Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/0KRMs1MmFu1v6Pq_viAWptGoaTE.roa
File: 0KRMs1MmFu1v6Pq_viAWptGoaTE.roa (raw, json)
Hash identifier: SwW2hEJETUDS7yiHiqT/++yDD1zrO8L412J6xBH3R4M=
Subject key identifier: D0:A4:4C:B3:53:26:16:ED:6F:E8:FA:BF:BE:20:16:A6:D1:A8:69:31
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0FBE42264999E2F8ECA92BF690BD87842
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/0KRMs1MmFu1v6Pq_viAWptGoaTE.roa
Signing time: Fri 02 Oct 2026 09:13:47 +0000
ROA not before: Fri 02 Oct 2026 09:13:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 5.63.192.0/18 maxlen: 24
5.148.192.0/18 maxlen: 24
5.206.128.0/18 maxlen: 24
37.188.80.0/21 maxlen: 24
37.191.0.0/18 maxlen: 24
37.220.192.0/18 maxlen: 24
62.77.196.0/22 maxlen: 24
62.77.240.0/23 maxlen: 24
62.77.248.0/21 maxlen: 24
62.165.192.0/18 maxlen: 24
77.234.64.0/19 maxlen: 24
78.131.0.0/17 maxlen: 24
78.139.0.0/18 maxlen: 24
79.120.160.0/21 maxlen: 24
79.120.170.0/23 maxlen: 24
79.120.172.0/22 maxlen: 24
79.120.248.0/23 maxlen: 24
79.120.252.0/22 maxlen: 24
80.95.64.0/19 maxlen: 24
80.98.0.0/15 maxlen: 24
81.0.82.0/23 maxlen: 24
81.0.84.0/22 maxlen: 24
81.0.90.0/23 maxlen: 24
81.0.92.0/22 maxlen: 24
81.0.98.0/23 maxlen: 24
81.0.108.0/23 maxlen: 24
81.0.122.0/23 maxlen: 24
81.0.126.0/23 maxlen: 24
81.17.176.0/20 maxlen: 24
82.131.128.0/19 maxlen: 24
82.131.182.0/23 maxlen: 24
82.131.184.0/21 maxlen: 24
82.131.196.0/23 maxlen: 24
82.131.198.0/24 maxlen: 24
82.131.200.0/21 maxlen: 24
82.131.216.0/21 maxlen: 24
82.131.224.0/19 maxlen: 24
82.144.164.0/22 maxlen: 24
82.144.172.0/22 maxlen: 24
82.144.176.0/23 maxlen: 24
82.144.188.0/23 maxlen: 24
84.21.180.0/22 maxlen: 24
84.236.0.0/17 maxlen: 24
85.66.0.0/15 maxlen: 24
85.238.64.0/19 maxlen: 24
86.101.0.0/16 maxlen: 24
87.97.0.0/18 maxlen: 24
87.97.80.0/20 maxlen: 24
87.97.96.0/19 maxlen: 24
88.87.240.0/21 maxlen: 24
89.132.0.0/14 maxlen: 24
89.147.64.0/20 maxlen: 24
89.147.96.0/22 maxlen: 24
89.147.112.0/21 maxlen: 24
89.148.64.0/18 maxlen: 24
89.186.96.0/23 maxlen: 24
89.186.102.0/23 maxlen: 24
89.186.106.0/23 maxlen: 24
89.186.108.0/22 maxlen: 24
89.186.112.0/22 maxlen: 24
89.186.118.0/23 maxlen: 24
89.186.120.0/21 maxlen: 24
89.223.128.0/17 maxlen: 24
91.82.0.0/21 maxlen: 24
91.82.24.0/21 maxlen: 24
91.82.32.0/21 maxlen: 24
91.82.56.0/23 maxlen: 24
91.82.60.0/23 maxlen: 24
91.82.64.0/21 maxlen: 24
91.82.82.0/23 maxlen: 24
91.82.130.0/23 maxlen: 24
91.82.132.0/22 maxlen: 24
91.82.136.0/21 maxlen: 24
91.82.144.0/22 maxlen: 24
91.82.160.0/21 maxlen: 24
91.82.168.0/22 maxlen: 24
91.82.172.0/23 maxlen: 24
91.82.176.0/21 maxlen: 24
91.82.188.0/22 maxlen: 24
91.82.210.0/23 maxlen: 24
91.82.212.0/22 maxlen: 24
91.82.228.0/22 maxlen: 24
91.82.232.0/22 maxlen: 24
91.82.240.0/22 maxlen: 24
91.82.250.0/23 maxlen: 24
91.83.0.0/19 maxlen: 24
