Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/XMuew5EBmV8Kanlpc99YZsjTFtY.roa
File: XMuew5EBmV8Kanlpc99YZsjTFtY.roa (raw, json)
Hash identifier: OLPUwCo5Dzk8l66Gu9CWVKCHZAkW6jtTxV6Sfd8Pz5k=
Subject key identifier: 5C:CB:9E:C3:91:01:99:5F:0A:6A:79:69:73:DF:58:66:C8:D3:16:D6
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 01A160CFF3C1DC9EDF7774909C8C3196D9FB
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/XMuew5EBmV8Kanlpc99YZsjTFtY.roa
Signing time: Wed 21 Oct 2026 23:33:23 +0000
ROA not before: Wed 21 Oct 2026 23:33:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48282
IP address blocks: 45.150.36.0/24 maxlen: 24
45.150.37.0/24 maxlen: 24
45.150.38.0/24 maxlen: 24
45.150.39.0/24 maxlen: 24
62.113.112.0/24 maxlen: 24
62.113.113.0/24 maxlen: 24
62.113.114.0/24 maxlen: 24
62.113.115.0/24 maxlen: 24
62.113.116.0/24 maxlen: 24
62.113.117.0/24 maxlen: 24
62.113.118.0/24 maxlen: 24
62.113.119.0/24 maxlen: 24
83.217.212.0/24 maxlen: 24
83.217.213.0/24 maxlen: 24
83.217.214.0/24 maxlen: 24
83.217.215.0/24 maxlen: 24
84.54.44.0/24 maxlen: 24
84.54.47.0/24 maxlen: 24
85.198.108.0/24 maxlen: 24
85.198.109.0/24 maxlen: 24
85.198.110.0/24 maxlen: 24
85.198.111.0/24 maxlen: 24
88.210.34.0/24 maxlen: 24
88.210.35.0/24 maxlen: 24
88.210.52.0/24 maxlen: 24
88.210.53.0/24 maxlen: 24
88.210.54.0/24 maxlen: 24
88.210.55.0/24 maxlen: 24
88.218.60.0/24 maxlen: 24
88.218.61.0/24 maxlen: 24
88.218.62.0/24 maxlen: 24
88.218.63.0/24 maxlen: 24
91.142.72.0/24 maxlen: 24
91.142.73.0/24 maxlen: 24
91.142.74.0/24 maxlen: 24
91.142.75.0/24 maxlen: 24
91.184.244.0/24 maxlen: 24
91.184.245.0/24 maxlen: 24
91.184.246.0/24 maxlen: 24
91.184.247.0/24 maxlen: 24
91.212.150.0/24 maxlen: 24
93.183.92.0/24 maxlen: 24
93.183.93.0/24 maxlen: 24
93.183.94.0/24 maxlen: 24
93.183.95.0/24 maxlen: 24
94.103.83.0/24 maxlen: 24
94.103.84.0/24 maxlen: 24
94.103.85.0/24 maxlen: 24
94.103.86.0/24 maxlen: 24
94.103.87.0/24 maxlen: 24
94.103.88.0/24 maxlen: 24
94.103.89.0/24 maxlen: 24
94.103.90.0/24 maxlen: 24
94.103.91.0/24 maxlen: 24
94.103.92.0/24 maxlen: 24
94.103.93.0/24 maxlen: 24
95.142.33.0/24 maxlen: 24
95.142.34.0/24 maxlen: 24
95.142.45.0/24 maxlen: 24
95.142.46.0/24 maxlen: 24
95.142.47.0/24 maxlen: 24
109.172.84.0/24 maxlen: 24
109.172.85.0/24 maxlen: 24
109.172.86.0/24 maxlen: 24
109.172.87.0/24 maxlen: 24
109.172.88.0/24 maxlen: 24
109.172.89.0/24 maxlen: 24
109.172.90.0/24 maxlen: 24
109.172.91.0/24 maxlen: 24
132.243.190.0/24 maxlen: 24
132.243.191.0/24 maxlen: 24
138.16.160.0/24 maxlen: 24
138.16.161.0/24 maxlen: 24
138.16.162.0/24 maxlen: 24
138.16.163.0/24 maxlen: 24
138.16.164.0/24 maxlen: 24
