Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/0x0ycIqzsEV14i4HIEVGA1Et-mM.roa
File: 0x0ycIqzsEV14i4HIEVGA1Et-mM.roa (raw, json)
Hash identifier: ZJXAabgANIuAsLmcSSkOslqdNfqMZ/P+HTqBw6xDzmo=
Subject key identifier: D3:1D:32:70:8A:B3:B0:45:75:E2:2E:07:20:45:46:03:51:2D:FA:63
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A0DD70601F4E94F62A0CB1D0A8B3E723F4
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/0x0ycIqzsEV14i4HIEVGA1Et-mM.roa
Signing time: Sat 26 Sep 2026 11:18:44 +0000
ROA not before: Sat 26 Sep 2026 11:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41221
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 24
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 24
86.106.208.0/20 maxlen: 24
89.32.56.0/21 maxlen: 24
89.32.136.0/21 maxlen: 24
89.32.252.0/22 maxlen: 24
89.34.192.0/21 maxlen: 24
89.34.204.0/22 maxlen: 24
89.34.232.0/22 maxlen: 24
89.35.40.0/21 maxlen: 24
89.36.156.0/22 maxlen: 24
89.37.44.0/22 maxlen: 24
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 24
89.38.64.0/22 maxlen: 24
89.38.76.0/22 maxlen: 24
89.39.76.0/22 maxlen: 24
89.39.84.0/22 maxlen: 24
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 24
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 24
89.42.72.0/21 maxlen: 24
89.42.104.0/22 maxlen: 24
89.42.128.0/22 maxlen: 24
89.42.180.0/22 maxlen: 24
89.42.224.0/22 maxlen: 24
89.43.128.0/22 maxlen: 24
89.43.168.0/22 maxlen: 24
89.44.152.0/22 maxlen: 24
89.45.40.0/22 maxlen: 24
89.46.164.0/22 maxlen: 24
92.114.128.0/17 maxlen: 24
93.113.80.0/21 maxlen: 24
93.113.92.0/22 maxlen: 24
93.113.244.0/22 maxlen: 24
93.115.136.0/21 maxlen: 24
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 24
93.117.72.0/21 maxlen: 24
93.117.140.0/22 maxlen: 24
93.117.144.0/21 maxlen: 24
93.117.156.0/22 maxlen: 24
93.117.160.0/21 maxlen: 24
93.117.168.0/22 maxlen: 24
93.119.96.0/21 maxlen: 24
93.119.128.0/21 maxlen: 24
93.119.160.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/19 maxlen: 24
185.28.104.0/22 maxlen: 24
188.209.216.0/21 maxlen: 24
188.212.0.0/22 maxlen: 24
188.212.24.0/21 maxlen: 24
188.212.40.0/21 maxlen: 24
188.214.144.0/22 maxlen: 24
188.214.200.0/21 maxlen: 24
188.215.252.0/22 maxlen: 24
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:70:60:1f:4e:94:f6:2a:0c:b1:d0:a8:b3:e7:23:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Sep 26 11:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d31d32708ab3b04575e22e0720454603512dfa63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:a3:be:e6:da:c1:69:49:44:73:db:49:d6:
43:a8:6a:b8:83:78:ed:43:db:29:d4:1b:d7:d7:44:
b4:5d:03:d9:f8:96:31:eb:da:18:5c:85:0c:3b:cb:
03:5c:c5:d4:71:81:6a:be:ca:fe:e8:93:fb:93:30:
b9:fa:02:0c:d4:4d:a2:8c:4e:dc:12:e1:ef:b4:1b:
d6:6d:31:e4:9f:64:d1:d4:46:de:f3:7a:d2:73:95:
61:02:1a:37:96:67:41:d4:ab:84:90:d1:e3:0b:12:
03:cd:ca:60:be:07:b4:61:de:d3:2b:7a:e9:0c:f1:
fa:c1:7c:37:63:d9:31:41:b7:59:8a:52:52:ee:ec:
94:57:7e:df:58:93:df:3a:27:7b:20:8c:fd:ea:5b:
2f:96:53:fb:0a:1e:47:0b:02:10:91:9f:70:45:82:
12:17:3c:b6:ec:ee:dd:cd:1e:fa:b2:d3:6d:81:61:
20:76:a3:4c:a6:5e:a2:38:44:b5:2c:3b:6d:31:b0:
8f:67:f4:08:9d:3d:7e:80:bc:2e:4e:02:60:23:f5:
ba:9a:42:ca:9d:d3:9a:76:22:bc:07:de:f8:2d:98:
ee:29:40:ae:61:3e:bf:27:ca:d1:75:52:0c:77:97:
1f:ac:6b:58:74:94:0b:32:29:90:66:a0:ac:e4:97:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1D:32:70:8A:B3:B0:45:75:E2:2E:07:20:45:46:03:51:2D:FA:63
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/0x0ycIqzsEV14i4HIEVGA1Et-mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
86.105.56.0/21
86.105.80.0/21
86.105.208.0/22
86.106.144.0/21
86.106.208.0/20
89.32.56.0/21
89.32.136.0/21
89.32.252.0/22
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.40.0/21
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0/17
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.119.96.0/21
93.119.128.0/21
93.119.160.0/21
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.159.255
185.28.104.0/22
188.209.216.0/21
188.212.0.0/22
188.212.24.0/21
188.212.40.0/21
188.214.144.0/22
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
Signature Algorithm: sha256WithRSAEncryption
47:45:a2:3e:dc:cf:c7:23:b6:b9:5b:59:7e:4d:f2:e6:54:cd:
2a:2c:b7:f0:21:99:d6:08:95:5a:bc:c4:0f:46:3c:27:30:ea:
a5:e0:2f:d8:5a:88:7b:ec:43:3b:81:20:09:59:17:00:3d:aa:
03:67:99:67:65:69:19:03:3c:8b:62:98:91:42:0c:45:a3:72:
15:34:3c:22:5e:ec:14:3f:b5:f0:1e:eb:4d:4f:bd:23:b8:51:
2e:85:52:3a:38:66:54:da:79:43:00:e9:f0:8f:3f:06:72:e9:
38:e6:2f:1a:f0:cf:3b:73:c7:09:ca:08:25:4c:4e:f3:7c:8f:
ff:9c:63:f7:d6:74:7e:8f:55:cc:f9:84:31:df:b3:be:3f:55:
a1:6c:17:20:2d:94:ae:5c:e5:cd:36:2f:c9:b2:70:45:bf:4f:
ef:b6:90:e3:15:4e:05:4e:72:77:20:52:3c:9f:ab:75:c0:0b:
71:e8:72:7c:6a:8d:3e:f6:c7:23:01:35:fd:67:c8:33:32:e4:
84:17:9d:f4:61:51:68:ed:58:ae:f6:cc:ce:71:4f:d3:69:b2:
85:99:c5:68:47:22:45:78:16:0a:30:55:78:09:1d:45:10:b6:
10:28:8f:92:8d:2e:33:bb:60:6c:78:1d:bb:1c:14:8f:27:18:
e5:0e:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:06 2026 by rpki-client