Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/1P6t_IIiTwHopdm3fJ6ONRCwo_M.roa
File: 1P6t_IIiTwHopdm3fJ6ONRCwo_M.roa (raw, json)
Hash identifier: suMQQFIhhVwIs21Iiaq/H4SDPICacHTdtZFz9AL2Rtw=
Subject key identifier: D4:FE:AD:FC:82:22:4F:01:E8:A5:D9:B7:7C:9E:8E:35:10:B0:A3:F3
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 019FB91F626F4A4F5D4FA06406FE211EC44C
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/1P6t_IIiTwHopdm3fJ6ONRCwo_M.roa
Signing time: Fri 31 Jul 2026 17:01:09 +0000
ROA not before: Fri 31 Jul 2026 17:01:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47952
IP address blocks: 45.136.106.0/24 maxlen: 24
45.139.220.0/24 maxlen: 24
45.139.221.0/24 maxlen: 24
45.139.223.0/24 maxlen: 24
45.145.21.0/24 maxlen: 24
45.145.22.0/24 maxlen: 24
45.145.23.0/24 maxlen: 24
81.90.176.0/24 maxlen: 24
81.90.177.0/24 maxlen: 24
81.90.178.0/24 maxlen: 24
81.90.179.0/24 maxlen: 24
81.200.140.0/24 maxlen: 24
81.200.141.0/24 maxlen: 24
81.200.142.0/24 maxlen: 24
81.200.143.0/24 maxlen: 24
91.106.216.0/24 maxlen: 24
91.106.217.0/24 maxlen: 24
91.106.218.0/24 maxlen: 24
91.106.219.0/24 maxlen: 24
91.194.52.0/24 maxlen: 24
91.194.54.0/24 maxlen: 24
153.56.138.0/24 maxlen: 24
153.56.139.0/24 maxlen: 24
185.82.220.0/24 maxlen: 24
185.82.221.0/24 maxlen: 24
185.82.222.0/24 maxlen: 24
185.82.223.0/24 maxlen: 24
185.126.177.0/24 maxlen: 24
185.126.178.0/24 maxlen: 24
185.126.179.0/24 maxlen: 24
185.201.212.0/24 maxlen: 24
185.201.213.0/24 maxlen: 24
185.201.214.0/24 maxlen: 24
185.201.215.0/24 maxlen: 24
193.35.204.0/24 maxlen: 24
193.35.205.0/24 maxlen: 24
193.35.206.0/24 maxlen: 24
193.35.207.0/24 maxlen: 24
193.138.172.0/24 maxlen: 24
193.138.173.0/24 maxlen: 24
193.138.174.0/24 maxlen: 24
193.138.175.0/24 maxlen: 24
194.56.184.0/24 maxlen: 24
194.56.185.0/24 maxlen: 24
194.56.186.0/24 maxlen: 24
194.56.187.0/24 maxlen: 24
194.127.116.0/24 maxlen: 24
194.127.117.0/24 maxlen: 24
194.127.118.0/24 maxlen: 24
194.127.119.0/24 maxlen: 24
2a0a:c4c0::/48 maxlen: 48
2a0a:c4c0:1::/48 maxlen: 48
2a0a:c4c0:2::/48 maxlen: 48
2a0a:c4c0:3::/48 maxlen: 48
2a0a:c4c0:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:1f:62:6f:4a:4f:5d:4f:a0:64:06:fe:21:1e:c4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: Jul 31 17:01:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4feadfc82224f01e8a5d9b77c9e8e3510b0a3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:17:70:2c:af:ad:6f:b4:6a:76:8c:98:a2:
97:ed:4d:d3:2a:65:2f:33:7d:ca:2b:e9:8e:2a:ba:
19:08:b1:ef:df:67:d6:11:eb:7e:5e:5a:1c:a0:17:
49:79:bf:31:3c:26:db:1a:e9:f5:a1:ba:ca:54:f3:
f4:63:8a:05:dd:64:55:2d:23:25:04:98:9a:c9:7f:
a7:a6:27:63:fd:52:86:23:fd:99:16:70:0e:01:08:
3b:4f:ff:fd:02:1a:16:02:c5:43:7b:72:a6:c2:84:
c3:51:de:28:50:98:e2:18:bf:0f:65:96:5a:77:b2:
73:80:65:eb:9d:ed:87:4d:0c:bc:11:8b:4d:47:98:
98:a1:01:5a:73:13:5b:a8:32:5d:fc:f2:4a:87:a0:
ca:f3:0f:67:3e:a1:49:69:a4:ce:83:5d:8b:c3:0a:
09:89:d6:e5:72:50:dc:42:0e:7c:91:c8:46:58:85:
86:69:7d:f3:9d:04:02:4d:3f:d4:32:d7:86:42:69:
10:08:40:a6:c8:ed:9a:cb:54:1c:1b:e3:63:0a:0e:
c4:6d:a2:e7:9c:b1:60:7e:d3:17:1b:42:6c:05:fd:
79:8f:57:2b:12:55:1e:10:7e:bd:e4:4d:fd:2a:ee:
17:de:c1:df:d5:1c:dd:75:43:28:3d:01:8e:af:f3:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FE:AD:FC:82:22:4F:01:E8:A5:D9:B7:7C:9E:8E:35:10:B0:A3:F3
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/1P6t_IIiTwHopdm3fJ6ONRCwo_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.106.0/24
45.139.220.0/23
45.139.223.0/24
45.145.21.0-45.145.23.255
81.90.176.0/22
81.200.140.0/22
91.106.216.0/22
91.194.52.0/24
91.194.54.0/24
153.56.138.0/23
185.82.220.0/22
185.126.177.0-185.126.179.255
185.201.212.0/22
193.35.204.0/22
193.138.172.0/22
194.56.184.0/22
194.127.116.0/22
IPv6:
2a0a:c4c0::/46
2a0a:c4c0:100::/48
Signature Algorithm: sha256WithRSAEncryption
2a:7b:31:0c:b8:5e:a9:e1:e1:6f:dc:5a:cc:d0:d0:0b:74:37:
4a:4f:5a:3c:66:83:f3:a2:2f:6e:83:97:de:ba:9c:18:69:2e:
8b:12:1e:51:c7:5a:a7:86:5a:47:ca:c7:d0:80:90:88:f1:d2:
29:a2:5e:a4:55:a9:a7:71:6a:89:03:08:91:6d:a4:43:ff:1c:
f2:84:15:45:5b:da:3d:20:5b:10:89:76:22:6f:13:81:85:03:
c8:b0:bd:1e:d4:a3:97:ae:8a:e9:f0:21:fd:66:73:31:4d:ac:
8d:34:57:0a:70:2b:18:cd:b4:73:04:4a:0a:99:61:74:a3:c4:
45:0a:7b:dd:9c:6d:91:ed:91:ca:1f:f7:a6:f2:ae:64:58:69:
c6:30:96:64:7d:e7:dd:17:45:05:4d:19:f9:3a:60:7a:60:ed:
db:da:13:2b:7c:eb:d0:93:96:e7:61:80:2c:8d:42:30:b5:a3:
b9:8e:64:87:3e:5f:ea:f0:81:db:2b:3e:66:40:35:8f:ad:e7:
50:9e:92:19:02:c4:3d:61:53:ce:ca:23:27:b6:37:fe:b0:2d:
2c:54:f2:0a:ac:17:54:c4:8c:2f:25:2c:da:43:22:da:36:5d:
bf:b6:9c:e9:b4:3d:76:c4:5e:da:09:8a:a9:d0:de:48:ed:83:
e4:ce:b7:b4
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgISAZ+5H2JvSk9dT6BkBv4hHsRMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MzBiNzNiNTFjYmM1MzgwZGQ0YWRiM2Q1YWFmZjRkN2Ez
MzRjNWUwHhcNMjYwNzMxMTcwMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGZlYWRmYzgyMjI0ZjAxZThhNWQ5Yjc3YzllOGUzNTEwYjBhM2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql8XcCyvrW+0anaMmKKX7U3TKmUv
M33KK+mOKroZCLHv32fWEet+XlocoBdJeb8xPCbbGun1obrKVPP0Y4oF3WRVLSMl
BJiayX+npidj/VKGI/2ZFnAOAQg7T//9AhoWAsVDe3KmwoTDUd4oUJjiGL8PZZZa
d7JzgGXrne2HTQy8EYtNR5iYoQFacxNbqDJd/PJKh6DK8w9nPqFJaaTOg12LwwoJ
idblclDcQg58kchGWIWGaX3znQQCTT/UMteGQmkQCECmyO2ay1QcG+NjCg7EbaLn
nLFgftMXG0JsBf15j1crElUeEH695E39Ku4X3sHf1RzddUMoPQGOr/MCrQIDAQAB
o4ICljCCApIwHQYDVR0OBBYEFNT+rfyCIk8B6KXZt3yejjUQsKPzMB8GA1UdIwQY
MBaAFLYwtztRy8U4DdSts9Wq/016M0xeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQt
MGQ0OGU2ODk1ZjEyLzEvMVA2dF9JSWlUd0hvcGRtM2ZKNk9OUkN3b19NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQtMGQ0OGU2ODk1ZjEy
LzEvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDB8BAIAATB2AwQALYhq
AwQBLYvcAwQALYvfMAwDBAAtkRUDBAMtkRADBAJRWrADBAJRyIwDBAJbatgDBABb
wjQDBABbwjYDBAGZOIoDBAK5UtwwDAMEALl+sQMEArl+sAMEArnJ1AMEAsEjzAME
AsGKrAMEAsI4uAMEAsJ/dDAYBAIAAjASAwcCKgrEwAAAAwcAKgrEwAEAMA0GCSqG
SIb3DQEBCwUAA4IBAQAqezEMuF6p4eFv3FrM0NALdDdKT1o8ZoPzoi9ug5feupwY
aS6LEh5Rx1qnhlpHysfQgJCI8dIpol6kVamncWqJAwiRbaRD/xzyhBVFW9o9IFsQ
iXYibxOBhQPIsL0e1KOXrorp8CH9ZnMxTayNNFcKcCsYzbRzBEoKmWF0o8RFCnvd
nG2R7ZHKH/em8q5kWGnGMJZkfefdF0UFTRn5OmB6YO3b2hMrfOvQk5bnYYAsjUIw
taO5jmSHPl/q8IHbKz5mQDWPredQnpIZAsQ9YVPOyiMntjf+sC0sVPIKrBdUxIwv
JSzaQyLaNl2/tpzptD12xF7aCYqp0N5I7YPkzre0
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:15 2026 by rpki-client