Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/vO_l3No_L7Cw8bLqsb2WWlFFcfo.roa
File: vO_l3No_L7Cw8bLqsb2WWlFFcfo.roa (raw, json)
Hash identifier: jC6MMmccGbo2U9WmMS6XKKorXH/OG3XYgvsltOpATR0=
Subject key identifier: BC:EF:E5:DC:DA:3F:2F:B0:B0:F1:B2:EA:B1:BD:96:5A:51:45:71:FA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019CAE0547A517130A5EF71531C5ADF7A0AC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/vO_l3No_L7Cw8bLqsb2WWlFFcfo.roa
Signing time: Mon 02 Mar 2026 10:08:27 +0000
ROA not before: Mon 02 Mar 2026 10:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2.58.148.0/24 maxlen: 24
2.58.149.0/24 maxlen: 24
2.58.150.0/24 maxlen: 24
2.58.151.0/24 maxlen: 24
37.46.149.0/24 maxlen: 24
45.91.149.0/24 maxlen: 24
45.129.132.0/24 maxlen: 24
45.129.133.0/24 maxlen: 24
45.135.184.0/24 maxlen: 24
45.135.187.0/24 maxlen: 24
45.143.53.0/24 maxlen: 24
45.145.44.0/24 maxlen: 24
45.145.45.0/24 maxlen: 24
45.145.47.0/24 maxlen: 24
62.197.144.0/24 maxlen: 24
62.197.147.0/24 maxlen: 24
62.197.148.0/24 maxlen: 24
62.197.150.0/24 maxlen: 24
62.197.151.0/24 maxlen: 24
62.197.152.0/24 maxlen: 24
62.197.159.0/24 maxlen: 24
84.247.25.0/24 maxlen: 24
84.247.26.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
89.36.22.0/24 maxlen: 24
89.37.62.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
89.43.199.0/24 maxlen: 24
89.46.92.0/24 maxlen: 24
92.62.121.0/24 maxlen: 24
93.115.254.0/24 maxlen: 24
93.115.255.0/24 maxlen: 24
94.103.249.0/24 maxlen: 24
94.103.250.0/24 maxlen: 24
185.121.121.0/24 maxlen: 24
185.121.122.0/24 maxlen: 24
185.121.123.0/24 maxlen: 24
185.150.0.0/24 maxlen: 24
185.184.134.0/24 maxlen: 24
185.205.190.0/24 maxlen: 24
185.239.241.0/24 maxlen: 24
185.239.243.0/24 maxlen: 24
185.244.137.0/24 maxlen: 24
185.245.5.0/24 maxlen: 24
188.212.132.0/24 maxlen: 24
188.240.68.0/24 maxlen: 24
188.240.74.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
193.218.32.0/24 maxlen: 24
193.239.164.0/24 maxlen: 24
193.239.165.0/24 maxlen: 24
194.169.169.0/24 maxlen: 24
212.119.34.0/24 maxlen: 24
2a11:140::/29 maxlen: 32
2a11:d40::/29 maxlen: 32
2a12:80::/29 maxlen: 32
2a12:680::/29 maxlen: 32
2a12:780::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:05:47:a5:17:13:0a:5e:f7:15:31:c5:ad:f7:a0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 2 10:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcefe5dcda3f2fb0b0f1b2eab1bd965a514571fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:de:33:d2:a5:3c:f8:ce:24:fb:c1:1a:3c:44:
47:c7:36:bd:9e:91:a5:2d:04:96:43:62:2e:97:96:
2e:8c:bb:8c:81:8d:f5:18:f2:81:79:b0:bc:2c:18:
4f:c3:f6:01:bb:00:97:1f:50:ad:76:c0:bd:db:f1:
2a:52:f5:47:f1:0a:2e:bd:a1:2c:bf:5c:df:24:d5:
f9:22:1e:3c:4c:aa:17:6c:81:7a:3d:44:4d:ed:2f:
01:b4:cd:e5:47:f4:e2:5c:e1:a9:98:c4:aa:d8:3b:
c7:13:6c:80:9c:a9:9c:5b:ba:24:d4:e4:7d:4e:c5:
4e:20:09:f1:8a:4f:74:9e:8e:da:34:18:a7:21:df:
c8:33:1f:f9:a9:e0:ac:17:01:d3:57:bf:ea:50:88:
26:5c:be:40:a4:a5:75:f2:50:0d:61:ce:a2:69:b6:
53:b0:2a:e9:18:9a:c3:88:74:9a:09:55:db:0f:0f:
0d:12:d5:88:b7:2f:97:c6:b7:dd:99:74:97:e0:76:
a2:b2:75:f5:ea:6f:f6:f9:ba:d0:59:07:ae:cb:03:
1b:93:f9:5e:7c:fd:3f:1e:e3:dd:b1:2c:89:7d:29:
84:63:02:fa:08:7a:64:e4:02:9e:36:9c:17:d7:44:
32:6f:69:09:d4:5b:5a:4e:56:51:03:fb:14:e0:09:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EF:E5:DC:DA:3F:2F:B0:B0:F1:B2:EA:B1:BD:96:5A:51:45:71:FA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/vO_l3No_L7Cw8bLqsb2WWlFFcfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.148.0/22
37.46.149.0/24
45.91.149.0/24
45.129.132.0/23
45.135.184.0/24
45.135.187.0/24
45.143.53.0/24
45.145.44.0/23
45.145.47.0/24
62.197.144.0/24
62.197.147.0-62.197.148.255
62.197.150.0-62.197.152.255
62.197.159.0/24
84.247.25.0-84.247.26.255
89.33.84.0/24
89.36.22.0/24
89.37.62.0/23
89.43.199.0/24
89.46.92.0/24
92.62.121.0/24
93.115.254.0/23
94.103.249.0-94.103.250.255
185.121.121.0-185.121.123.255
185.150.0.0/24
185.184.134.0/24
185.205.190.0/24
185.239.241.0/24
185.239.243.0/24
185.244.137.0/24
185.245.5.0/24
188.212.132.0/24
188.240.68.0/24
188.240.74.0/24
193.19.108.0/24
193.218.32.0/24
193.239.164.0/23
194.169.169.0/24
212.119.34.0/24
IPv6:
2a11:140::/29
2a11:d40::/29
2a12:80::/29
2a12:680::/29
2a12:780::/29
Signature Algorithm: sha256WithRSAEncryption
4d:af:63:5b:af:aa:54:fd:bf:2b:f5:9d:be:c8:db:e4:be:71:
ae:4e:97:76:9f:d9:26:90:74:d0:f4:1e:f1:2e:e0:66:fb:08:
20:9d:88:74:04:86:b6:e0:c5:4f:44:af:2d:fc:41:12:6c:4e:
6b:fe:b4:f9:21:98:6e:a3:ea:05:7f:00:6a:e5:08:ac:ae:1c:
d9:35:4c:12:fa:6b:f4:98:c1:0a:4a:26:b2:c0:a5:24:10:9d:
b4:ae:ae:c5:82:57:c1:41:08:69:0f:d7:58:64:77:0d:7e:6d:
d8:fa:6a:e4:2a:5c:d6:e1:82:56:d2:c4:6d:86:e7:50:22:5f:
ef:ed:f1:5a:28:4b:c3:aa:28:2e:df:0d:d1:1d:55:cc:85:f7:
74:37:9e:eb:ac:02:d7:62:4e:1a:04:d7:9e:6c:02:3d:95:f5:
ac:7e:c5:29:6f:0d:2d:bc:ec:dd:8c:c0:a8:f7:09:6a:50:a7:
2c:f1:b2:05:d5:69:23:91:78:5f:93:b7:06:af:4a:98:0a:92:
2b:10:ce:91:f5:fc:6d:36:8b:0e:d3:1f:b8:10:9e:98:9a:33:
3a:5a:e4:36:0e:df:4e:94:a7:82:51:28:5e:5e:aa:cf:98:38:
bc:d5:e5:e3:18:03:9c:ce:15:8f:41:d9:14:60:50:50:18:b2:
ea:30:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:39:21 2026 by rpki-client