Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/aNMwbtnKhcF9wSCl_EbVGBGLtog.roa
File: aNMwbtnKhcF9wSCl_EbVGBGLtog.roa (raw, json)
Hash identifier: +CgM2pnXv7KZGRoWq4U5DBh6jhUP3vorsltumM39O1A=
Subject key identifier: 68:D3:30:6E:D9:CA:85:C1:7D:C1:20:A5:FC:46:D5:18:11:8B:B6:88
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 01A11BEF8DD6EC5B72DD192E1620332BFDAB
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/aNMwbtnKhcF9wSCl_EbVGBGLtog.roa
Signing time: Thu 08 Oct 2026 14:34:06 +0000
ROA not before: Thu 08 Oct 2026 14:34:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43180
IP address blocks: 45.11.57.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
45.12.0.0/24 maxlen: 24
45.12.1.0/24 maxlen: 24
45.12.3.0/24 maxlen: 24
82.158.192.0/23 maxlen: 23
82.158.196.0/24 maxlen: 24
85.137.51.0/24 maxlen: 24
85.137.60.0/24 maxlen: 24
91.208.115.0/24 maxlen: 24
91.222.172.0/22 maxlen: 24
91.222.172.0/24 maxlen: 24
91.222.173.0/24 maxlen: 24
91.222.174.0/23 maxlen: 23
176.97.112.0/23 maxlen: 23
176.97.116.0/22 maxlen: 22
176.97.120.0/23 maxlen: 23
176.119.31.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
194.42.196.0/23 maxlen: 23
194.42.198.0/24 maxlen: 24
194.42.199.0/24 maxlen: 24
194.42.204.0/24 maxlen: 24
194.42.206.0/23 maxlen: 23
195.66.210.0/24 maxlen: 24
195.128.248.0/23 maxlen: 24
212.86.122.0/23 maxlen: 23
2a09:2dc2::/32 maxlen: 32
2a09:2dc3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:ef:8d:d6:ec:5b:72:dd:19:2e:16:20:33:2b:fd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Oct 8 14:34:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68d3306ed9ca85c17dc120a5fc46d518118bb688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:95:b0:4e:79:a9:af:7c:29:4a:f4:e2:ed:
d4:e4:5a:cd:b1:f3:be:32:28:ff:87:cd:74:5c:2c:
61:f2:e1:e1:0c:10:ac:6c:83:66:ca:7f:f3:94:e0:
1d:9b:cb:04:08:2e:45:24:1a:23:6b:41:49:92:36:
6a:ae:da:45:70:02:70:e1:17:39:cb:91:20:aa:fe:
0a:a0:a6:8f:e8:aa:51:40:6b:50:c0:a7:f2:3e:6e:
30:cd:1a:ea:8e:49:58:5f:ba:c6:dd:7a:54:2e:70:
86:c2:a3:14:e4:4c:cb:e4:15:47:1d:dc:89:91:f4:
40:1b:ad:c5:63:fa:1e:1e:e0:a1:3f:af:10:d2:a2:
c5:77:cd:7c:74:02:93:d2:e4:64:e9:fc:cd:5e:82:
0f:39:c9:57:9d:4e:19:87:b7:8e:ec:b7:c2:36:58:
5f:c9:c2:c1:b9:74:85:7e:f8:53:67:f5:7f:e1:86:
64:15:4d:67:ac:1a:bd:c5:25:74:99:d0:32:8d:ce:
74:8d:c6:bc:e3:8a:7a:e0:14:a7:8f:d3:b2:48:06:
93:34:43:85:9c:34:23:b7:f1:09:bd:5b:c2:03:81:
2c:50:42:39:59:b7:76:c5:69:17:87:04:e0:fb:3a:
55:62:07:08:cd:c6:4d:54:ea:7d:f5:ca:f1:51:65:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D3:30:6E:D9:CA:85:C1:7D:C1:20:A5:FC:46:D5:18:11:8B:B6:88
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/aNMwbtnKhcF9wSCl_EbVGBGLtog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.57.0/24
45.11.59.0/24
45.12.0.0/23
45.12.3.0/24
82.158.192.0/23
82.158.196.0/24
85.137.51.0/24
