Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/MJORvaVWHD5qpwB968xMUOb2X1Y.roa
File: MJORvaVWHD5qpwB968xMUOb2X1Y.roa (raw, json)
Hash identifier: +lbGHOjUfSQxIcwbFGUEoqDz3Yf8i6lIW98s+3TXDo4=
Subject key identifier: 30:93:91:BD:A5:56:1C:3E:6A:A7:00:7D:EB:CC:4C:50:E6:F6:5F:56
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019EEFFCB0C5A1D11262C719ED314F034965
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/MJORvaVWHD5qpwB968xMUOb2X1Y.roa
Signing time: Mon 22 Jun 2026 15:39:35 +0000
ROA not before: Mon 22 Jun 2026 15:39:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.65.0/24 maxlen: 24
89.34.66.0/24 maxlen: 24
89.34.67.0/24 maxlen: 24
89.34.68.0/22 maxlen: 22
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/22 maxlen: 24
188.208.126.0/24 maxlen: 24
188.208.127.0/24 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:fc:b0:c5:a1:d1:12:62:c7:19:ed:31:4f:03:49:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Jun 22 15:39:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=309391bda5561c3e6aa7007debcc4c50e6f65f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:f9:51:e3:4e:c8:78:bf:f8:0a:63:7c:a6:
54:20:84:92:04:9e:a1:65:a5:44:7f:a7:a8:54:8e:
87:9b:9e:68:e3:ce:fd:c5:a6:8b:1b:e7:2e:f4:95:
f7:79:eb:67:15:7a:19:ec:27:b6:8b:04:3a:bd:26:
fe:97:85:13:f9:83:d9:f0:5d:37:bb:ed:50:04:63:
28:f0:92:0e:93:ed:8f:75:04:b7:95:04:da:de:6d:
c3:af:88:80:9b:42:e7:94:55:40:78:5a:83:1e:24:
25:d3:50:7e:f4:3b:86:72:40:12:ff:c2:7f:65:fe:
05:9d:bc:95:52:ad:91:73:cb:27:fa:e5:e9:8c:5c:
ff:c1:fb:68:53:72:c9:32:03:1c:04:f8:07:0d:ba:
d0:cf:1d:a4:24:a1:f3:1e:e1:4a:36:17:48:fd:13:
6f:5c:18:b3:87:6e:a5:ba:03:1e:e5:50:45:1d:25:
2b:09:e5:68:d9:fa:99:6e:42:b5:29:b2:ae:36:60:
b8:5b:5a:93:4e:7e:5a:3e:33:fb:0f:eb:b1:92:41:
c7:f5:9e:0e:37:8d:d0:c2:9a:b8:62:48:06:fe:6c:
c5:55:ca:8f:ee:bb:8b:b9:c4:44:2e:67:75:4d:1d:
fc:eb:ea:15:3e:67:c9:a4:c1:b7:49:f1:9b:6a:46:
ca:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:91:BD:A5:56:1C:3E:6A:A7:00:7D:EB:CC:4C:50:E6:F6:5F:56
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/MJORvaVWHD5qpwB968xMUOb2X1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.65.0-89.34.71.255
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0/22
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/22
188.208.126.0/23
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.146.0/23
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
4d:52:50:2f:00:05:07:29:68:4b:cd:a0:bf:28:76:bc:dd:01:
71:c2:62:b4:48:c9:3d:17:66:54:1a:9c:2e:8b:d4:00:d6:ea:
c9:61:43:45:62:26:a7:39:a3:55:80:c1:08:d1:25:58:bd:7c:
c5:dd:bf:68:6a:10:ed:42:3b:7f:0a:c6:0b:c4:55:b8:42:e5:
d4:75:4e:f8:68:b4:61:91:ef:8b:19:24:77:b6:c4:b6:b3:6d:
7e:e0:0f:b9:3e:9b:11:8c:f2:c4:f3:e0:ae:5a:af:71:d6:62:
c2:ad:4b:8e:2e:7a:81:db:72:46:4c:c3:82:8a:9c:1a:7f:02:
a7:e0:4b:70:6e:03:4b:79:50:3d:ac:5d:79:46:1a:3b:fe:21:
0b:b5:3b:5e:96:0f:99:8a:14:f3:47:da:3c:9d:ad:08:5a:b0:
52:c7:bf:48:e6:c7:3a:be:e2:92:e9:83:cf:15:80:4d:f0:f7:
0d:da:54:16:01:6e:30:68:2b:bd:19:ed:38:63:ce:50:c9:c1:
b7:8a:55:7c:a4:91:74:71:01:57:20:32:c6:7a:d6:26:dc:b1:
5a:a1:95:70:8f:92:ed:7d:95:92:fa:8b:10:2a:db:b2:06:80:
32:9d:73:f8:93:51:47:28:4c:1e:0e:2c:01:d8:06:3c:cd:b4:
57:2e:a2:de
-----BEGIN CERTIFICATE-----
MIIHpzCCBo+gAwIBAgISAZ7v/LDFodESYscZ7TFPA0llMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjYwNjIyMTUzOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDkzOTFiZGE1NTYxYzNlNmFhNzAwN2RlYmNjNGM1MGU2ZjY1ZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8r5UeNOyHi/+ApjfKZUIISSBJ6h
ZaVEf6eoVI6Hm55o4879xaaLG+cu9JX3eetnFXoZ7Ce2iwQ6vSb+l4UT+YPZ8F03
u+1QBGMo8JIOk+2PdQS3lQTa3m3Dr4iAm0LnlFVAeFqDHiQl01B+9DuGckAS/8J/
Zf4FnbyVUq2Rc8sn+uXpjFz/wftoU3LJMgMcBPgHDbrQzx2kJKHzHuFKNhdI/RNv
XBizh26lugMe5VBFHSUrCeVo2fqZbkK1KbKuNmC4W1qTTn5aPjP7D+uxkkHH9Z4O
N43Qwpq4YkgG/mzFVcqP7ruLucRELmd1TR386+oVPmfJpMG3SfGbakbK1QIDAQAB
o4IEszCCBK8wHQYDVR0OBBYEFDCTkb2lVhw+aqcAfevMTFDm9l9WMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvTUpPUnZhVldIRDVxcHdCOTY4eE1VT2IyWDFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICxwYIKwYBBQUHAQcBAf8EggK2MIICsjCCAp8EAgABMIIC
lwMEBgU4QAMEBCVLEAMEBiVLQAMEBy43AAMEA1XMsAMEAlZoxAMEA1ZpOAMEA1Zp
UAMEAlZprAMEAlZp0AMEA1ZqkDALAwQEVmrQAwMAVmoDBAJWa0ADBANWa6ADBANZ
IDgDBANZIIgDBAJZIKwDBAJZIPwwDAMEAFkiQQMEA1kiQAMEA1kiwAMEAlkizAME
Alki6AMEA1kjCAMEA1kjKAMEAlkjVAMEAlkjyAMEAlkknAMEAlklLAMEAFklaAME
AlkmIAMEAlkmQAMEAlkmTAMEAlknTAMEAlknVAMEA1knYAMEA1kncAMEAlko5AME
BlkpQAMEAlkqQAMEA1kqSAMEAlkqaAMEAlkqgAMEAlkqtAMEAlkq4AMEAlkrgAME
AlkrqAMEAlksmAMEAlktKAMEAlkupDALAwQHXHKAAwMCXHADBANdcUADBANdcVAD
BAJdcVwDBAJdcfQDBANdc4gDAwBddAMEBF11MDAMAwQCXXVEAwQEXXVAAwQDXXWA
MAwDBAJddYwDBANddZAwDAMEAl11nAMEAl11qAMEAl12sAMEAl12vAMEA113YAME
Al13bAMEA113gDAMAwQCXXeMAwQDXXeQAwQDXXegMAwDBAJdd8QDBARdd8ADBAJd
d+QDBAResEADAwBtuTAMAwQEsoRwAwQGsoSAAwQCuRxoAwQCvNBgAwQCvNBoAwQC
vNBwAwQCvNB4AwQBvNB+AwQCvNDAAwQCvNDMAwQDvNHYMAwDBAS80vADBAK80vgD
BAK81AADBAO81AgDBAO81BgDBAO81CgDBAK81SQDBAK81TQDBAK81dwDBAK81ewD
BAK81fQDBAK81jwDBAG81pIDBAO81sgDBAK81/wDAwC87QMEBdQAwDANBAIAAjAH
AwUDKgIKMDANBgkqhkiG9w0BAQsFAAOCAQEATVJQLwAFByloS82gvyh2vN0BccJi
tEjJPRdmVBqcLovUANbqyWFDRWImpzmjVYDBCNElWL18xd2/aGoQ7UI7fwrGC8RV
uELl1HVO+Gi0YZHvixkkd7bEtrNtfuAPuT6bEYzyxPPgrlqvcdZiwq1Lji56gdty
RkzDgoqcGn8Cp+BLcG4DS3lQPaxdeUYaO/4hC7U7XpYPmYoU80faPJ2tCFqwUse/
SObHOr7ikumDzxWATfD3DdpUFgFuMGgrvRntOGPOUMnBt4pVfKSRdHEBVyAyxnrW
JtyxWqGVcI+S7X2VkvqLECrbsgaAMp1z+JNRRyhMHg4sAdgGPM20Vy6i3g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:51 2026 by rpki-client