Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/oht6JqgbBzb7_YS490HWtEPKRH0.roa
File: oht6JqgbBzb7_YS490HWtEPKRH0.roa (raw, json)
Hash identifier: oUTcQCAsRX4AQG6jLgHg8ryTVRW2e7zLCapr+RbKvr4=
Subject key identifier: A2:1B:7A:26:A8:1B:07:36:FB:FD:84:B8:F7:41:D6:B4:43:CA:44:7D
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019FB2BFB42903ECF04453D26B2B669EB2DD
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/oht6JqgbBzb7_YS490HWtEPKRH0.roa
Signing time: Thu 30 Jul 2026 11:18:55 +0000
ROA not before: Thu 30 Jul 2026 11:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 5.1.46.0/24 maxlen: 24
5.57.210.0/24 maxlen: 24
31.216.60.0/24 maxlen: 24
31.222.237.0/24 maxlen: 24
31.222.244.0/24 maxlen: 24
31.222.245.0/24 maxlen: 24
31.222.246.0/24 maxlen: 24
37.140.255.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.129.129.0/24 maxlen: 24
45.129.130.0/24 maxlen: 24
45.129.131.0/24 maxlen: 24
45.132.51.0/24 maxlen: 24
45.135.34.0/24 maxlen: 24
45.138.4.0/24 maxlen: 24
45.138.5.0/24 maxlen: 24
45.138.6.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.140.66.0/24 maxlen: 24
45.140.67.0/24 maxlen: 24
45.142.37.0/24 maxlen: 24
45.144.0.0/24 maxlen: 24
45.146.26.0/24 maxlen: 24
45.159.85.0/24 maxlen: 24
62.3.1.0/24 maxlen: 24
62.3.2.0/24 maxlen: 24
62.3.3.0/24 maxlen: 24
62.3.4.0/24 maxlen: 24
62.3.23.0/24 maxlen: 24
62.68.85.0/24 maxlen: 24
62.106.69.0/24 maxlen: 24
62.204.34.0/24 maxlen: 24
62.204.38.0/24 maxlen: 24
77.246.244.0/24 maxlen: 24
80.68.148.0/24 maxlen: 24
80.68.150.0/24 maxlen: 24
80.73.242.0/24 maxlen: 24
80.73.244.0/24 maxlen: 24
80.91.211.0/24 maxlen: 24
80.91.212.0/24 maxlen: 24
84.246.81.0/24 maxlen: 24
84.246.110.0/24 maxlen: 24
89.107.12.0/24 maxlen: 24
89.248.68.0/24 maxlen: 24
91.213.85.0/24 maxlen: 24
91.242.226.0/24 maxlen: 24
91.242.237.0/24 maxlen: 24
91.242.239.0/24 maxlen: 24
91.247.78.0/24 maxlen: 24
92.119.192.0/24 maxlen: 24
93.93.206.0/24 maxlen: 24
93.157.111.0/24 maxlen: 24
93.190.120.0/24 maxlen: 24
93.190.121.0/24 maxlen: 24
94.103.179.0/24 maxlen: 24
94.103.190.0/24 maxlen: 24
94.124.75.0/24 maxlen: 24
94.124.77.0/24 maxlen: 24
94.143.224.0/24 maxlen: 24
146.19.10.0/24 maxlen: 24
146.19.15.0/24 maxlen: 24
146.19.25.0/24 maxlen: 24
146.19.31.0/24 maxlen: 24
146.19.47.0/24 maxlen: 24
146.19.61.0/24 maxlen: 24
146.19.64.0/24 maxlen: 24
146.19.65.0/24 maxlen: 24
146.19.68.0/24 maxlen: 24
146.19.72.0/24 maxlen: 24
146.19.76.0/24 maxlen: 24
146.19.96.0/24 maxlen: 24
146.19.107.0/24 maxlen: 24
146.19.109.0/24 maxlen: 24
146.19.126.0/24 maxlen: 24
