLYDBgAqEwJAuDANBgkqhkiG9w0BAQsF
AAOCAQEAbm0859lDuiRGKfBL/fp/GAGngqIpTpDnlyAM1kIlI+0kw4bl9OfCeU9m
L/vYeaqSF5tP7izt4dn9gRFOSxfwhAmGqDlJwZ8PmCiAfPH8QJ06XNyo6aCzkvsx
mtj0t/GcvadMKBdRQkpzgdHkwRWnHSQNns2SSKhy8a7CYQDbAdjbsm4UdNa86LI8
EdKfVcaWp6qJdWnwJkXruK+LRcV5b8BJAy+qSmEq+g6Bb3lCjqTrifblwywJiYG8
tIusg2e+TT6z0QZBJceKZdNYrOtlN1OxFu+iicO0jeZ2mDJYhesFcWBQKHGE1CaR
2PDH+eKs2oQTeDOuiP3Nn7yIT8t9Jg==
-----END CERTIFICATE-----
Generated at Sun Oct 25 07:59:39 2026 by rpki-client