Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/POlIejt9Nm7dwLCEnNpy_GDF_7c.roa
File: POlIejt9Nm7dwLCEnNpy_GDF_7c.roa (raw, json)
Hash identifier: N2hDcc/3bIderqnXL7zktPdU/3twpQiozCy0Llxdubs=
Subject key identifier: 3C:E9:48:7A:3B:7D:36:6E:DD:C0:B0:84:9C:DA:72:FC:60:C5:FF:B7
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A0B40A94669F7E214FD5C32B4D54507582
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/POlIejt9Nm7dwLCEnNpy_GDF_7c.roa
Signing time: Fri 18 Sep 2026 10:23:07 +0000
ROA not before: Fri 18 Sep 2026 10:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213705
IP address blocks: 85.204.176.0/22 maxlen: 24
85.204.180.0/24 maxlen: 24
85.204.182.0/23 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.172.0/22 maxlen: 24
86.107.64.0/22 maxlen: 24
89.32.172.0/22 maxlen: 24
89.34.64.0/24 maxlen: 24
93.117.132.0/22 maxlen: 24
93.118.176.0/22 maxlen: 24
93.118.188.0/22 maxlen: 24
93.119.108.0/22 maxlen: 24
93.119.140.0/22 maxlen: 24
93.119.196.0/22 maxlen: 24
93.119.228.0/22 maxlen: 24
93.119.232.0/22 maxlen: 24
93.119.236.0/22 maxlen: 24
188.208.96.0/22 maxlen: 24
188.208.104.0/22 maxlen: 24
188.208.112.0/22 maxlen: 24
188.208.125.0/24 maxlen: 24
188.208.192.0/22 maxlen: 24
188.208.204.0/22 maxlen: 24
188.210.240.0/21 maxlen: 24
188.210.248.0/22 maxlen: 24
188.212.8.0/21 maxlen: 24
188.213.36.0/22 maxlen: 24
188.213.52.0/22 maxlen: 24
188.213.220.0/22 maxlen: 24
188.213.236.0/22 maxlen: 24
188.213.244.0/22 maxlen: 24
188.214.60.0/22 maxlen: 24
188.214.137.0/24 maxlen: 24
188.214.138.0/24 maxlen: 24
188.214.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:0a:94:66:9f:7e:21:4f:d5:c3:2b:4d:54:50:75:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Sep 18 10:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ce9487a3b7d366eddc0b0849cda72fc60c5ffb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:bc:85:67:28:03:4c:09:a2:ed:7b:a9:78:
e5:08:f4:f9:63:03:0e:1f:db:7d:1a:35:cf:b2:b6:
84:be:0f:8a:db:00:9a:94:d4:ec:dd:a7:54:a9:b1:
da:99:df:52:10:1e:6b:df:d7:fb:ee:f3:51:c4:ca:
a2:fe:5a:ae:2a:cd:c8:fa:28:d0:09:45:40:c1:8d:
4c:9e:15:1c:8b:b7:39:4f:61:aa:9f:b0:fe:94:35:
42:71:b5:e7:99:10:3b:39:11:8a:00:3b:33:2f:45:
a2:0f:3b:94:cd:59:17:66:77:97:45:b0:91:43:3c:
95:a9:66:cd:92:81:2a:67:e9:1d:bd:2c:fb:12:7d:
6b:a8:03:39:30:9d:fb:9f:eb:f4:05:f3:ff:28:88:
ea:41:e5:83:a2:b7:c6:3f:cc:0d:18:de:5d:8d:3d:
5d:1e:16:cd:cf:d0:9e:54:8e:f5:db:17:c7:6a:d3:
70:2b:e7:ef:4e:a1:e0:83:a0:bd:70:02:b0:1c:02:
86:37:79:8b:0c:01:4f:c4:05:8b:45:ff:18:4f:39:
8a:d3:b7:bb:fc:82:1c:61:de:7a:11:16:fd:c3:f4:
03:e0:dc:53:ac:4b:78:fb:bf:fb:f9:50:db:c8:a4:
8a:94:a5:51:62:9d:0e:23:dc:63:f7:6d:28:c5:86:
f2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E9:48:7A:3B:7D:36:6E:DD:C0:B0:84:9C:DA:72:FC:60:C5:FF:B7
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/POlIejt9Nm7dwLCEnNpy_GDF_7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.176.0-85.204.180.255
