Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-qwnow8jpciuo6F9Y19Y2nN-dIE.roa
File: 1-qwnow8jpciuo6F9Y19Y2nN-dIE.roa (raw, json)
Hash identifier: jHDv/btZ+43iZpkdgiNSt6VkelS2hSTKz8mGDhhlIW4=
Subject key identifier: FA:AC:27:A3:0F:23:A5:C8:AE:A3:A1:7D:63:5F:58:DA:73:7E:74:81
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A05DFB69D29FB70EC1C09F2D6BDD454245
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-qwnow8jpciuo6F9Y19Y2nN-dIE.roa
Signing time: Tue 01 Sep 2026 17:19:12 +0000
ROA not before: Tue 01 Sep 2026 17:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 2.59.49.0/24 maxlen: 24
31.222.248.0/24 maxlen: 24
45.15.238.0/24 maxlen: 24
45.93.80.0/24 maxlen: 24
45.132.38.0/24 maxlen: 24
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
45.139.52.0/24 maxlen: 24
45.139.53.0/24 maxlen: 24
45.139.55.0/24 maxlen: 24
45.139.126.0/24 maxlen: 24
45.139.127.0/24 maxlen: 24
45.140.64.0/24 maxlen: 24
45.142.39.0/24 maxlen: 24
45.146.24.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.149.129.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
45.159.84.0/24 maxlen: 24
45.159.87.0/24 maxlen: 24
62.68.86.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
94.158.189.0/24 maxlen: 24
157.22.0.0/24 maxlen: 24
157.22.1.0/24 maxlen: 24
157.22.2.0/24 maxlen: 24
157.22.3.0/24 maxlen: 24
157.22.4.0/24 maxlen: 24
157.22.5.0/24 maxlen: 24
157.22.6.0/24 maxlen: 24
157.22.7.0/24 maxlen: 24
157.22.8.0/24 maxlen: 24
157.22.9.0/24 maxlen: 24
157.22.10.0/24 maxlen: 24
157.22.11.0/24 maxlen: 24
157.22.12.0/24 maxlen: 24
157.22.13.0/24 maxlen: 24
157.22.14.0/24 maxlen: 24
157.22.15.0/24 maxlen: 24
157.22.20.0/24 maxlen: 24
157.22.21.0/24 maxlen: 24
157.22.22.0/24 maxlen: 24
157.22.23.0/24 maxlen: 24
157.22.24.0/24 maxlen: 24
157.22.25.0/24 maxlen: 24
157.22.26.0/24 maxlen: 24
157.22.27.0/24 maxlen: 24
157.22.28.0/24 maxlen: 24
157.22.29.0/24 maxlen: 24
157.22.30.0/24 maxlen: 24
157.22.31.0/24 maxlen: 24
157.22.32.0/24 maxlen: 24
157.22.33.0/24 maxlen: 24
157.22.34.0/24 maxlen: 24
157.22.35.0/24 maxlen: 24
157.22.36.0/24 maxlen: 24
157.22.37.0/24 maxlen: 24
157.22.38.0/24 maxlen: 24
157.22.39.0/24 maxlen: 24
157.22.40.0/24 maxlen: 24
157.22.41.0/24 maxlen: 24
157.22.42.0/24 maxlen: 24
157.22.43.0/24 maxlen: 24
157.22.48.0/24 maxlen: 24
157.22.49.0/24 maxlen: 24
