Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/flKVPpAvai5LYhEzoPM0jquwK-0.roa
File: flKVPpAvai5LYhEzoPM0jquwK-0.roa (raw, json)
Hash identifier: gt9oKYbyp03lTOWG6kgwsHallu80XJx83x5hEWcn0Ms=
Subject key identifier: 7E:52:95:3E:90:2F:6A:2E:4B:62:11:33:A0:F3:34:8E:AB:B0:2B:ED
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019F179687486189EE255735BCD88F4AC107
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/flKVPpAvai5LYhEzoPM0jquwK-0.roa
Signing time: Tue 30 Jun 2026 08:12:48 +0000
ROA not before: Tue 30 Jun 2026 08:12:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42772
IP address blocks: 37.17.0.0/17 maxlen: 17
37.17.6.0/23 maxlen: 23
37.17.8.0/21 maxlen: 21
37.17.16.0/22 maxlen: 22
37.17.20.0/22 maxlen: 22
37.17.24.0/21 maxlen: 21
37.17.32.0/21 maxlen: 21
37.17.40.0/21 maxlen: 21
37.17.48.0/20 maxlen: 20
37.17.64.0/19 maxlen: 19
37.17.96.0/20 maxlen: 20
37.17.112.0/22 maxlen: 22
37.17.117.0/24 maxlen: 24
37.17.118.0/24 maxlen: 24
37.17.119.0/24 maxlen: 24
37.17.120.0/21 maxlen: 21
46.53.128.0/21 maxlen: 21
46.53.128.0/24 maxlen: 24
46.53.129.0/24 maxlen: 24
46.53.130.0/24 maxlen: 24
46.53.131.0/24 maxlen: 24
46.53.132.0/24 maxlen: 24
46.53.133.0/24 maxlen: 24
46.53.134.0/24 maxlen: 24
46.53.135.0/24 maxlen: 24
46.53.136.0/21 maxlen: 21
46.53.136.0/24 maxlen: 24
46.53.137.0/24 maxlen: 24
46.53.138.0/24 maxlen: 24
46.53.139.0/24 maxlen: 24
46.53.140.0/24 maxlen: 24
46.53.141.0/24 maxlen: 24
46.53.142.0/23 maxlen: 23
46.53.142.0/24 maxlen: 24
46.53.143.0/24 maxlen: 24
46.53.144.0/21 maxlen: 21
46.53.144.0/24 maxlen: 24
46.53.145.0/24 maxlen: 24
46.53.146.0/24 maxlen: 24
46.53.147.0/24 maxlen: 24
46.53.148.0/24 maxlen: 24
46.53.149.0/24 maxlen: 24
46.53.150.0/24 maxlen: 24
46.53.151.0/24 maxlen: 24
46.53.152.0/21 maxlen: 21
46.53.160.0/21 maxlen: 21
46.53.163.0/24 maxlen: 24
46.53.164.0/24 maxlen: 24
46.53.165.0/24 maxlen: 24
46.53.167.0/24 maxlen: 24
46.53.168.0/21 maxlen: 21
46.53.173.0/24 maxlen: 24
46.53.174.0/23 maxlen: 23
46.53.176.0/22 maxlen: 22
46.53.180.0/22 maxlen: 22
46.53.184.0/21 maxlen: 21
46.53.184.0/23 maxlen: 23
46.53.186.0/24 maxlen: 24
46.53.189.0/24 maxlen: 24
46.53.190.0/23 maxlen: 23
46.53.192.0/22 maxlen: 22
46.53.192.0/24 maxlen: 24
46.53.193.0/24 maxlen: 24
46.53.194.0/24 maxlen: 24
46.53.195.0/24 maxlen: 24
46.53.197.0/24 maxlen: 24
46.53.198.0/23 maxlen: 23
46.53.200.0/22 maxlen: 22
46.53.204.0/24 maxlen: 24
46.53.205.0/24 maxlen: 24
46.53.206.0/24 maxlen: 24
46.53.207.0/24 maxlen: 24
46.53.208.0/22 maxlen: 22
46.53.208.0/24 maxlen: 24
46.53.209.0/24 maxlen: 24
46.53.210.0/24 maxlen: 24
46.53.211.0/24 maxlen: 24
46.53.212.0/22 maxlen: 22
46.53.216.0/21 maxlen: 21
46.53.216.0/22 maxlen: 22
46.53.216.0/24 maxlen: 24
46.53.217.0/24 maxlen: 24
46.53.218.0/24 maxlen: 24
46.53.219.0/24 maxlen: 24
46.53.220.0/22 maxlen: 22
46.53.220.0/24 maxlen: 24
46.53.221.0/24 maxlen: 24
46.53.222.0/24 maxlen: 24
46.53.223.0/24 maxlen: 24
46.53.224.0/21 maxlen: 21
46.53.224.0/22 maxlen: 22
46.53.228.0/22 maxlen: 22
46.53.232.0/21 maxlen: 21
46.53.240.0/21 maxlen: 21
46.53.240.0/22 maxlen: 22
46.53.248.0/21 maxlen: 21
46.53.248.0/22 maxlen: 22
46.56.129.0/24 maxlen: 24
46.56.130.0/23 maxlen: 23
46.56.132.0/24 maxlen: 24
46.56.133.0/24 maxlen: 24
46.56.134.0/24 maxlen: 24