85.204.182.0/23
86.104.196.0/22
86.105.172.0/22
86.107.64.0/22
89.32.172.0/22
89.34.64.0/24
93.117.132.0/22
93.118.176.0/22
93.118.188.0/22
93.119.108.0/22
93.119.140.0/22
93.119.196.0/22
93.119.228.0-93.119.239.255
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.125.0/24
188.208.192.0/22
188.208.204.0/22
188.210.240.0-188.210.251.255
188.212.8.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.137.0-188.214.138.255
188.214.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:28:09:b8:83:7a:ca:5a:98:51:0d:21:80:fc:77:f2:30:33:
d8:0f:b1:f2:1f:12:f1:5b:c6:57:6b:b6:c9:2b:61:a9:e0:0f:
4c:c9:81:80:23:2d:ac:d9:0c:6c:20:90:bd:c3:07:76:03:da:
51:40:73:c4:94:76:ed:77:f6:88:d1:32:40:82:31:95:b1:60:
0b:cc:44:eb:70:fa:c7:ef:66:e9:74:a4:39:18:69:c2:2d:7c:
78:2d:86:7a:27:1e:26:f6:88:fe:92:58:57:15:03:07:b0:93:
b5:b4:5a:9c:83:e4:9f:93:fc:1e:3e:21:49:64:20:57:a3:10:
f3:0c:d8:3a:09:ba:4a:cb:72:6a:05:dd:b1:90:c3:28:5d:a9:
b4:8d:f6:5f:dd:92:ac:0d:da:14:3f:8b:98:49:4f:19:5c:93:
a9:5a:23:f6:6e:b4:06:e4:62:d8:fa:0f:4f:50:8a:7a:42:06:
ed:80:90:16:e1:a8:17:d2:e0:76:f1:ff:e8:51:cc:56:29:65:
97:c0:49:79:47:c1:43:c7:7b:8e:1b:e4:35:6d:df:01:d3:0d:
e4:c0:40:a3:c7:c4:b3:d8:2b:6d:b4:eb:19:19:2b:1d:ad:48:
d5:9c:33:fb:83:7a:af:6f:2a:83:18:f9:ac:32:5c:b0:84:45:
c6:9d:d6:7a
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgISAaC0CpRmn34hT9XDK01UUHWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjYwOTE4MTAyMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2U5NDg3YTNiN2QzNjZlZGRjMGIwODQ5Y2RhNzJmYzYwYzVmZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzG8hWcoA0wJou17qXjlCPT5YwMO
H9t9GjXPsraEvg+K2wCalNTs3adUqbHamd9SEB5r39f77vNRxMqi/lquKs3I+ijQ
CUVAwY1MnhUci7c5T2Gqn7D+lDVCcbXnmRA7ORGKADszL0WiDzuUzVkXZneXRbCR
QzyVqWbNkoEqZ+kdvSz7En1rqAM5MJ37n+v0BfP/KIjqQeWDorfGP8wNGN5djT1d
HhbNz9CeVI712xfHatNwK+fvTqHgg6C9cAKwHAKGN3mLDAFPxAWLRf8YTzmK07e7
/IIcYd56ERb9w/QD4NxTrEt4+7/7+VDbyKSKlKVRYp0OI9xj920oxYbyGQIDAQAB
o4IC3DCCAtgwHQYDVR0OBBYEFDzpSHo7fTZu3cCwhJzacvxgxf+3MB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvUE9sSWVqdDlObTdkd0xDRW5OcHlfR0RGXzdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHxBggrBgEFBQcBBwEB/wSB4TCB3jCB2wQCAAEwgdQwDAME
BFXMsAMEAFXMtAMEAVXMtgMEAlZoxAMEAlZprAMEAlZrQAMEAlkgrAMEAFkiQAME
Al11hAMEAl12sAMEAl12vAMEAl13bAMEAl13jAMEAl13xDAMAwQCXXfkAwQEXXfg
AwQCvNBgAwQCvNBoAwQCvNBwAwQAvNB9AwQCvNDAAwQCvNDMMAwDBAS80vADBAK8
0vgDBAO81AgDBAK81SQDBAK81TQDBAK81dwDBAK81ewDBAK81fQDBAK81jwwDAME
ALzWiQMEALzWigMEArzW5DANBgkqhkiG9w0BAQsFAAOCAQEAbigJuIN6ylqYUQ0h
gPx38jAz2A+x8h8S8VvGV2u2ySthqeAPTMmBgCMtrNkMbCCQvcMHdgPaUUBzxJR2
7Xf2iNEyQIIxlbFgC8xE63D6x+9m6XSkORhpwi18eC2GeiceJvaI/pJYVxUDB7CT
tbRanIPkn5P8Hj4hSWQgV6MQ8wzYOgm6SstyagXdsZDDKF2ptI32X92SrA3aFD+L
mElPGVyTqVoj9m60BuRi2PoPT1CKekIG7YCQFuGoF9LgdvH/6FHMVilll8BJeUfB
Q8d7jhvkNW3fAdMN5MBAo8fEs9grbbTrGRkrHa1I1Zwz+4N6r28qgxj5rDJcsIRF
xp3Weg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 00:32:06 2026 by rpki-client