Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/akNZUHs8BHMdWdqvV0sJs8rtIQ4.roa
File: akNZUHs8BHMdWdqvV0sJs8rtIQ4.roa (raw, json)
Hash identifier: gAMI1lIm9NlFPzIxwDcNkd7DzJ0ouLPRYM5W8jLdL88=
Subject key identifier: 6A:43:59:50:7B:3C:04:73:1D:59:DA:AF:57:4B:09:B3:CA:ED:21:0E
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019E446123267B3EB3A5C01B4F0C7D783A3E
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/akNZUHs8BHMdWdqvV0sJs8rtIQ4.roa
Signing time: Wed 20 May 2026 07:54:37 +0000
ROA not before: Wed 20 May 2026 07:54:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57344
IP address blocks: 5.104.168.0/23 maxlen: 23
5.104.174.0/24 maxlen: 24
46.253.134.0/24 maxlen: 24
77.76.0.0/24 maxlen: 24
77.76.8.0/24 maxlen: 24
77.76.10.0/24 maxlen: 24
77.76.11.0/24 maxlen: 24
78.128.0.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.41.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
78.128.67.0/24 maxlen: 24
78.128.72.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.79.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.83.0/24 maxlen: 24
78.128.92.0/24 maxlen: 24
78.128.94.0/24 maxlen: 24
78.128.96.0/24 maxlen: 24
78.128.98.0/24 maxlen: 24
78.128.106.0/24 maxlen: 24
78.128.107.0/24 maxlen: 24
78.128.108.0/23 maxlen: 23
78.142.1.0/24 maxlen: 24
78.142.4.0/23 maxlen: 23
78.142.17.0/24 maxlen: 24
78.142.20.0/24 maxlen: 24
78.142.24.0/24 maxlen: 24
78.142.30.0/24 maxlen: 24
78.142.31.0/24 maxlen: 24
78.142.33.0/24 maxlen: 24
78.142.34.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.48.0/24 maxlen: 24
78.142.60.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
79.124.0.0/24 maxlen: 24
79.124.15.0/24 maxlen: 24
79.124.20.0/23 maxlen: 23
79.124.23.0/24 maxlen: 24
79.124.24.0/22 maxlen: 24
79.124.28.0/24 maxlen: 24
79.124.47.0/24 maxlen: 24
79.124.50.0/24 maxlen: 24
79.124.51.0/24 maxlen: 24
79.124.53.0/24 maxlen: 24
79.124.73.0/24 maxlen: 24
79.124.74.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.79.0/24 maxlen: 24
79.124.82.0/24 maxlen: 24
82.118.224.0/24 maxlen: 24
82.118.236.0/24 maxlen: 24
82.118.238.0/24 maxlen: 24
82.118.244.0/24 maxlen: 24
82.118.246.0/23 maxlen: 23
87.246.2.0/24 maxlen: 24
91.148.131.0/24 maxlen: 24
91.148.140.0/24 maxlen: 24
91.148.149.0/24 maxlen: 24
91.148.160.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
91.148.169.0/24 maxlen: 24
91.148.187.0/24 maxlen: 24
91.191.216.0/23 maxlen: 24
94.72.145.0/24 maxlen: 24
94.72.148.0/22 maxlen: 24
94.72.158.0/24 maxlen: 24
94.72.159.0/24 maxlen: 24
130.185.224.0/24 maxlen: 24
130.185.226.0/24 maxlen: 24
130.185.229.0/24 maxlen: 24
130.185.235.0/24 maxlen: 24
130.185.236.0/24 maxlen: 24
130.185.237.0/24 maxlen: 24
130.185.248.0/24 maxlen: 24
130.185.250.0/24 maxlen: 24
176.241.176.0/23 maxlen: 24
178.132.80.0/24 maxlen: 24
178.132.81.0/24 maxlen: 24
178.132.82.0/23 maxlen: 24
178.132.84.0/23 maxlen: 24
185.148.160.0/22 maxlen: 22
185.148.162.0/24 maxlen: 24
