Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/m4QGvGtYwFrCrofjWeoINpW1bro.roa
File: m4QGvGtYwFrCrofjWeoINpW1bro.roa (raw, json)
Hash identifier: ciAyXPuF4bep8rEIGGaYUXPZQGY/DoWF5glyhnkSOYg=
Subject key identifier: 9B:84:06:BC:6B:58:C0:5A:C2:AE:87:E3:59:EA:08:36:95:B5:6E:BA
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A0AFB96D0EC3DBA4909194D4D0A9B9CE07
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/m4QGvGtYwFrCrofjWeoINpW1bro.roa
Signing time: Thu 17 Sep 2026 14:15:59 +0000
ROA not before: Thu 17 Sep 2026 14:15:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 5.1.46.0/24 maxlen: 24
5.57.210.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
31.222.237.0/24 maxlen: 24
31.222.244.0/24 maxlen: 24
31.222.245.0/24 maxlen: 24
31.222.246.0/24 maxlen: 24
37.140.255.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.129.129.0/24 maxlen: 24
45.129.130.0/24 maxlen: 24
45.129.131.0/24 maxlen: 24
45.132.51.0/24 maxlen: 24
45.135.34.0/24 maxlen: 24
45.138.4.0/24 maxlen: 24
45.138.5.0/24 maxlen: 24
45.138.6.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.140.66.0/24 maxlen: 24
45.140.67.0/24 maxlen: 24
45.142.37.0/24 maxlen: 24
45.144.0.0/24 maxlen: 24
45.146.26.0/24 maxlen: 24
45.159.85.0/24 maxlen: 24
62.3.1.0/24 maxlen: 24
62.3.2.0/24 maxlen: 24
62.3.3.0/24 maxlen: 24
62.3.4.0/24 maxlen: 24
62.3.23.0/24 maxlen: 24
62.68.85.0/24 maxlen: 24
62.106.69.0/24 maxlen: 24
62.204.34.0/24 maxlen: 24
62.204.38.0/24 maxlen: 24
77.246.244.0/24 maxlen: 24
80.68.148.0/24 maxlen: 24
80.68.150.0/24 maxlen: 24
80.73.242.0/24 maxlen: 24
80.73.244.0/24 maxlen: 24
80.91.211.0/24 maxlen: 24
80.91.212.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
84.246.110.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
89.248.68.0/24 maxlen: 24
91.213.85.0/24 maxlen: 24
91.242.226.0/24 maxlen: 24
91.242.237.0/24 maxlen: 24
91.242.239.0/24 maxlen: 24
91.247.78.0/24 maxlen: 24
92.119.192.0/24 maxlen: 24
93.93.206.0/24 maxlen: 24
93.157.111.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
93.190.121.0/24 maxlen: 24
94.103.179.0/24 maxlen: 24
94.103.190.0/24 maxlen: 24
94.124.75.0/24 maxlen: 24
94.124.77.0/24 maxlen: 24
94.143.224.0/24 maxlen: 24
146.19.10.0/24 maxlen: 24
146.19.15.0/24 maxlen: 24
146.19.25.0/24 maxlen: 24
146.19.31.0/24 maxlen: 24
146.19.47.0/24 maxlen: 24
146.19.61.0/24 maxlen: 24
146.19.64.0/24 maxlen: 24
146.19.65.0/24 maxlen: 24
146.19.68.0/24 maxlen: 24
146.19.72.0/24 maxlen: 24
146.19.76.0/24 maxlen: 24
146.19.96.0/24 maxlen: 24
146.19.107.0/24 maxlen: 24
