Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/NJdPEsRzBxO2VbHj5tvn2cXKuQA.roa
File: NJdPEsRzBxO2VbHj5tvn2cXKuQA.roa (raw, json)
Hash identifier: A3DXVRJnM+h7lL3sFBinNcnEr1bSnaMm7soZfAxHCyk=
Subject key identifier: 34:97:4F:12:C4:73:07:13:B6:55:B1:E3:E6:DB:E7:D9:C5:CA:B9:00
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019E8D976B3819DA017F0F26F735198E58E9
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/NJdPEsRzBxO2VbHj5tvn2cXKuQA.roa
Signing time: Wed 03 Jun 2026 13:06:10 +0000
ROA not before: Wed 03 Jun 2026 13:06:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.65.0/24 maxlen: 24
89.34.66.0/24 maxlen: 24
89.34.67.0/24 maxlen: 24
89.34.68.0/22 maxlen: 22
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/22 maxlen: 24
188.208.126.0/24 maxlen: 24
188.208.127.0/24 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:97:6b:38:19:da:01:7f:0f:26:f7:35:19:8e:58:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Jun 3 13:06:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34974f12c4730713b655b1e3e6dbe7d9c5cab900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:5a:f9:bb:89:59:64:37:bc:c9:58:eb:f6:
46:1e:83:a8:e3:30:18:13:f8:61:b0:47:ac:b6:6a:
07:39:36:0d:78:df:a6:c6:1a:64:f1:60:9c:5b:0d:
99:e3:ac:79:09:f7:95:01:ad:d9:6d:57:a5:61:35:
25:76:52:d0:c3:44:fd:d1:53:29:36:c8:a8:3b:64:
14:d6:6c:f2:af:0f:b7:d2:7e:84:47:dc:86:43:7f:
b8:f6:0d:92:af:eb:bf:14:7c:86:c6:d7:2e:fb:69:
d4:44:89:1f:dc:f2:02:37:0c:0e:9b:00:95:5a:b1:
3a:78:05:09:c2:81:4f:00:7b:8c:6a:bb:4c:be:58:
c3:79:23:a4:82:d6:56:64:51:61:ca:03:ac:fc:dc:
ef:54:a0:9e:42:50:ab:26:4c:2d:6d:30:0f:ee:c6:
8a:82:57:a5:88:52:3c:ba:cf:33:2f:8d:20:1d:21:
c6:f5:f1:f5:4f:ff:21:4f:d5:a0:ec:2a:3e:8d:b0:
8d:33:eb:c8:e0:4f:86:8c:7c:aa:18:05:7a:34:7c:
60:68:29:a6:a0:bf:f0:0f:e4:39:45:4e:26:bf:c2:
88:ae:6c:f0:94:53:30:b4:50:e2:4e:e4:33:01:33:
18:44:70:0a:07:bd:27:d8:f7:1a:5f:33:e8:b7:81:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:97:4F:12:C4:73:07:13:B6:55:B1:E3:E6:DB:E7:D9:C5:CA:B9:00
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/NJdPEsRzBxO2VbHj5tvn2cXKuQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.65.0-89.34.71.255
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/22
188.208.126.0/23
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.146.0/23
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
2d:16:82:73:dd:33:ee:05:b7:cd:f3:ee:09:53:c2:93:42:95:
8c:3c:3b:f3:ba:14:f9:a9:31:21:1b:2c:34:4e:4c:48:3e:17:
e8:a9:e3:40:6c:36:d4:e3:2a:7c:de:a7:96:be:91:aa:03:00:
72:95:fc:6f:51:56:b5:52:93:60:ab:61:ab:11:ec:fa:32:4b:
8d:a7:0c:0f:4c:ae:2f:29:a3:55:bf:78:3a:a4:33:70:41:ca:
0c:f3:40:04:6f:cc:82:d7:72:59:c2:ea:ae:c7:24:64:44:28:
ad:36:2b:9c:7a:2f:cb:75:d1:b6:93:74:ce:30:4e:de:ae:5b:
13:79:fb:fb:e4:f5:6d:a7:3f:ef:9d:16:82:a2:0a:4b:e1:b5:
6c:d0:6a:3b:56:1f:f1:c4:9c:24:40:6f:d6:2b:d8:9f:c2:14:
ed:76:e5:7a:d6:91:0e:56:62:98:58:dc:a7:ed:47:39:70:1d:
a8:2c:d6:e0:a8:3d:81:a6:77:38:c6:65:db:1d:6e:88:28:15:
dd:4d:13:ef:41:8d:6c:81:a1:2f:39:57:38:86:1a:12:0c:df:
c4:7a:4d:08:cd:8d:ce:49:78:b9:2d:a4:a7:fe:48:d7:3c:8d:
30:f6:8c:f7:9b:42:ff:a1:b5:f1:0f:b2:b7:93:c9:2d:24:72:
c0:fd:90:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:30 2026 by rpki-client