Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1aAL_GJtYIFnHflfbrLzTlue0yw.roa
File: 1aAL_GJtYIFnHflfbrLzTlue0yw.roa (raw, json)
Hash identifier: kA7YUO6rf34JuUj3z+2XycfLdAqe0ainyswO+tkNzMk=
Subject key identifier: D5:A0:0B:FC:62:6D:60:81:67:1D:F9:5F:6E:B2:F3:4E:5B:9E:D3:2C
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A1598E8400795C44D0D49FE1D78F9ABDF9
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1aAL_GJtYIFnHflfbrLzTlue0yw.roa
Signing time: Tue 20 Oct 2026 13:44:34 +0000
ROA not before: Tue 20 Oct 2026 13:44:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.208.0/22 maxlen: 24
86.105.208.0/23 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.252.0/22 maxlen: 22
89.34.65.0/24 maxlen: 24
89.34.66.0/24 maxlen: 24
89.34.67.0/24 maxlen: 24
89.34.68.0/22 maxlen: 22
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.14.0/24 maxlen: 24
89.35.40.0/21 maxlen: 21
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.131.0/24 maxlen: 24
93.117.140.0/22 maxlen: 24
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.128.0/21 maxlen: 21
93.119.160.0/21 maxlen: 21
93.119.197.0/24 maxlen: 24
93.119.198.0/24 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.120.0/22 maxlen: 24
188.208.126.0/24 maxlen: 24
188.208.127.0/24 maxlen: 24
188.209.216.0/21 maxlen: 24
188.212.0.0/22 maxlen: 22
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:8e:84:00:79:5c:44:d0:d4:9f:e1:d7:8f:9a:bd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Oct 20 13:44:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5a00bfc626d6081671df95f6eb2f34e5b9ed32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:37:a6:61:26:79:70:e1:e3:ca:b2:0e:e9:
2b:6c:08:32:56:f5:2c:36:be:67:e5:a9:2b:c8:a0:
06:e3:46:4f:3f:6a:7c:5b:6e:e7:26:d3:5e:25:1d:
85:57:3b:44:6b:f4:5a:2b:ed:80:05:56:a4:aa:29:
c6:2b:89:2a:8c:14:07:29:dc:eb:cf:a5:f8:69:ea:
94:03:28:9a:f5:02:fd:0f:59:7b:91:f4:0b:21:46:
a9:7d:b4:a8:a2:62:b3:a6:71:63:44:8e:b9:5f:f4:
fb:8d:6e:d2:76:7e:86:73:43:d4:06:60:43:04:1c:
33:b4:70:e5:92:6e:10:19:b1:dc:1c:90:b2:a1:b9:
02:87:a3:38:4e:00:f8:0b:19:cf:00:46:77:26:ea:
7b:bd:f5:a5:db:64:65:00:84:5c:63:d2:d5:32:28:
a3:ea:e1:04:a5:c9:53:55:03:45:07:1b:3c:09:5c:
81:5b:f2:82:bd:c7:39:e7:75:ec:a8:41:f8:9c:11:
29:02:29:41:d6:5d:ae:23:00:5a:ea:09:1e:7c:87:
9e:43:86:72:f8:37:96:32:33:45:21:c4:6a:dc:d5:
c8:d5:ea:4f:c7:af:b6:3f:c7:86:89:88:36:e2:bb:
83:27:e3:26:d4:3f:1f:de:e2:31:35:5f:c2:d0:25:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A0:0B:FC:62:6D:60:81:67:1D:F9:5F:6E:B2:F3:4E:5B:9E:D3:2C
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1aAL_GJtYIFnHflfbrLzTlue0yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
89.32.56.0/21
89.32.136.0/21
89.32.252.0/22
89.34.65.0-89.34.71.255
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.14.0/24
89.35.40.0/21
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.131.0/24
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.119.96.0/21
93.119.128.0/21
93.119.160.0/21
93.119.197.0-93.119.198.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.120.0/22
188.208.126.0/23
188.209.216.0/21
188.212.0.0/22
188.212.24.0/21
188.212.40.0/21
188.214.146.0/23
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
5d:ef:92:36:fa:30:29:8a:bd:9e:11:6d:8e:24:85:ee:16:00:
4a:99:2b:e3:58:6e:f0:69:2a:0c:b2:d1:fd:87:62:27:1e:84:
37:7b:d0:1c:4e:4c:4c:75:21:5a:4d:10:6b:c6:d6:a5:48:fb:
d6:27:2f:c5:c6:e4:d0:c4:4c:23:36:19:2f:be:0e:b7:84:e8:
1b:e4:f9:32:67:18:0c:c1:c1:31:6e:81:83:77:85:0d:5c:6b:
f5:cd:8f:e5:ff:3b:d3:51:b0:f3:63:78:6b:a3:fe:f0:af:2a:
d6:62:a8:a8:3e:c1:72:d2:f5:0e:12:0c:cb:1e:3c:08:fd:26:
58:c3:48:db:10:29:4e:5c:be:07:90:bf:24:d8:ae:07:58:93:
c3:14:5b:d0:fd:98:c2:1a:f4:ff:50:ad:c4:26:09:13:ea:27:
da:05:ac:2c:d7:c4:61:0c:9c:98:0b:01:fc:14:83:cd:de:89:
43:ab:df:e5:f5:ae:74:94:a4:03:6a:da:ad:7a:82:0e:a2:58:
e4:20:1a:c6:bc:3e:4f:4b:53:d5:ef:78:4c:12:c0:78:2f:b5:
4b:df:73:7f:db:cd:73:b3:0a:05:1b:ad:18:64:d5:1d:0c:7e:
1b:c9:a9:93:c1:45:67:d8:05:84:46:b0:b0:47:98:0c:5d:31:
2e:ab:81:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:05:36 2026 by rpki-client