Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/Ca3Fy4GscDg7dIiMkUKA3mbNBjM.roa
File: Ca3Fy4GscDg7dIiMkUKA3mbNBjM.roa (raw, json)
Hash identifier: uNq+7B3XzExmQd3evBe4YR63zjM+xIdfVY4B+HOQ7WU=
Subject key identifier: 09:AD:C5:CB:81:AC:70:38:3B:74:88:8C:91:42:80:DE:66:CD:06:33
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 01A018E924F5AAA8156517CEF00066F8655C
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/Ca3Fy4GscDg7dIiMkUKA3mbNBjM.roa
Signing time: Wed 19 Aug 2026 07:25:27 +0000
ROA not before: Wed 19 Aug 2026 07:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48282
IP address blocks: 45.150.36.0/24 maxlen: 24
45.150.37.0/24 maxlen: 24
45.150.38.0/24 maxlen: 24
45.150.39.0/24 maxlen: 24
62.113.112.0/24 maxlen: 24
62.113.113.0/24 maxlen: 24
62.113.114.0/24 maxlen: 24
62.113.115.0/24 maxlen: 24
62.113.116.0/24 maxlen: 24
62.113.117.0/24 maxlen: 24
62.113.118.0/24 maxlen: 24
62.113.119.0/24 maxlen: 24
83.217.212.0/24 maxlen: 24
83.217.213.0/24 maxlen: 24
83.217.214.0/24 maxlen: 24
83.217.215.0/24 maxlen: 24
84.54.44.0/24 maxlen: 24
84.54.47.0/24 maxlen: 24
85.198.108.0/24 maxlen: 24
85.198.109.0/24 maxlen: 24
85.198.110.0/24 maxlen: 24
85.198.111.0/24 maxlen: 24
88.210.34.0/24 maxlen: 24
88.210.35.0/24 maxlen: 24
88.210.52.0/24 maxlen: 24
88.210.53.0/24 maxlen: 24
88.210.54.0/24 maxlen: 24
88.210.55.0/24 maxlen: 24
88.218.60.0/24 maxlen: 24
88.218.61.0/24 maxlen: 24
88.218.62.0/24 maxlen: 24
88.218.63.0/24 maxlen: 24
91.142.72.0/24 maxlen: 24
91.142.73.0/24 maxlen: 24
91.142.74.0/24 maxlen: 24
91.142.75.0/24 maxlen: 24
91.184.244.0/24 maxlen: 24
91.184.245.0/24 maxlen: 24
91.184.246.0/24 maxlen: 24
91.184.247.0/24 maxlen: 24
91.212.150.0/24 maxlen: 24
93.183.92.0/24 maxlen: 24
93.183.93.0/24 maxlen: 24
93.183.94.0/24 maxlen: 24
93.183.95.0/24 maxlen: 24
94.103.83.0/24 maxlen: 24
94.103.84.0/24 maxlen: 24
94.103.85.0/24 maxlen: 24
94.103.86.0/24 maxlen: 24
94.103.87.0/24 maxlen: 24
94.103.88.0/24 maxlen: 24
94.103.89.0/24 maxlen: 24
94.103.90.0/24 maxlen: 24
94.103.91.0/24 maxlen: 24
94.103.92.0/24 maxlen: 24
94.103.93.0/24 maxlen: 24
95.142.33.0/24 maxlen: 24
95.142.34.0/24 maxlen: 24
95.142.45.0/24 maxlen: 24
95.142.46.0/24 maxlen: 24
95.142.47.0/24 maxlen: 24
109.172.84.0/24 maxlen: 24
109.172.85.0/24 maxlen: 24
109.172.86.0/24 maxlen: 24
109.172.87.0/24 maxlen: 24
