Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/iFapsXaLctnFNeoP0pzzdPJgJTo.roa
File: iFapsXaLctnFNeoP0pzzdPJgJTo.roa (raw, json)
Hash identifier: TzHC8xBMtRSrZZj3zYcDVBkf5iat9dloniYlXJ6iG+M=
Subject key identifier: 88:56:A9:B1:76:8B:72:D9:C5:35:EA:0F:D2:9C:F3:74:F2:60:25:3A
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 0198E52157CE59984586CAA662DA9388F167
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/iFapsXaLctnFNeoP0pzzdPJgJTo.roa
Signing time: Tue 26 Aug 2025 06:47:04 +0000
ROA not before: Tue 26 Aug 2025 06:47:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.68.0/22 maxlen: 22
89.34.112.0/21 maxlen: 21
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/22 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.136.0/22 maxlen: 24
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:21:57:ce:59:98:45:86:ca:a6:62:da:93:88:f1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Aug 26 06:47:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8856a9b1768b72d9c535ea0fd29cf374f260253a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:b4:69:06:82:c4:7f:ee:3e:3b:89:bd:98:
e7:4e:59:4c:ec:1b:f1:a3:5e:7a:f0:ed:4e:7a:d6:
74:a9:8c:2c:bf:4a:9b:c6:be:83:21:ef:c9:41:5f:
94:85:79:90:6f:7a:ac:40:b4:fe:31:d3:0b:a9:d4:
e3:3c:88:07:ac:a3:64:02:68:b1:ca:88:c0:53:aa:
20:fe:2a:d8:83:be:18:3f:ee:44:d3:90:b6:a8:c4:
57:ae:10:b0:5c:72:39:7c:f8:d6:62:f3:ff:2f:5b:
40:c6:fe:39:05:ae:71:0a:30:76:94:25:db:a3:ee:
91:cd:1f:5f:f9:ba:ea:b5:b1:c1:af:e2:65:98:80:
87:91:02:62:41:53:17:0c:6e:2f:21:d8:1f:9b:37:
ca:04:b7:4a:5a:98:7d:8b:5e:51:1e:04:af:b6:8c:
55:95:59:87:05:22:d1:96:b5:c8:f0:20:cf:08:80:
3d:68:09:e6:e8:1a:60:0f:85:21:be:db:b0:4f:51:
5d:47:40:8e:d8:31:f1:5f:26:7a:13:d0:c6:b2:14:
8a:69:78:89:76:33:97:e5:b0:10:67:a6:c7:ff:7f:
c4:f2:6d:64:7e:90:05:36:1e:88:ad:a4:a6:e6:53:
95:bd:7b:bd:e5:93:1b:6a:4c:98:b5:dd:07:49:b6:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:56:A9:B1:76:8B:72:D9:C5:35:EA:0F:D2:9C:F3:74:F2:60:25:3A
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/iFapsXaLctnFNeoP0pzzdPJgJTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.68.0/22
89.34.112.0/21
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/22
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.146.0/23
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
6e:48:c0:e8:ae:66:0a:5b:95:d5:f9:dc:a7:66:e0:7f:ee:2c:
4f:80:58:f4:b3:73:92:31:83:b6:78:92:22:c8:be:75:05:f5:
14:44:42:37:1d:80:27:04:7f:10:be:21:ed:7d:48:2c:4d:bf:
44:18:cb:23:d8:e6:f3:ed:20:bd:f8:ce:87:e6:9e:9c:84:3c:
c3:a3:05:57:09:76:90:bc:4a:15:99:3c:4a:53:99:82:fb:63:
b2:39:6c:19:94:d7:f2:48:0d:e5:03:81:07:85:51:86:e5:4c:
38:07:e6:fa:34:fe:0f:18:39:ae:0f:23:bb:d0:a5:64:2b:4d:
96:15:6e:bc:0d:18:0e:00:e6:39:bd:73:ec:9e:4b:98:53:38:
e7:c7:71:4f:d7:29:eb:97:da:83:ff:3b:8a:9d:47:6b:34:e2:
bc:c5:9b:79:bd:c7:14:ff:00:f1:44:41:ab:22:61:93:e7:1f:
12:87:4d:34:9a:af:cb:fe:fd:02:a6:07:77:b9:d4:8f:5a:99:
af:47:4b:9f:bf:e1:eb:e2:22:63:6f:2f:f4:d6:9b:e5:0c:59:
48:48:b0:bd:c4:76:60:af:d1:28:d6:cf:43:10:e1:67:90:a3:
57:0d:ab:b7:49:e4:7a:02:af:d2:ac:15:bc:74:81:c6:f8:1f:
c4:56:60:2c
-----BEGIN CERTIFICATE-----
MIIHrTCCBpWgAwIBAgISAZjlIVfOWZhFhsqmYtqTiPFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjUwODI2MDY0NzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODU2YTliMTc2OGI3MmQ5YzUzNWVhMGZkMjljZjM3NGYyNjAyNTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6O0aQaCxH/uPjuJvZjnTllM7Bvx
o1568O1OetZ0qYwsv0qbxr6DIe/JQV+UhXmQb3qsQLT+MdMLqdTjPIgHrKNkAmix
yojAU6og/irYg74YP+5E05C2qMRXrhCwXHI5fPjWYvP/L1tAxv45Ba5xCjB2lCXb
o+6RzR9f+brqtbHBr+JlmICHkQJiQVMXDG4vIdgfmzfKBLdKWph9i15RHgSvtoxV
lVmHBSLRlrXI8CDPCIA9aAnm6BpgD4UhvtuwT1FdR0CO2DHxXyZ6E9DGshSKaXiJ
djOX5bAQZ6bH/3/E8m1kfpAFNh6IraSm5lOVvXu95ZMbakyYtd0HSbbqOwIDAQAB
o4IEuTCCBLUwHQYDVR0OBBYEFIhWqbF2i3LZxTXqD9Kc83TyYCU6MB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvaUZhcHNYYUxjdG5GTmVvUDBwenpkUEpnSlRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICzQYIKwYBBQUHAQcBAf8EggK8MIICuDCCAqUEAgABMIIC
nQMEBgU4QAMEBCVLEAMEBiVLQAMEBy43AAMEA1XMsAMEAlZoxAMEA1ZpOAMEA1Zp
UAMEAlZprAMEAlZp0AMEA1ZqkDALAwQEVmrQAwMAVmoDBAJWa0ADBANWa6ADBANZ
IDgDBANZIIgDBAJZIKwDBAJZIPwDBAJZIkQDBANZInADBANZIsADBAJZIswDBAJZ
IugDBANZIwgDBANZIygDBAJZI1QDBAJZI8gDBAJZJJwDBAJZJSwDBABZJWgDBAJZ
JiADBAJZJkADBAJZJkwDBAJZJ0wDBAJZJ1QDBANZJ2ADBANZJ3ADBAJZKOQDBAZZ
KUADBAJZKkADBANZKkgDBAJZKmgDBAJZKoADBAJZKrQDBAJZKuADBAJZK4ADBAJZ
K6gDBAJZLJgDBAJZLSgDBAJZLqQwCwMEB1xygAMDAlxwAwQDXXFAAwQDXXFQAwQC
XXFcAwQCXXH0AwQDXXOIAwMAXXQDBARddTAwDAMEAl11RAMEBF11QAMEA111gDAM
AwQCXXWMAwQDXXWQMAwDBAJddZwDBAJddagDBAJddrADBAJddrwDBANdd2ADBAJd
d2wDBANdd4AwDAMEAl13jAMEA113kAMEA113oDAMAwQCXXfEAwQEXXfAMAwDBAJd
d+QDBARdd+ADBAResEADAwBtuTAMAwQEsoRwAwQGsoSAAwQCuRxoAwQCvNBgAwQC
vNBoAwQCvNBwAwQCvNB4AwQCvNDAAwQCvNDMAwQDvNHYMAwDBAS80vADBAK80vgD
BAK81AADBAO81AgDBAO81BgDBAO81CgDBAK81SQDBAK81TQDBAK81dwDBAK81ewD
BAK81fQDBAK81jwDBAK81ogDBAG81pIDBAO81sgDBAK81/wDAwC87QMEBdQAwDAN
BAIAAjAHAwUDKgIKMDANBgkqhkiG9w0BAQsFAAOCAQEAbkjA6K5mCluV1fncp2bg
f+4sT4BY9LNzkjGDtniSIsi+dQX1FERCNx2AJwR/EL4h7X1ILE2/RBjLI9jm8+0g
vfjOh+aenIQ8w6MFVwl2kLxKFZk8SlOZgvtjsjlsGZTX8kgN5QOBB4VRhuVMOAfm
+jT+Dxg5rg8ju9ClZCtNlhVuvA0YDgDmOb1z7J5LmFM458dxT9cp65fag/87ip1H
azTivMWbeb3HFP8A8URBqyJhk+cfEodNNJqvy/79AqYHd7nUj1qZr0dLn7/h6+Ii
Y28v9Nab5QxZSEiwvcR2YK/RKNbPQxDhZ5CjVw2rt0nkegKv0qwVvHSBxvgfxFZg
LA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 06:07:39 2025 by rpki-client