185.197.152.0/22 maxlen: 24
185.232.156.0/23 maxlen: 24
185.232.159.0/24 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.148.0/24 maxlen: 24
217.174.149.0/24 maxlen: 24
217.174.150.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.152.0/24 maxlen: 24
217.174.153.0/24 maxlen: 24
217.174.154.0/24 maxlen: 24
217.174.159.0/24 maxlen: 24
2a01:8740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:61:23:26:7b:3e:b3:a5:c0:1b:4f:0c:7d:78:3a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: May 20 07:54:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4359507b3c04731d59daaf574b09b3caed210e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ca:08:03:20:af:45:32:86:d5:0b:a2:47:80:
2a:58:42:03:7e:2a:d0:87:e5:9a:8e:f6:52:1b:f2:
ed:75:ad:d5:55:9c:4f:92:92:c9:65:3a:27:87:ad:
c8:76:db:42:bf:c4:94:17:e5:06:9e:99:0d:0b:89:
f9:64:74:2e:f6:ac:4c:b9:24:3e:68:62:cf:27:df:
fa:33:f9:47:30:c7:39:af:df:2a:21:c3:e9:74:5d:
2e:88:9b:11:09:6e:fb:37:fb:e1:5e:9a:cf:d6:72:
e5:25:86:6e:6a:41:8f:fd:dd:f1:07:3e:53:d1:b6:
5e:0c:e4:d3:1d:fb:93:c2:66:e1:36:19:fe:e7:1e:
80:6e:84:7d:a5:dd:41:1a:74:ce:43:10:78:67:ef:
57:17:39:7c:5a:20:ab:6d:b4:f1:9a:c2:95:24:d9:
61:59:82:d2:31:4b:4c:59:a8:dd:4d:eb:61:1f:0f:
a6:e1:ab:e4:60:e4:cf:be:e2:28:b3:bd:ec:71:02:
aa:f5:25:6b:2c:ac:81:21:3d:23:81:36:e5:48:a4:
ae:a9:8e:b1:fb:25:f4:54:93:a8:ff:28:52:db:4a:
96:8e:2a:a8:fc:f8:3c:be:2d:c5:1b:ad:26:47:74:
e5:d8:c7:12:8f:bc:33:73:22:99:c2:fa:71:bc:12:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:43:59:50:7B:3C:04:73:1D:59:DA:AF:57:4B:09:B3:CA:ED:21:0E
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/akNZUHs8BHMdWdqvV0sJs8rtIQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.168.0/23
5.104.174.0/24
46.253.134.0/24
77.76.0.0/24
77.76.8.0/24
77.76.10.0/23
78.128.0.0/24
78.128.8.0/24
78.128.41.0/24
78.128.43.0/24
78.128.60.0/24
78.128.67.0/24
78.128.72.0/24
78.128.76.0/24
78.128.79.0/24
78.128.81.0/24
78.128.83.0/24
78.128.92.0/24
78.128.94.0/24
78.128.96.0/24
78.128.98.0/24
78.128.106.0-78.128.109.255
78.142.1.0/24
78.142.4.0/23
78.142.17.0/24
78.142.20.0/24
78.142.24.0/24
78.142.30.0/23
78.142.33.0-78.142.34.255
78.142.47.0-78.142.48.255
78.142.60.0/24
78.142.63.0/24
79.124.0.0/24
79.124.15.0/24
79.124.20.0/23
79.124.23.0-79.124.28.255
79.124.47.0/24
79.124.50.0/23
79.124.53.0/24
79.124.73.0-79.124.74.255
79.124.76.0/24
79.124.79.0/24
79.124.82.0/24
82.118.224.0/24
82.118.236.0/24
82.118.238.0/24
82.118.244.0/24
82.118.246.0/23
87.246.2.0/24
91.148.131.0/24
91.148.140.0/24
91.148.149.0/24
91.148.160.0/24
91.148.168.0/23
91.148.187.0/24
91.191.216.0/23
94.72.145.0/24
94.72.148.0/22
94.72.158.0/23
130.185.224.0/24
130.185.226.0/24
130.185.229.0/24
130.185.235.0-130.185.237.255
130.185.248.0/24
130.185.250.0/24
176.241.176.0/23
178.132.80.0-178.132.85.255
185.148.160.0/22
185.197.152.0/22
185.232.156.0/23
185.232.159.0/24
217.174.148.0-217.174.150.255
217.174.152.0-217.174.154.255
217.174.159.0/24