146.19.136.0/24 maxlen: 24
176.100.47.0/24 maxlen: 24
176.116.8.0/24 maxlen: 24
176.116.24.0/24 maxlen: 24
176.116.25.0/24 maxlen: 24
176.116.28.0/24 maxlen: 24
176.222.58.0/24 maxlen: 24
178.212.136.0/24 maxlen: 24
178.212.138.0/24 maxlen: 24
185.81.71.0/24 maxlen: 24
185.140.174.0/24 maxlen: 24
185.187.16.0/24 maxlen: 24
185.187.19.0/24 maxlen: 24
185.207.213.0/24 maxlen: 24
185.222.41.0/24 maxlen: 24
193.32.164.0/24 maxlen: 24
193.32.165.0/24 maxlen: 24
193.32.166.0/24 maxlen: 24
193.32.167.0/24 maxlen: 24
193.36.231.0/24 maxlen: 24
193.53.169.0/24 maxlen: 24
193.58.176.0/24 maxlen: 24
193.58.177.0/24 maxlen: 24
193.160.216.0/24 maxlen: 24
193.160.217.0/24 maxlen: 24
193.160.218.0/24 maxlen: 24
193.163.16.0/24 maxlen: 24
193.163.17.0/24 maxlen: 24
193.163.18.0/24 maxlen: 24
193.163.20.0/24 maxlen: 24
193.201.127.0/24 maxlen: 24
194.26.136.0/24 maxlen: 24
194.26.233.0/24 maxlen: 24
194.104.142.0/24 maxlen: 24
194.104.143.0/24 maxlen: 24
194.104.227.0/24 maxlen: 24
194.104.229.0/24 maxlen: 24
194.104.237.0/24 maxlen: 24
194.104.238.0/24 maxlen: 24
195.64.111.0/24 maxlen: 24
195.96.149.0/24 maxlen: 24
195.191.99.0/24 maxlen: 24
195.225.99.0/24 maxlen: 24
212.52.27.0/24 maxlen: 24
212.52.30.0/24 maxlen: 24
212.52.31.0/24 maxlen: 24
213.109.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:bf:b4:29:03:ec:f0:44:53:d2:6b:2b:66:9e:b2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jul 30 11:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a21b7a26a81b0736fbfd84b8f741d6b443ca447d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:98:b9:8d:e4:e9:5e:dc:39:3c:50:ad:1f:95:
e6:b8:92:5f:73:38:e7:19:96:09:30:9d:28:15:1c:
be:c2:52:9c:c1:ae:fd:57:bd:4b:c6:e8:7d:74:dd:
4b:1d:1b:f9:04:86:88:a0:7e:e0:29:d4:75:02:b7:
29:54:52:1a:cb:6a:ea:5a:6f:a5:73:bf:46:16:1e:
6c:ed:0a:10:c7:0a:3f:0b:f0:7b:ae:64:c5:b1:d8:
a5:ab:1d:f2:0d:f0:1b:64:da:43:e4:58:1c:60:ff:
0a:1d:58:44:af:a4:e7:8c:8e:54:70:f1:5e:18:58:
47:43:9e:28:f9:48:e2:23:40:7d:a7:2b:ec:4d:68:
dd:29:9f:0c:b2:29:85:77:08:c0:b7:82:5b:4a:b0:
c1:82:54:18:35:ed:a4:a9:59:73:5f:d1:f5:6e:58:
6f:df:27:c0:bd:d3:7a:e0:ca:cd:cb:eb:64:b5:78:
22:7e:af:21:e3:b8:d3:cb:19:59:4c:dd:39:4a:e9:
23:a7:95:6f:a6:cb:ea:80:09:f9:4e:90:c6:3d:c7:
b1:bd:a3:21:ce:39:8e:2e:79:24:50:9b:07:25:b7:
9d:e8:dd:dc:80:57:c5:fc:60:6a:84:53:4d:64:0e:
32:82:2d:3b:d9:d6:e8:c3:c7:55:25:15:a5:b9:05:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1B:7A:26:A8:1B:07:36:FB:FD:84:B8:F7:41:D6:B4:43:CA:44:7D
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/oht6JqgbBzb7_YS490HWtEPKRH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.46.0/24