91.83.32.0/21 maxlen: 24
91.83.52.0/22 maxlen: 24
91.83.94.0/23 maxlen: 24
91.83.102.0/23 maxlen: 24
91.83.110.0/23 maxlen: 24
91.83.120.0/23 maxlen: 24
91.83.136.0/21 maxlen: 24
91.83.144.0/23 maxlen: 24
91.83.154.0/23 maxlen: 24
91.83.180.0/22 maxlen: 24
91.83.184.0/21 maxlen: 24
91.83.192.0/20 maxlen: 24
91.83.252.0/23 maxlen: 24
92.52.224.0/19 maxlen: 24
92.245.64.0/19 maxlen: 24
92.249.128.0/17 maxlen: 24
94.21.0.0/16 maxlen: 24
94.44.0.0/16 maxlen: 24
94.247.88.0/21 maxlen: 24
130.43.192.0/18 maxlen: 24
151.0.64.0/18 maxlen: 24
176.63.0.0/16 maxlen: 24
176.241.0.0/18 maxlen: 24
178.48.0.0/16 maxlen: 24
178.164.128.0/17 maxlen: 24
185.10.124.0/22 maxlen: 24
185.29.80.0/22 maxlen: 24
185.33.80.0/23 maxlen: 24
185.62.128.0/22 maxlen: 24
185.123.28.0/22 maxlen: 24
188.142.128.0/19 maxlen: 24
188.142.160.0/19 maxlen: 24
188.142.192.0/18 maxlen: 24
188.143.0.0/17 maxlen: 24
193.110.56.0/21 maxlen: 24
193.226.192.0/23 maxlen: 24
193.226.212.0/22 maxlen: 24
193.226.226.0/23 maxlen: 24
193.226.232.0/23 maxlen: 24
193.226.238.0/23 maxlen: 24
193.226.240.0/23 maxlen: 24
193.226.244.0/22 maxlen: 24
193.226.248.0/23 maxlen: 24
195.38.96.0/19 maxlen: 24
195.184.160.0/19 maxlen: 24
212.40.64.0/22 maxlen: 24
212.40.68.0/23 maxlen: 24
212.40.72.0/21 maxlen: 24
212.40.80.0/20 maxlen: 24
212.48.240.0/20 maxlen: 24
212.96.32.0/19 maxlen: 24
213.197.72.0/21 maxlen: 24
213.197.80.0/20 maxlen: 24
213.222.128.0/18 maxlen: 24
217.197.176.0/20 maxlen: 24
2a01:368::/29 maxlen: 48
2a01:368::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:e4:22:64:99:9e:2f:8e:ca:92:bf:69:0b:d8:78:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 2 09:13:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0a44cb3532616ed6fe8fabfbe2016a6d1a86931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:4b:a2:1e:09:6a:ef:ce:9a:65:d4:39:85:
2d:61:15:cb:a3:8f:74:12:91:99:c0:30:a4:79:00:
cd:88:35:a6:43:d4:80:4f:41:25:09:98:f4:8d:33:
c8:86:89:22:de:c7:ea:36:2c:4d:81:a4:7b:41:6f:
ce:f8:07:34:58:89:56:fa:eb:36:8c:6a:c9:3c:a8:
51:43:51:ee:19:11:01:d7:79:90:9a:66:ed:0b:0a:
11:0b:b7:36:79:51:2d:37:ea:86:0b:1d:69:a6:48:
8b:2c:59:6c:0d:0b:28:fa:69:d0:04:b5:61:e5:bd:
05:1d:d8:05:69:60:f4:97:bc:b4:42:a6:a1:c3:73:
3d:6c:1b:a3:3c:f2:e4:de:0b:2e:51:d4:67:7c:ce:
d7:c7:78:c9:90:a8:54:89:78:3d:f3:43:12:11:66:
1f:aa:b4:f0:f4:88:bf:b9:3d:5c:1a:d7:15:64:a5:
dd:d4:7b:46:18:06:12:b1:76:a5:1a:d1:33:41:a3:
91:5b:b1:89:de:76:0a:69:9f:95:bf:12:9c:53:dc:
8a:95:cf:bf:ad:0f:be:f9:d9:41:02:68:2d:7a:65:
f1:a5:ae:4c:83:c4:3a:dd:99:82:7e:ef:bc:9e:cc:
95:a3:f6:88:42:a4:5c:d3:4b:a6:d1:08:c9:9d:86:
e4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A4:4C:B3:53:26:16:ED:6F:E8:FA:BF:BE:20:16:A6:D1:A8:69:31
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/0KRMs1MmFu1v6Pq_viAWptGoaTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.192.0/18
5.148.192.0/18