138.16.165.0/24 maxlen: 24
138.16.166.0/24 maxlen: 24
138.16.167.0/24 maxlen: 24
138.16.168.0/24 maxlen: 24
138.16.169.0/24 maxlen: 24
138.16.170.0/24 maxlen: 24
138.16.171.0/24 maxlen: 24
138.16.172.0/24 maxlen: 24
138.16.173.0/24 maxlen: 24
138.16.174.0/24 maxlen: 24
138.16.175.0/24 maxlen: 24
138.16.176.0/24 maxlen: 24
138.16.177.0/24 maxlen: 24
138.16.178.0/24 maxlen: 24
138.16.179.0/24 maxlen: 24
138.16.180.0/24 maxlen: 24
138.16.181.0/24 maxlen: 24
138.16.182.0/24 maxlen: 24
138.16.183.0/24 maxlen: 24
138.16.184.0/24 maxlen: 24
138.16.185.0/24 maxlen: 24
138.16.186.0/24 maxlen: 24
138.16.187.0/24 maxlen: 24
138.16.188.0/24 maxlen: 24
138.16.189.0/24 maxlen: 24
138.16.190.0/24 maxlen: 24
138.16.191.0/24 maxlen: 24
178.20.40.0/24 maxlen: 24
178.20.41.0/24 maxlen: 24
178.20.42.0/24 maxlen: 24
178.20.43.0/24 maxlen: 24
178.20.44.0/24 maxlen: 24
178.20.45.0/24 maxlen: 24
178.20.46.0/24 maxlen: 24
178.20.47.0/24 maxlen: 24
178.130.131.0/24 maxlen: 24
178.217.98.0/24 maxlen: 24
178.217.99.0/24 maxlen: 24
185.209.28.0/24 maxlen: 24
185.209.29.0/24 maxlen: 24
185.209.30.0/24 maxlen: 24
185.209.31.0/24 maxlen: 24
185.231.152.0/24 maxlen: 24
185.231.153.0/24 maxlen: 24
185.231.154.0/24 maxlen: 24
185.231.155.0/24 maxlen: 24
192.144.56.0/24 maxlen: 24
192.144.57.0/24 maxlen: 24
192.144.58.0/24 maxlen: 24
192.144.59.0/24 maxlen: 24
193.124.64.0/24 maxlen: 24
193.124.65.0/24 maxlen: 24
193.124.66.0/24 maxlen: 24
193.124.67.0/24 maxlen: 24
193.124.128.0/24 maxlen: 24
193.124.129.0/24 maxlen: 24
193.124.130.0/24 maxlen: 24
193.124.131.0/24 maxlen: 24
193.178.170.0/24 maxlen: 24
194.58.70.0/24 maxlen: 24
194.58.71.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.2.66.0/24 maxlen: 24
195.2.67.0/24 maxlen: 24
195.2.70.0/24 maxlen: 24
195.2.71.0/24 maxlen: 24
195.2.73.0/24 maxlen: 24
195.2.74.0/24 maxlen: 24
195.2.75.0/24 maxlen: 24
195.2.76.0/24 maxlen: 24
195.2.78.0/24 maxlen: 24
195.2.79.0/24 maxlen: 24
195.2.80.0/24 maxlen: 24
195.2.81.0/24 maxlen: 24
195.2.84.0/24 maxlen: 24
195.2.85.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.133.56.0/24 maxlen: 24
195.133.57.0/24 maxlen: 24
195.133.60.0/24 maxlen: 24
195.133.61.0/24 maxlen: 24
212.118.45.0/24 maxlen: 24
212.118.56.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.11.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:cf:f3:c1:dc:9e:df:77:74:90:9c:8c:31:96:d9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Oct 21 23:33:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ccb9ec39101995f0a6a796973df5866c8d316d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:44:91:8e:a3:9d:84:32:f2:89:12:a4:5c:
7e:92:22:0d:4f:09:65:38:f3:29:1d:3e:1b:f9:8f:
be:bd:3d:6f:2b:da:8f:f5:24:8d:ea:4a:8b:11:0d:
82:dc:0f:f3:b6:7b:60:fb:eb:9a:1c:9d:6a:8b:5a:
a5:30:cc:a6:a0:67:45:77:2a:9c:a7:fa:f4:c8:9a:
72:e8:b5:5a:26:c4:bd:8e:6d:a8:24:98:b6:df:fc:
37:1e:99:a5:d7:b8:f0:18:5b:8c:d9:10:c2:f9:1b:
2a:90:50:75:ab:39:2e:b2:45:ac:82:ad:cb:a6:18:
87:5f:e5:f1:9d:bc:81:1a:20:df:e6:f1:ed:6f:47:
a1:b9:63:7b:fc:d5:84:53:26:3e:7a:53:2c:2e:94:
cc:16:6f:6f:37:c6:c2:9b:81:02:e4:67:05:35:ed:
9e:70:34:e3:06:6f:c4:1a:02:6c:94:12:53:62:e0:
8e:4e:c3:17:c4:b7:44:fc:5e:34:15:b5:48:17:72:
c7:f5:d2:b6:e5:d5:5e:5a:43:e7:e2:d5:91:52:d1:
5a:ec:78:e3:54:1e:cc:ab:26:bd:d7:83:d8:6e:97:
2f:0d:c7:11:68:66:53:bb:8e:bb:92:ec:e4:16:a8:
7c:84:70:75:c1:08:a0:5c:b3:b5:a5:d3:02:86:ff:
3f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CB:9E:C3:91:01:99:5F:0A:6A:79:69:73:DF:58:66:C8:D3:16:D6
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/XMuew5EBmV8Kanlpc99YZsjTFtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.36.0/22
62.113.112.0/21
83.217.212.0/22
84.54.44.0/24
84.54.47.0/24
85.198.108.0/22
88.210.34.0/23
88.210.52.0/22
88.218.60.0/22
91.142.72.0/22
91.184.244.0/22
91.212.150.0/24
93.183.92.0/22
94.103.83.0-94.103.93.255
95.142.33.0-95.142.34.255
95.142.45.0-95.142.47.255
109.172.84.0-109.172.91.255
132.243.190.0/23
138.16.160.0/19
178.20.40.0/21
178.130.131.0/24
178.217.98.0/23
185.209.28.0/22
185.231.152.0/22
192.144.56.0/22
193.124.64.0/22
193.124.128.0/22
193.178.170.0/24
194.58.70.0/23
194.135.23.0-194.135.24.255
195.2.66.0/23
195.2.70.0/23
195.2.73.0-195.2.76.255
195.2.78.0-195.2.81.255
195.2.84.0/23
195.58.55.0-195.58.56.255
195.133.56.0/23
195.133.60.0/23
212.118.45.0/24
212.118.56.0/24
212.193.10.0/23
212.193.14.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:3c:ad:bb:8f:c3:b6:e7:62:4c:df:49:3a:c4:a9:8d:e1:3b:
d8:3a:54:43:d1:68:73:a7:6e:6f:1c:ab:ed:f2:5c:08:91:17:
49:43:d2:04:4a:a2:2f:cc:48:0c:bd:28:dd:f4:d9:38:56:76:
c5:be:05:cb:4f:ea:f4:8f:15:4f:8a:a1:8e:8e:03:42:9f:5b:
61:f8:ed:48:10:76:f4:8d:e3:d6:40:52:6f:c4:2b:39:bc:63:
93:4a:57:6f:77:7f:79:3c:2f:a8:88:6c:6f:40:25:cc:e0:ee:
3d:f3:11:bd:c0:24:3d:fc:e1:ba:2b:cf:a6:13:12:53:0f:de:
00:9e:8e:d9:af:3e:fe:23:10:88:0e:8e:ef:ff:db:a0:8b:4d:
ff:07:68:d7:bb:61:4e:80:c3:42:46:a6:27:8d:f5:ee:a4:f2:
f1:88:7b:55:07:ed:d3:60:b6:f6:9a:e4:5b:e5:f7:0f:f0:c8:
40:f1:62:9b:b5:77:75:4b:b1:f8:13:15:8d:52:4c:d0:f0:13:
5e:d3:ba:61:aa:c2:5d:27:58:f4:2d:37:fa:f6:f4:7d:01:d3:
68:94:d0:e6:1b:68:dd:d4:ef:5f:f4:d3:51:5d:ad:a8:a3:91:
a7:a2:97:25:e1:df:50:06:58:a6:ab:71:51:70:af:ee:43:8f:
10:f8:e9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:54 2026 by rpki-client