Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ByFQMfZpXaWOHKekbVt5JKSIDG4.roa
File: ByFQMfZpXaWOHKekbVt5JKSIDG4.roa (raw, json)
Hash identifier: aBHP3WbPTTT9mnWlrJwRjaXPJKH3agpvy9UA1OzZ4ps=
Subject key identifier: 07:21:50:31:F6:69:5D:A5:8E:1C:A7:A4:6D:5B:79:24:A4:88:0C:6E
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A038EA3305B30FC39A6C6ECFA76038CFC6
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ByFQMfZpXaWOHKekbVt5JKSIDG4.roa
Signing time: Tue 25 Aug 2026 12:34:27 +0000
ROA not before: Tue 25 Aug 2026 12:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.208.0/22 maxlen: 24
86.105.208.0/23 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.252.0/22 maxlen: 22
89.34.65.0/24 maxlen: 24
89.34.66.0/24 maxlen: 24
89.34.67.0/24 maxlen: 24
89.34.68.0/22 maxlen: 22
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.112.0/22 maxlen: 22
188.208.120.0/22 maxlen: 24
188.208.126.0/24 maxlen: 24
188.208.127.0/24 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.212.0.0/22 maxlen: 22
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:ea:33:05:b3:0f:c3:9a:6c:6e:cf:a7:60:38:cf:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Aug 25 12:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07215031f6695da58e1ca7a46d5b7924a4880c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:68:5d:60:44:d4:71:0b:a8:b1:a8:cd:f3:94:
06:c0:14:cc:4e:42:8f:3c:37:87:73:f0:8f:f1:bb:
98:51:2f:2d:4a:b7:86:a1:f1:92:fe:83:87:14:ec:
e7:9d:ff:c9:cc:20:7e:3d:8d:8c:50:3e:1d:8e:f8:
f7:97:76:57:d2:d5:12:3b:fe:66:5f:f9:cf:e3:54:
c4:c5:c9:34:27:69:1a:c6:94:8c:2c:d1:76:30:c2:
5c:8b:ab:cd:17:9f:cc:c9:ed:e5:53:d5:21:5e:c3:
ec:bc:b5:43:fe:e2:71:c1:19:c6:0b:50:2a:bc:e4:
8c:62:17:f6:97:68:c0:b1:51:79:ef:86:1a:ba:57:
0b:b3:c3:c2:50:e7:ad:8d:c5:92:f2:cf:80:01:55:
c1:65:b0:79:21:51:41:a3:15:a4:6f:85:bd:3c:52:
cf:49:f6:25:22:96:88:c7:8b:a2:ff:e3:19:8b:91:
c7:94:c1:0d:a3:ec:3f:35:f8:72:61:b2:c4:d1:b4:
e5:a1:87:02:94:48:18:21:84:17:57:67:a9:7b:a9:
76:7a:40:c2:30:77:d2:52:56:ff:96:57:92:71:14:
39:fb:ea:62:63:e9:7a:4f:15:32:5a:45:8c:24:98:
11:49:9b:45:be:62:f0:2b:ff:d3:34:58:12:27:62:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:21:50:31:F6:69:5D:A5:8E:1C:A7:A4:6D:5B:79:24:A4:88:0C:6E
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ByFQMfZpXaWOHKekbVt5JKSIDG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.252.0/22
89.34.65.0-89.34.71.255
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.119.96.0/21
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0/22
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.112.0/22
188.208.120.0/22
188.208.126.0/23
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.212.0.0/22
188.212.24.0/21
188.212.40.0/21
188.214.146.0/23
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
9f:58:79:27:e8:72:c1:be:dd:86:91:f9:86:94:9d:8b:18:44:
e4:21:57:9d:de:e3:c5:f6:24:ba:98:34:de:a6:82:01:af:87:
88:09:e4:a9:8a:9e:c6:b8:eb:e7:5b:2e:e6:75:a0:25:fa:44:
91:c7:9f:49:6e:2a:db:8e:ca:4e:bf:50:82:54:f2:bf:08:97:
3b:b0:91:87:f3:5d:ce:e2:51:59:cb:88:13:d2:04:ea:99:bf:
2f:ca:66:74:3f:18:71:8c:a6:88:e2:6d:cb:17:26:f4:f7:34:
de:a5:55:f3:36:bd:e0:da:45:a5:e8:7e:74:3b:0c:c0:6c:28:
04:bc:81:5b:48:fc:4f:ae:58:29:e4:09:d1:ab:21:3f:ff:e2:
29:c6:90:ae:4d:e2:60:7b:19:2f:2c:8f:cb:48:3c:e5:6b:a7:
43:34:41:aa:6e:02:92:0d:1c:da:e4:1d:75:ed:e6:46:81:06:
03:3f:60:2b:44:2e:a0:fd:83:1f:6f:ea:20:ca:bb:b8:25:59:
67:8b:8b:28:e0:a4:92:a6:9a:87:c7:8f:9b:9a:c8:5a:b9:9f:
55:8b:ad:7b:81:71:ee:ac:66:67:41:3e:4e:f5:e3:03:46:7d:
d6:1c:ac:bb:02:8a:a9:bf:ef:26:16:ac:eb:f5:d2:ff:15:2c:
a8:31:5a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:18 2026 by rpki-client