85.137.60.0/24
91.208.115.0/24
91.222.172.0/22
176.97.112.0/23
176.97.116.0-176.97.121.255
176.119.31.0/24
185.254.199.0/24
194.42.196.0/22
194.42.204.0/24
194.42.206.0/23
195.66.210.0/24
195.128.248.0/23
212.86.122.0/23
IPv6:
2a09:2dc2::/31
Signature Algorithm: sha256WithRSAEncryption
05:88:85:d0:41:23:01:6e:0f:f4:c3:93:9b:9f:14:36:26:10:
4b:57:b4:05:66:35:23:ad:8c:6d:cd:c6:60:c5:29:03:8b:35:
28:36:8b:6a:66:fb:66:58:fb:73:9c:ed:ed:5d:bf:65:64:34:
02:d0:15:74:21:fd:81:95:75:3f:59:e6:36:ef:34:f4:be:7c:
12:80:38:80:25:31:d4:bc:cc:92:7e:b9:5d:56:93:ed:fc:f3:
43:a7:12:24:0e:92:fd:94:93:4c:49:98:d0:e2:99:48:55:d9:
f0:33:45:67:64:4d:0b:12:82:e9:4a:ee:69:07:f4:54:7d:59:
8d:e4:18:7b:0b:be:95:f8:22:a1:20:7b:bd:38:a3:3f:4e:52:
f5:38:b8:4d:5a:d0:6e:da:be:aa:66:df:b6:b3:a5:82:19:df:
d7:14:fc:e5:7d:21:54:ec:cb:9e:54:80:c2:be:13:f1:71:20:
61:7a:bc:f3:83:f3:d0:a1:4a:04:47:6e:4f:82:0b:7e:38:f6:
a4:15:c9:4a:c8:9f:6f:81:ea:2c:d3:53:80:39:30:34:8b:0a:
4f:30:0b:f3:90:87:02:83:45:8f:c0:b5:2a:10:96:8c:84:00:
56:a4:f7:1a:f0:29:7d:f1:77:13:f1:67:a0:f3:e8:07:10:13:
0b:e7:9a:4f
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgISAaEb743W7Fty3RkuFiAzK/2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmM5YzI2ZGY3Y2NkOGFkMzhkODliZDVkNDkzODBiOTNi
MWUwMDkwHhcNMjYxMDA4MTQzNDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGQzMzA2ZWQ5Y2E4NWMxN2RjMTIwYTVmYzQ2ZDUxODExOGJiNjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKKVsE55qa98KUr04u3U5FrNsfO+
Mij/h810XCxh8uHhDBCsbINmyn/zlOAdm8sECC5FJBoja0FJkjZqrtpFcAJw4Rc5
y5Egqv4KoKaP6KpRQGtQwKfyPm4wzRrqjklYX7rG3XpULnCGwqMU5EzL5BVHHdyJ
kfRAG63FY/oeHuChP68Q0qLFd818dAKT0uRk6fzNXoIPOclXnU4Zh7eO7LfCNlhf
ycLBuXSFfvhTZ/V/4YZkFU1nrBq9xSV0mdAyjc50jca844p64BSnj9OySAaTNEOF
nDQjt/EJvVvCA4EsUEI5Wbd2xWkXhwTg+zpVYgcIzcZNVOp99crxUWVLNwIDAQAB
o4IClzCCApMwHQYDVR0OBBYEFGjTMG7ZyoXBfcEgpfxG1RgRi7aIMB8GA1UdIwQY
MBaAFLMsnCbffM2K042JvV1JOAuTseAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjIt
Y2IxMWJjNWIyZjFiLzEvYU5Nd2J0bktoY0Y5d1NDbF9FYlZHQkdMdG9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjItY2IxMWJjNWIyZjFi
LzEvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGsBggrBgEFBQcBBwEB/wSBnDCBmTCBhwQCAAEwgYADBAAt
CzkDBAAtCzsDBAEtDAADBAAtDAMDBAFSnsADBABSnsQDBABViTMDBABViTwDBABb
0HMDBAJb3qwDBAGwYXAwDAMEArBhdAMEAbBheAMEALB3HwMEALn+xwMEAsIqxAME
AMIqzAMEAcIqzgMEAMNC0gMEAcOA+AMEAdRWejANBAIAAjAHAwUBKgktwjANBgkq
hkiG9w0BAQsFAAOCAQEABYiF0EEjAW4P9MOTm58UNiYQS1e0BWY1I62Mbc3GYMUp
A4s1KDaLamb7Zlj7c5zt7V2/ZWQ0AtAVdCH9gZV1P1nmNu809L58EoA4gCUx1LzM
kn65XVaT7fzzQ6cSJA6S/ZSTTEmY0OKZSFXZ8DNFZ2RNCxKC6UruaQf0VH1ZjeQY
ewu+lfgioSB7vTijP05S9Ti4TVrQbtq+qmbftrOlghnf1xT85X0hVOzLnlSAwr4T
8XEgYXq884Pz0KFKBEduT4ILfjj2pBXJSsifb4HqLNNTgDkwNIsKTzAL85CHAoNF
j8C1KhCWjIQAVqT3GvApffF3E/FnoPPoBxATC+eaTw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:54:20 2026 by rpki-client