Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/0XRZXCUKM7qgvDzFYQSCAcIRDQA.roa
File: 0XRZXCUKM7qgvDzFYQSCAcIRDQA.roa (raw, json)
Hash identifier: MqBSGznS108FLh8ZEENPN2UXa6W8GAC2T4ZmIpHkguc=
Subject key identifier: D1:74:59:5C:25:0A:33:BA:A0:BC:3C:C5:61:04:82:01:C2:11:0D:00
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 01A0D388841FBC96DDCD625FB93F56339033
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/0XRZXCUKM7qgvDzFYQSCAcIRDQA.roa
Signing time: Thu 24 Sep 2026 13:08:54 +0000
ROA not before: Thu 24 Sep 2026 13:08:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42772
IP address blocks: 37.17.0.0/17 maxlen: 17
37.17.6.0/23 maxlen: 23
37.17.8.0/21 maxlen: 21
37.17.16.0/22 maxlen: 22
37.17.20.0/22 maxlen: 22
37.17.24.0/21 maxlen: 21
37.17.32.0/21 maxlen: 21
37.17.40.0/21 maxlen: 21
37.17.48.0/20 maxlen: 20
37.17.64.0/19 maxlen: 19
37.17.96.0/20 maxlen: 20
37.17.112.0/22 maxlen: 22
37.17.117.0/24 maxlen: 24
37.17.118.0/24 maxlen: 24
37.17.119.0/24 maxlen: 24
37.17.120.0/21 maxlen: 21
46.53.128.0/21 maxlen: 21
46.53.128.0/24 maxlen: 24
46.53.129.0/24 maxlen: 24
46.53.130.0/24 maxlen: 24
46.53.131.0/24 maxlen: 24
46.53.132.0/24 maxlen: 24
46.53.133.0/24 maxlen: 24
46.53.134.0/24 maxlen: 24
46.53.135.0/24 maxlen: 24
46.53.136.0/21 maxlen: 21
46.53.136.0/24 maxlen: 24
46.53.137.0/24 maxlen: 24
46.53.138.0/24 maxlen: 24
46.53.139.0/24 maxlen: 24
46.53.140.0/24 maxlen: 24
46.53.141.0/24 maxlen: 24
46.53.142.0/23 maxlen: 23
46.53.142.0/24 maxlen: 24
46.53.143.0/24 maxlen: 24
46.53.144.0/21 maxlen: 21
46.53.144.0/24 maxlen: 24
46.53.145.0/24 maxlen: 24
46.53.146.0/24 maxlen: 24
46.53.147.0/24 maxlen: 24
46.53.148.0/24 maxlen: 24
46.53.149.0/24 maxlen: 24
46.53.150.0/24 maxlen: 24
46.53.151.0/24 maxlen: 24
46.53.152.0/21 maxlen: 21
46.53.160.0/21 maxlen: 21
46.53.163.0/24 maxlen: 24
46.53.164.0/24 maxlen: 24
46.53.165.0/24 maxlen: 24
46.53.167.0/24 maxlen: 24
46.53.168.0/21 maxlen: 21
46.53.173.0/24 maxlen: 24
46.53.174.0/23 maxlen: 23
46.53.176.0/22 maxlen: 22
46.53.180.0/22 maxlen: 22
46.53.184.0/21 maxlen: 21
46.53.184.0/23 maxlen: 23
46.53.186.0/24 maxlen: 24
46.53.189.0/24 maxlen: 24
46.53.190.0/23 maxlen: 23
46.53.192.0/22 maxlen: 22
46.53.192.0/24 maxlen: 24
46.53.193.0/24 maxlen: 24
46.53.194.0/24 maxlen: 24
46.53.195.0/24 maxlen: 24
46.53.197.0/24 maxlen: 24