109.172.88.0/24 maxlen: 24
109.172.89.0/24 maxlen: 24
109.172.90.0/24 maxlen: 24
109.172.91.0/24 maxlen: 24
138.16.160.0/24 maxlen: 24
138.16.161.0/24 maxlen: 24
138.16.162.0/24 maxlen: 24
138.16.163.0/24 maxlen: 24
138.16.164.0/24 maxlen: 24
138.16.165.0/24 maxlen: 24
138.16.166.0/24 maxlen: 24
138.16.167.0/24 maxlen: 24
138.16.168.0/24 maxlen: 24
138.16.169.0/24 maxlen: 24
138.16.170.0/24 maxlen: 24
138.16.171.0/24 maxlen: 24
138.16.172.0/24 maxlen: 24
138.16.173.0/24 maxlen: 24
138.16.174.0/24 maxlen: 24
138.16.175.0/24 maxlen: 24
138.16.176.0/24 maxlen: 24
138.16.177.0/24 maxlen: 24
138.16.178.0/24 maxlen: 24
138.16.179.0/24 maxlen: 24
138.16.180.0/24 maxlen: 24
138.16.181.0/24 maxlen: 24
138.16.182.0/24 maxlen: 24
138.16.183.0/24 maxlen: 24
138.16.184.0/24 maxlen: 24
138.16.185.0/24 maxlen: 24
138.16.186.0/24 maxlen: 24
138.16.187.0/24 maxlen: 24
138.16.188.0/24 maxlen: 24
138.16.189.0/24 maxlen: 24
138.16.190.0/24 maxlen: 24
138.16.191.0/24 maxlen: 24
178.20.40.0/24 maxlen: 24
178.20.41.0/24 maxlen: 24
178.20.42.0/24 maxlen: 24
178.20.43.0/24 maxlen: 24
178.20.44.0/24 maxlen: 24
178.20.45.0/24 maxlen: 24
178.20.46.0/24 maxlen: 24
178.20.47.0/24 maxlen: 24
178.130.131.0/24 maxlen: 24
178.217.98.0/24 maxlen: 24
178.217.99.0/24 maxlen: 24
185.209.28.0/24 maxlen: 24
185.209.29.0/24 maxlen: 24
185.209.30.0/24 maxlen: 24
185.209.31.0/24 maxlen: 24
185.231.152.0/24 maxlen: 24
185.231.153.0/24 maxlen: 24
185.231.154.0/24 maxlen: 24
185.231.155.0/24 maxlen: 24
192.144.56.0/24 maxlen: 24
192.144.57.0/24 maxlen: 24
192.144.58.0/24 maxlen: 24
192.144.59.0/24 maxlen: 24
193.124.64.0/24 maxlen: 24
193.124.65.0/24 maxlen: 24
193.124.66.0/24 maxlen: 24
193.124.67.0/24 maxlen: 24
193.124.128.0/24 maxlen: 24
193.124.129.0/24 maxlen: 24
193.124.130.0/24 maxlen: 24
193.124.131.0/24 maxlen: 24
193.178.170.0/24 maxlen: 24
195.2.66.0/24 maxlen: 24
195.2.67.0/24 maxlen: 24
195.2.70.0/24 maxlen: 24
195.2.71.0/24 maxlen: 24
195.2.73.0/24 maxlen: 24
195.2.74.0/24 maxlen: 24
195.2.75.0/24 maxlen: 24
195.2.76.0/24 maxlen: 24
195.2.78.0/24 maxlen: 24
195.2.79.0/24 maxlen: 24
195.2.80.0/24 maxlen: 24
195.2.81.0/24 maxlen: 24
195.2.84.0/24 maxlen: 24
195.2.85.0/24 maxlen: 24
195.133.56.0/24 maxlen: 24
195.133.57.0/24 maxlen: 24
195.133.60.0/24 maxlen: 24
195.133.61.0/24 maxlen: 24
212.118.45.0/24 maxlen: 24
