Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/Ia8OjyCdPbeOPd8qLz0nmpdFzZM.roa
File: Ia8OjyCdPbeOPd8qLz0nmpdFzZM.roa (raw, json)
Hash identifier: Uff4R68FmtlJLQg7NtBy9vfrwma4Gr4jpEJQTUvuSQk=
Subject key identifier: 21:AF:0E:8F:20:9D:3D:B7:8E:3D:DF:2A:2F:3D:27:9A:97:45:CD:93
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 019F85060D3EBEBCEAB337B49B49573CC19D
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/Ia8OjyCdPbeOPd8qLz0nmpdFzZM.roa
Signing time: Tue 21 Jul 2026 14:13:14 +0000
ROA not before: Tue 21 Jul 2026 14:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21334
IP address blocks: 5.63.192.0/18 maxlen: 18
5.148.192.0/18 maxlen: 19
5.148.192.0/19 maxlen: 19
5.148.224.0/19 maxlen: 19
5.206.128.0/18 maxlen: 18
37.188.80.0/21 maxlen: 21
37.188.80.0/22 maxlen: 22
37.188.84.0/22 maxlen: 22
37.191.0.0/18 maxlen: 19
37.191.0.0/19 maxlen: 19
37.191.32.0/19 maxlen: 19
37.220.192.0/18 maxlen: 18
78.139.0.0/18 maxlen: 19
78.139.0.0/19 maxlen: 19
78.139.32.0/19 maxlen: 19
80.98.0.0/15 maxlen: 16
80.98.0.0/16 maxlen: 16
80.99.0.0/16 maxlen: 16
86.101.0.0/16 maxlen: 17
86.101.0.0/17 maxlen: 17
86.101.128.0/17 maxlen: 17
88.87.240.0/21 maxlen: 21
88.87.240.0/22 maxlen: 22
88.87.244.0/22 maxlen: 22
89.132.0.0/14 maxlen: 15
89.132.0.0/15 maxlen: 15
89.134.0.0/15 maxlen: 15
89.134.0.0/20 maxlen: 20
89.134.16.0/20 maxlen: 20
89.135.60.0/24 maxlen: 24
89.223.128.0/17 maxlen: 17
89.223.128.0/18 maxlen: 18
89.223.192.0/18 maxlen: 18
94.44.0.0/16 maxlen: 17
94.44.0.0/17 maxlen: 17
94.44.128.0/17 maxlen: 17
130.43.192.0/18 maxlen: 18
151.0.64.0/18 maxlen: 18
176.63.0.0/16 maxlen: 16
176.63.0.0/17 maxlen: 17
176.63.0.0/20 maxlen: 20
176.63.16.0/20 maxlen: 20
176.63.128.0/17 maxlen: 17
178.48.0.0/16 maxlen: 17
178.48.0.0/17 maxlen: 17
178.48.128.0/17 maxlen: 17
185.10.124.0/22 maxlen: 22
185.10.124.0/23 maxlen: 23
185.10.126.0/23 maxlen: 23
185.33.80.0/23 maxlen: 23
185.33.80.0/24 maxlen: 24
185.33.81.0/24 maxlen: 24
185.123.28.0/22 maxlen: 23
188.142.160.0/19 maxlen: 19
188.142.160.0/20 maxlen: 20
188.142.176.0/20 maxlen: 20
188.142.192.0/18 maxlen: 19
188.142.192.0/19 maxlen: 19
188.142.224.0/19 maxlen: 19
195.184.160.0/19 maxlen: 19
195.184.160.0/20 maxlen: 20
195.184.176.0/20 maxlen: 20
212.48.240.0/20 maxlen: 21
212.48.240.0/21 maxlen: 21
212.48.248.0/21 maxlen: 21
