Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/o0FtR-BM8btjRFCweE3ht45cdiM.roa
File: o0FtR-BM8btjRFCweE3ht45cdiM.roa (raw, json)
Hash identifier: lwbbJSFDBZUsnPtRw2skJSwVhSBOJY1xylefdXyjFxw=
Subject key identifier: A3:41:6D:47:E0:4C:F1:BB:63:44:50:B0:78:4D:E1:B7:8E:5C:76:23
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019DAEA3DA44874B524823F3FA1117D5EF23
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/o0FtR-BM8btjRFCweE3ht45cdiM.roa
Signing time: Tue 21 Apr 2026 06:04:26 +0000
ROA not before: Tue 21 Apr 2026 06:04:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20804
IP address blocks: 81.15.128.0/17 maxlen: 17
81.15.136.0/23 maxlen: 23
81.15.156.0/24 maxlen: 24
81.15.174.0/24 maxlen: 24
81.15.175.0/24 maxlen: 24
81.15.182.0/23 maxlen: 23
81.15.187.0/24 maxlen: 24
81.15.191.0/24 maxlen: 24
81.15.194.0/24 maxlen: 24
81.15.195.0/24 maxlen: 24
81.15.198.0/23 maxlen: 23
81.15.198.0/24 maxlen: 24
81.15.199.0/24 maxlen: 24
81.15.201.0/24 maxlen: 24
81.15.202.0/24 maxlen: 24
81.15.203.0/24 maxlen: 24
81.15.204.0/23 maxlen: 23
81.15.209.0/24 maxlen: 24
81.15.214.0/23 maxlen: 23
81.15.216.0/24 maxlen: 24
81.15.217.0/24 maxlen: 24
81.15.218.0/23 maxlen: 23
81.15.218.0/24 maxlen: 24
81.15.222.0/23 maxlen: 23
81.15.222.0/24 maxlen: 24
81.15.224.0/22 maxlen: 22
81.15.225.0/24 maxlen: 24
81.15.227.0/24 maxlen: 24
81.15.230.0/24 maxlen: 24
81.15.232.0/22 maxlen: 22
81.15.232.0/24 maxlen: 24
81.15.236.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
81.15.238.0/24 maxlen: 24
81.15.239.0/24 maxlen: 24
81.15.240.0/23 maxlen: 23
81.15.242.0/24 maxlen: 24
81.15.244.0/23 maxlen: 23
81.15.254.0/23 maxlen: 23
81.15.254.0/24 maxlen: 24
81.15.255.0/24 maxlen: 24
82.177.0.0/16 maxlen: 16
82.177.0.0/23 maxlen: 23
82.177.2.0/24 maxlen: 24
82.177.4.0/22 maxlen: 22
82.177.9.0/24 maxlen: 24
82.177.10.0/23 maxlen: 23
82.177.14.0/23 maxlen: 23
82.177.16.0/24 maxlen: 24
82.177.27.0/24 maxlen: 24
82.177.35.0/24 maxlen: 24
82.177.37.0/24 maxlen: 24
82.177.48.0/21 maxlen: 21
82.177.48.0/24 maxlen: 24
82.177.50.0/24 maxlen: 24
82.177.52.0/23 maxlen: 23
82.177.54.0/24 maxlen: 24
82.177.59.0/24 maxlen: 24
82.177.68.0/22 maxlen: 22
82.177.72.0/21 maxlen: 21
82.177.80.0/21 maxlen: 21
82.177.102.0/23 maxlen: 24
82.177.108.0/23 maxlen: 23
82.177.112.0/22 maxlen: 22
82.177.140.0/23 maxlen: 23
82.177.164.0/24 maxlen: 24
82.177.192.0/24 maxlen: 24
82.177.194.0/24 maxlen: 24
82.177.195.0/24 maxlen: 24
82.177.196.0/22 maxlen: 22
82.177.196.0/24 maxlen: 24
82.177.199.0/24 maxlen: 24
82.177.206.0/24 maxlen: 24
82.177.249.0/24 maxlen: 24
82.177.252.0/24 maxlen: 24
88.220.0.0/17 maxlen: 17
88.220.60.0/23 maxlen: 23
88.220.81.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
88.220.107.0/24 maxlen: 24
88.220.113.0/24 maxlen: 24
88.220.114.0/24 maxlen: 24
88.220.116.0/24 maxlen: 24
88.220.117.0/24 maxlen: 24
88.220.120.0/22 maxlen: 22
88.220.128.0/18 maxlen: 18
88.220.132.0/23 maxlen: 23
88.220.152.0/23 maxlen: 23
88.220.165.0/24 maxlen: 24
88.220.181.0/24 maxlen: 24
88.220.185.0/24 maxlen: 24
88.220.192.0/20 maxlen: 20
88.220.208.0/20 maxlen: 20
88.220.224.0/19 maxlen: 19
88.220.252.0/24 maxlen: 24
88.220.253.0/24 maxlen: 24
194.183.32.0/19 maxlen: 19
