Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-MVE0P8P9kGWpbc5r_rVaZZuUSY.roa
File: 1-MVE0P8P9kGWpbc5r_rVaZZuUSY.roa (raw, json)
Hash identifier: 9734hbydI01Mysv+mFWjt5Qw9lCJrYHGrFA7e8epJuo=
Subject key identifier: F8:C5:44:D0:FF:0F:F6:41:96:A5:B7:39:AF:FA:D5:69:96:6E:51:26
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019DB46D2C9AC4F8EF4CD607E3FC21FC6908
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-MVE0P8P9kGWpbc5r_rVaZZuUSY.roa
Signing time: Wed 22 Apr 2026 09:02:26 +0000
ROA not before: Wed 22 Apr 2026 09:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41221
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 24
86.105.172.0/22 maxlen: 24
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 24
86.106.208.0/20 maxlen: 24
86.107.64.0/22 maxlen: 24
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 24
89.32.136.0/21 maxlen: 24
89.32.172.0/22 maxlen: 24
89.32.252.0/22 maxlen: 24
89.34.192.0/21 maxlen: 24
89.34.204.0/22 maxlen: 24
89.34.232.0/22 maxlen: 24
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 24
89.35.84.0/22 maxlen: 24
89.35.200.0/22 maxlen: 24
89.36.156.0/22 maxlen: 24
89.37.44.0/22 maxlen: 24
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 24
89.38.64.0/22 maxlen: 24
89.38.76.0/22 maxlen: 24
89.39.76.0/22 maxlen: 24
89.39.84.0/22 maxlen: 24
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 24
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 24
89.42.72.0/21 maxlen: 24
89.42.104.0/22 maxlen: 24
89.42.128.0/22 maxlen: 24
89.42.180.0/22 maxlen: 24
89.42.224.0/22 maxlen: 24
89.43.128.0/22 maxlen: 24
89.43.168.0/22 maxlen: 24
89.44.152.0/22 maxlen: 24
89.45.40.0/22 maxlen: 24
89.46.164.0/22 maxlen: 24
92.114.128.0/17 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 24
93.113.92.0/22 maxlen: 24
93.113.244.0/22 maxlen: 24
93.115.136.0/21 maxlen: 24
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 24
93.117.72.0/21 maxlen: 24
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 24
93.117.144.0/21 maxlen: 24
93.117.156.0/22 maxlen: 24
93.117.160.0/21 maxlen: 24
93.117.168.0/22 maxlen: 24
93.118.176.0/22 maxlen: 24
93.118.188.0/22 maxlen: 24
93.119.96.0/21 maxlen: 24
93.119.108.0/22 maxlen: 24
93.119.128.0/21 maxlen: 24
93.119.140.0/22 maxlen: 24
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 24
93.119.196.0/22 maxlen: 24
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 24
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/19 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 24
188.208.104.0/22 maxlen: 24
188.208.112.0/22 maxlen: 24
188.208.192.0/22 maxlen: 24
188.208.204.0/22 maxlen: 24
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 24
188.210.248.0/22 maxlen: 24
188.212.0.0/22 maxlen: 24
188.212.8.0/21 maxlen: 24
188.212.24.0/21 maxlen: 24
188.212.40.0/21 maxlen: 24
188.213.36.0/22 maxlen: 24
188.213.52.0/22 maxlen: 24
188.213.220.0/22 maxlen: 24
188.213.236.0/22 maxlen: 24
188.213.244.0/22 maxlen: 24
188.214.60.0/22 maxlen: 24
188.214.144.0/22 maxlen: 24
188.214.200.0/21 maxlen: 24
188.215.252.0/22 maxlen: 24
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:6d:2c:9a:c4:f8:ef:4c:d6:07:e3:fc:21:fc:69:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Apr 22 09:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8c544d0ff0ff64196a5b739affad569966e5126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4d:97:b7:8b:83:e9:e7:e2:74:bb:63:65:f0:
4e:2f:eb:d7:1c:ca:53:1a:3b:8b:fb:7e:fd:d1:95:
56:89:11:71:eb:de:ad:d0:19:66:43:59:af:54:35:
d5:18:14:54:24:66:85:04:08:ca:74:e9:02:86:08:
0c:59:47:19:c8:04:b9:06:66:4e:8c:68:b1:7f:bc:
ee:0f:b0:97:f1:b3:cc:36:22:c4:a7:ba:3f:91:2c:
d6:70:56:98:de:66:8e:70:fe:67:d5:52:56:15:b5:
e6:e0:46:e4:61:9e:da:bb:6f:0d:c7:ec:91:56:f6:
3a:11:f3:fa:c1:3a:fe:fa:f1:75:cf:16:68:48:df:
81:74:cc:69:d1:1d:bc:a6:3b:9a:91:e7:80:fa:b4:
40:42:54:1a:de:50:58:a4:8f:4d:d5:6f:b7:e7:64:
cc:68:6f:3f:d1:c3:ba:01:d7:07:58:3e:47:7b:9b:
73:d0:c2:06:00:3a:16:a3:ba:6e:ba:07:75:3e:69:
4b:b5:35:4d:dc:c7:c1:16:58:f0:0a:09:82:46:58:
6f:62:9a:bb:7f:6b:6f:26:35:76:ae:f9:2d:e7:0c:
aa:04:ce:40:48:26:c9:a7:70:ef:6c:a4:c8:ee:f0:
dd:5c:9a:92:2e:b5:dc:83:2d:68:80:da:05:9b:0f:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C5:44:D0:FF:0F:F6:41:96:A5:B7:39:AF:FA:D5:69:96:6E:51:26
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-MVE0P8P9kGWpbc5r_rVaZZuUSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0/20
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0/17
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.159.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.144.0/22
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:a4:8f:cb:d1:78:9a:b1:0d:d4:e0:7e:50:fe:c3:ec:cb:59:
f2:6a:73:6a:97:98:51:bd:13:a6:ec:c6:cc:5b:6c:83:fb:5e:
9a:d1:29:65:df:c3:fd:61:a9:fd:82:a7:9a:6a:a9:91:a8:93:
b9:d8:02:4a:74:13:91:1e:ab:2f:8c:57:b9:67:c3:74:99:bf:
4a:65:50:d6:dd:0a:c0:ba:a9:16:3b:30:0c:1a:1d:a6:28:01:
3b:a1:b4:cf:69:ca:9c:21:44:91:1a:d9:f3:1c:1c:48:a5:80:
a9:8e:68:67:a0:3a:b0:e1:3e:f3:b9:2c:36:40:b6:8d:99:c5:
d8:01:20:9d:42:32:d9:66:58:fb:9b:1f:00:0d:34:1f:78:b0:
2b:86:8d:fa:96:db:da:84:ee:64:c9:d1:b1:5e:ba:30:6b:5d:
01:42:43:19:47:03:d5:29:0c:c5:8f:b6:07:ef:78:be:34:c4:
b3:d4:12:57:71:8c:7a:5d:51:76:7d:e4:d3:e8:19:6f:31:71:
10:5a:f6:12:a2:d6:02:65:4c:89:02:73:2f:aa:0c:de:a6:14:
54:f4:41:fe:cc:02:a8:8e:aa:af:09:d5:ff:5a:07:a1:6c:23:
4b:bd:fe:9c:55:d8:dd:60:be:1c:a0:8f:d2:6f:e5:05:9b:d2:
f6:03:b5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:59:31 2026 by rpki-client