Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/apO_tJGBKADQJ-hFGrYrRNoSYE8.roa
File: apO_tJGBKADQJ-hFGrYrRNoSYE8.roa (raw, json)
Hash identifier: raGBmTHdD6qhnWazcF5utOogM8MaWgXfZcmoly3N908=
Subject key identifier: 6A:93:BF:B4:91:81:28:00:D0:27:E8:45:1A:B6:2B:44:DA:12:60:4F
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01A10AD716D0F5873B20BA78DBF4844991C0
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/apO_tJGBKADQJ-hFGrYrRNoSYE8.roa
Signing time: Mon 05 Oct 2026 06:53:50 +0000
ROA not before: Mon 05 Oct 2026 06:53:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34665
IP address blocks: 5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.10.0/24 maxlen: 24
5.8.11.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.16.0/24 maxlen: 24
5.8.18.0/24 maxlen: 24
5.8.46.0/24 maxlen: 24
5.8.47.0/24 maxlen: 24
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/24 maxlen: 24
5.8.49.0/24 maxlen: 24
5.8.50.0/23 maxlen: 23
5.8.50.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.8.52.0/22 maxlen: 22
5.8.52.0/23 maxlen: 23
5.8.52.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.57.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.4.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.101.6.0/24 maxlen: 24
5.101.7.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.45.0/24 maxlen: 24
5.101.46.0/24 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.101.64.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.80.0/21 maxlen: 21
5.101.90.0/23 maxlen: 23
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.46.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.51.0/24 maxlen: 24
5.188.60.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.188.200.0/24 maxlen: 24
5.188.201.0/24 maxlen: 24
5.188.202.0/24 maxlen: 24
5.188.204.0/23 maxlen: 23
5.188.208.0/23 maxlen: 23
5.188.210.0/24 maxlen: 24
5.188.211.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.189.248.0/22 maxlen: 24
31.44.188.0/22 maxlen: 32
31.184.192.0/22 maxlen: 22
31.184.192.0/23 maxlen: 23
31.184.192.0/24 maxlen: 24
31.184.193.0/24 maxlen: 24
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.196.0/24 maxlen: 24
31.184.197.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.198.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
31.184.240.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
37.139.49.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.56.0/22 maxlen: 22
37.139.56.0/23 maxlen: 23
37.139.56.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.58.0/24 maxlen: 24
37.139.59.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.8.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.28.0/22 maxlen: 22
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/23 maxlen: 23
46.161.50.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.50.0/23 maxlen: 23
91.243.50.0/24 maxlen: 24
91.243.51.0/24 maxlen: 24
91.243.52.0/22 maxlen: 22
91.243.56.0/22 maxlen: 22
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.2.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
146.185.223.0/24 maxlen: 24
146.185.224.0/21 maxlen: 21
146.185.239.0/24 maxlen: 24
146.185.245.0/24 maxlen: 24