46.53.198.0/23 maxlen: 23
46.53.200.0/22 maxlen: 22
46.53.204.0/24 maxlen: 24
46.53.205.0/24 maxlen: 24
46.53.206.0/24 maxlen: 24
46.53.207.0/24 maxlen: 24
46.53.208.0/24 maxlen: 24
46.53.210.0/24 maxlen: 24
46.53.211.0/24 maxlen: 24
46.53.212.0/22 maxlen: 22
46.53.216.0/23 maxlen: 23
46.53.216.0/24 maxlen: 24
46.53.217.0/24 maxlen: 24
46.53.218.0/23 maxlen: 23
46.53.218.0/24 maxlen: 24
46.53.219.0/24 maxlen: 24
46.53.220.0/23 maxlen: 23
46.53.222.0/23 maxlen: 23
46.53.224.0/22 maxlen: 22
46.53.228.0/22 maxlen: 22
46.53.232.0/21 maxlen: 21
46.53.240.0/21 maxlen: 21
46.53.240.0/22 maxlen: 22
46.53.248.0/21 maxlen: 21
46.53.248.0/22 maxlen: 22
46.56.129.0/24 maxlen: 24
46.56.130.0/23 maxlen: 23
46.56.132.0/24 maxlen: 24
46.56.133.0/24 maxlen: 24
46.56.134.0/24 maxlen: 24
46.56.135.0/24 maxlen: 24
46.56.136.0/23 maxlen: 23
46.56.138.0/23 maxlen: 23
46.56.140.0/22 maxlen: 22
46.56.144.0/20 maxlen: 20
46.56.160.0/21 maxlen: 21
46.56.168.0/21 maxlen: 21
46.56.176.0/20 maxlen: 20
46.56.176.0/21 maxlen: 21
46.56.184.0/21 maxlen: 21
46.56.192.0/21 maxlen: 21
46.56.200.0/21 maxlen: 21
46.56.208.0/24 maxlen: 24
46.56.209.0/24 maxlen: 24
46.56.210.0/24 maxlen: 24
46.56.211.0/24 maxlen: 24
46.56.212.0/24 maxlen: 24
46.56.213.0/24 maxlen: 24
46.56.214.0/23 maxlen: 23
46.56.214.0/24 maxlen: 24
46.56.216.0/21 maxlen: 21
46.56.224.0/21 maxlen: 21
46.56.232.0/21 maxlen: 21
46.56.240.0/21 maxlen: 21
46.56.248.0/21 maxlen: 21
46.182.48.0/21 maxlen: 21
77.74.32.0/21 maxlen: 21
77.74.34.0/24 maxlen: 24
77.74.35.0/24 maxlen: 24
77.74.36.0/24 maxlen: 24
77.74.37.0/24 maxlen: 24
77.74.38.0/24 maxlen: 24
77.74.39.0/24 maxlen: 24
93.191.96.0/22 maxlen: 22
93.191.100.0/24 maxlen: 24
93.191.101.0/24 maxlen: 24
93.191.102.0/24 maxlen: 24
93.191.103.0/24 maxlen: 24
128.65.0.0/18 maxlen: 18
128.65.0.0/24 maxlen: 24
128.65.1.0/24 maxlen: 24
128.65.2.0/23 maxlen: 23
128.65.4.0/23 maxlen: 23
128.65.6.0/23 maxlen: 23
128.65.8.0/21 maxlen: 21
128.65.16.0/22 maxlen: 22
128.65.20.0/22 maxlen: 22
128.65.24.0/21 maxlen: 21
128.65.24.0/22 maxlen: 22
128.65.28.0/22 maxlen: 22
128.65.32.0/21 maxlen: 21
128.65.40.0/21 maxlen: 21
128.65.48.0/20 maxlen: 20
128.65.56.0/21 maxlen: 21
128.65.56.0/22 maxlen: 22
128.65.60.0/22 maxlen: 22
128.140.240.0/20 maxlen: 20
128.140.240.0/24 maxlen: 24
128.140.244.0/22 maxlen: 22
128.140.248.0/22 maxlen: 22
