Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/sEBfFD8lplDfwNaMFsGt3rajXlg.roa
File: sEBfFD8lplDfwNaMFsGt3rajXlg.roa (raw, json)
Hash identifier: KN1cHICCzb/hzOok7ywoAKEKUYveD52B/GeyK2WNH34=
Subject key identifier: B0:40:5F:14:3F:25:A6:50:DF:C0:D6:8C:16:C1:AD:DE:B6:A3:5E:58
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019EEFFADD2A1E24450838264D73A23A3DD3
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/sEBfFD8lplDfwNaMFsGt3rajXlg.roa
Signing time: Mon 22 Jun 2026 15:37:35 +0000
ROA not before: Mon 22 Jun 2026 15:37:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41221
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 24
86.105.172.0/22 maxlen: 24
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 24
86.106.208.0/20 maxlen: 24
86.107.64.0/22 maxlen: 24
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 24
89.32.136.0/21 maxlen: 24
89.32.172.0/22 maxlen: 24
89.32.252.0/22 maxlen: 24
89.34.192.0/21 maxlen: 24
89.34.204.0/22 maxlen: 24
89.34.232.0/22 maxlen: 24
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 24
89.35.84.0/22 maxlen: 24
89.35.200.0/22 maxlen: 24
89.36.156.0/22 maxlen: 24
89.37.44.0/22 maxlen: 24
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 24
89.38.64.0/22 maxlen: 24
89.38.76.0/22 maxlen: 24
89.39.76.0/22 maxlen: 24
89.39.84.0/22 maxlen: 24
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 24
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 24
89.42.72.0/21 maxlen: 24
89.42.104.0/22 maxlen: 24
89.42.128.0/22 maxlen: 24
89.42.180.0/22 maxlen: 24
89.42.224.0/22 maxlen: 24
89.43.128.0/22 maxlen: 24
89.43.168.0/22 maxlen: 24
89.44.152.0/22 maxlen: 24
89.45.40.0/22 maxlen: 24
89.46.164.0/22 maxlen: 24
92.114.128.0/17 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 24
93.113.92.0/22 maxlen: 24
93.113.244.0/22 maxlen: 24
93.115.136.0/21 maxlen: 24
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 24
93.117.72.0/21 maxlen: 24
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 24
93.117.144.0/21 maxlen: 24
93.117.156.0/22 maxlen: 24
93.117.160.0/21 maxlen: 24
93.117.168.0/22 maxlen: 24
93.118.176.0/22 maxlen: 24
93.118.188.0/22 maxlen: 24
93.119.96.0/21 maxlen: 24
93.119.108.0/22 maxlen: 24
93.119.128.0/21 maxlen: 24
93.119.140.0/22 maxlen: 24
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 24
93.119.196.0/22 maxlen: 24
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/19 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 24
188.208.104.0/22 maxlen: 24
188.208.112.0/22 maxlen: 24
188.208.192.0/22 maxlen: 24
188.208.204.0/22 maxlen: 24
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 24
188.210.248.0/22 maxlen: 24
188.212.0.0/22 maxlen: 24
188.212.8.0/21 maxlen: 24
188.212.24.0/21 maxlen: 24
188.212.40.0/21 maxlen: 24
188.213.36.0/22 maxlen: 24
188.213.52.0/22 maxlen: 24
188.213.220.0/22 maxlen: 24
188.213.236.0/22 maxlen: 24
188.213.244.0/22 maxlen: 24
188.214.60.0/22 maxlen: 24
188.214.144.0/22 maxlen: 24
188.214.200.0/21 maxlen: 24
188.215.252.0/22 maxlen: 24
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:fa:dd:2a:1e:24:45:08:38:26:4d:73:a2:3a:3d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Jun 22 15:37:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0405f143f25a650dfc0d68c16c1addeb6a35e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:1c:5d:15:be:37:5d:ea:dd:b6:9a:81:60:
d9:4d:b5:91:16:fc:6d:bc:85:40:f0:b6:58:86:0b:
5f:31:28:f7:10:36:9d:d5:2c:21:69:e3:83:9d:b3:
87:ea:b2:db:7f:c3:3b:91:b0:57:95:2a:d3:e1:12:
be:26:2c:1e:b8:82:d3:35:bd:57:2e:b4:48:0d:0d:
c2:f9:b7:5f:e3:4b:19:7a:09:c1:03:f9:55:ee:0b:
b8:b8:59:39:ac:11:4b:7e:31:99:04:18:63:1a:78:
e6:53:38:7e:75:c4:46:18:ce:a7:48:15:6b:91:48:
1c:71:20:54:81:98:00:83:91:f9:e6:ae:e5:64:8b:
0b:c5:1f:e9:ff:b8:5e:6b:05:13:57:c2:90:a9:b4:
e6:76:7f:3f:20:92:92:3f:f2:82:6a:37:7f:2b:92:
5c:6b:f4:82:46:9a:14:12:1a:84:d4:c6:78:fa:54:
0a:54:b8:08:98:15:60:63:de:e3:ea:e1:f4:24:0e:
42:bc:26:ba:85:47:2d:3a:d9:52:56:4d:7d:64:9a:
51:99:46:36:51:b7:81:e4:16:72:cb:93:e1:a4:8d:
11:50:5f:1c:8c:c7:0c:79:89:88:47:65:40:3b:dd:
6a:c6:5f:cb:41:12:a0:dd:29:c5:03:a0:03:6a:e2:
c6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:40:5F:14:3F:25:A6:50:DF:C0:D6:8C:16:C1:AD:DE:B6:A3:5E:58
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/sEBfFD8lplDfwNaMFsGt3rajXlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0/20
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0/17
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0/22
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.159.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.144.0/22
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:bb:af:37:9f:57:c9:ad:48:75:9a:da:9d:54:62:a3:94:0d:
08:57:01:56:ac:28:b6:3e:da:d8:92:0a:d1:54:3d:a5:39:65:
81:55:0c:e4:e5:39:6f:a6:8d:6a:c0:49:f7:a9:8f:4a:0a:e3:
ef:a9:c8:5c:09:8f:ae:e3:71:cd:40:d3:a9:37:de:3e:80:aa:
8c:9d:30:2d:12:89:d2:a5:52:4e:93:77:3b:0b:e0:42:87:60:
f4:b5:e1:82:6a:84:de:57:2a:25:af:17:73:21:ed:da:84:5b:
54:ca:90:9a:85:8c:48:f6:9d:6a:df:58:31:3c:31:40:c9:e0:
c6:5e:ce:aa:bc:95:60:33:c2:6c:80:da:11:1e:51:8d:1b:20:
1a:e2:8b:c0:02:cc:b3:1d:90:0b:13:91:53:48:0f:0a:89:c1:
90:9c:72:4f:76:86:a5:0a:63:50:6d:23:42:af:4d:6b:e3:34:
fd:53:46:c2:ca:56:26:04:73:ef:5e:44:61:93:e1:99:a7:94:
2e:9a:17:60:56:39:d2:d1:57:41:98:4b:e6:44:4d:c4:58:f3:
61:1f:bf:51:2e:3c:00:e9:06:4d:58:e0:1b:24:e0:19:3d:2e:
56:15:30:91:69:06:5b:a3:31:28:22:0c:d7:5d:89:9f:d6:b9:
af:b4:5c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:42 2026 by rpki-client