Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/0wa86QahRAsjNjEQlTQVZQFc0L8.roa
File: 0wa86QahRAsjNjEQlTQVZQFc0L8.roa (raw, json)
Hash identifier: 9szD6M+5Y956fiiRzqJTUW9BsCgg0tkYrSKp9P1Gyl8=
Subject key identifier: D3:06:BC:E9:06:A1:44:0B:23:36:31:10:95:34:15:65:01:5C:D0:BF
Certificate issuer: /CN=511573efd2fbfe07a2f27209129e5bb485378ac7
Certificate serial: 01A1327260272C48018EF5320F82457766B5
Authority key identifier: 51:15:73:EF:D2:FB:FE:07:A2:F2:72:09:12:9E:5B:B4:85:37:8A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/URVz79L7_gei8nIJEp5btIU3isc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/0wa86QahRAsjNjEQlTQVZQFc0L8.roa
Signing time: Mon 12 Oct 2026 23:28:38 +0000
ROA not before: Mon 12 Oct 2026 23:28:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48101
IP address blocks: 37.25.44.0/24 maxlen: 24
37.25.45.0/24 maxlen: 24
37.25.46.0/23 maxlen: 23
81.85.192.0/18 maxlen: 19
91.151.240.0/20 maxlen: 22
91.228.232.0/23 maxlen: 24
91.228.234.0/24 maxlen: 24
95.166.0.0/18 maxlen: 21
98.96.160.0/20 maxlen: 23
134.19.192.0/22 maxlen: 22
134.19.196.0/22 maxlen: 23
134.65.128.0/21 maxlen: 21
134.65.136.0/22 maxlen: 22
134.65.140.0/22 maxlen: 22
134.65.144.0/22 maxlen: 22
134.65.148.0/22 maxlen: 22
134.65.152.0/21 maxlen: 21
146.103.128.0/18 maxlen: 19
147.28.96.0/19 maxlen: 23
156.67.32.0/22 maxlen: 22
176.20.128.0/18 maxlen: 21
185.16.160.0/22 maxlen: 24
185.122.192.0/22 maxlen: 22
199.15.232.0/22 maxlen: 22
199.15.236.0/24 maxlen: 24
199.15.237.0/24 maxlen: 24
199.15.238.0/24 maxlen: 24
199.15.239.0/24 maxlen: 24
2a04:200::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.mft
rsync://rpki.ripe.net/repository/DEFAULT/URVz79L7_gei8nIJEp5btIU3isc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:72:60:27:2c:48:01:8e:f5:32:0f:82:45:77:66:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=511573efd2fbfe07a2f27209129e5bb485378ac7
Validity
Not Before: Oct 12 23:28:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d306bce906a1440b2336311095341565015cd0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:96:dc:42:f1:5e:17:3e:d9:21:5f:7d:06:
d5:7f:4b:d8:10:b9:83:8d:ef:df:b3:47:56:40:3d:
df:b1:01:c6:f2:ac:fe:60:27:8b:ee:a6:6b:2f:b0:
29:2d:8a:9e:51:23:5c:af:ac:d9:b3:4f:2a:c4:19:
41:48:63:40:a2:ad:a4:c3:fd:2e:4b:90:c8:8c:62:
f1:ba:be:53:d3:a3:60:3c:52:4c:32:e2:7e:ff:8b:
ff:54:22:1f:00:cd:d1:3e:db:cf:d6:63:58:60:60:
09:53:4d:ee:42:63:51:4c:e9:ef:93:86:79:18:ef:
7e:5c:e7:a0:a0:44:8b:2d:7f:1c:28:58:a4:79:75:
0a:1b:98:6e:19:63:fa:21:06:9e:66:47:24:18:3e:
b1:52:21:b9:51:28:46:f7:2c:a2:43:d5:cc:5a:94:
8e:b5:53:a4:7b:58:52:30:54:37:cc:55:74:e8:5c:
57:d9:7b:ab:1e:d5:4b:c5:f1:b4:e9:ad:a8:71:44:
15:8d:d1:8d:ec:a9:83:d3:8c:bb:5d:67:a9:1c:65:
f6:ea:e9:72:ec:18:cc:3b:90:e0:3c:d9:b7:b2:76:
57:f9:94:f9:d9:b0:34:81:09:49:5f:bf:07:d4:1c:
8d:a4:c1:5f:09:53:e9:ef:e4:cb:e5:02:41:ee:0c:
e6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:BC:E9:06:A1:44:0B:23:36:31:10:95:34:15:65:01:5C:D0:BF
X509v3 Authority Key Identifier:
keyid:51:15:73:EF:D2:FB:FE:07:A2:F2:72:09:12:9E:5B:B4:85:37:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URVz79L7_gei8nIJEp5btIU3isc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/0wa86QahRAsjNjEQlTQVZQFc0L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/URVz79L7_gei8nIJEp5btIU3isc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.44.0/22
81.85.192.0/18
91.151.240.0/20
91.228.232.0-91.228.234.255
95.166.0.0/18
98.96.160.0/20
134.19.192.0/21
134.65.128.0/19
146.103.128.0/18
147.28.96.0/19
156.67.32.0/22
176.20.128.0/18
185.16.160.0/22
185.122.192.0/22
199.15.232.0/21
IPv6:
2a04:200::/29
Signature Algorithm: sha256WithRSAEncryption
41:fe:92:22:53:49:67:64:9c:99:47:b2:68:b1:ba:fa:c9:72:
3e:f9:ec:b3:7b:4d:3e:fd:c6:1a:0f:5b:95:37:31:07:04:8f:
ff:68:16:06:d8:ba:5b:a1:0c:12:e5:31:43:3e:ce:1f:6a:1a:
31:f4:a8:6f:1c:d2:42:26:fc:6d:fd:4c:82:4f:d2:02:52:76:
83:50:fc:bf:3d:ef:a5:0d:c0:6d:20:52:75:db:cd:2f:14:be:
a0:9a:fd:ec:63:50:41:1a:18:8f:5e:20:fe:64:99:8d:46:b0:
e0:87:75:6a:4f:46:68:22:e6:2f:9e:d6:86:01:2d:69:7c:1b:
6e:4e:bd:02:10:69:3f:b3:77:a0:23:69:22:44:48:c2:6c:01:
85:dd:83:0a:64:f1:bd:24:1c:4f:66:77:7f:c6:ec:55:56:6f:
f5:76:5d:26:5b:a7:77:da:e1:c5:81:44:0f:95:ad:cc:69:4f:
d4:0e:4f:88:ca:7e:b4:a3:81:7a:ef:bc:66:4c:19:0f:d7:32:
89:f8:3e:3c:bd:71:8a:5a:53:32:9e:75:35:79:52:e9:04:46:
a8:74:5c:6d:a4:a1:be:3e:8d:02:72:38:b1:5f:ca:10:81:5d:
d0:88:22:d1:2a:3c:07:31:e8:0c:90:49:24:36:bd:7b:b9:76:
ab:da:88:13
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgISAaEycmAnLEgBjvUyD4JFd2a1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMTU3M2VmZDJmYmZlMDdhMmYyNzIwOTEyOWU1YmI0ODUz
NzhhYzcwHhcNMjYxMDEyMjMyODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzA2YmNlOTA2YTE0NDBiMjMzNjMxMTA5NTM0MTU2NTAxNWNkMGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rGW3ELxXhc+2SFffQbVf0vYELmD
je/fs0dWQD3fsQHG8qz+YCeL7qZrL7ApLYqeUSNcr6zZs08qxBlBSGNAoq2kw/0u
S5DIjGLxur5T06NgPFJMMuJ+/4v/VCIfAM3RPtvP1mNYYGAJU03uQmNRTOnvk4Z5
GO9+XOegoESLLX8cKFikeXUKG5huGWP6IQaeZkckGD6xUiG5UShG9yyiQ9XMWpSO
tVOke1hSMFQ3zFV06FxX2XurHtVLxfG06a2ocUQVjdGN7KmD04y7XWepHGX26uly
7BjMO5DgPNm3snZX+ZT52bA0gQlJX78H1ByNpMFfCVPp7+TL5QJB7gzmhwIDAQAB
o4ICdTCCAnEwHQYDVR0OBBYEFNMGvOkGoUQLIzYxEJU0FWUBXNC/MB8GA1UdIwQY
MBaAFFEVc+/S+/4HovJyCRKeW7SFN4rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVJWejc5TDdfZ2VpOG5JSkVwNWJ0SVUzaXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUt
YzliNDcwZGMyNDBiLzEvMHdhODZRYWhSQXNqTmpFUWxUUVZaUUZjMEw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUtYzliNDcwZGMyNDBi
LzEvVVJWejc5TDdfZ2VpOG5JSkVwNWJ0SVUzaXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGKBggrBgEFBQcBBwEB/wR7MHkwaAQCAAEwYgMEAiUZLAME
BlFVwAMEBFuX8DAMAwQDW+ToAwQAW+TqAwQGX6YAAwQEYmCgAwQDhhPAAwQFhkGA
AwQGkmeAAwQFkxxgAwQCnEMgAwQGsBSAAwQCuRCgAwQCuXrAAwQDxw/oMA0EAgAC
MAcDBQMqBAIAMA0GCSqGSIb3DQEBCwUAA4IBAQBB/pIiU0lnZJyZR7Josbr6yXI+
+eyze00+/cYaD1uVNzEHBI//aBYG2LpboQwS5TFDPs4fahox9KhvHNJCJvxt/UyC
T9ICUnaDUPy/Pe+lDcBtIFJ1280vFL6gmv3sY1BBGhiPXiD+ZJmNRrDgh3VqT0Zo
IuYvntaGAS1pfBtuTr0CEGk/s3egI2kiREjCbAGF3YMKZPG9JBxPZnd/xuxVVm/1
dl0mW6d32uHFgUQPla3MaU/UDk+Iyn60o4F677xmTBkP1zKJ+D48vXGKWlMynnU1
eVLpBEaodFxtpKG+Po0CcjixX8oQgV3QiCLRKjwHMegMkEkkNr17uXar2ogT
-----END CERTIFICATE-----
Generated at Mon Oct 26 17:51:44 2026 by rpki-client