Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kSfOojLjeI8Z4GLsu0Dfjr5hwxk.roa
File: kSfOojLjeI8Z4GLsu0Dfjr5hwxk.roa (raw, json)
Hash identifier: Sn8NZ50vXWcnnX/vRVTaSHkuTvEWQESB2sjprvUsyug=
Subject key identifier: 91:27:CE:A2:32:E3:78:8F:19:E0:62:EC:BB:40:DF:8E:BE:61:C3:19
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019E6A6D48D2CD2FAD4E7BE3C5F9BD7DA188
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kSfOojLjeI8Z4GLsu0Dfjr5hwxk.roa
Signing time: Wed 27 May 2026 17:13:27 +0000
ROA not before: Wed 27 May 2026 17:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 45.91.239.0/24 maxlen: 24
80.242.53.0/24 maxlen: 24
84.252.71.0/24 maxlen: 24
130.193.26.0/24 maxlen: 24
146.19.87.0/24 maxlen: 24
146.19.129.0/24 maxlen: 24
186.243.132.0/24 maxlen: 24
186.243.134.0/24 maxlen: 24
186.243.135.0/24 maxlen: 24
186.243.136.0/24 maxlen: 24
186.243.137.0/24 maxlen: 24
186.243.138.0/24 maxlen: 24
186.243.139.0/24 maxlen: 24
186.243.140.0/24 maxlen: 24
186.243.146.0/24 maxlen: 24
186.243.148.0/24 maxlen: 24
186.243.152.0/24 maxlen: 24
186.243.153.0/24 maxlen: 24
186.243.154.0/24 maxlen: 24
186.243.156.0/24 maxlen: 24
186.243.157.0/24 maxlen: 24
186.243.158.0/24 maxlen: 24
186.243.159.0/24 maxlen: 24
186.243.160.0/24 maxlen: 24
186.243.161.0/24 maxlen: 24
186.243.162.0/24 maxlen: 24
186.243.163.0/24 maxlen: 24
186.243.164.0/24 maxlen: 24
186.243.165.0/24 maxlen: 24
186.243.166.0/24 maxlen: 24
186.243.167.0/24 maxlen: 24
186.243.168.0/24 maxlen: 24
186.243.169.0/24 maxlen: 24
186.243.171.0/24 maxlen: 24
186.243.172.0/24 maxlen: 24
186.243.173.0/24 maxlen: 24
186.243.174.0/24 maxlen: 24
186.243.175.0/24 maxlen: 24
186.243.176.0/24 maxlen: 24
186.243.177.0/24 maxlen: 24
186.243.178.0/24 maxlen: 24
186.243.179.0/24 maxlen: 24
186.243.183.0/24 maxlen: 24
186.243.184.0/24 maxlen: 24
186.243.187.0/24 maxlen: 24
186.243.188.0/24 maxlen: 24
186.243.190.0/24 maxlen: 24
186.243.193.0/24 maxlen: 24
186.243.195.0/24 maxlen: 24
186.243.196.0/24 maxlen: 24
186.243.197.0/24 maxlen: 24
186.243.199.0/24 maxlen: 24
186.243.200.0/24 maxlen: 24
186.243.204.0/24 maxlen: 24
186.243.205.0/24 maxlen: 24
186.243.206.0/24 maxlen: 24
186.243.207.0/24 maxlen: 24
186.243.208.0/24 maxlen: 24
186.243.209.0/24 maxlen: 24
186.243.210.0/24 maxlen: 24
186.243.211.0/24 maxlen: 24
186.243.212.0/24 maxlen: 24
186.243.213.0/24 maxlen: 24
186.243.215.0/24 maxlen: 24
186.243.216.0/24 maxlen: 24
186.243.217.0/24 maxlen: 24
186.243.218.0/24 maxlen: 24
186.243.219.0/24 maxlen: 24
186.243.220.0/24 maxlen: 24
186.243.221.0/24 maxlen: 24
186.243.222.0/24 maxlen: 24
186.243.223.0/24 maxlen: 24