146.19.109.0/24 maxlen: 24
146.19.126.0/24 maxlen: 24
146.19.136.0/24 maxlen: 24
176.100.47.0/24 maxlen: 24
176.116.8.0/24 maxlen: 24
176.116.24.0/24 maxlen: 24
176.116.25.0/24 maxlen: 24
176.116.28.0/24 maxlen: 24
176.222.58.0/24 maxlen: 24
178.212.136.0/24 maxlen: 24
178.212.138.0/24 maxlen: 24
185.81.71.0/24 maxlen: 24
185.140.174.0/24 maxlen: 24
185.187.16.0/24 maxlen: 24
185.187.19.0/24 maxlen: 24
185.207.213.0/24 maxlen: 24
185.222.41.0/24 maxlen: 24
193.32.164.0/24 maxlen: 24
193.32.165.0/24 maxlen: 24
193.32.166.0/24 maxlen: 24
193.32.167.0/24 maxlen: 24
193.36.231.0/24 maxlen: 24
193.53.169.0/24 maxlen: 24
193.58.176.0/24 maxlen: 24
193.58.177.0/24 maxlen: 24
193.160.216.0/24 maxlen: 24
193.160.217.0/24 maxlen: 24
193.160.218.0/24 maxlen: 24
193.163.16.0/24 maxlen: 24
193.163.17.0/24 maxlen: 24
193.163.18.0/24 maxlen: 24
193.201.127.0/24 maxlen: 24
194.26.136.0/24 maxlen: 24
194.26.233.0/24 maxlen: 24
194.104.142.0/24 maxlen: 24
194.104.143.0/24 maxlen: 24
194.104.227.0/24 maxlen: 24
194.104.229.0/24 maxlen: 24
194.104.237.0/24 maxlen: 24
194.104.238.0/24 maxlen: 24
195.64.111.0/24 maxlen: 24
195.96.149.0/24 maxlen: 24
195.191.99.0/24 maxlen: 24
195.225.99.0/24 maxlen: 24
212.52.27.0/24 maxlen: 24
212.52.30.0/24 maxlen: 24
212.52.31.0/24 maxlen: 24
213.109.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:b9:6d:0e:c3:db:a4:90:91:94:d4:d0:a9:b9:ce:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Sep 17 14:15:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b8406bc6b58c05ac2ae87e359ea083695b56eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:21:d1:9e:7f:2c:99:30:8a:a1:a9:99:80:
52:14:5e:5d:d0:c8:cb:40:65:0e:c1:23:7a:96:9f:
ec:33:6a:12:53:27:de:4e:59:90:ba:f1:1c:5d:59:
ec:d5:90:b9:43:cf:0f:15:be:23:5e:3f:28:c9:2e:
ba:bb:2d:8e:77:56:ff:03:2c:7f:bb:37:7d:a7:b7:
06:97:f6:97:b7:0f:96:f5:0f:83:21:04:e1:cc:7b:
de:8d:23:a2:5b:13:b9:72:51:85:dd:3c:43:d7:cd:
3f:d8:b0:72:48:d5:a4:df:18:9d:61:5a:bf:66:43:
66:23:51:71:03:c3:ff:ec:e0:b9:7d:4f:d1:7c:2a:
53:5c:a3:08:eb:63:95:ea:09:23:b9:1e:91:08:12:
0d:56:ee:e6:93:96:f0:db:08:9a:bd:18:1a:a5:50:
e4:36:83:d7:93:8a:bd:9c:ca:3b:4a:fc:fa:ca:66:
05:d2:8a:54:c0:60:cc:ae:12:2c:4f:d2:09:b0:2a:
4e:95:46:5e:4f:f4:53:87:a9:fa:d1:89:da:c1:8f:
74:2a:71:6f:d6:ce:3c:d2:6b:a6:86:25:23:47:ae:
21:b2:69:ca:e3:e7:d5:10:04:ee:dd:c4:86:8c:f7:
6d:61:ad:11:1a:14:dd:3b:3e:47:d5:d3:17:e5:d3:
f1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:84:06:BC:6B:58:C0:5A:C2:AE:87:E3:59:EA:08:36:95:B5:6E:BA
