Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/04asTcfPFlq6SHya2cbVCs1E0So.roa
File: 04asTcfPFlq6SHya2cbVCs1E0So.roa (raw, json)
Hash identifier: yhBNtmprrZkUMWqeBHNJrM8uuCROlQG9JLIfYBieIUo=
Subject key identifier: D3:86:AC:4D:C7:CF:16:5A:BA:48:7C:9A:D9:C6:D5:0A:CD:44:D1:2A
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 019CAD73B4B96CFAA41938BB59E3147602B0
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/04asTcfPFlq6SHya2cbVCs1E0So.roa
Signing time: Mon 02 Mar 2026 07:29:27 +0000
ROA not before: Mon 02 Mar 2026 07:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3303
IP address blocks: 46.245.144.0/21 maxlen: 21
78.110.128.0/20 maxlen: 20
91.216.229.0/24 maxlen: 24
138.187.0.0/16 maxlen: 19
138.188.0.0/16 maxlen: 24
138.190.0.0/16 maxlen: 16
164.128.0.0/16 maxlen: 24
185.39.92.0/22 maxlen: 22
185.84.76.0/22 maxlen: 24
185.106.64.0/22 maxlen: 24
188.92.48.0/21 maxlen: 21
193.5.0.0/24 maxlen: 24
193.5.3.0/24 maxlen: 24
193.5.4.0/23 maxlen: 24
193.5.6.0/23 maxlen: 23
193.5.20.0/24 maxlen: 24
193.5.29.0/24 maxlen: 24
193.5.36.0/24 maxlen: 24
193.5.38.0/24 maxlen: 24
193.5.52.0/24 maxlen: 24
193.5.59.0/24 maxlen: 24
193.5.61.0/24 maxlen: 24
193.5.63.0/24 maxlen: 24
193.5.224.0/20 maxlen: 22
193.47.232.0/24 maxlen: 24
193.134.36.0/22 maxlen: 24
193.134.248.0/23 maxlen: 24
193.134.255.0/24 maxlen: 24
193.135.0.0/23 maxlen: 24
193.135.3.0/24 maxlen: 24
193.135.26.0/23 maxlen: 23
193.135.100.0/24 maxlen: 24
193.135.111.0/24 maxlen: 24
193.135.128.0/22 maxlen: 24
193.135.132.0/24 maxlen: 24
193.135.133.0/24 maxlen: 24
193.135.136.0/24 maxlen: 24
193.135.140.0/24 maxlen: 24
193.135.142.0/23 maxlen: 24
193.135.143.0/24 maxlen: 24
193.135.144.0/23 maxlen: 24
193.135.148.0/23 maxlen: 24
193.135.148.0/24 maxlen: 24
193.135.149.0/24 maxlen: 24
193.135.173.0/24 maxlen: 24
193.135.214.0/23 maxlen: 24
193.135.218.0/24 maxlen: 24
193.135.255.0/24 maxlen: 24
193.222.64.0/19 maxlen: 19
193.223.16.0/20 maxlen: 20
193.223.32.0/19 maxlen: 19
193.246.0.0/23 maxlen: 24
193.246.8.0/22 maxlen: 22
193.246.16.0/21 maxlen: 24
193.246.32.0/20 maxlen: 20
193.246.32.0/21 maxlen: 24
193.246.40.0/21 maxlen: 21
193.246.48.0/23 maxlen: 24
193.246.50.0/24 maxlen: 24
193.246.56.0/24 maxlen: 24
193.246.57.0/24 maxlen: 24
193.246.99.0/24 maxlen: 24
193.246.100.0/24 maxlen: 24
193.246.104.0/24 maxlen: 24
193.246.105.0/24 maxlen: 24
193.246.113.0/24 maxlen: 24