5.57.210.0/24
31.216.60.0/24
31.222.237.0/24
31.222.244.0-31.222.246.255
37.140.255.0/24
45.129.1.0/24
45.129.129.0-45.129.131.255
45.132.51.0/24
45.135.34.0/24
45.138.4.0-45.138.6.255
45.138.156.0/24
45.140.66.0/23
45.142.37.0/24
45.144.0.0/24
45.146.26.0/24
45.159.85.0/24
62.3.1.0-62.3.4.255
62.3.23.0/24
62.68.85.0/24
62.106.69.0/24
62.204.34.0/24
62.204.38.0/24
77.246.244.0/24
80.68.148.0/24
80.68.150.0/24
80.73.242.0/24
80.73.244.0/24
80.91.211.0-80.91.212.255
84.246.81.0/24
84.246.110.0/24
89.107.12.0/24
89.248.68.0/24
91.213.85.0/24
91.242.226.0/24
91.242.237.0/24
91.242.239.0/24
91.247.78.0/24
92.119.192.0/24
93.93.206.0/24
93.157.111.0/24
93.190.120.0/23
94.103.179.0/24
94.103.190.0/24
94.124.75.0/24
94.124.77.0/24
94.143.224.0/24
146.19.10.0/24
146.19.15.0/24
146.19.25.0/24
146.19.31.0/24
146.19.47.0/24
146.19.61.0/24
146.19.64.0/23
146.19.68.0/24
146.19.72.0/24
146.19.76.0/24
146.19.96.0/24
146.19.107.0/24
146.19.109.0/24
146.19.126.0/24
146.19.136.0/24
176.100.47.0/24
176.116.8.0/24
176.116.24.0/23
176.116.28.0/24
176.222.58.0/24
178.212.136.0/24
178.212.138.0/24
185.81.71.0/24
185.140.174.0/24
185.187.16.0/24
185.187.19.0/24
185.207.213.0/24
185.222.41.0/24
193.32.164.0/22
193.36.231.0/24
193.53.169.0/24
193.58.176.0/23
193.160.216.0-193.160.218.255
193.163.16.0-193.163.18.255
193.163.20.0/24
193.201.127.0/24
194.26.136.0/24
194.26.233.0/24
194.104.142.0/23
194.104.227.0/24
194.104.229.0/24
194.104.237.0-194.104.238.255
195.64.111.0/24
195.96.149.0/24
195.191.99.0/24
195.225.99.0/24
212.52.27.0/24
212.52.30.0/23
213.109.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:01:2f:36:fc:3b:fe:6b:46:69:95:7a:a8:cc:50:9f:64:f1:
dd:7c:5d:c8:60:89:b4:65:33:e0:39:1c:40:9c:ed:c3:13:1a:
4e:fe:00:11:53:7c:cb:47:dc:aa:b4:f6:2c:27:bd:a2:62:8d:
7f:41:fe:90:a4:43:81:1e:b9:42:f5:8b:89:0a:58:89:b0:d8:
c3:cf:fc:07:76:0a:52:3b:4e:6c:58:93:2d:c9:03:50:10:b5:
b6:bc:5e:45:aa:b3:cb:ec:b8:3e:d5:30:72:03:e0:6f:ec:4a:
ae:15:6d:6e:df:c6:3f:54:ae:25:75:05:91:88:0e:0c:de:43:
8c:3f:f1:b0:fb:3f:23:51:0d:4f:ec:00:03:21:f2:11:73:9a:
b9:0c:86:b7:ab:24:3f:7f:06:63:74:a2:4f:88:0a:ab:71:4a:
fe:fa:90:98:81:98:43:24:1f:e8:8f:2b:fc:f1:1f:07:4a:da:
60:a8:6d:0f:0f:eb:e0:d9:5d:33:20:29:61:43:a8:ae:8f:29:
22:06:85:56:e7:bd:a6:de:b4:4c:65:8b:9c:d7:d5:18:b2:14:
3f:27:99:67:e8:25:54:88:b8:19:3a:32:83:69:cd:a0:fd:a0:
09:90:3a:f2:12:59:bc:16:16:4d:66:a0:1b:69:39:91:95:94:
8f:8f:27:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 13:33:53 2026 by rpki-client