IPv6:
2a01:8740::/32
Signature Algorithm: sha256WithRSAEncryption
4d:6b:fe:97:b5:65:4c:c6:95:49:fb:6d:f2:ed:b3:d5:34:3d:
8f:e5:49:40:bc:07:df:53:1b:96:27:f8:5b:30:b7:d9:ec:54:
93:e1:07:d7:e9:41:d7:04:cb:0a:a7:09:36:e6:a8:d2:c6:9a:
90:79:d8:07:55:52:13:8b:36:83:c9:cd:94:20:f7:08:39:38:
b0:76:bc:f7:b0:88:0a:6b:c7:01:fc:20:cd:50:b6:85:ab:39:
fb:fd:2e:a7:46:25:6e:16:89:33:51:46:26:bf:89:73:e7:95:
3d:d1:cf:97:4e:cd:46:75:29:46:a4:bc:43:9f:45:db:97:f0:
e8:e4:46:9f:27:c3:6b:64:c0:74:eb:10:d4:0f:23:fb:94:1b:
7f:9c:d4:4b:9d:58:06:9f:34:cc:ee:68:56:bb:1f:53:17:0c:
2f:0b:b3:31:e7:56:53:66:df:4d:79:f3:51:f9:0a:f9:31:14:
50:65:8c:c6:8e:83:a3:df:be:82:1c:1a:81:ed:e2:ab:71:05:
93:ff:1d:94:0c:06:c7:a5:78:3e:e6:ba:23:b0:3c:4c:0d:0f:
ca:0a:fd:d7:c3:ca:4a:0e:01:86:95:39:c1:2d:03:fd:28:0e:
7f:35:89:44:b6:35:27:80:42:ee:bb:2c:83:55:49:99:aa:00:
f5:e5:ff:49
-----BEGIN CERTIFICATE-----
MIIHFDCCBfygAwIBAgISAZ5EYSMmez6zpcAbTwx9eDo+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjYwNTIwMDc1NDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTQzNTk1MDdiM2MwNDczMWQ1OWRhYWY1NzRiMDliM2NhZWQyMTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1soIAyCvRTKG1QuiR4AqWEIDfirQ
h+WajvZSG/Ltda3VVZxPkpLJZTonh63IdttCv8SUF+UGnpkNC4n5ZHQu9qxMuSQ+
aGLPJ9/6M/lHMMc5r98qIcPpdF0uiJsRCW77N/vhXprP1nLlJYZuakGP/d3xBz5T
0bZeDOTTHfuTwmbhNhn+5x6AboR9pd1BGnTOQxB4Z+9XFzl8WiCrbbTxmsKVJNlh
WYLSMUtMWajdTethHw+m4avkYOTPvuIos73scQKq9SVrLKyBIT0jgTblSKSuqY6x
+yX0VJOo/yhS20qWjiqo/Pg8vi3FG60mR3Tl2McSj7wzcyKZwvpxvBJ7EwIDAQAB
o4IEIDCCBBwwHQYDVR0OBBYEFGpDWVB7PARzHVnar1dLCbPK7SEOMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvYWtOWlVIczhCSE1kV2RxdlYwc0pzOHJ0SVE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICNAYIKwYBBQUHAQcBAf8EggIjMIICHzCCAgwEAgABMIIC
BAMEAQVoqAMEAAVorgMEAC79hgMEAE1MAAMEAE1MCAMEAU1MCgMEAE6AAAMEAE6A
CAMEAE6AKQMEAE6AKwMEAE6APAMEAE6AQwMEAE6ASAMEAE6ATAMEAE6ATwMEAE6A
UQMEAE6AUwMEAE6AXAMEAE6AXgMEAE6AYAMEAE6AYjAMAwQBToBqAwQBToBsAwQA
To4BAwQBTo4EAwQATo4RAwQATo4UAwQATo4YAwQBTo4eMAwDBABOjiEDBABOjiIw
DAMEAE6OLwMEAE6OMAMEAE6OPAMEAE6OPwMEAE98AAMEAE98DwMEAU98FDAMAwQA
T3wXAwQAT3wcAwQAT3wvAwQBT3wyAwQAT3w1MAwDBABPfEkDBABPfEoDBABPfEwD
BABPfE8DBABPfFIDBABSduADBABSduwDBABSdu4DBABSdvQDBAFSdvYDBABX9gID
BABblIMDBABblIwDBABblJUDBABblKADBAFblKgDBABblLsDBAFbv9gDBABeSJED
BAJeSJQDBAFeSJ4DBACCueADBACCueIDBACCueUwDAMEAIK56wMEAYK57AMEAIK5
+AMEAIK5+gMEAbDxsDAMAwQEsoRQAwQBsoRUAwQCuZSgAwQCucWYAwQBueicAwQA
ueifMAwDBALZrpQDBADZrpYwDAMEA9mumAMEANmumgMEANmunzANBAIAAjAHAwUA
KgGHQDANBgkqhkiG9w0BAQsFAAOCAQEATWv+l7VlTMaVSftt8u2z1TQ9j+VJQLwH
31Mblif4WzC32exUk+EH1+lB1wTLCqcJNuao0saakHnYB1VSE4s2g8nNlCD3CDk4
sHa897CICmvHAfwgzVC2has5+/0up0YlbhaJM1FGJr+Jc+eVPdHPl07NRnUpRqS8
Q59F25fw6ORGnyfDa2TAdOsQ1A8j+5Qbf5zUS51YBp80zO5oVrsfUxcMLwuzMedW
U2bfTXnzUfkK+TEUUGWMxo6Do9++ghwage3iq3EFk/8dlAwGx6V4Pua6I7A8TA0P
ygr918PKSg4BhpU5wS0D/SgOfzWJRLY1J4BC7rssg1VJmaoA9eX/SQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 19:13:06 2026 by rpki-client