193.246.127.0/24 maxlen: 24
193.246.202.0/23 maxlen: 24
193.246.244.0/24 maxlen: 24
193.246.248.0/22 maxlen: 24
193.247.36.0/22 maxlen: 24
193.247.40.0/24 maxlen: 24
193.247.41.0/24 maxlen: 24
193.247.42.0/24 maxlen: 24
193.247.43.0/24 maxlen: 24
193.247.44.0/22 maxlen: 24
193.247.86.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
193.247.104.0/23 maxlen: 23
193.247.151.0/24 maxlen: 24
193.247.168.0/21 maxlen: 21
193.247.176.0/22 maxlen: 22
193.247.193.0/24 maxlen: 24
193.247.212.0/24 maxlen: 24
193.247.217.0/24 maxlen: 24
193.247.218.0/23 maxlen: 23
193.247.224.0/21 maxlen: 24
193.247.244.0/23 maxlen: 24
193.247.246.0/24 maxlen: 24
193.247.247.0/24 maxlen: 24
193.247.250.0/24 maxlen: 24
194.6.160.0/19 maxlen: 24
194.11.96.0/20 maxlen: 20
194.11.144.0/21 maxlen: 21
194.209.0.0/16 maxlen: 24
195.35.121.0/24 maxlen: 24
195.65.0.0/16 maxlen: 24
195.144.32.0/19 maxlen: 24
195.176.128.0/19 maxlen: 24
195.176.192.0/19 maxlen: 24
212.117.96.0/19 maxlen: 19
212.243.0.0/16 maxlen: 24
217.192.0.0/15 maxlen: 24
2001:918::/32 maxlen: 48
2001:918:ffaa::/48 maxlen: 48
2001:91a::/32 maxlen: 48
2001:91f::/32 maxlen: 32
2a01:8b00::/32 maxlen: 32
2a02:a90::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:73:b4:b9:6c:fa:a4:19:38:bb:59:e3:14:76:02:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Mar 2 07:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d386ac4dc7cf165aba487c9ad9c6d50acd44d12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:0e:ae:46:81:0b:4d:d9:44:d6:ad:1a:10:
f2:50:05:53:c6:a4:38:10:a7:14:12:a7:98:ab:00:
b0:6f:1a:40:e0:2b:ce:90:92:dd:76:b4:dd:69:94:
5f:26:22:b6:3c:90:5f:52:ac:81:26:7e:76:df:35:
b5:ba:e0:a1:f7:9e:a9:d9:a3:2b:bc:24:c0:bf:aa:
43:02:cf:b1:01:4b:20:cf:1d:31:5d:81:0b:cf:a1:
ef:f7:20:21:75:3a:1e:a0:a7:a8:48:ea:c4:12:c5:
63:3f:dc:4c:1a:02:4b:73:ee:1a:7d:f1:c4:3d:27:
27:08:c1:e3:59:93:cd:2a:2c:8c:90:78:ae:53:ab:
fd:0d:92:c9:e5:c4:f3:83:81:c5:50:bd:08:77:d3:
30:db:48:11:6f:23:73:23:42:0c:dd:d7:66:97:29:
81:a9:bd:8e:11:b8:e1:98:f0:10:92:b5:70:43:05:
19:20:79:40:d4:b5:18:3c:85:4a:3f:59:db:a8:5a:
f3:c7:21:98:a2:e8:70:cd:89:a5:38:e0:64:e2:6d:
3b:e5:6a:1f:05:86:03:16:21:29:67:5c:21:ac:f1:
5e:23:15:26:34:df:65:25:e4:f5:50:26:6f:c5:55:
54:3c:fb:47:d3:9a:85:eb:3c:29:ee:75:82:b0:32:
48:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:86:AC:4D:C7:CF:16:5A:BA:48:7C:9A:D9:C6:D5:0A:CD:44:D1:2A