186.243.224.0/24 maxlen: 24
186.243.225.0/24 maxlen: 24
186.243.226.0/24 maxlen: 24
186.243.227.0/24 maxlen: 24
186.243.229.0/24 maxlen: 24
186.243.230.0/24 maxlen: 24
186.243.231.0/24 maxlen: 24
186.243.232.0/24 maxlen: 24
186.243.236.0/24 maxlen: 24
186.243.238.0/24 maxlen: 24
186.243.241.0/24 maxlen: 24
186.243.243.0/24 maxlen: 24
186.243.244.0/24 maxlen: 24
186.243.245.0/24 maxlen: 24
186.243.246.0/24 maxlen: 24
186.243.247.0/24 maxlen: 24
186.243.248.0/24 maxlen: 24
186.243.250.0/24 maxlen: 24
186.246.59.0/24 maxlen: 24
186.246.61.0/24 maxlen: 24
186.246.62.0/24 maxlen: 24
186.246.63.0/24 maxlen: 24
186.246.64.0/24 maxlen: 24
186.246.65.0/24 maxlen: 24
186.246.66.0/24 maxlen: 24
186.246.67.0/24 maxlen: 24
186.246.68.0/24 maxlen: 24
186.246.69.0/24 maxlen: 24
186.246.70.0/24 maxlen: 24
186.246.71.0/24 maxlen: 24
186.246.73.0/24 maxlen: 24
186.246.74.0/24 maxlen: 24
186.246.78.0/24 maxlen: 24
186.246.79.0/24 maxlen: 24
186.246.81.0/24 maxlen: 24
186.246.82.0/24 maxlen: 24
186.246.83.0/24 maxlen: 24
186.246.84.0/24 maxlen: 24
186.246.85.0/24 maxlen: 24
186.246.87.0/24 maxlen: 24
186.246.88.0/24 maxlen: 24
186.246.89.0/24 maxlen: 24
186.246.90.0/24 maxlen: 24
186.246.91.0/24 maxlen: 24
186.246.92.0/24 maxlen: 24
186.246.93.0/24 maxlen: 24
186.246.94.0/24 maxlen: 24
186.246.95.0/24 maxlen: 24
186.246.96.0/24 maxlen: 24
186.246.97.0/24 maxlen: 24
186.246.98.0/24 maxlen: 24
186.246.99.0/24 maxlen: 24
186.246.101.0/24 maxlen: 24
186.246.102.0/24 maxlen: 24
186.246.105.0/24 maxlen: 24
186.246.106.0/24 maxlen: 24
186.246.110.0/24 maxlen: 24
186.246.112.0/24 maxlen: 24
186.246.113.0/24 maxlen: 24
186.246.114.0/24 maxlen: 24
186.246.115.0/24 maxlen: 24
186.246.116.0/24 maxlen: 24
186.246.117.0/24 maxlen: 24
186.246.118.0/24 maxlen: 24
186.246.119.0/24 maxlen: 24
186.246.120.0/24 maxlen: 24
186.246.121.0/24 maxlen: 24
186.246.122.0/24 maxlen: 24
186.246.126.0/24 maxlen: 24
193.176.20.0/24 maxlen: 24
193.176.22.0/24 maxlen: 24
193.201.9.0/24 maxlen: 24
194.105.158.0/24 maxlen: 24
194.105.159.0/24 maxlen: 24
194.156.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:6d:48:d2:cd:2f:ad:4e:7b:e3:c5:f9:bd:7d:a1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 27 17:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9127cea232e3788f19e062ecbb40df8ebe61c319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6e:20:c1:2c:a8:38:cf:fa:7b:98:76:c8:b4:
69:57:a2:59:5c:ef:ec:e2:83:1d:5a:ad:af:91:b2:
3c:02:ce:a2:58:04:24:17:33:da:eb:dc:6a:ed:dd:
6b:7c:7b:96:bf:5a:ef:f7:d6:b5:fe:92:24:d3:6f:
83:27:19:f5:89:08:ce:e4:4b:e3:83:5c:00:a4:19:
1b:3b:08:9a:92:ce:7b:f6:cf:d6:d1:7c:c2:4a:bd:
6b:ef:3c:c1:12:1c:3f:75:2d:74:1b:86:d3:d6:07:
d3:2c:5c:63:91:be:31:a5:e4:e3:d1:36:a8:1d:4c:
ed:07:89:48:44:97:74:e8:17:8c:9f:8e:12:df:67:
5b:13:b4:19:cb:de:c3:91:1c:1f:7f:b6:85:38:1e:
9f:1e:d1:e3:91:c1:13:f0:d1:a2:b5:c9:1d:47:cb:
e2:4c:6f:c7:f1:1c:2b:b3:81:83:09:10:d4:8f:06:
bc:62:8e:74:cc:81:70:d6:38:1d:f2:fe:9f:cd:9b:
18:66:fe:5c:fe:bf:8a:c1:75:3d:ef:33:18:51:d3:
d0:fa:88:0a:02:a5:3b:25:dd:3d:50:ca:a5:fa:1e:
ef:f4:17:af:16:72:e1:dd:eb:8c:ae:57:f8:b8:0c:
65:3e:c3:81:88:44:1f:96:3a:4d:70:15:2c:ed:f6:
23:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:27:CE:A2:32:E3:78:8F:19:E0:62:EC:BB:40:DF:8E:BE:61:C3:19
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kSfOojLjeI8Z4GLsu0Dfjr5hwxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.239.0/24
80.242.53.0/24
84.252.71.0/24
130.193.26.0/24
146.19.87.0/24
146.19.129.0/24
186.243.132.0/24
186.243.134.0-186.243.140.255
186.243.146.0/24
186.243.148.0/24
186.243.152.0-186.243.154.255
186.243.156.0-186.243.169.255
186.243.171.0-186.243.179.255
186.243.183.0-186.243.184.255
186.243.187.0-186.243.188.255
186.243.190.0/24
186.243.193.0/24
186.243.195.0-186.243.197.255
186.243.199.0-186.243.200.255
186.243.204.0-186.243.213.255
186.243.215.0-186.243.227.255
186.243.229.0-186.243.232.255
186.243.236.0/24
186.243.238.0/24
186.243.241.0/24
186.243.243.0-186.243.248.255
186.243.250.0/24
186.246.59.0/24
186.246.61.0-186.246.71.255
186.246.73.0-186.246.74.255
186.246.78.0/23
186.246.81.0-186.246.85.255
186.246.87.0-186.246.99.255
186.246.101.0-186.246.102.255
186.246.105.0-186.246.106.255
186.246.110.0/24
186.246.112.0-186.246.122.255
186.246.126.0/24
193.176.20.0/24
193.176.22.0/24
193.201.9.0/24
194.105.158.0/23
194.156.126.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:16:3d:46:15:6d:63:44:c4:78:8c:2f:de:88:ba:35:67:ce:
8f:87:af:c3:5d:85:c8:4a:04:3b:3b:22:ed:06:e1:15:23:2d:
b5:17:6f:65:5f:c6:81:15:8a:bb:66:5e:85:4f:1e:de:96:df:
5d:01:fc:0c:bc:2c:a5:58:f0:49:ef:bd:0b:20:84:1e:15:75:
30:c9:00:19:20:75:e0:8b:ea:ee:4d:80:31:5a:5a:ab:10:ce:
58:c9:46:d6:d8:f9:8c:75:24:4e:09:56:69:a8:8d:ad:43:ba:
bd:b8:ce:0d:50:11:10:08:57:5b:ac:cc:9e:de:47:45:fd:8e:
62:e3:96:df:8b:7c:2b:89:51:5d:a9:1e:e2:c5:0c:2e:f4:08:
42:05:94:61:f6:dd:c4:6e:83:f5:e7:b4:0a:35:be:86:3a:d7:
8e:2c:9a:d9:f2:d8:58:a4:66:44:71:1a:d9:33:fa:8c:d8:0b:
87:fa:2e:e9:84:d9:4b:63:d6:d6:d9:67:15:4f:d6:cf:6e:38:
ae:ce:e0:71:49:42:92:cf:28:81:f1:c3:b1:3c:49:99:a4:65:
3d:f5:4e:d0:be:64:9c:6a:e5:15:47:c1:e1:f6:41:52:cb:df:
5b:8a:28:3c:a7:71:b5:e1:d9:2a:99:93:ac:45:7d:7b:7b:dd:
d3:31:5c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:23 2026 by rpki-client