5.206.128.0/18
37.188.80.0/21
37.191.0.0/18
37.220.192.0/18
62.77.196.0/22
62.77.240.0/23
62.77.248.0/21
62.165.192.0/18
77.234.64.0/19
78.131.0.0/17
78.139.0.0/18
79.120.160.0/21
79.120.170.0-79.120.175.255
79.120.248.0/23
79.120.252.0/22
80.95.64.0/19
80.98.0.0/15
81.0.82.0-81.0.87.255
81.0.90.0-81.0.95.255
81.0.98.0/23
81.0.108.0/23
81.0.122.0/23
81.0.126.0/23
81.17.176.0/20
82.131.128.0/19
82.131.182.0-82.131.191.255
82.131.196.0-82.131.198.255
82.131.200.0/21
82.131.216.0-82.131.255.255
82.144.164.0/22
82.144.172.0-82.144.177.255
82.144.188.0/23
84.21.180.0/22
84.236.0.0/17
85.66.0.0/15
85.238.64.0/19
86.101.0.0/16
87.97.0.0/18
87.97.80.0-87.97.127.255
88.87.240.0/21
89.132.0.0/14
89.147.64.0/20
89.147.96.0/22
89.147.112.0/21
89.148.64.0/18
89.186.96.0/23
89.186.102.0/23
89.186.106.0-89.186.115.255
89.186.118.0-89.186.127.255
89.223.128.0/17
91.82.0.0/21
91.82.24.0-91.82.39.255
91.82.56.0/23
91.82.60.0/23
91.82.64.0/21
91.82.82.0/23
91.82.130.0-91.82.147.255
91.82.160.0-91.82.173.255
91.82.176.0/21
91.82.188.0/22
91.82.210.0-91.82.215.255
91.82.228.0-91.82.235.255
91.82.240.0/22
91.82.250.0/23
91.83.0.0-91.83.39.255
91.83.52.0/22
91.83.94.0/23
91.83.102.0/23
91.83.110.0/23
91.83.120.0/23
91.83.136.0-91.83.145.255
91.83.154.0/23
91.83.180.0-91.83.207.255
91.83.252.0/23
92.52.224.0/19
92.245.64.0/19
92.249.128.0/17
94.21.0.0/16
94.44.0.0/16
94.247.88.0/21
130.43.192.0/18
151.0.64.0/18
176.63.0.0/16
176.241.0.0/18
178.48.0.0/16
178.164.128.0/17
185.10.124.0/22
185.29.80.0/22
185.33.80.0/23
185.62.128.0/22
185.123.28.0/22
188.142.128.0-188.143.127.255
193.110.56.0/21
193.226.192.0/23
193.226.212.0/22
193.226.226.0/23
193.226.232.0/23
193.226.238.0-193.226.241.255
193.226.244.0-193.226.249.255
195.38.96.0/19
195.184.160.0/19
212.40.64.0-212.40.69.255
212.40.72.0-212.40.95.255
212.48.240.0/20
212.96.32.0/19
213.197.72.0-213.197.95.255
213.222.128.0/18
217.197.176.0/20
IPv6:
2a01:368::/29
Signature Algorithm: sha256WithRSAEncryption
9c:c2:bf:50:8b:ad:52:06:87:67:26:18:65:4a:e4:5e:81:10:
46:a6:ab:f8:5c:cf:1c:2b:4d:e0:a3:0c:46:b3:ba:e4:5e:fd:
29:41:30:74:c3:da:a2:07:0d:98:28:36:48:06:ba:49:01:f0:
58:db:57:ce:f2:ff:cd:6b:1a:da:b0:96:29:5b:17:38:a9:6e:
33:b2:5c:b5:fa:d4:08:3a:89:54:19:2a:00:9d:3c:05:64:3d:
1d:06:e5:25:b2:90:a4:c4:ba:25:80:11:64:79:fe:55:fd:d0:
81:8f:f2:bf:94:47:f5:66:1f:02:1f:d8:63:89:d2:98:02:99:
74:1b:3f:63:a2:01:c7:0a:07:f8:37:d6:ce:b2:5d:90:f7:ed:
38:e9:88:68:88:61:f4:c5:ce:f9:c9:cb:72:49:46:45:fc:26:
25:99:8e:1e:9e:87:cf:71:ad:38:1b:04:30:87:29:5d:8c:7f:
bd:77:ae:ac:5f:82:af:bb:6b:7a:f1:6a:35:f0:a5:04:ab:c9:
0a:18:00:b7:c7:bf:69:cb:a5:8e:5f:34:a8:76:d6:21:11:b3:
d9:9e:a9:1a:87:6e:67:78:a4:22:1f:c2:13:62:3f:99:90:17:
16:1c:b9:b4:02:a5:de:f4:04:6d:dd:18:30:c7:4c:83:a6:70:
0f:f0:6a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:27:43 2026 by rpki-client