Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/7gLto2IkIvK_Y0NzRF8cHPmXQx0.roa
File: 7gLto2IkIvK_Y0NzRF8cHPmXQx0.roa (raw, json)
Hash identifier: LqscU9BLfMPkDhJUsV2F3O0xnc3dz85z5t65L9irr1A=
Subject key identifier: EE:02:ED:A3:62:24:22:F2:BF:63:43:73:44:5F:1C:1C:F9:97:43:1D
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A1598E8499952A953D9EB0F211CCD23B56
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/7gLto2IkIvK_Y0NzRF8cHPmXQx0.roa
Signing time: Tue 20 Oct 2026 13:44:34 +0000
ROA not before: Tue 20 Oct 2026 13:44:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213705
IP address blocks: 85.204.176.0/22 maxlen: 24
85.204.182.0/23 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.172.0/22 maxlen: 24
86.107.64.0/22 maxlen: 24
86.107.160.0/22 maxlen: 24
86.107.164.0/22 maxlen: 24
89.32.172.0/22 maxlen: 24
89.34.64.0/24 maxlen: 24
89.35.8.0/22 maxlen: 24
89.35.12.0/22 maxlen: 24
93.113.64.0/21 maxlen: 24
93.117.128.0/24 maxlen: 24
93.117.129.0/24 maxlen: 24
93.117.130.0/24 maxlen: 24
93.117.132.0/22 maxlen: 24
93.118.176.0/22 maxlen: 24
93.118.188.0/22 maxlen: 24
93.119.108.0/22 maxlen: 24
93.119.140.0/22 maxlen: 24
93.119.144.0/21 maxlen: 24
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 24
93.119.232.0/22 maxlen: 24
93.119.236.0/22 maxlen: 24
188.208.96.0/22 maxlen: 24
188.208.104.0/22 maxlen: 24
188.208.112.0/22 maxlen: 24
188.208.192.0/22 maxlen: 24
188.208.207.0/24 maxlen: 24
188.210.240.0/21 maxlen: 24
188.210.248.0/22 maxlen: 24
188.212.8.0/21 maxlen: 24
188.213.36.0/22 maxlen: 24
188.213.52.0/22 maxlen: 24
188.213.220.0/22 maxlen: 24
188.213.236.0/22 maxlen: 24
188.213.244.0/22 maxlen: 24
188.214.60.0/22 maxlen: 24
188.214.137.0/24 maxlen: 24
188.214.138.0/24 maxlen: 24
188.214.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:8e:84:99:95:2a:95:3d:9e:b0:f2:11:cc:d2:3b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Oct 20 13:44:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee02eda3622422f2bf634373445f1c1cf997431d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d9:8f:c9:72:35:6d:43:09:5a:77:99:c3:99:
b1:9d:33:ba:32:cf:1a:b9:b7:47:66:f2:d6:64:03:
b1:cd:9a:77:c8:e3:4f:71:f6:c3:42:a0:0a:3c:b1:
8d:cc:e9:28:82:07:60:5f:a6:d1:cd:17:a8:26:d3:
c9:83:03:c2:9c:e3:83:14:fe:be:5a:55:31:6e:f9:
88:08:4f:51:b6:65:2c:c1:96:fa:57:87:18:9d:8b:
b3:09:c2:33:90:fc:84:4f:a7:96:10:db:8a:e8:01:
ea:f0:56:fa:a8:da:67:f8:28:62:97:57:c2:87:7e:
72:76:b3:51:7e:fd:fc:e5:9e:41:39:08:37:d9:8f:
8a:5a:33:39:be:be:c6:6a:06:f7:33:76:ed:fd:73:
da:60:ef:92:32:0f:35:e0:21:60:88:89:a9:bc:a6:
f5:a5:9f:f9:95:2e:55:63:b4:b0:63:ed:36:75:9f:
c3:db:ae:50:5d:f7:17:3e:41:b8:d8:d5:0f:23:e9:
a2:d6:f8:96:0d:f7:c6:9c:cf:61:70:7d:1f:56:e6:
bf:2a:32:e0:be:dc:e8:9c:37:e4:dd:73:1e:5f:3d:
5f:a6:49:af:fc:96:c8:2a:5c:ce:7c:b5:75:d5:22:
06:af:9b:5a:7c:43:77:16:56:12:61:c6:d7:47:52:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:02:ED:A3:62:24:22:F2:BF:63:43:73:44:5F:1C:1C:F9:97:43:1D
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/7gLto2IkIvK_Y0NzRF8cHPmXQx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.176.0/22
