Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/S42dzUuZl7-j_J0-ZxXVtrKgbJs.roa
File: S42dzUuZl7-j_J0-ZxXVtrKgbJs.roa (raw, json)
Hash identifier: s55rrVyYG0OPNGkb5I7B3u/giQK0fm5Tvdat0fja0hA=
Subject key identifier: 4B:8D:9D:CD:4B:99:97:BF:A3:FC:9D:3E:67:15:D5:B6:B2:A0:6C:9B
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019CBD8AA8F33983909732766FD2AE69435A
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/S42dzUuZl7-j_J0-ZxXVtrKgbJs.roa
Signing time: Thu 05 Mar 2026 10:28:26 +0000
ROA not before: Thu 05 Mar 2026 10:28:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.64.0/22 maxlen: 22
89.34.68.0/22 maxlen: 22
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/22 maxlen: 24
188.208.125.0/24 maxlen: 24
188.208.126.0/24 maxlen: 24
188.208.127.0/24 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.136.0/22 maxlen: 24
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.214.228.0/22 maxlen: 24
188.215.236.0/22 maxlen: 24
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:8a:a8:f3:39:83:90:97:32:76:6f:d2:ae:69:43:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Mar 5 10:28:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b8d9dcd4b9997bfa3fc9d3e6715d5b6b2a06c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:a1:ea:bd:21:92:8a:8b:30:5b:ba:1d:74:
70:9e:43:87:88:00:a8:31:71:e5:77:37:87:44:2d:
ee:9c:05:b7:5e:13:89:36:3c:c9:4a:e3:5a:d3:c3:
51:10:78:92:c2:2f:36:f0:0a:0c:6a:6e:95:70:cd:
a8:58:86:a4:f6:e2:59:bc:61:1d:3e:b1:0e:26:37:
fb:ab:4d:cf:3a:bd:c7:a1:e8:c7:e6:3e:ae:d9:17:
0f:88:27:84:9d:b9:5c:8a:45:9f:61:70:3e:32:e5:
c6:fb:c0:ae:c3:de:d6:c9:b1:8b:d8:89:bd:bb:ec:
ff:3d:54:3a:b4:a2:62:5d:a1:fb:7b:f5:e2:e4:92:
d2:48:b8:b1:40:ec:bb:b6:c6:50:5d:a1:30:fe:e4:
c4:51:b9:08:41:77:03:1a:c6:bb:7b:ca:a1:07:08:
b5:73:29:77:85:3d:05:a5:4a:82:80:cc:63:2b:27:
31:ea:64:2b:b2:4f:6f:49:f3:1e:19:76:51:78:3a:
4f:da:ee:ca:6e:ba:7e:3e:b4:35:88:db:c2:d7:54:
a9:31:fe:75:ed:35:cb:50:1a:ab:39:4d:bd:80:ec:
7b:41:ea:1a:d9:a4:31:70:77:17:af:17:ed:fc:9a:
74:9d:e2:89:a9:e7:53:7e:48:15:9c:a9:b8:2e:b5:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8D:9D:CD:4B:99:97:BF:A3:FC:9D:3E:67:15:D5:B6:B2:A0:6C:9B
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/S42dzUuZl7-j_J0-ZxXVtrKgbJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.64.0/21
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/22
188.208.125.0-188.208.127.255
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.146.0/23
188.214.200.0/21
188.214.228.0/22
188.215.236.0/22
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
85:a1:34:ca:f5:dc:82:b2:b8:ef:3b:d8:d6:19:29:9c:21:fc:
4e:e6:c4:18:b7:06:9b:06:60:6e:de:e5:82:86:16:76:25:fa:
f6:de:aa:d7:7f:d9:5b:8f:c3:f9:e4:5f:0d:c4:f4:cd:d7:be:
f8:fd:3a:f7:19:28:9e:1a:6a:2e:27:6b:dd:8c:c5:68:2d:7a:
11:a8:94:fb:e0:38:ad:81:15:79:b4:a7:41:ad:d4:a2:db:60:
8c:5a:28:f6:70:8e:79:b7:42:21:f7:fd:15:2f:55:14:c0:f7:
65:3b:29:79:4b:c0:87:69:82:1b:b3:cb:c6:51:f4:af:13:f9:
9e:60:93:37:0d:88:6d:e1:5b:c9:6d:53:2b:43:a8:4e:19:7f:
69:ac:3d:05:d7:00:35:ef:9c:7f:28:1d:b6:a7:81:ed:4b:9b:
5c:ef:bd:6b:01:cf:81:75:ef:59:0d:86:07:70:86:86:54:9c:
6a:b4:18:2a:61:c3:c9:4c:a3:18:b5:ba:1e:2d:bf:9a:01:2d:
b0:6c:23:4e:58:af:29:72:c0:1c:a4:26:02:c4:c9:3c:1e:b6:
83:d8:83:77:c3:6f:39:53:9d:68:4a:60:bd:e8:45:e8:b7:77:
9f:ce:9c:93:77:7f:d7:9e:c1:0f:a0:43:df:20:dd:08:39:02:
5e:0a:00:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:00:34 2026 by rpki-client