Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/RTUntNy2CdijK-B3BfV0kICa6yk.roa
File: RTUntNy2CdijK-B3BfV0kICa6yk.roa (raw, json)
Hash identifier: 9lzGUwI1TIMh2RzUGFgcLYxmCAfUFpo4PCAufEVueHQ=
Subject key identifier: 45:35:27:B4:DC:B6:09:D8:A3:2B:E0:77:05:F5:74:90:80:9A:EB:29
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A18D224342E76416AAD9E26C8ABA253326
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/RTUntNy2CdijK-B3BfV0kICa6yk.roa
Signing time: Fri 30 Oct 2026 14:06:35 +0000
ROA not before: Fri 30 Oct 2026 14:06:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213705
IP address blocks: 85.204.176.0/22 maxlen: 24
85.204.182.0/24 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.172.0/22 maxlen: 24
86.107.64.0/22 maxlen: 24
86.107.160.0/22 maxlen: 24
86.107.164.0/22 maxlen: 24
89.32.172.0/22 maxlen: 24
89.35.8.0/22 maxlen: 24
89.35.12.0/22 maxlen: 24
93.113.64.0/21 maxlen: 24
93.117.132.0/22 maxlen: 24
93.118.176.0/22 maxlen: 24
93.118.188.0/22 maxlen: 24
93.119.108.0/22 maxlen: 24
93.119.143.0/24 maxlen: 24
93.119.144.0/21 maxlen: 24
93.119.196.0/24 maxlen: 24
93.119.199.0/24 maxlen: 24
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 24
93.119.232.0/22 maxlen: 24
93.119.236.0/22 maxlen: 24
188.208.96.0/22 maxlen: 24
188.208.104.0/22 maxlen: 24
188.208.112.0/22 maxlen: 24
188.208.192.0/22 maxlen: 24
188.208.204.0/24 maxlen: 24
188.208.205.0/24 maxlen: 24
188.208.206.0/24 maxlen: 24
188.210.240.0/21 maxlen: 24
188.210.248.0/22 maxlen: 24
188.212.8.0/21 maxlen: 24
188.213.36.0/22 maxlen: 24
188.213.52.0/22 maxlen: 24
188.213.220.0/22 maxlen: 24
188.213.236.0/22 maxlen: 24
188.213.244.0/22 maxlen: 24
188.214.60.0/22 maxlen: 24
188.214.138.0/24 maxlen: 24
188.214.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:22:43:42:e7:64:16:aa:d9:e2:6c:8a:ba:25:33:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Oct 30 14:06:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=453527b4dcb609d8a32be07705f57490809aeb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:fd:84:de:c7:4e:18:64:d2:a3:af:88:77:
84:f7:0e:7f:d1:6d:c5:6d:d4:3a:4e:3a:0f:3d:30:
cd:06:4b:ca:54:d2:f6:40:21:ee:c4:5c:42:26:16:
4c:07:c9:41:64:be:d5:e5:5b:13:d0:65:1d:08:b2:
a4:55:43:78:f8:65:30:ac:56:48:a3:1c:d5:8a:01:
8f:33:1b:f6:56:65:0b:b2:27:dd:31:34:4a:5b:87:
e6:6a:08:e8:58:f8:a8:29:56:60:e3:d1:d8:fc:f8:
a6:a3:48:b9:d9:e7:0b:d9:65:81:24:d5:db:4e:94:
47:66:0c:01:86:a2:de:e9:8a:1c:c8:b1:39:13:20:
ff:d0:a6:9d:75:8a:bd:a8:61:62:45:9e:c1:ab:08:
14:39:08:d7:21:82:05:ea:d3:b1:b0:f6:b4:87:9e:
33:99:0f:97:73:f3:b5:9b:83:28:d2:06:0b:7d:f5:
53:75:bd:ee:c0:f3:ed:16:78:95:8f:c2:de:64:62:
87:06:83:90:2e:dd:a6:c4:d9:a2:3c:23:b3:07:a6:
b0:4c:96:42:d0:74:03:fa:ee:48:9c:a6:d5:a8:d8:
a0:a4:03:83:8b:1a:90:20:c2:a5:0f:b8:82:6c:e6:
3a:a2:7f:2b:e8:cd:8e:70:17:6a:4c:c5:81:04:f3:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:35:27:B4:DC:B6:09:D8:A3:2B:E0:77:05:F5:74:90:80:9A:EB:29
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/RTUntNy2CdijK-B3BfV0kICa6yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.176.0/22
