Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pDgbd5GMtCt6eHmB7NWUU_zoFHc.roa
File: pDgbd5GMtCt6eHmB7NWUU_zoFHc.roa (raw, json)
Hash identifier: 9CpCXZol72OMEeN6yzYz/mClQYMEoAD44EkoYyplz1U=
Subject key identifier: A4:38:1B:77:91:8C:B4:2B:7A:78:79:81:EC:D5:94:53:FC:E8:14:77
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 01A1402AA68E401AFCA358F8ECCFA0A46F20
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pDgbd5GMtCt6eHmB7NWUU_zoFHc.roa
Signing time: Thu 15 Oct 2026 15:24:59 +0000
ROA not before: Thu 15 Oct 2026 15:24:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42473
IP address blocks: 2.57.104.0/24 maxlen: 24
2.57.105.0/24 maxlen: 24
2.57.106.0/24 maxlen: 24
2.57.107.0/24 maxlen: 24
37.235.3.0/24 maxlen: 24
37.235.4.0/24 maxlen: 24
37.235.5.0/24 maxlen: 24
37.235.7.0/24 maxlen: 24
37.252.224.0/19 maxlen: 32
37.252.226.0/24 maxlen: 24
37.252.228.0/24 maxlen: 32
37.252.234.0/24 maxlen: 24
37.252.243.0/24 maxlen: 24
37.252.244.0/24 maxlen: 24
37.252.251.0/24 maxlen: 24
37.252.253.0/24 maxlen: 24
45.84.252.0/24 maxlen: 24
45.84.253.0/24 maxlen: 24
45.132.61.0/24 maxlen: 24
45.132.62.0/23 maxlen: 24
62.117.128.0/17 maxlen: 24
62.117.132.0/22 maxlen: 22
94.16.98.0/24 maxlen: 24
94.16.100.0/24 maxlen: 24
94.16.101.0/24 maxlen: 24
94.16.125.0/24 maxlen: 24
94.16.126.0/24 maxlen: 24
144.208.192.0/18 maxlen: 32
144.208.204.0/24 maxlen: 24
144.208.205.0/24 maxlen: 24
144.208.206.0/24 maxlen: 24
144.208.207.0/24 maxlen: 24
144.208.212.0/22 maxlen: 32
144.208.216.0/24 maxlen: 24
144.208.217.0/24 maxlen: 24
144.208.219.0/24 maxlen: 24
144.208.221.0/24 maxlen: 24
144.208.222.0/24 maxlen: 24
144.208.223.0/24 maxlen: 24
144.208.224.0/24 maxlen: 24
144.208.225.0/24 maxlen: 24
144.208.226.0/24 maxlen: 24
144.208.228.0/24 maxlen: 24
144.208.229.0/24 maxlen: 24
144.208.230.0/24 maxlen: 24
144.208.231.0/24 maxlen: 24
144.208.232.0/24 maxlen: 24
144.208.233.0/24 maxlen: 24
144.208.235.0/24 maxlen: 24
144.208.236.0/24 maxlen: 24
144.208.237.0/24 maxlen: 24
144.208.238.0/24 maxlen: 24
144.208.240.0/24 maxlen: 24
144.208.241.0/24 maxlen: 24
144.208.242.0/24 maxlen: 24
144.208.244.0/24 maxlen: 24
144.208.254.0/24 maxlen: 24
144.208.255.0/24 maxlen: 24
176.123.54.0/23 maxlen: 23
178.255.152.0/21 maxlen: 32
185.2.176.0/22 maxlen: 32
185.2.176.0/24 maxlen: 24