157.22.50.0/24 maxlen: 24
157.22.54.0/24 maxlen: 24
157.22.57.0/24 maxlen: 24
157.22.58.0/24 maxlen: 24
157.22.59.0/24 maxlen: 24
157.22.60.0/24 maxlen: 24
157.22.61.0/24 maxlen: 24
157.22.62.0/24 maxlen: 24
157.22.63.0/24 maxlen: 24
157.22.64.0/24 maxlen: 24
157.22.65.0/24 maxlen: 24
157.22.66.0/24 maxlen: 24
157.22.67.0/24 maxlen: 24
157.22.70.0/24 maxlen: 24
157.22.77.0/24 maxlen: 24
157.22.79.0/24 maxlen: 24
157.22.80.0/24 maxlen: 24
157.22.82.0/24 maxlen: 24
157.22.83.0/24 maxlen: 24
157.22.84.0/24 maxlen: 24
157.22.86.0/24 maxlen: 24
157.22.87.0/24 maxlen: 24
157.22.88.0/24 maxlen: 24
157.22.89.0/24 maxlen: 24
157.22.91.0/24 maxlen: 24
157.22.92.0/24 maxlen: 24
157.22.93.0/24 maxlen: 24
157.22.95.0/24 maxlen: 24
157.22.96.0/24 maxlen: 24
157.22.97.0/24 maxlen: 24
157.22.99.0/24 maxlen: 24
157.22.104.0/24 maxlen: 24
157.22.105.0/24 maxlen: 24
157.22.106.0/24 maxlen: 24
157.22.107.0/24 maxlen: 24
157.22.108.0/24 maxlen: 24
157.22.110.0/24 maxlen: 24
157.22.111.0/24 maxlen: 24
157.22.112.0/24 maxlen: 24
157.22.113.0/24 maxlen: 24
157.22.115.0/24 maxlen: 24
157.22.116.0/24 maxlen: 24
157.22.118.0/24 maxlen: 24
157.22.120.0/24 maxlen: 24
157.22.121.0/24 maxlen: 24
157.22.123.0/24 maxlen: 24
176.56.37.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
178.212.143.0/24 maxlen: 24
185.46.175.0/24 maxlen: 24
185.92.211.0/24 maxlen: 24
185.161.79.0/24 maxlen: 24
193.31.5.0/24 maxlen: 24
193.33.66.0/24 maxlen: 24
193.58.170.0/24 maxlen: 24
193.201.126.0/24 maxlen: 24
194.32.238.0/24 maxlen: 24
194.32.239.0/24 maxlen: 24
194.56.180.0/24 maxlen: 24
195.64.110.0/24 maxlen: 24
195.96.146.0/24 maxlen: 24
212.18.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 16:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:fb:69:d2:9f:b7:0e:c1:c0:9f:2d:6b:dd:45:42:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Sep 1 17:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faac27a30f23a5c8aea3a17d635f58da737e7481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:e3:db:72:7b:13:d8:e0:3a:78:cd:5d:a6:
36:51:b4:5d:38:12:fe:bc:ed:f4:63:4f:4f:21:dd:
a4:18:a8:c8:7f:a6:cd:11:7c:94:02:0f:a9:40:aa:
4e:24:67:16:1a:aa:52:c4:a2:54:16:08:12:7d:38:
4e:0f:09:8b:8c:ca:29:51:8f:d8:f8:44:7e:6f:8f:
db:a6:96:79:93:44:99:0e:04:17:6d:fd:c6:25:38:
d2:90:e5:ec:27:40:16:ab:cc:0f:4f:03:55:c1:e1:
9a:90:f2:9d:cc:01:16:f7:b8:59:fd:ab:fe:46:ae:
d7:ef:15:2e:d9:8e:48:71:7c:0a:01:74:a0:89:5b:
e9:5a:96:58:48:8b:71:ff:92:78:c7:f7:2b:fa:89:
26:06:fd:8e:ac:21:e6:5b:f1:6c:1b:44:ec:28:9e:
03:a4:9a:19:4f:6c:95:d2:5f:55:a7:ce:c7:41:83:
5d:7c:67:4f:83:9c:1a:c4:ab:2a:31:ce:34:d5:72:
11:fc:e2:1e:68:6b:52:35:fe:d1:35:fb:b9:55:43:
d2:22:17:e8:2f:91:f1:9d:d7:d7:87:f9:a7:d1:7b:
0a:0d:ff:d2:62:dc:d4:49:d6:be:b0:4a:ce:13:b8:
9c:0c:a8:fd:95:cd:b6:a2:41:3f:26:81:58:f6:62:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AC:27:A3:0F:23:A5:C8:AE:A3:A1:7D:63:5F:58:DA:73:7E:74:81
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1-qwnow8jpciuo6F9Y19Y2nN-dIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.49.0/24
31.222.248.0/24
45.15.238.0/24
45.93.80.0/24
45.132.38.0/24
45.132.128.0/23
45.138.213.0-45.138.214.255
45.139.52.0/23
45.139.55.0/24
45.139.126.0/23
45.140.64.0/24
45.142.39.0/24
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.149.129.0/24
45.152.116.0/23
45.159.84.0/24
45.159.87.0/24
62.68.86.0/24
91.206.68.0/24
91.236.121.0/24
94.158.189.0/24
157.22.0.0/20
157.22.20.0-157.22.43.255
157.22.48.0-157.22.50.255
157.22.54.0/24
157.22.57.0-157.22.67.255
157.22.70.0/24
157.22.77.0/24
157.22.79.0-157.22.80.255
157.22.82.0-157.22.84.255
157.22.86.0-157.22.89.255
157.22.91.0-157.22.93.255
157.22.95.0-157.22.97.255
157.22.99.0/24
157.22.104.0-157.22.108.255
157.22.110.0-157.22.113.255
157.22.115.0-157.22.116.255
157.22.118.0/24
157.22.120.0/23
157.22.123.0/24
176.56.37.0/24
176.222.56.0/23
176.222.59.0/24
178.212.143.0/24
185.46.175.0/24
185.92.211.0/24
185.161.79.0/24
193.31.5.0/24
193.33.66.0/24
193.58.170.0/24
193.201.126.0/24
194.32.238.0/23
194.56.180.0/24
195.64.110.0/24
195.96.146.0/24
212.18.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e9:a6:6b:37:56:d2:9b:92:4d:7e:68:1d:82:7e:ec:0c:3a:
72:8b:f3:e5:6c:e6:ae:7f:38:9f:2b:55:7f:6d:79:51:ca:89:
44:08:93:27:4c:21:a6:34:55:97:e0:c9:58:ad:66:aa:be:1a:
15:05:0c:57:b4:c2:3f:f0:2a:5a:50:f4:5f:a8:9a:3a:e0:30:
d2:2a:c1:8c:fb:4b:c9:f3:d7:dc:fc:0a:fa:1d:9b:fb:51:bf:
ce:5d:36:d1:df:d3:34:a3:bd:b0:8f:53:9a:17:02:73:95:c2:
8e:f6:75:6d:2f:fd:dd:14:e2:7d:07:b2:25:4e:84:f5:85:9d:
2d:d1:0f:d3:aa:60:ea:b6:ed:0f:87:4e:d4:66:ab:0e:a9:9d:
5f:6b:9e:da:7d:ac:11:39:53:fa:6e:0e:59:b5:4e:fe:86:f2:
f7:11:f2:ca:57:10:66:42:21:eb:88:22:3a:9d:30:8b:3f:ec:
ee:08:1a:d6:52:85:8f:25:25:89:f4:e2:9b:9f:70:00:70:c6:
19:c6:00:86:9d:42:1c:dd:2c:6e:e2:ba:de:5f:29:5c:b8:cd:
49:e5:37:66:1d:8d:90:f8:d0:20:5a:e6:4a:5c:9f:2b:b3:85:
3c:78:78:9d:19:95:82:38:f4:3d:2b:7a:13:11:d2:ea:ff:f8:
a3:34:95:7f
-----BEGIN CERTIFICATE-----
MIIGvjCCBaagAwIBAgISAaBd+2nSn7cOwcCfLWvdRUJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjYwOTAxMTcxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWFjMjdhMzBmMjNhNWM4YWVhM2ExN2Q2MzVmNThkYTczN2U3NDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKjj23J7E9jgOnjNXaY2UbRdOBL+
vO30Y09PId2kGKjIf6bNEXyUAg+pQKpOJGcWGqpSxKJUFggSfThODwmLjMopUY/Y
+ER+b4/bppZ5k0SZDgQXbf3GJTjSkOXsJ0AWq8wPTwNVweGakPKdzAEW97hZ/av+
Rq7X7xUu2Y5IcXwKAXSgiVvpWpZYSItx/5J4x/cr+okmBv2OrCHmW/FsG0TsKJ4D
pJoZT2yV0l9Vp87HQYNdfGdPg5waxKsqMc401XIR/OIeaGtSNf7RNfu5VUPSIhfo
L5HxndfXh/mn0XsKDf/SYtzUSda+sErOE7icDKj9lc22okE/JoFY9mJueQIDAQAB
o4IDyjCCA8YwHQYDVR0OBBYEFPqsJ6MPI6XIrqOhfWNfWNpzfnSBMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvMS1xd25vdzhqcGNpdW82RjlZMTlZMm5OLWRJRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzYvYTViZmI2LTZhMTAtNGZiYy1hZjQ4LThiZmJkZDQ1Y2I2
Mi8xLzEydTBqcFBvb0FXTVhIS29Hb2VaUlZNSDdsWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAd0GCCsGAQUFBwEHAQH/BIIBzDCCAcgwggHEBAIAATCC
AbwDBAACOzEDBAAf3vgDBAAtD+4DBAAtXVADBAAthCYDBAEthIAwDAMEAC2K1QME
AC2K1gMEAS2LNAMEAC2LNwMEAS2LfgMEAC2MQAMEAC2OJwMEAS2SGAMEAC2SGwME
Ai2TDAMEAC2VgQMEAS2YdAMEAC2fVAMEAC2fVwMEAD5EVgMEAFvORAMEAFvseQME
AF6evQMEBJ0WADAMAwQCnRYUAwQCnRYoMAwDBASdFjADBACdFjIDBACdFjYwDAME
AJ0WOQMEAp0WQAMEAJ0WRgMEAJ0WTTAMAwQAnRZPAwQAnRZQMAwDBAGdFlIDBACd
FlQwDAMEAZ0WVgMEAZ0WWDAMAwQAnRZbAwQBnRZcMAwDBACdFl8DBAGdFmADBACd
FmMwDAMEA50WaAMEAJ0WbDAMAwQBnRZuAwQBnRZwMAwDBACdFnMDBACdFnQDBACd
FnYDBAGdFngDBACdFnsDBACwOCUDBAGw3jgDBACw3jsDBACy1I8DBAC5Lq8DBAC5
XNMDBAC5oU8DBADBHwUDBADBIUIDBADBOqoDBADByX4DBAHCIO4DBADCOLQDBADD
QG4DBADDYJIDBADUEmcwDQYJKoZIhvcNAQELBQADggEBAC/ppms3VtKbkk1+aB2C
fuwMOnKL8+Vs5q5/OJ8rVX9teVHKiUQIkydMIaY0VZfgyVitZqq+GhUFDFe0wj/w
KlpQ9F+omjrgMNIqwYz7S8nz19z8Cvodm/tRv85dNtHf0zSjvbCPU5oXAnOVwo72
dW0v/d0U4n0HsiVOhPWFnS3RD9OqYOq27Q+HTtRmqw6pnV9rntp9rBE5U/puDlm1
Tv6G8vcR8spXEGZCIeuIIjqdMIs/7O4IGtZShY8lJYn04pufcABwxhnGAIadQhzd
LG7iut5fKVy4zUnlN2YdjZD40CBa5kpcnyuzhTx4eJ0ZlYI49D0rehMR0ur/+KM0
lX8=
-----END CERTIFICATE-----
Generated at Tue Sep 1 21:38:51 2026 by rpki-client