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/04asTcfPFlq6SHya2cbVCs1E0So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.144.0/21
78.110.128.0/20
91.216.229.0/24
138.187.0.0-138.188.255.255
138.190.0.0/16
164.128.0.0/16
185.39.92.0/22
185.84.76.0/22
185.106.64.0/22
188.92.48.0/21
193.5.0.0/24
193.5.3.0-193.5.7.255
193.5.20.0/24
193.5.29.0/24
193.5.36.0/24
193.5.38.0/24
193.5.52.0/24
193.5.59.0/24
193.5.61.0/24
193.5.63.0/24
193.5.224.0/20
193.47.232.0/24
193.134.36.0/22
193.134.248.0/23
193.134.255.0-193.135.1.255
193.135.3.0/24
193.135.26.0/23
193.135.100.0/24
193.135.111.0/24
193.135.128.0-193.135.133.255
193.135.136.0/24
193.135.140.0/24
193.135.142.0-193.135.145.255
193.135.148.0/23
193.135.173.0/24
193.135.214.0/23
193.135.218.0/24
193.135.255.0/24
193.222.64.0/19
193.223.16.0-193.223.63.255
193.246.0.0/23
193.246.8.0/22
193.246.16.0/21
193.246.32.0-193.246.50.255
193.246.56.0/23
193.246.99.0-193.246.100.255
193.246.104.0/23
193.246.113.0/24
193.246.127.0/24
193.246.202.0/23
193.246.244.0/24
193.246.248.0/22
193.247.36.0-193.247.47.255
193.247.86.0/24
193.247.90.0/24
193.247.104.0/23
193.247.151.0/24
193.247.168.0-193.247.179.255
193.247.193.0/24
193.247.212.0/24
193.247.217.0-193.247.219.255
193.247.224.0/21
193.247.244.0/22
193.247.250.0/24
194.6.160.0/19
194.11.96.0/20
194.11.144.0/21
194.209.0.0/16
195.35.121.0/24
195.65.0.0/16
195.144.32.0/19
195.176.128.0/19
195.176.192.0/19
212.117.96.0/19
212.243.0.0/16
217.192.0.0/15
IPv6:
2001:918::/32
2001:91a::/32
2001:91f::/32
2a01:8b00::/32
2a02:a90::/32
Signature Algorithm: sha256WithRSAEncryption
3b:b8:95:ef:a8:0e:9e:52:8c:7a:35:9a:22:49:6a:2e:88:54:
ff:66:19:2b:93:6e:22:7f:c3:ca:41:24:56:58:9d:9f:21:d8:
e5:20:68:00:99:e3:8c:03:0d:2d:75:ee:02:60:e2:ed:be:33:
37:32:56:e6:9f:41:1c:fe:05:53:74:0c:58:55:e1:7d:aa:8c:
f3:58:61:1b:54:c1:97:97:f6:55:53:5f:4f:82:52:b3:e6:6c:
7b:a9:19:6a:e8:de:b2:c7:cd:4a:f8:90:6a:32:01:99:65:f4:
07:4b:ef:67:d6:3a:1d:71:8b:ff:e2:12:3b:66:e0:33:ca:34:
48:ca:8f:5d:7b:32:1d:ba:e8:49:9e:86:7e:08:2c:62:fa:26:
4d:8d:09:1a:88:42:f1:56:8b:31:6b:cb:1a:eb:f3:4e:05:a9:
d4:bb:ec:64:07:99:79:6d:da:81:0a:88:d8:9f:f6:dd:6a:fb:
56:b4:50:27:94:93:38:13:6b:62:73:50:62:0c:f1:a4:85:01:
4d:aa:89:0f:73:ea:be:6c:97:43:ac:e2:cd:19:a9:3d:9e:62:
6e:63:c0:0e:9f:ba:e7:c0:60:d5:c6:cb:a3:84:40:21:94:15:
d0:9b:a6:55:0f:95:1f:8b:27:58:52:0b:d8:85:3a:ea:cb:a5:
59:fa:db:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:26:08 2026 by rpki-client