85.204.182.0/24
86.104.196.0/22
86.105.172.0/22
86.107.64.0/22
86.107.160.0/21
89.32.172.0/22
89.35.8.0/21
93.113.64.0/21
93.117.132.0/22
93.118.176.0/22
93.118.188.0/22
93.119.108.0/22
93.119.143.0-93.119.151.255
93.119.196.0/24
93.119.199.0-93.119.207.255
93.119.228.0-93.119.239.255
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.192.0/22
188.208.204.0-188.208.206.255
188.210.240.0-188.210.251.255
188.212.8.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.138.0/24
188.214.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f7:17:c9:b6:fa:48:64:01:b5:cf:e8:97:64:6d:d2:68:24:
8c:24:b0:93:8f:32:48:76:bf:a0:85:98:5b:7c:e4:e2:74:98:
77:9a:11:8c:b2:e4:8d:4d:d9:5f:23:0a:c7:50:c2:16:21:7d:
4a:c9:4c:8d:c2:29:fc:da:94:a9:9e:98:81:1f:28:84:31:1e:
a5:64:f2:51:dc:2a:0f:58:8f:da:51:89:58:12:ba:13:9a:85:
87:0f:f4:8a:25:f6:83:26:1a:0e:6f:5a:39:88:fe:c6:dc:ed:
39:62:3c:ae:4c:e7:39:ad:57:2e:51:11:4f:66:55:7e:15:75:
10:1e:ab:dc:3a:bd:6d:1e:9e:19:5d:36:bc:28:15:d8:ef:4e:
e1:1f:8d:06:ed:9d:33:31:0b:ae:f3:1e:78:fb:09:c7:43:56:
bc:bf:0a:e1:8d:a5:e4:55:a8:f4:08:ae:8b:65:37:f0:73:ff:
3d:79:29:d0:21:6f:f1:37:c3:80:4d:86:ce:54:7d:e2:d2:7e:
fa:15:22:f7:f8:d0:0f:3f:06:84:b6:6b:54:8a:e1:8e:63:b0:
1c:cb:38:c4:63:83:31:c8:94:e2:39:d3:ed:46:36:b8:e5:cb:
24:7f:25:fe:3b:ed:53:30:b0:28:61:b2:7b:bf:25:d5:f1:81:
db:cd:da:f3
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgISAaGNIkNC52QWqtnibIq6JTMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjYxMDMwMTQwNjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTM1MjdiNGRjYjYwOWQ4YTMyYmUwNzcwNWY1NzQ5MDgwOWFlYjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi/9hN7HThhk0qOviHeE9w5/0W3F
bdQ6TjoPPTDNBkvKVNL2QCHuxFxCJhZMB8lBZL7V5VsT0GUdCLKkVUN4+GUwrFZI
oxzVigGPMxv2VmULsifdMTRKW4fmagjoWPioKVZg49HY/Pimo0i52ecL2WWBJNXb
TpRHZgwBhqLe6YocyLE5EyD/0KaddYq9qGFiRZ7BqwgUOQjXIYIF6tOxsPa0h54z
mQ+Xc/O1m4Mo0gYLffVTdb3uwPPtFniVj8LeZGKHBoOQLt2mxNmiPCOzB6awTJZC
0HQD+u5InKbVqNigpAODixqQIMKlD7iCbOY6on8r6M2OcBdqTMWBBPMbnQIDAQAB
o4IC8TCCAu0wHQYDVR0OBBYEFEU1J7TctgnYoyvgdwX1dJCAmuspMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvUlRVbnROeTJDZGlqSy1CM0JmVjBrSUNhNnlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBQYIKwYBBQUHAQcBAf8EgfUwgfIwge8EAgABMIHoAwQC
VcywAwQAVcy2AwQCVmjEAwQCVmmsAwQCVmtAAwQDVmugAwQCWSCsAwQDWSMIAwQD
XXFAAwQCXXWEAwQCXXawAwQCXXa8AwQCXXdsMAwDBABdd48DBANdd5ADBABdd8Qw
DAMEAF13xwMEBF13wDAMAwQCXXfkAwQEXXfgAwQCvNBgAwQCvNBoAwQCvNBwAwQC
vNDAMAwDBAK80MwDBAC80M4wDAMEBLzS8AMEArzS+AMEA7zUCAMEArzVJAMEArzV
NAMEArzV3AMEArzV7AMEArzV9AMEArzWPAMEALzWigMEALzW5zANBgkqhkiG9w0B
AQsFAAOCAQEADPcXybb6SGQBtc/ol2Rt0mgkjCSwk48ySHa/oIWYW3zk4nSYd5oR
jLLkjU3ZXyMKx1DCFiF9SslMjcIp/NqUqZ6YgR8ohDEepWTyUdwqD1iP2lGJWBK6
E5qFhw/0iiX2gyYaDm9aOYj+xtztOWI8rkznOa1XLlERT2ZVfhV1EB6r3Dq9bR6e
GV02vCgV2O9O4R+NBu2dMzELrvMeePsJx0NWvL8K4Y2l5FWo9Aiui2U38HP/PXkp
0CFv8TfDgE2GzlR94tJ++hUi9/jQDz8GhLZrVIrhjmOwHMs4xGODMciU4jnT7UY2
uOXLJH8l/jvtUzCwKGGye78l1fGB283a8w==
-----END CERTIFICATE-----
Generated at Thu Nov 5 06:57:45 2026 by rpki-client