212.96.32.0/19 maxlen: 19
212.96.32.0/20 maxlen: 20
212.96.48.0/20 maxlen: 20
213.222.128.0/18 maxlen: 18
213.222.128.0/19 maxlen: 19
213.222.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:06:0d:3e:be:bc:ea:b3:37:b4:9b:49:57:3c:c1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Jul 21 14:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21af0e8f209d3db78e3ddf2a2f3d279a9745cd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:42:b2:37:24:d6:fd:69:8d:20:bf:76:4f:
33:af:30:33:bc:a4:fd:ab:2a:7b:7c:7c:5b:03:61:
f2:73:9e:79:b3:a7:92:99:ec:01:f9:2c:19:89:cd:
58:0d:2c:21:8a:6d:4f:3f:53:e9:82:8b:38:9f:89:
50:09:63:29:5e:3a:66:a6:55:6c:7e:a1:65:2b:53:
74:45:73:71:f0:f7:6c:d3:38:1b:9c:6a:5b:67:3d:
3d:22:11:8c:2c:c8:67:5c:25:2a:c8:63:7e:f4:c7:
e9:e3:fa:75:cc:72:e3:49:f3:b4:1b:bc:28:0a:8d:
a2:bf:9e:2e:c2:07:fe:c0:46:62:8c:38:e2:93:c5:
cc:44:bd:04:ba:8b:a3:04:14:ad:e2:51:5e:92:9e:
ed:89:5d:10:08:7e:9e:3e:ee:e5:ed:c0:89:d5:55:
34:96:7d:5e:a6:25:0b:9f:01:6f:66:d6:3e:a1:fa:
ae:e2:d2:76:d6:fc:a3:48:75:0b:d0:1a:69:d2:a2:
85:18:33:e7:75:8c:1e:d9:35:45:20:0a:36:07:de:
61:62:7b:7e:09:eb:04:74:f2:2b:af:4b:9f:dd:12:
f2:66:4a:68:a6:29:34:2d:c4:2a:c6:82:f3:87:01:
d8:9b:c3:47:a9:54:c2:41:d7:15:72:da:47:df:d4:
df:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AF:0E:8F:20:9D:3D:B7:8E:3D:DF:2A:2F:3D:27:9A:97:45:CD:93
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/Ia8OjyCdPbeOPd8qLz0nmpdFzZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.192.0/18
5.148.192.0/18
5.206.128.0/18
37.188.80.0/21
37.191.0.0/18
37.220.192.0/18
78.139.0.0/18
80.98.0.0/15
86.101.0.0/16
88.87.240.0/21
89.132.0.0/14
89.223.128.0/17
94.44.0.0/16
130.43.192.0/18
151.0.64.0/18
176.63.0.0/16
178.48.0.0/16
185.10.124.0/22
185.33.80.0/23
185.123.28.0/22
188.142.160.0-188.142.255.255
195.184.160.0/19
212.48.240.0/20
212.96.32.0/19
213.222.128.0/18
Signature Algorithm: sha256WithRSAEncryption
9c:f8:35:04:4d:b0:b9:a0:45:5d:d0:5b:6f:3f:4c:33:0c:d9:
50:57:8c:b0:2a:9b:10:5f:76:d7:e6:e7:19:3f:b2:9b:e6:02:
38:2d:b0:92:a3:0b:a1:f5:23:63:f6:2e:0a:b0:e6:f6:2f:91:
b6:b9:4e:51:2e:7f:91:17:88:1e:ff:2f:8d:7d:81:36:35:5a:
58:ab:a6:4f:4a:d4:fa:dd:0d:19:da:3a:2c:ef:6e:49:f9:af:
a8:48:16:53:be:e0:8e:00:f3:b1:26:b3:fa:93:47:70:f2:05:
d5:77:26:58:12:ac:8e:7f:c3:be:59:22:0a:9b:01:21:08:7f:
d2:18:f4:b1:89:ca:91:8b:8d:4e:2d:75:af:9b:11:41:8e:75:
ce:bb:43:93:9d:8b:6d:61:76:8a:58:69:3e:c7:6d:be:b7:39:
0c:22:af:d4:24:aa:30:f5:f2:69:0d:45:eb:16:14:8a:e2:51:
60:f6:5b:9f:dd:7a:68:24:36:58:e2:a3:d7:41:e7:b3:3e:82:
31:38:b2:9d:4f:5a:c1:58:ac:cc:c1:2b:26:f6:1f:27:d4:ea:
52:96:8e:63:71:47:d4:8f:78:09:9f:c0:5f:e6:0e:b0:e3:02:
db:c3:78:52:63:01:ab:1f:e5:24:f0:35:7f:30:cc:24:cc:76:
9a:71:7a:42
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZ+FBg0+vrzqsze0m0lXPMGdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMzY2OWVhZTg3NmQyZjIzYjlmODUyN2U4OGE4NzAyZGJk
NDIzZTMwHhcNMjYwNzIxMTQxMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWFmMGU4ZjIwOWQzZGI3OGUzZGRmMmEyZjNkMjc5YTk3NDVjZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArflCsjck1v1pjSC/dk8zrzAzvKT9
qyp7fHxbA2Hyc555s6eSmewB+SwZic1YDSwhim1PP1Ppgos4n4lQCWMpXjpmplVs
fqFlK1N0RXNx8Pds0zgbnGpbZz09IhGMLMhnXCUqyGN+9Mfp4/p1zHLjSfO0G7wo
Co2iv54uwgf+wEZijDjik8XMRL0EuoujBBSt4lFekp7tiV0QCH6ePu7l7cCJ1VU0
ln1epiULnwFvZtY+ofqu4tJ21vyjSHUL0Bpp0qKFGDPndYwe2TVFIAo2B95hYnt+
CesEdPIrr0uf3RLyZkpopik0LcQqxoLzhwHYm8NHqVTCQdcVctpH39TfZwIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFCGvDo8gnT23jj3fKi89J5qXRc2TMB8GA1UdIwQY
MBaAFOo2aerodtLyO5+FJ+iKhwLb1CPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmpacDZ1aDIwdkk3bjRVbjZJcUhBdHZVSS1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NWUzNWEtODQ3Yi00MmUyLWFlMjct
M2FjZTFlZmYzYTI0LzEvSWE4T2p5Q2RQYmVPUGQ4cUx6MG5tcGRGelpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NWUzNWEtODQ3Yi00MmUyLWFlMjctM2FjZTFlZmYzYTI0
LzEvNmpacDZ1aDIwdkk3bjRVbjZJcUhBdHZVSS1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG0BggrBgEFBQcBBwEB/wSBpDCBoTCBngQCAAEwgZcDBAYF
P8ADBAYFlMADBAYFzoADBAMlvFADBAYlvwADBAYl3MADBAZOiwADAwFQYgMDAFZl
AwQDWFfwAwMCWYQDBAdZ34ADAwBeLAMEBoIrwAMEBpcAQAMDALA/AwMAsjADBAK5
CnwDBAG5IVADBAK5exwwCwMEBbyOoAMDALyOAwQFw7igAwQE1DDwAwQF1GAgAwQG
1d6AMA0GCSqGSIb3DQEBCwUAA4IBAQCc+DUETbC5oEVd0FtvP0wzDNlQV4ywKpsQ
X3bX5ucZP7Kb5gI4LbCSowuh9SNj9i4KsOb2L5G2uU5RLn+RF4ge/y+NfYE2NVpY
q6ZPStT63Q0Z2jos725J+a+oSBZTvuCOAPOxJrP6k0dw8gXVdyZYEqyOf8O+WSIK
mwEhCH/SGPSxicqRi41OLXWvmxFBjnXOu0OTnYttYXaKWGk+x22+tzkMIq/UJKow
9fJpDUXrFhSK4lFg9luf3XpoJDZY4qPXQeezPoIxOLKdT1rBWKzMwSsm9h8n1OpS
lo5jcUfUj3gJn8Bf5g6w4wLbw3hSYwGrH+Uk8DV/MMwkzHaacXpC
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:12:30 2026 by rpki-client