85.204.182.0/23
86.104.196.0/22
86.105.172.0/22
86.107.64.0/22
86.107.160.0/21
89.32.172.0/22
89.34.64.0/24
89.35.8.0/21
93.113.64.0/21
93.117.128.0-93.117.130.255
93.117.132.0/22
93.118.176.0/22
93.118.188.0/22
93.119.108.0/22
93.119.140.0-93.119.151.255
93.119.200.0/21
93.119.228.0-93.119.239.255
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.192.0/22
188.208.207.0/24
188.210.240.0-188.210.251.255
188.212.8.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.137.0-188.214.138.255
188.214.228.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:ab:bc:17:21:52:f4:ff:40:61:ac:39:eb:d1:5d:a4:b7:0d:
d0:97:82:c8:6e:f6:2f:49:81:d6:c8:83:d1:d6:51:63:39:f7:
c0:4e:25:4b:6b:7f:a6:5c:c6:ef:0a:fa:99:28:92:0d:9e:39:
89:00:92:aa:e5:c4:22:8c:19:32:e6:4d:02:61:e1:6d:5f:d9:
a6:c5:64:c4:8a:60:6e:60:24:5d:18:43:7c:d6:3a:d1:c7:f2:
cb:72:ba:0e:98:dc:50:49:89:50:c3:f4:8b:c3:9a:16:72:7d:
33:a6:a4:f4:9e:4f:ee:aa:d5:7f:51:69:6e:2c:1f:9c:2d:53:
ae:b2:92:e1:d9:e4:6c:ee:11:69:17:43:23:8c:49:0c:f1:ec:
e2:5c:82:7c:68:ef:e5:d7:ab:1f:11:e3:71:a7:98:dc:2b:0c:
a4:83:5d:38:1b:c3:41:11:1d:28:b8:19:7a:67:e7:de:21:3e:
86:af:fa:e2:34:24:89:6f:f2:27:a5:ce:d1:e5:dc:b5:2f:b2:
57:03:17:3d:b7:0c:dd:73:e1:06:22:3d:81:40:ea:ff:21:bf:
15:9d:46:53:48:93:c5:e4:4d:a2:8e:ac:ec:4d:bd:96:ba:b3:
ca:b6:dc:9c:ad:59:24:fb:5f:13:bb:b3:95:1f:72:43:f7:2b:
2a:20:b5:d9
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISAaFZjoSZlSqVPZ6w8hHM0jtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjYxMDIwMTM0NDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTAyZWRhMzYyMjQyMmYyYmY2MzQzNzM0NDVmMWMxY2Y5OTc0MzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+tmPyXI1bUMJWneZw5mxnTO6Ms8a
ubdHZvLWZAOxzZp3yONPcfbDQqAKPLGNzOkoggdgX6bRzReoJtPJgwPCnOODFP6+
WlUxbvmICE9RtmUswZb6V4cYnYuzCcIzkPyET6eWENuK6AHq8Fb6qNpn+Chil1fC
h35ydrNRfv385Z5BOQg32Y+KWjM5vr7Gagb3M3bt/XPaYO+SMg814CFgiImpvKb1
pZ/5lS5VY7SwY+02dZ/D265QXfcXPkG42NUPI+mi1viWDffGnM9hcH0fVua/KjLg
vtzonDfk3XMeXz1fpkmv/JbIKlzOfLV11SIGr5tafEN3FlYSYcbXR1LhEQIDAQAB
o4IC9zCCAvMwHQYDVR0OBBYEFO4C7aNiJCLyv2NDc0RfHBz5l0MdMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvN2dMdG8ySWtJdktfWTBOelJGOGNIUG1YUXgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgfUEAgABMIHuAwQC
VcywAwQBVcy2AwQCVmjEAwQCVmmsAwQCVmtAAwQDVmugAwQCWSCsAwQAWSJAAwQD
WSMIAwQDXXFAMAwDBAdddYADBABddYIDBAJddYQDBAJddrADBAJddrwDBAJdd2ww
DAMEAl13jAMEA113kAMEA113yDAMAwQCXXfkAwQEXXfgAwQCvNBgAwQCvNBoAwQC
vNBwAwQCvNDAAwQAvNDPMAwDBAS80vADBAK80vgDBAO81AgDBAK81SQDBAK81TQD
BAK81dwDBAK81ewDBAK81fQDBAK81jwwDAMEALzWiQMEALzWigMEArzW5DANBgkq
hkiG9w0BAQsFAAOCAQEAC6u8FyFS9P9AYaw569FdpLcN0JeCyG72L0mB1siD0dZR
Yzn3wE4lS2t/plzG7wr6mSiSDZ45iQCSquXEIowZMuZNAmHhbV/ZpsVkxIpgbmAk
XRhDfNY60cfyy3K6DpjcUEmJUMP0i8OaFnJ9M6ak9J5P7qrVf1FpbiwfnC1TrrKS
4dnkbO4RaRdDI4xJDPHs4lyCfGjv5derHxHjcaeY3CsMpINdOBvDQREdKLgZemfn
3iE+hq/64jQkiW/yJ6XO0eXctS+yVwMXPbcM3XPhBiI9gUDq/yG/FZ1GU0iTxeRN
oo6s7E29lrqzyrbcnK1ZJPtfE7uzlR9yQ/crKiC12Q==
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:23:42 2026 by rpki-client