185.50.232.0/23 maxlen: 23
185.50.235.0/24 maxlen: 24
185.81.206.0/24 maxlen: 24
185.81.209.0/24 maxlen: 24
185.116.96.0/24 maxlen: 24
185.116.97.0/24 maxlen: 24
185.116.98.0/24 maxlen: 24
185.116.99.0/24 maxlen: 24
185.228.148.0/22 maxlen: 22
188.65.72.0/21 maxlen: 32
188.172.192.0/18 maxlen: 32
188.172.208.0/24 maxlen: 24
188.172.230.0/23 maxlen: 23
188.172.247.0/24 maxlen: 24
188.172.249.0/24 maxlen: 24
188.172.254.0/24 maxlen: 24
193.33.114.0/23 maxlen: 32
194.1.206.0/24 maxlen: 32
213.227.160.0/19 maxlen: 32
213.227.184.0/24 maxlen: 24
217.146.0.0/19 maxlen: 24
217.146.6.0/24 maxlen: 24
217.146.7.0/24 maxlen: 24
2a00:11c0::/32 maxlen: 128
2a00:11c0:13::/48 maxlen: 48
2a00:11c0:19::/48 maxlen: 48
2a00:11c0:22::/48 maxlen: 48
2a00:11c0:24::/48 maxlen: 48
2a00:11c0:29::/48 maxlen: 48
2a00:11c0:40::/48 maxlen: 48
2a00:11c0:41::/48 maxlen: 48
2a00:11c0:42::/48 maxlen: 48
2a00:11c0:43::/48 maxlen: 48
2a00:11c0:46::/48 maxlen: 48
2a00:11c0:4a::/48 maxlen: 48
2a00:11c0:5c::/48 maxlen: 48
2a00:11c0:66::/48 maxlen: 48
2a00:11c0:6c::/48 maxlen: 48
2a00:11c0:79::/48 maxlen: 48
2a00:11c0:80::/48 maxlen: 48
2a00:11c0:83::/48 maxlen: 48
2a00:11c0:84::/48 maxlen: 48
2a00:11c0:86::/48 maxlen: 48
2a00:11c0:87::/48 maxlen: 48
2a00:11c0:88::/48 maxlen: 48
2a00:11c0:96::/48 maxlen: 48
2a00:11c0:97::/48 maxlen: 48
2a00:11c0:98::/48 maxlen: 48
2a00:11c0:99::/48 maxlen: 48
2a00:11c0:9a::/48 maxlen: 48
2a00:11c0:dc::/48 maxlen: 48
2a00:11c0:dd::/48 maxlen: 48
2a00:11c0:de::/48 maxlen: 48
2a00:11c0:1011::/48 maxlen: 48
2a00:11c0:1014::/48 maxlen: 48
2a00:11c0:1334::/48 maxlen: 48
2a00:11c0:1335::/48 maxlen: 48
2a00:11c0:1798::/48 maxlen: 48
2a00:11c0:179a::/48 maxlen: 48
2a00:11c0:179b::/48 maxlen: 48
2a00:11c0:9021::/48 maxlen: 48
2a01:aea0::/32 maxlen: 32
2a01:aea0::/40 maxlen: 40
2a01:aea0:dd1::/48 maxlen: 48
2a01:aea0:df1::/48 maxlen: 48
2a05:8900:28::/48 maxlen: 48
2a05:8900:36::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:2a:a6:8e:40:1a:fc:a3:58:f8:ec:cf:a0:a4:6f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Oct 15 15:24:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4381b77918cb42b7a787981ecd59453fce81477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:35:c1:9d:31:50:b9:86:13:b8:f0:ab:fe:
47:59:2f:99:d2:47:05:7f:18:d1:e0:29:4f:4f:07:
7b:33:5d:5d:d5:96:80:93:3e:99:97:8f:4b:e6:34:
8d:1d:90:35:78:b0:18:ce:af:5c:01:b9:e0:d4:e2:
90:7f:df:11:91:e1:64:f9:5a:e4:5b:0a:b3:c2:d4:
e9:30:0b:a0:a8:fb:b3:80:23:05:72:a1:ab:9f:3e:
bd:a6:5e:7f:f0:d8:8d:f8:7a:cb:c2:0b:87:2b:1e:
25:49:54:32:e7:a1:3a:0a:e1:f0:51:36:83:50:2a:
7d:59:4f:53:6b:1b:3e:4b:a3:ee:55:c6:c9:c4:11:
38:e1:3c:f6:0e:cf:f0:b1:aa:fe:fa:1f:e9:9d:02:
0d:22:81:bc:98:18:9b:0b:24:91:b1:2e:a5:7d:e2:
62:d5:d1:1a:54:07:69:23:e2:b6:4e:fb:77:1e:9e:
f2:7b:7c:3e:ae:e0:08:2b:e6:68:4f:d6:4d:33:52:
40:90:2e:39:b0:a5:89:60:99:47:5b:f1:94:11:c1:
6f:5c:2a:09:df:a7:27:c2:59:a4:5b:58:7f:d2:f1:
f4:b1:38:6b:01:dd:67:17:c1:c6:d6:88:66:00:b1:
1a:7f:11:35:19:20:ab:6d:cf:f4:ef:bc:96:30:56:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:38:1B:77:91:8C:B4:2B:7A:78:79:81:EC:D5:94:53:FC:E8:14:77
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pDgbd5GMtCt6eHmB7NWUU_zoFHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.104.0/22
37.235.3.0-37.235.5.255
37.235.7.0/24
37.252.224.0/19
45.84.252.0/23
45.132.61.0-45.132.63.255
62.117.128.0/17
94.16.98.0/24
94.16.100.0/23
94.16.125.0-94.16.126.255
144.208.192.0/18
176.123.54.0/23
178.255.152.0/21
185.2.176.0/22
185.50.232.0/23
185.50.235.0/24
185.81.206.0/24
185.81.209.0/24
185.116.96.0/22
185.228.148.0/22
188.65.72.0/21
188.172.192.0/18
193.33.114.0/23
194.1.206.0/24
213.227.160.0/19
217.146.0.0/19
IPv6:
2a00:11c0::/32
2a01:aea0::/32
2a05:8900:28::/48
2a05:8900:36::/48
Signature Algorithm: sha256WithRSAEncryption
76:dc:87:86:e6:ac:a8:e7:21:e9:3e:1b:68:ad:50:79:96:f0:
7e:d7:e6:3a:ea:dc:aa:84:6e:f6:5c:89:09:ff:9e:33:70:a7:
26:3d:e0:4f:25:ad:86:33:19:b4:48:b3:66:43:d1:cc:d1:0f:
3d:c2:5f:74:27:9a:25:2a:d5:13:73:ae:63:35:b0:74:33:4c:
0f:b5:cc:ef:da:14:7d:31:00:18:44:e1:06:cb:9c:60:4a:52:
44:2b:ea:7f:59:6c:bd:74:f9:23:70:d7:b4:b7:67:04:12:41:
da:ca:32:31:86:85:4c:93:df:b3:f9:43:2b:fd:f6:00:47:e0:
11:15:84:83:d9:51:0a:3e:dd:e0:fd:3d:c4:17:1c:5a:f3:61:
d8:16:7e:f7:41:91:90:a3:ac:b2:a1:44:d1:eb:7d:d7:37:2e:
83:dd:12:27:82:02:24:d0:01:f4:4c:a9:97:37:18:2f:61:61:
37:9f:ce:22:4e:3b:1b:1d:2c:01:ca:d4:5d:fd:9c:7c:38:66:
d2:50:4a:da:02:00:af:31:fe:20:28:e8:b7:02:50:f5:e2:eb:
54:76:29:cb:1e:02:fc:18:42:66:e9:b2:31:33:96:f2:6f:e8:
7c:0e:d1:6f:38:cb:96:b5:85:f2:6a:fa:c6:17:6b:33:c5:13:
9b:10:1c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:23:55 2026 by rpki-client