Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/2Z06w-6aRdtV0QK4J8t70JdDrjs.roa
File: 2Z06w-6aRdtV0QK4J8t70JdDrjs.roa (raw, json)
Hash identifier: k7e4lEr8W/EMx7CcjgiyyJjZ/itKU+JMkO7hCLhiTdA=
Subject key identifier: D9:9D:3A:C3:EE:9A:45:DB:55:D1:02:B8:27:CB:7B:D0:97:43:AE:3B
Certificate issuer: /CN=12d82a254867a52e680e411bbff5abc20acd623a
Certificate serial: 019F23687462874B6D229AFC11C7C13C4A04
Authority key identifier: 12:D8:2A:25:48:67:A5:2E:68:0E:41:1B:BF:F5:AB:C2:0A:CD:62:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/2Z06w-6aRdtV0QK4J8t70JdDrjs.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 86.109.0.0/24 maxlen: 24
86.109.1.0/24 maxlen: 24
86.109.2.0/23 maxlen: 23
86.109.4.0/23 maxlen: 23
86.109.6.0/24 maxlen: 24
86.109.7.0/24 maxlen: 24
86.109.8.0/24 maxlen: 24
86.109.9.0/24 maxlen: 24
86.109.10.0/23 maxlen: 23
86.109.12.0/24 maxlen: 24
86.109.13.0/24 maxlen: 24
86.109.14.0/23 maxlen: 23
93.187.216.0/23 maxlen: 23
93.187.218.0/23 maxlen: 23
136.144.48.0/23 maxlen: 23
136.144.50.0/23 maxlen: 23
136.144.52.0/23 maxlen: 23
136.144.54.0/23 maxlen: 23
136.144.56.0/23 maxlen: 23
136.144.58.0/23 maxlen: 23
136.144.60.0/23 maxlen: 23
136.144.62.0/23 maxlen: 23
139.178.64.0/22 maxlen: 22
139.178.68.0/22 maxlen: 22
139.178.72.0/22 maxlen: 22
139.178.76.0/23 maxlen: 23
139.178.78.0/23 maxlen: 23
139.178.80.0/21 maxlen: 21
139.178.88.0/22 maxlen: 22
139.178.94.0/23 maxlen: 23
145.40.64.0/23 maxlen: 23
145.40.67.0/24 maxlen: 24
145.40.68.0/24 maxlen: 24
145.40.69.0/24 maxlen: 24
145.40.70.0/23 maxlen: 23
145.40.73.0/24 maxlen: 24
145.40.74.0/23 maxlen: 23
145.40.76.0/23 maxlen: 23
145.40.78.0/24 maxlen: 24
145.40.79.0/24 maxlen: 24
145.40.80.0/23 maxlen: 23
145.40.82.0/23 maxlen: 23
145.40.84.0/23 maxlen: 23
145.40.86.0/23 maxlen: 23
145.40.88.0/24 maxlen: 24
145.40.89.0/24 maxlen: 24
145.40.90.0/24 maxlen: 24
145.40.91.0/24 maxlen: 24
145.40.92.0/22 maxlen: 22
145.40.96.0/23 maxlen: 23
145.40.98.0/23 maxlen: 23
145.40.100.0/24 maxlen: 24
145.40.101.0/24 maxlen: 24
145.40.102.0/23 maxlen: 23
145.40.104.0/22 maxlen: 22
145.40.108.0/22 maxlen: 22
145.40.112.0/22 maxlen: 22
145.40.116.0/22 maxlen: 22
145.40.120.0/22 maxlen: 22
145.40.124.0/22 maxlen: 22
147.28.128.0/23 maxlen: 23
147.28.131.0/24 maxlen: 24
147.28.132.0/22 maxlen: 22
147.28.136.0/23 maxlen: 23
147.28.138.0/23 maxlen: 23
147.28.140.0/22 maxlen: 22
147.28.141.0/24 maxlen: 24
147.28.142.0/23 maxlen: 23
147.28.144.0/23 maxlen: 23
147.28.146.0/23 maxlen: 23
147.28.148.0/23 maxlen: 23
147.28.150.0/23 maxlen: 23
147.28.152.0/24 maxlen: 24
147.28.153.0/24 maxlen: 24
147.28.154.0/23 maxlen: 23
147.28.156.0/23 maxlen: 23
147.28.158.0/23 maxlen: 23
147.28.160.0/23 maxlen: 23
147.28.162.0/23 maxlen: 23
147.28.164.0/23 maxlen: 23
147.28.166.0/23 maxlen: 23