194.183.32.0/23 maxlen: 23
194.183.34.0/23 maxlen: 23
194.183.54.0/24 maxlen: 24
194.183.55.0/24 maxlen: 24
194.183.56.0/23 maxlen: 23
195.136.0.0/16 maxlen: 16
195.136.4.0/22 maxlen: 22
195.136.16.0/22 maxlen: 22
195.136.21.0/24 maxlen: 24
195.136.25.0/24 maxlen: 24
195.136.27.0/24 maxlen: 24
195.136.32.158/32 maxlen: 32
195.136.32.201/32 maxlen: 32
195.136.34.0/23 maxlen: 23
195.136.38.0/23 maxlen: 23
195.136.65.0/24 maxlen: 24
195.136.88.0/22 maxlen: 22
195.136.113.0/24 maxlen: 24
195.136.145.0/24 maxlen: 24
195.136.148.0/22 maxlen: 22
195.136.156.0/23 maxlen: 23
195.136.164.0/23 maxlen: 23
195.136.174.0/23 maxlen: 23
195.136.176.0/22 maxlen: 22
213.172.160.0/19 maxlen: 19
2a00:4120::/32 maxlen: 32
2a00:4120:8000:2::/64 maxlen: 64
2a00:4120:8000:4::/64 maxlen: 64
2a00:4120:8000:5::/64 maxlen: 64
2a00:4120:8000:70::/65 maxlen: 65
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ae:a3:da:44:87:4b:52:48:23:f3:fa:11:17:d5:ef:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Apr 21 06:04:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3416d47e04cf1bb634450b0784de1b78e5c7623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:c4:c9:69:0d:d4:aa:01:9f:14:a9:d0:19:
0f:39:a7:21:80:df:47:38:3b:45:81:b6:b7:9c:22:
a4:d3:8b:19:b7:f7:8a:55:0a:6d:a8:66:3d:fc:02:
a8:15:67:21:14:f8:aa:28:3f:ef:15:62:7b:04:9d:
db:e2:d7:77:bc:3c:28:7d:e5:f1:6c:df:4a:52:f1:
6e:fb:5f:82:60:f5:aa:05:52:12:6b:f9:dc:cc:f3:
67:77:6a:f5:b6:2a:8b:16:9a:21:9e:dd:c0:fa:6b:
79:0f:9d:34:d6:8b:0b:6a:79:db:f7:ea:f5:c5:65:
40:6b:15:30:0f:b3:e7:49:55:d1:3a:1a:75:e4:e8:
97:1f:f7:cf:30:66:a8:e4:1a:fd:3f:be:e1:48:8f:
ee:f2:28:09:69:76:12:b8:66:bc:80:88:3e:e1:b3:
99:99:e0:67:e3:33:26:b9:b2:71:4a:6d:bf:7f:fc:
14:5d:9f:47:54:50:19:b9:10:27:9e:30:95:1b:71:
79:72:19:b3:62:66:ff:73:7b:56:99:d5:fc:21:15:
1b:51:7b:8b:d3:aa:0c:ab:2a:b7:c6:96:a6:88:e4:
2e:17:18:8d:09:58:6a:c4:22:6e:30:9a:a8:68:fd:
48:d8:09:79:9d:e7:10:3b:45:aa:35:6a:01:a9:eb:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:41:6D:47:E0:4C:F1:BB:63:44:50:B0:78:4D:E1:B7:8E:5C:76:23
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/o0FtR-BM8btjRFCweE3ht45cdiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.128.0/17
82.177.0.0/16
88.220.0.0/16
194.183.32.0/19
195.136.0.0/16
213.172.160.0/19
IPv6:
2a00:4120::/32
Signature Algorithm: sha256WithRSAEncryption
0e:7f:b7:8f:fc:4f:3c:ee:f5:18:27:ad:8d:57:c9:fa:31:e0:
df:cc:e8:45:af:d8:19:99:34:92:19:8e:a5:1c:0b:92:a0:b6:
18:bc:d0:11:51:e4:d1:76:68:a9:74:c9:29:45:9e:ed:2a:6c:
37:65:aa:9d:ec:3f:ec:e7:22:48:68:8a:ee:73:ce:21:f0:4c:
8a:79:94:86:9c:fe:6d:7b:3b:f7:75:6a:64:3b:84:fe:c6:b1:
29:ed:00:23:40:ba:98:1f:a5:c9:e0:e6:5f:d7:d4:6e:db:be:
a7:60:09:4b:c2:95:6e:8a:79:8d:b0:b5:3f:7f:90:b2:2f:98:
06:b8:03:19:1f:40:65:d9:48:de:38:65:3d:b5:13:4f:ff:0c:
0f:e7:00:b9:2f:e0:10:61:e1:e2:04:9d:48:75:c4:34:d1:3a:
27:68:bf:e3:d5:05:62:2a:d4:9d:ed:8a:31:09:f5:00:95:a4:
b2:4c:a1:18:ba:7a:d7:d2:2e:03:18:20:cb:f4:e6:03:f3:e9:
25:5f:4c:0a:09:d5:4d:00:22:20:58:73:63:cb:9b:60:9a:6b:
e2:c8:3a:bc:a4:a2:b3:62:b5:6f:70:ee:a1:73:d4:f8:c1:34:
cf:47:b3:72:16:bb:2d:1a:04:e0:a6:20:8d:54:e6:b5:46:8c:
f9:a2:a5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:44:40 2026 by rpki-client