178.163.128.0/17 maxlen: 17
178.163.128.0/24 maxlen: 24
178.163.129.0/24 maxlen: 24
178.163.130.0/24 maxlen: 24
178.163.131.0/24 maxlen: 24
178.163.132.0/24 maxlen: 24
178.163.133.0/24 maxlen: 24
178.163.134.0/24 maxlen: 24
178.163.135.0/24 maxlen: 24
178.163.136.0/24 maxlen: 24
178.163.138.0/24 maxlen: 24
178.163.140.0/22 maxlen: 22
178.163.144.0/21 maxlen: 21
178.163.152.0/21 maxlen: 21
178.163.160.0/24 maxlen: 24
178.163.161.0/24 maxlen: 24
178.163.162.0/24 maxlen: 24
178.163.163.0/24 maxlen: 24
178.163.164.0/24 maxlen: 24
178.163.165.0/24 maxlen: 24
178.163.168.0/21 maxlen: 21
178.163.176.0/21 maxlen: 21
178.163.184.0/21 maxlen: 21
178.163.192.0/22 maxlen: 22
178.163.196.0/22 maxlen: 22
178.163.200.0/23 maxlen: 23
178.163.202.0/23 maxlen: 23
178.163.204.0/23 maxlen: 23
178.163.206.0/23 maxlen: 23
178.163.208.0/21 maxlen: 21
178.163.216.0/22 maxlen: 22
185.61.104.0/23 maxlen: 23
185.61.105.0/24 maxlen: 24
185.61.106.0/23 maxlen: 23
195.222.64.0/20 maxlen: 20
195.222.64.0/24 maxlen: 24
195.222.66.0/24 maxlen: 24
195.222.67.0/24 maxlen: 24
195.222.68.0/24 maxlen: 24
195.222.70.0/24 maxlen: 24
195.222.71.0/24 maxlen: 24
195.222.72.0/24 maxlen: 24
195.222.73.0/24 maxlen: 24
195.222.79.0/24 maxlen: 24
195.222.80.0/21 maxlen: 21
195.222.80.0/24 maxlen: 24
195.222.81.0/24 maxlen: 24
195.222.82.0/24 maxlen: 24
195.222.88.0/23 maxlen: 23
195.222.90.0/24 maxlen: 24
195.222.91.0/24 maxlen: 24
195.222.92.0/22 maxlen: 22
195.222.92.0/24 maxlen: 24
195.222.95.0/24 maxlen: 24
2a00:1760::/32 maxlen: 32
2a00:1760:8000::/40 maxlen: 40
2a00:1760:8100::/40 maxlen: 40
2a00:1760:c000::/40 maxlen: 40
2a00:1760:c100::/40 maxlen: 40
2a00:1760:c200::/40 maxlen: 40
2a00:1760:c300::/40 maxlen: 40
2a00:1761::/32 maxlen: 32
2a00:1761:a000::/35 maxlen: 35
2a00:1761:a000::/40 maxlen: 40
2a00:1761:a100::/40 maxlen: 40
2a00:1761:a200::/40 maxlen: 40
2a00:1761:a300::/40 maxlen: 40
2a00:1762::/32 maxlen: 32
2a00:1762:8000::/40 maxlen: 40
2a00:1762:8100::/40 maxlen: 40
2a00:1763::/32 maxlen: 32
2a00:1763:8000::/40 maxlen: 40
2a00:1763:8100::/40 maxlen: 40
2a00:1765::/32 maxlen: 32
2a00:1765:8000::/40 maxlen: 40
2a00:1765:8100::/40 maxlen: 40
2a03:3000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:88:84:1f:bc:96:dd:cd:62:5f:b9:3f:56:33:90:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Sep 24 13:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d174595c250a33baa0bc3cc561048201c2110d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2b:8f:39:1b:90:15:a5:30:82:0b:e5:ed:6d:
2b:3b:13:48:66:c6:89:8b:20:d8:8e:8b:81:5f:c5:
29:23:c9:63:a2:1b:e9:cd:eb:10:c9:46:94:40:1c:
2d:f8:82:8d:7d:8b:7c:b4:9b:58:01:29:61:31:aa:
db:43:98:98:b3:97:35:60:de:9b:0e:18:29:15:9a:
e2:53:98:a8:0c:dc:e7:e8:a6:2e:09:f2:74:1c:4e:
83:7f:f4:d7:76:0a:24:c0:bc:ef:a2:9f:79:2b:04:
f7:34:ae:29:86:5d:cb:07:bc:a7:79:6b:34:e8:1e:
82:1b:4e:e5:20:3c:d1:98:a4:45:65:08:33:c4:19:
9c:75:41:cf:f7:9b:1e:72:0c:4f:4d:21:b0:7b:01:
31:ba:6e:ef:45:91:fd:65:ba:c5:aa:40:86:fb:1a:
06:54:db:7a:79:78:fb:d8:fe:95:ce:c8:60:38:bb:
75:77:bc:06:ce:34:9c:96:bc:b0:0f:e2:d5:44:2c:
0c:3c:ca:36:be:e6:4e:37:96:77:69:31:30:c2:a1:
60:a8:81:c6:43:3f:d6:dd:c3:c8:49:1a:77:5d:a3:
c5:32:80:be:5b:21:6f:a7:1a:dc:98:b8:45:16:d7:
31:19:3f:3f:40:9b:30:0e:db:c5:00:2c:e6:5e:c4:
a3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:59:5C:25:0A:33:BA:A0:BC:3C:C5:61:04:82:01:C2:11:0D:00
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/0XRZXCUKM7qgvDzFYQSCAcIRDQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.0.0/17
46.53.128.0-46.53.195.255
46.53.197.0-46.53.208.255
46.53.210.0-46.53.255.255
46.56.129.0-46.56.255.255
46.182.48.0/21
77.74.32.0/21
93.191.96.0/21
128.65.0.0/18
128.140.240.0/20
178.163.128.0/17
185.61.104.0/22
195.222.64.0/19
IPv6:
2a00:1760::/30
2a00:1765::/32
2a03:3000::/32
Signature Algorithm: sha256WithRSAEncryption
a1:15:3c:06:d2:53:72:30:4b:b9:d8:83:c0:7c:55:82:56:02:
ce:19:2a:89:48:7c:93:2d:32:40:59:4e:73:d7:0e:78:eb:31:
30:1a:e0:fd:19:0d:1d:28:bf:b2:fa:36:42:ba:d2:df:08:80:
d2:f2:c4:67:2f:53:15:a8:ea:0a:7f:8e:09:63:d7:bf:8f:6b:
71:89:e7:c3:3f:64:cf:4f:11:a5:e0:37:08:90:82:c3:dd:28:
31:4b:e3:cf:82:2a:1a:84:d3:b5:ed:8e:e7:38:9a:57:09:3c:
f6:ad:8c:a6:7e:55:ab:be:5b:1e:37:9e:6e:29:65:da:d3:21:
0f:ac:4f:4b:b3:83:d0:f5:2b:d4:0b:8f:8c:63:1c:a6:c9:31:
f6:62:a3:a2:19:1b:56:ea:07:6a:bd:1e:55:27:d8:db:5c:25:
ca:cb:a2:36:c1:94:e6:bb:60:87:73:cc:5a:f0:a8:85:42:b3:
06:75:0b:cd:a3:8c:3b:65:aa:76:15:c1:8f:45:70:24:d1:1f:
e3:f4:37:f2:33:eb:a9:04:fc:59:76:4c:08:1c:35:ba:01:b8:
0a:72:5b:fb:51:5d:ff:9b:24:90:30:a5:d7:ba:0a:ad:04:1a:
1a:8e:66:0f:ab:0b:42:ca:fe:c5:22:c7:74:58:27:ec:f9:85:
22:71:f0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:35:59 2026 by rpki-client