188.143.232.0/22 maxlen: 22
188.143.232.0/23 maxlen: 23
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
193.93.192.0/22 maxlen: 22
195.2.240.0/23 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:d7:16:d0:f5:87:3b:20:ba:78:db:f4:84:49:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Oct 5 06:53:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a93bfb491812800d027e8451ab62b44da12604f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:9c:9c:9b:cd:ca:0b:97:1d:39:8d:f3:36:
e2:18:f1:8b:98:7a:a3:16:39:7f:7d:02:32:72:7e:
2e:4f:f5:32:7a:1b:eb:c8:34:de:a9:73:33:06:e2:
f4:67:80:11:47:3d:55:2c:1b:b4:db:0f:49:01:bb:
07:76:2a:b4:99:98:f9:35:3b:7d:97:fe:15:19:01:
34:2a:dd:c6:cc:e2:e1:34:5f:a7:f0:28:ba:f2:a8:
e5:d1:94:a1:e4:b4:f7:9f:e6:20:ce:70:97:75:3e:
c2:c9:da:a6:4c:7f:ba:cd:e4:51:bc:80:4b:e8:78:
76:a0:0f:ad:10:d1:2d:82:7c:39:00:8f:d2:7f:f2:
6f:19:04:10:00:0c:a1:4f:ba:a4:f4:62:59:55:b3:
48:52:12:1a:ab:d0:4e:a9:81:a7:66:ba:41:e9:ba:
a0:e1:ef:d0:39:51:2a:54:e6:51:23:8b:b0:a1:89:
4a:ea:81:c7:22:b3:2f:aa:36:af:d0:26:e8:f1:7f:
83:b5:4f:f5:e8:a0:2d:9c:c1:55:80:b2:14:e2:f2:
69:0d:c7:44:67:92:33:64:0b:d5:6d:9a:7c:bf:a5:
98:38:73:23:63:eb:50:b3:e1:68:b8:e8:a2:5e:36:
b5:b0:84:83:5a:cc:8b:a6:2d:07:91:5e:73:a8:c2:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:93:BF:B4:91:81:28:00:D0:27:E8:45:1A:B6:2B:44:DA:12:60:4F
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/apO_tJGBKADQJ-hFGrYrRNoSYE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0-5.8.16.255
5.8.18.0/24
5.8.46.0-5.8.55.255
5.8.57.0/24
5.8.60.0/23
5.101.0.0/21
5.101.32.0/22
5.101.45.0-5.101.46.255
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.44.0-5.188.49.255
5.188.51.0/24
5.188.60.0/23
5.188.166.0/24
5.188.200.0-5.188.202.255
5.188.204.0/23
5.188.208.0/22
5.188.223.0/24
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.188.0/22
31.184.192.0/21
31.184.238.0-31.184.241.255
31.184.243.0/24
37.9.48.0/24
37.139.49.0/24
37.139.53.0/24
37.139.56.0/22
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.20.0/22
46.161.28.0-46.161.35.255
46.161.44.0-46.161.51.255
91.243.32.0/22
91.243.48.0-91.243.61.255
95.215.0.0/22
146.185.223.0-146.185.231.255
146.185.239.0/24
146.185.245.0/24
188.143.232.0/22
193.93.192.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
06:4d:d3:92:c0:4a:e1:ac:87:bd:86:43:62:49:6a:84:a9:4a:
5c:cd:19:fd:94:6e:37:c9:94:53:ad:1e:36:ae:33:9c:f9:96:
a3:de:c0:54:a5:2d:0d:33:45:bf:b2:26:e1:a1:d5:a4:8a:8f:
ea:4b:77:b9:e5:6c:fd:e1:96:0b:fb:e1:30:38:20:f9:ad:02:
a5:c6:bc:9b:f8:ee:44:11:68:5d:1c:26:b4:48:b7:69:9a:95:
07:5f:fe:ee:34:c0:e5:84:f2:95:33:a8:7e:2f:d6:8f:68:fc:
b1:1c:84:f7:fd:b0:9c:e3:fd:1e:83:bc:7c:63:6e:9e:af:23:
e7:7b:63:e5:7a:b4:c5:20:c6:31:d3:e2:48:f5:8e:c4:e5:92:
b0:6d:08:31:2f:29:26:1e:a5:05:fa:0e:6d:b8:03:a3:1b:47:
9d:15:22:97:21:c3:10:8e:82:6c:7e:09:22:c6:d2:da:b1:48:
1d:e2:1e:4c:19:2c:cb:d9:65:d7:bd:0c:db:17:08:c4:a2:de:
77:14:e8:9e:c7:db:da:87:93:29:61:1f:87:d2:b0:b6:ec:fa:
99:54:77:40:9b:73:93:2b:5e:73:79:47:30:07:c1:90:47:bd:
31:3b:8d:86:cb:89:06:c7:66:3a:d7:6c:a7:13:65:5c:71:80:
7b:bc:76:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:10:59 2026 by rpki-client