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/m4QGvGtYwFrCrofjWeoINpW1bro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.46.0/24
5.57.210.0/24
31.216.60.0/24
31.222.237.0/24
31.222.244.0-31.222.246.255
37.140.255.0/24
45.129.1.0/24
45.129.129.0-45.129.131.255
45.132.51.0/24
45.135.34.0/24
45.138.4.0-45.138.6.255
45.138.156.0/24
45.140.66.0/23
45.142.37.0/24
45.144.0.0/24
45.146.26.0/24
45.159.85.0/24
62.3.1.0-62.3.4.255
62.3.23.0/24
62.68.85.0/24
62.106.69.0/24
62.204.34.0/24
62.204.38.0/24
77.246.244.0/24
80.68.148.0/24
80.68.150.0/24
80.73.242.0/24
80.73.244.0/24
80.91.211.0-80.91.212.255
84.246.81.0/24
84.246.110.0/24
89.107.12.0/24
89.248.68.0/24
91.213.85.0/24
91.242.226.0/24
91.242.237.0/24
91.242.239.0/24
91.247.78.0/24
92.119.192.0/24
93.93.206.0/24
93.157.111.0/24
93.190.120.0/23
94.103.179.0/24
94.103.190.0/24
94.124.75.0/24
94.124.77.0/24
94.143.224.0/24
146.19.10.0/24
146.19.15.0/24
146.19.25.0/24
146.19.31.0/24
146.19.47.0/24
146.19.61.0/24
146.19.64.0/23
146.19.68.0/24
146.19.72.0/24
146.19.76.0/24
146.19.96.0/24
146.19.107.0/24
146.19.109.0/24
146.19.126.0/24
146.19.136.0/24
176.100.47.0/24
176.116.8.0/24
176.116.24.0/23
176.116.28.0/24
176.222.58.0/24
178.212.136.0/24
178.212.138.0/24
185.81.71.0/24
185.140.174.0/24
185.187.16.0/24
185.187.19.0/24
185.207.213.0/24
185.222.41.0/24
193.32.164.0/22
193.36.231.0/24
193.53.169.0/24
193.58.176.0/23
193.160.216.0-193.160.218.255
193.163.16.0-193.163.18.255
193.201.127.0/24
194.26.136.0/24
194.26.233.0/24
194.104.142.0/23
194.104.227.0/24
194.104.229.0/24
194.104.237.0-194.104.238.255
195.64.111.0/24
195.96.149.0/24
195.191.99.0/24
195.225.99.0/24
212.52.27.0/24
212.52.30.0/23
213.109.196.0/24
Signature Algorithm: sha256WithRSAEncryption
19:57:52:70:c0:4b:33:79:87:08:27:c4:8b:d2:60:c5:15:dd:
2a:5d:81:06:ea:25:17:95:42:10:66:ab:cb:24:0b:c3:ef:8d:
71:b8:f4:24:a5:05:e6:e8:d2:07:17:35:74:d9:48:68:e5:05:
ff:d4:20:af:90:37:4e:68:a2:a4:ef:16:24:31:32:c7:d7:55:
c7:9d:82:cd:3a:08:f3:a6:40:68:63:ef:68:8f:70:b6:f9:5c:
36:7e:77:b9:94:9b:76:1b:ce:7d:a1:54:48:27:dc:be:e4:32:
90:d9:cb:79:45:6b:2f:cc:02:34:b6:a1:7e:79:0e:b7:0f:fb:
12:b8:48:3f:23:ca:8c:a5:d5:1a:07:df:39:22:4d:e3:6a:aa:
6e:13:7c:0b:c2:a1:79:3f:f7:81:c6:ed:29:55:f1:6b:4f:96:
51:5d:9b:59:9c:b9:85:61:16:20:29:a4:f8:12:3d:ee:96:4c:
4b:63:fe:e7:b3:a0:a8:d3:98:77:e2:78:f3:1f:3c:df:d9:69:
a5:45:29:f5:6d:7b:5a:f1:81:64:25:75:07:0f:8b:3f:2c:05:
ed:fd:af:f9:08:73:85:11:4f:dc:c7:46:02:7b:48:db:78:1f:
6c:c0:e9:2f:73:79:07:60:32:fe:f5:52:9d:d0:c9:66:12:1f:
e6:0a:39:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 08:17:01 2026 by rpki-client