212.118.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:e9:24:f5:aa:a8:15:65:17:ce:f0:00:66:f8:65:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Aug 19 07:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09adc5cb81ac70383b74888c914280de66cd0633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:23:30:bc:65:46:95:be:2e:ca:b0:7b:e3:
de:fe:c0:08:cc:75:dd:e8:f7:e0:bc:95:f8:4f:4c:
d2:53:4b:e4:17:65:3d:99:c4:7c:d4:f5:33:92:57:
31:25:3d:53:3a:23:d3:5f:79:d1:5a:2f:56:11:84:
18:4a:5b:68:27:d3:e2:b0:a4:cb:3c:17:99:19:87:
2e:34:2c:9e:50:c7:b4:37:a7:5d:b5:5a:ff:ca:ea:
b1:c1:66:e1:d9:61:0e:63:3b:81:44:0b:02:7a:1e:
ce:8c:bd:f4:ef:23:77:dd:8c:33:83:54:b0:2b:55:
20:f3:b2:6e:7a:70:78:59:51:0c:63:7c:f9:9f:44:
1b:a3:74:8f:a2:de:e4:3a:48:01:5f:98:a4:6d:ed:
7d:83:43:52:04:6e:fe:19:53:47:01:a9:a2:dd:58:
a8:38:e0:28:aa:ab:00:1a:6c:bb:df:22:f6:04:a7:
07:62:ff:36:87:ae:66:90:85:1d:e5:56:33:e3:e4:
12:98:fd:6e:6a:43:c6:33:ed:ec:da:0f:34:14:1f:
d8:5d:b2:d9:9b:c0:c7:22:41:be:14:43:43:17:19:
ac:ed:79:7d:6b:c3:2f:7c:19:e7:da:a4:23:1b:54:
40:37:88:38:b5:20:2b:b5:cd:06:2e:30:13:73:a5:
af:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AD:C5:CB:81:AC:70:38:3B:74:88:8C:91:42:80:DE:66:CD:06:33
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/Ca3Fy4GscDg7dIiMkUKA3mbNBjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.36.0/22
62.113.112.0/21
83.217.212.0/22
84.54.44.0/24
84.54.47.0/24
85.198.108.0/22
88.210.34.0/23
88.210.52.0/22
88.218.60.0/22
91.142.72.0/22
91.184.244.0/22
91.212.150.0/24
93.183.92.0/22
94.103.83.0-94.103.93.255
95.142.33.0-95.142.34.255
95.142.45.0-95.142.47.255
109.172.84.0-109.172.91.255
138.16.160.0/19
178.20.40.0/21
178.130.131.0/24
178.217.98.0/23
185.209.28.0/22
185.231.152.0/22
192.144.56.0/22
193.124.64.0/22
193.124.128.0/22
193.178.170.0/24
195.2.66.0/23
195.2.70.0/23
195.2.73.0-195.2.76.255
195.2.78.0-195.2.81.255
195.2.84.0/23
195.133.56.0/23
195.133.60.0/23
212.118.45.0/24
212.118.56.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f3:8a:ae:0b:60:10:16:d1:51:2c:27:72:c6:ed:e4:83:c0:
5d:01:19:00:7c:df:88:a2:a5:08:58:36:9f:ad:5b:18:f0:32:
23:f0:11:68:8c:0a:2a:28:2f:b0:09:81:0e:43:4b:d2:5e:92:
a1:3e:62:24:2d:a2:25:38:a8:51:a9:84:a9:3c:c0:6c:49:72:
9a:84:f8:ad:08:ff:6b:c7:ee:3d:65:4e:35:5d:44:3e:8f:c3:
87:3c:19:17:ff:d5:af:4a:ae:5e:5e:a3:d5:58:13:58:2c:14:
7b:3f:15:1d:6d:21:bb:e7:92:a8:4b:f8:a4:8c:fb:3e:cf:ed:
c7:0b:0a:c4:97:9f:93:a5:4f:8b:41:93:a5:36:be:84:eb:dc:
f4:05:5b:a8:72:63:c9:06:a0:8b:dd:f9:eb:76:6f:6d:0e:a4:
4f:9e:8b:b0:58:53:e1:a3:9c:93:6e:88:68:b8:aa:48:a0:cd:
9d:8a:76:20:af:c4:a5:cf:9b:0f:1c:1f:cb:c6:da:8f:b3:b9:
10:1c:56:ab:0f:df:0e:cc:89:30:85:f4:cc:90:91:d7:9f:96:
03:2d:5e:4a:1d:80:ff:36:18:42:3e:30:2f:29:a9:88:fc:07:
45:c2:54:76:cf:de:d7:01:d7:d2:c7:22:ca:a6:d3:ec:a2:c9:
bd:4f:8a:aa
-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgISAaAY6ST1qqgVZRfO8ABm+GVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MDMyNTFkYjY5NjkzMzYyYTkyN2UyYjEzMDQ2Nzk0NWM1
NGYwZmMwHhcNMjYwODE5MDcyNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWFkYzVjYjgxYWM3MDM4M2I3NDg4OGM5MTQyODBkZTY2Y2QwNjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGIjMLxlRpW+Lsqwe+Pe/sAIzHXd
6PfgvJX4T0zSU0vkF2U9mcR81PUzklcxJT1TOiPTX3nRWi9WEYQYSltoJ9PisKTL
PBeZGYcuNCyeUMe0N6ddtVr/yuqxwWbh2WEOYzuBRAsCeh7OjL307yN33Ywzg1Sw
K1Ug87JuenB4WVEMY3z5n0Qbo3SPot7kOkgBX5ikbe19g0NSBG7+GVNHAami3Vio
OOAoqqsAGmy73yL2BKcHYv82h65mkIUd5VYz4+QSmP1uakPGM+3s2g80FB/YXbLZ
m8DHIkG+FENDFxms7Xl9a8MvfBnn2qQjG1RAN4g4tSArtc0GLjATc6WvSwIDAQAB
o4IDFTCCAxEwHQYDVR0OBBYEFAmtxcuBrHA4O3SIjJFCgN5mzQYzMB8GA1UdIwQY
MBaAFFUDJR22lpM2KpJ+KxMEZ5RcVPD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2It
M2NiYWQ1YjkwNGI1LzEvQ2EzRnk0R3NjRGc3ZElpTWtVS0EzbWJOQmpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2ItM2NiYWQ1YjkwNGI1
LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBKQYIKwYBBQUHAQcBAf8EggEYMIIBFDCCARAEAgABMIIB
CAMEAi2WJAMEAz5xcAMEAlPZ1AMEAFQ2LAMEAFQ2LwMEAlXGbAMEAVjSIgMEAljS
NAMEAljaPAMEAluOSAMEAlu49AMEAFvUlgMEAl23XDAMAwQAXmdTAwQBXmdcMAwD
BABfjiEDBABfjiIwDAMEAF+OLQMEBF+OIDAMAwQCbaxUAwQCbaxYAwQFihCgAwQD
shQoAwQAsoKDAwQBstliAwQCudEcAwQCueeYAwQCwJA4AwQCwXxAAwQCwXyAAwQA
wbKqAwQBwwJCAwQBwwJGMAwDBADDAkkDBADDAkwwDAMEAcMCTgMEAcMCUAMEAcMC
VAMEAcOFOAMEAcOFPAMEANR2LQMEANR2ODANBgkqhkiG9w0BAQsFAAOCAQEAnvOK
rgtgEBbRUSwncsbt5IPAXQEZAHzfiKKlCFg2n61bGPAyI/ARaIwKKigvsAmBDkNL
0l6SoT5iJC2iJTioUamEqTzAbElymoT4rQj/a8fuPWVONV1EPo/DhzwZF//Vr0qu
Xl6j1VgTWCwUez8VHW0hu+eSqEv4pIz7Ps/txwsKxJefk6VPi0GTpTa+hOvc9AVb
qHJjyQagi93563ZvbQ6kT56LsFhT4aOck26IaLiqSKDNnYp2IK/Epc+bDxwfy8ba
j7O5EBxWqw/fDsyJMIX0zJCR15+WAy1eSh2A/zYYQj4wLympiPwHRcJUds/e1wHX
0sciyqbT7KLJvU+Kqg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:19 2026 by rpki-client