Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/NxW0qVt6G6w6DqCNikNwEXL2nvw.roa
File: NxW0qVt6G6w6DqCNikNwEXL2nvw.roa (raw, json)
Hash identifier: //hAxsZfWsWN0ocxYfkrNjSmREiHrvNf7djeqd9AYEA=
Subject key identifier: 37:15:B4:A9:5B:7A:1B:AC:3A:0E:A0:8D:8A:43:70:11:72:F6:9E:FC
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A038EA33CB5211827154198AD3E25BF8B1
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/NxW0qVt6G6w6DqCNikNwEXL2nvw.roa
Signing time: Tue 25 Aug 2026 12:34:27 +0000
ROA not before: Tue 25 Aug 2026 12:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41221
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 24
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 24
86.106.208.0/20 maxlen: 24
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 24
89.32.136.0/21 maxlen: 24
89.32.252.0/22 maxlen: 24
89.34.192.0/21 maxlen: 24
89.34.204.0/22 maxlen: 24
89.34.232.0/22 maxlen: 24
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 24
89.36.156.0/22 maxlen: 24
89.37.44.0/22 maxlen: 24
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 24
89.38.64.0/22 maxlen: 24
89.38.76.0/22 maxlen: 24
89.39.76.0/22 maxlen: 24
89.39.84.0/22 maxlen: 24
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 24
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 24
89.42.72.0/21 maxlen: 24
89.42.104.0/22 maxlen: 24
89.42.128.0/22 maxlen: 24
89.42.180.0/22 maxlen: 24
89.42.224.0/22 maxlen: 24
89.43.128.0/22 maxlen: 24
89.43.168.0/22 maxlen: 24
89.44.152.0/22 maxlen: 24
89.45.40.0/22 maxlen: 24
89.46.164.0/22 maxlen: 24
92.114.128.0/17 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 24
93.113.92.0/22 maxlen: 24
93.113.244.0/22 maxlen: 24
93.115.136.0/21 maxlen: 24
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 24
93.117.72.0/21 maxlen: 24
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 24
93.117.144.0/21 maxlen: 24
93.117.156.0/22 maxlen: 24
93.117.160.0/21 maxlen: 24
93.117.168.0/22 maxlen: 24
93.119.96.0/21 maxlen: 24
93.119.128.0/21 maxlen: 24
93.119.140.0/22 maxlen: 24
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 24
93.119.196.0/22 maxlen: 24
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/19 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.112.0/22 maxlen: 24
188.208.192.0/22 maxlen: 24
188.208.204.0/22 maxlen: 24
188.209.216.0/21 maxlen: 24
188.212.0.0/22 maxlen: 24
188.212.24.0/21 maxlen: 24
188.212.40.0/21 maxlen: 24
188.214.144.0/22 maxlen: 24
188.214.200.0/21 maxlen: 24
188.215.252.0/22 maxlen: 24
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:ea:33:cb:52:11:82:71:54:19:8a:d3:e2:5b:f8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Aug 25 12:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3715b4a95b7a1bac3a0ea08d8a43701172f69efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6e:cf:36:d3:92:ae:ce:68:3c:a3:f5:d3:89:
ff:cd:c9:9f:d1:37:22:12:08:7b:36:6f:cb:82:c6:
34:ed:6c:c3:40:61:56:d3:23:fa:60:bf:34:c6:d1:
62:b5:13:97:ca:18:f4:47:18:f9:bf:97:f1:44:dd:
d9:ab:79:50:f4:c2:5f:2a:71:1c:cc:6b:40:0f:9c:
1f:ac:c2:74:a7:cf:34:dd:25:4b:67:5f:7e:cc:59:
8a:66:1e:ac:d8:d2:1f:42:6d:87:86:c4:83:ca:97:
7b:b9:26:4b:38:8a:51:23:b4:c8:85:4f:d9:54:57:
b8:52:b4:6c:31:f6:e1:46:39:8d:bb:a1:d0:c3:72:
b9:8c:41:bd:6c:13:8b:3b:e6:67:33:ae:22:31:4e:
3b:8a:0b:5b:93:44:48:fa:85:23:c4:4e:d0:14:7c:
df:98:8f:2b:e6:3a:42:a0:36:d7:8c:7a:89:51:04:
59:a9:de:e9:ce:59:d7:89:7c:15:1a:b2:fd:92:b1:
80:fd:e9:be:e6:f9:13:cf:3d:86:f2:0f:f7:6d:d5:
50:dc:d6:5a:35:9b:a5:05:60:78:a5:57:a7:da:56:
59:6d:c2:88:3d:15:ca:29:bf:8b:be:bf:2e:d3:30:
a8:d2:f4:62:aa:8a:61:6c:f1:f9:d5:90:f9:fa:f7:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:15:B4:A9:5B:7A:1B:AC:3A:0E:A0:8D:8A:43:70:11:72:F6:9E:FC