147.28.168.0/23 maxlen: 23
147.28.170.0/23 maxlen: 23
147.28.172.0/23 maxlen: 23
147.28.174.0/23 maxlen: 23
147.28.176.0/23 maxlen: 23
147.28.178.0/23 maxlen: 23
147.28.180.0/23 maxlen: 23
147.28.182.0/23 maxlen: 23
147.28.184.0/23 maxlen: 23
147.28.186.0/23 maxlen: 23
147.28.188.0/24 maxlen: 24
147.28.189.0/24 maxlen: 24
147.28.192.0/24 maxlen: 24
147.28.193.0/24 maxlen: 24
147.28.194.0/24 maxlen: 24
147.28.195.0/24 maxlen: 24
147.28.196.0/23 maxlen: 23
147.28.198.0/24 maxlen: 24
147.28.199.0/24 maxlen: 24
147.28.200.0/24 maxlen: 24
147.28.201.0/24 maxlen: 24
147.28.202.0/24 maxlen: 24
147.28.203.0/24 maxlen: 24
147.28.204.0/23 maxlen: 23
147.28.206.0/23 maxlen: 23
147.28.208.0/23 maxlen: 23
147.28.210.0/23 maxlen: 23
147.28.212.0/24 maxlen: 24
147.28.214.0/23 maxlen: 23
147.28.216.0/23 maxlen: 23
147.28.218.0/24 maxlen: 24
147.28.219.0/24 maxlen: 24
147.28.220.0/23 maxlen: 23
147.28.222.0/23 maxlen: 23
147.28.224.0/24 maxlen: 24
147.28.225.0/24 maxlen: 24
147.28.226.0/23 maxlen: 23
147.28.228.0/24 maxlen: 24
147.28.229.0/24 maxlen: 24
147.28.230.0/24 maxlen: 24
147.28.231.0/24 maxlen: 24
147.28.232.0/24 maxlen: 24
147.28.233.0/24 maxlen: 24
147.28.234.0/24 maxlen: 24
147.28.235.0/24 maxlen: 24
147.28.240.0/24 maxlen: 24
147.28.241.0/24 maxlen: 24
147.28.242.0/24 maxlen: 24
147.28.244.0/24 maxlen: 24
147.28.246.0/23 maxlen: 23
147.28.248.0/23 maxlen: 23
147.75.32.0/23 maxlen: 23
147.75.34.0/24 maxlen: 24
147.75.35.0/24 maxlen: 24
147.75.36.0/22 maxlen: 22
147.75.38.0/23 maxlen: 23
147.75.40.0/23 maxlen: 23
147.75.42.0/24 maxlen: 24
147.75.43.0/24 maxlen: 24
147.75.44.0/24 maxlen: 24
147.75.45.0/24 maxlen: 24
147.75.46.0/24 maxlen: 24
147.75.47.0/24 maxlen: 24
147.75.48.0/24 maxlen: 24
147.75.49.0/24 maxlen: 24
147.75.50.0/23 maxlen: 23
147.75.52.0/24 maxlen: 24
147.75.53.0/24 maxlen: 24
147.75.54.0/23 maxlen: 23
147.75.54.0/24 maxlen: 24
147.75.55.0/24 maxlen: 24
147.75.56.0/23 maxlen: 23
147.75.56.0/24 maxlen: 24
147.75.57.0/24 maxlen: 24
147.75.59.0/24 maxlen: 24
147.75.61.0/24 maxlen: 24
147.75.62.0/23 maxlen: 23
147.75.62.0/24 maxlen: 24
147.75.63.0/24 maxlen: 24
147.75.64.0/22 maxlen: 22
147.75.68.0/22 maxlen: 22
147.75.72.0/21 maxlen: 21
147.75.80.0/22 maxlen: 22
147.75.84.0/23 maxlen: 23
147.75.86.0/23 maxlen: 23
147.75.88.0/22 maxlen: 22
147.75.92.0/22 maxlen: 22
147.75.96.0/22 maxlen: 22
147.75.96.0/23 maxlen: 23
147.75.99.0/24 maxlen: 24
147.75.100.0/22 maxlen: 22
147.75.104.0/22 maxlen: 22
147.75.108.0/23 maxlen: 23
147.75.110.0/23 maxlen: 23
147.75.192.0/21 maxlen: 21
147.75.193.0/24 maxlen: 24
147.75.194.0/23 maxlen: 23
147.75.196.0/22 maxlen: 22
147.75.200.0/22 maxlen: 22
147.75.204.0/23 maxlen: 23
147.75.206.0/24 maxlen: 24