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/NxW0qVt6G6w6DqCNikNwEXL2nvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
86.105.56.0/21
86.105.80.0/21
86.105.208.0/22
86.106.144.0/21
86.106.208.0/20
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.252.0/22
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0/17
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.119.96.0/21
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0/22
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.159.255
185.28.104.0/22
188.208.112.0/22
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.212.0.0/22
188.212.24.0/21
188.212.40.0/21
188.214.144.0/22
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
Signature Algorithm: sha256WithRSAEncryption
04:db:6b:b7:6e:39:ea:14:88:90:b6:cd:ee:ce:a9:ed:eb:89:
ab:09:bd:fc:84:f9:dd:61:06:dd:93:b4:9f:76:09:48:7b:1f:
17:9b:d7:d8:ee:46:63:c9:df:66:0c:3f:8b:d1:5f:85:db:e2:
56:d1:07:12:68:a9:c5:aa:41:47:4a:4e:52:15:42:bd:3a:30:
38:24:d3:72:c5:10:c2:bb:77:ed:16:ca:a8:03:d5:b6:26:a5:
1c:e5:f8:57:cc:af:dd:66:b4:6e:b6:c5:89:5d:d6:67:51:29:
f8:4b:dd:c5:02:5b:3e:10:c3:05:cb:6a:0a:96:a8:d9:72:11:
bb:69:a2:4b:51:e2:7a:9d:1f:88:2d:23:f0:11:ac:c7:db:c7:
55:e6:3b:42:81:1f:47:66:01:14:94:cc:b5:fd:5a:a3:03:db:
9d:1f:e7:30:77:6b:f7:47:bf:bf:91:7a:8d:d2:cd:18:eb:67:
62:94:2e:a1:df:37:96:38:e1:4e:40:b4:d4:12:1f:80:0b:8b:
ba:01:80:07:05:86:49:d0:04:df:3a:0b:cb:a7:57:7d:a3:b0:
4e:63:c5:46:cd:be:51:dc:4b:ac:64:74:dd:17:17:4a:a0:0d:
98:c9:d0:0a:c9:6a:99:20:10:83:e4:69:c1:d8:e8:3f:ca:d8:
d2:f2:c9:ae
-----BEGIN CERTIFICATE-----
MIIG8DCCBdigAwIBAgISAaA46jPLUhGCcVQZitPiW/ixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjYwODI1MTIzNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzE1YjRhOTViN2ExYmFjM2EwZWEwOGQ4YTQzNzAxMTcyZjY5ZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm7PNtOSrs5oPKP104n/zcmf0Tci
Egh7Nm/LgsY07WzDQGFW0yP6YL80xtFitROXyhj0Rxj5v5fxRN3Zq3lQ9MJfKnEc
zGtAD5wfrMJ0p8803SVLZ19+zFmKZh6s2NIfQm2HhsSDypd7uSZLOIpRI7TIhU/Z
VFe4UrRsMfbhRjmNu6HQw3K5jEG9bBOLO+ZnM64iMU47igtbk0RI+oUjxE7QFHzf
mI8r5jpCoDbXjHqJUQRZqd7pzlnXiXwVGrL9krGA/em+5vkTzz2G8g/3bdVQ3NZa
NZulBWB4pVen2lZZbcKIPRXKKb+Lvr8u0zCo0vRiqophbPH51ZD5+vf+mwIDAQAB
o4ID/DCCA/gwHQYDVR0OBBYEFDcVtKlbehusOg6gjYpDcBFy9p78MB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvTnhXMHFWdDZHNnc2RHFDTmlrTndFWEwybnZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICEAYIKwYBBQUHAQcBAf8EggH/MIIB+zCCAfcEAgABMIIB
7wMEBgU4QAMEBCVLEAMEBiVLQAMEBy43AAMEA1ZpOAMEA1ZpUAMEAlZp0AMEA1Zq
kAMEBFZq0AMEA1ZroAMEA1kgOAMEA1kgiAMEAlkg/AMEA1kiwAMEAlkizAMEAlki
6AMEA1kjCAMEA1kjKAMEAlkknAMEAlklLAMEAFklaAMEAlkmIAMEAlkmQAMEAlkm
TAMEAlknTAMEAlknVAMEA1knYAMEA1kncAMEAlko5AMEBlkpQAMEAlkqQAMEA1kq
SAMEAlkqaAMEAlkqgAMEAlkqtAMEAlkq4AMEAlkrgAMEAlkrqAMEAlksmAMEAlkt
KAMEAlkupAMEB1xygAMEA11xQAMEA11xUAMEAl1xXAMEAl1x9AMEA11ziAMDAF10
AwQEXXUwMAwDBAJddUQDBARddUADBANddYAwDAMEAl11jAMEA111kDAMAwQCXXWc
AwQCXXWoAwQDXXdgAwQDXXeAMAwDBAJdd4wDBANdd5ADBANdd6AwDAMEAl13xAME
BF13wAMEAl135AMEBF6wQAMDAG25MAwDBASyhHADBAWyhIADBAK5HGgDBAK80HAD
BAK80MADBAK80MwDBAO80dgDBAK81AADBAO81BgDBAO81CgDBAK81pADBAO81sgD
BAK81/wDAwC87QMEBdQAwDANBgkqhkiG9w0BAQsFAAOCAQEABNtrt2456hSIkLbN
7s6p7euJqwm9/IT53WEG3ZO0n3YJSHsfF5vX2O5GY8nfZgw/i9FfhdviVtEHEmip
xapBR0pOUhVCvTowOCTTcsUQwrt37RbKqAPVtialHOX4V8yv3Wa0brbFiV3WZ1Ep
+EvdxQJbPhDDBctqCpao2XIRu2miS1Hiep0fiC0j8BGsx9vHVeY7QoEfR2YBFJTM
tf1aowPbnR/nMHdr90e/v5F6jdLNGOtnYpQuod83ljjhTkC01BIfgAuLugGABwWG
SdAE3zoLy6dXfaOwTmPFRs2+UdxLrGR03RcXSqANmMnQCslqmSAQg+RpwdjoP8rY
0vLJrg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:17 2026 by rpki-client