147.75.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 15:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:74:62:87:4b:6d:22:9a:fc:11:c7:c1:3c:4a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d82a254867a52e680e411bbff5abc20acd623a
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d99d3ac3ee9a45db55d102b827cb7bd09743ae3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:3c:a7:b8:dd:d3:90:0c:21:3a:5a:6e:ba:
57:41:25:c5:70:a7:4b:33:cc:65:7d:ff:84:4e:aa:
d1:1e:80:c6:9f:59:dc:ed:49:93:ec:01:b4:45:aa:
1e:04:26:0e:38:fe:66:fa:5f:05:95:26:86:87:d2:
90:6d:e1:36:a9:3f:b0:8c:46:7b:57:79:4f:57:b6:
ab:c5:91:6e:ff:e2:5e:f5:23:0a:df:5b:10:07:e0:
30:57:95:24:8b:c2:26:ed:01:4f:f5:a1:69:4b:1f:
b2:6a:95:32:95:c9:a9:08:83:51:8e:20:df:1b:75:
69:1b:fd:87:9e:84:7c:9b:3e:4d:8e:3a:a3:f2:99:
b9:17:44:b0:11:f3:4d:15:99:6b:29:c4:86:a4:59:
46:c0:c4:55:b1:b4:65:65:86:a2:12:cf:57:b3:be:
5e:27:c4:b4:00:8d:e9:6a:f2:a1:36:e2:38:f6:f1:
2c:44:e5:9f:23:e2:e4:cb:c5:68:30:1b:4a:ac:a4:
84:0f:54:1f:ea:fb:16:24:68:29:a5:2d:fa:a7:8c:
60:68:78:61:15:1a:dd:dc:ed:dc:0f:76:23:98:1a:
a6:05:51:fe:11:f1:25:4c:0a:07:de:b2:49:e7:1a:
ee:8c:9c:63:7e:99:bd:4c:3c:2b:e5:f7:4b:d5:6e:
05:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9D:3A:C3:EE:9A:45:DB:55:D1:02:B8:27:CB:7B:D0:97:43:AE:3B
X509v3 Authority Key Identifier:
keyid:12:D8:2A:25:48:67:A5:2E:68:0E:41:1B:BF:F5:AB:C2:0A:CD:62:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/2Z06w-6aRdtV0QK4J8t70JdDrjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.0.0/20
93.187.216.0/22
136.144.48.0/20
139.178.64.0-139.178.91.255
139.178.94.0/23
145.40.64.0/23
145.40.67.0-145.40.71.255
145.40.73.0-145.40.127.255
147.28.128.0/23
147.28.131.0-147.28.189.255
147.28.192.0-147.28.212.255
147.28.214.0-147.28.235.255
147.28.240.0-147.28.242.255
147.28.244.0/24
147.28.246.0-147.28.249.255
147.75.32.0-147.75.57.255
147.75.59.0/24
147.75.61.0-147.75.111.255
147.75.192.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:cf:82:f4:7b:f0:56:1d:b2:b3:92:c9:80:2e:38:71:f9:66:
e0:7b:fb:bf:22:9e:dd:b1:45:62:d6:ec:ef:76:b7:2b:c7:a5:
82:2c:f3:9b:ce:d9:e6:4e:2a:39:fb:a6:30:bb:1a:b3:e7:d8:
20:6a:25:27:79:2e:81:b2:32:0c:2f:35:c0:bb:00:36:f4:d4:
3c:e9:2b:4f:9e:df:00:24:eb:c2:61:af:e2:51:36:f1:23:71:
28:b3:e6:62:35:35:d5:0a:d6:fe:e5:33:32:37:12:f2:00:a1:
a2:89:f1:fe:98:97:d1:cd:79:de:20:1d:cd:e6:99:80:8e:a1:
39:c4:c9:c1:f8:32:02:b7:70:ec:88:ac:e1:81:4c:0a:b0:9d:
14:79:8e:51:e4:2d:ad:a2:c0:c0:17:a6:67:79:1d:2a:d5:ce:
21:18:ce:3e:aa:0e:ee:4f:f6:2c:36:93:8d:51:61:27:c1:88:
59:05:b8:ef:3e:59:96:1c:08:9f:1a:c1:7f:0f:27:9e:21:58:
94:2d:a2:c0:fd:c4:ea:b7:0d:ae:85:ba:c7:c3:7f:0f:11:53:
ac:16:6d:5b:8e:cb:65:b8:63:d4:05:a9:60:dc:65:ef:a8:ad:
3d:d0:bc:58:10:8c:3d:9e:a5:52:52:15:97:77:a0:44:66:0a:
62:99:3d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 19:09:16 2026 by rpki-client