46.56.135.0/24 maxlen: 24
46.56.136.0/23 maxlen: 23
46.56.138.0/23 maxlen: 23
46.56.140.0/22 maxlen: 22
46.56.144.0/20 maxlen: 20
46.56.160.0/21 maxlen: 21
46.56.168.0/21 maxlen: 21
46.56.176.0/20 maxlen: 20
46.56.176.0/21 maxlen: 21
46.56.184.0/21 maxlen: 21
46.56.192.0/21 maxlen: 21
46.56.200.0/21 maxlen: 21
46.56.208.0/24 maxlen: 24
46.56.209.0/24 maxlen: 24
46.56.210.0/24 maxlen: 24
46.56.211.0/24 maxlen: 24
46.56.212.0/24 maxlen: 24
46.56.213.0/24 maxlen: 24
46.56.214.0/23 maxlen: 23
46.56.214.0/24 maxlen: 24
46.56.216.0/21 maxlen: 21
46.56.224.0/21 maxlen: 21
46.56.232.0/21 maxlen: 21
46.56.240.0/21 maxlen: 21
46.56.248.0/21 maxlen: 21
46.182.48.0/21 maxlen: 21
77.74.32.0/21 maxlen: 21
77.74.34.0/24 maxlen: 24
77.74.35.0/24 maxlen: 24
77.74.36.0/24 maxlen: 24
77.74.37.0/24 maxlen: 24
77.74.38.0/24 maxlen: 24
77.74.39.0/24 maxlen: 24
93.191.96.0/22 maxlen: 22
93.191.100.0/24 maxlen: 24
93.191.101.0/24 maxlen: 24
93.191.102.0/24 maxlen: 24
93.191.103.0/24 maxlen: 24
128.65.0.0/18 maxlen: 18
128.65.0.0/24 maxlen: 24
128.65.1.0/24 maxlen: 24
128.65.2.0/23 maxlen: 23
128.65.4.0/23 maxlen: 23
128.65.6.0/23 maxlen: 23
128.65.8.0/21 maxlen: 21
128.65.16.0/22 maxlen: 22
128.65.20.0/22 maxlen: 22
128.65.24.0/21 maxlen: 21
128.65.24.0/22 maxlen: 22
128.65.28.0/22 maxlen: 22
128.65.32.0/21 maxlen: 21
128.65.40.0/21 maxlen: 21
128.65.48.0/20 maxlen: 20
128.65.56.0/21 maxlen: 21
128.65.56.0/22 maxlen: 22
128.65.60.0/22 maxlen: 22
128.140.240.0/20 maxlen: 20
128.140.240.0/24 maxlen: 24
128.140.244.0/22 maxlen: 22
128.140.248.0/22 maxlen: 22
178.163.128.0/17 maxlen: 17
178.163.128.0/24 maxlen: 24
178.163.129.0/24 maxlen: 24
178.163.130.0/24 maxlen: 24
178.163.131.0/24 maxlen: 24
178.163.132.0/24 maxlen: 24
178.163.133.0/24 maxlen: 24
178.163.134.0/24 maxlen: 24
178.163.135.0/24 maxlen: 24
178.163.136.0/24 maxlen: 24
178.163.138.0/24 maxlen: 24
178.163.140.0/22 maxlen: 22
178.163.144.0/21 maxlen: 21
178.163.152.0/21 maxlen: 21
178.163.160.0/24 maxlen: 24
178.163.161.0/24 maxlen: 24
178.163.162.0/24 maxlen: 24
178.163.163.0/24 maxlen: 24
178.163.164.0/24 maxlen: 24
178.163.165.0/24 maxlen: 24
178.163.168.0/21 maxlen: 21
178.163.176.0/21 maxlen: 21
178.163.184.0/21 maxlen: 21
178.163.192.0/22 maxlen: 22
178.163.196.0/22 maxlen: 22
178.163.200.0/23 maxlen: 23
178.163.202.0/23 maxlen: 23
178.163.204.0/23 maxlen: 23
178.163.206.0/23 maxlen: 23
178.163.208.0/21 maxlen: 21
178.163.216.0/22 maxlen: 22
185.61.104.0/23 maxlen: 23
185.61.105.0/24 maxlen: 24
185.61.106.0/23 maxlen: 23
195.222.64.0/20 maxlen: 20
195.222.64.0/24 maxlen: 24
195.222.66.0/24 maxlen: 24
195.222.67.0/24 maxlen: 24
195.222.68.0/24 maxlen: 24
195.222.70.0/24 maxlen: 24
195.222.71.0/24 maxlen: 24
195.222.72.0/24 maxlen: 24
195.222.73.0/24 maxlen: 24
195.222.79.0/24 maxlen: 24
195.222.80.0/21 maxlen: 21
195.222.80.0/24 maxlen: 24
195.222.81.0/24 maxlen: 24
195.222.82.0/24 maxlen: 24
195.222.88.0/23 maxlen: 23
195.222.90.0/24 maxlen: 24
195.222.91.0/24 maxlen: 24
195.222.92.0/22 maxlen: 22
195.222.92.0/24 maxlen: 24
195.222.95.0/24 maxlen: 24
2a00:1760::/32 maxlen: 32
2a00:1760:8000::/40 maxlen: 40
2a00:1760:8100::/40 maxlen: 40
2a00:1760:c000::/40 maxlen: 40
2a00:1760:c100::/40 maxlen: 40
2a00:1760:c200::/40 maxlen: 40
2a00:1760:c300::/40 maxlen: 40
2a00:1761::/32 maxlen: 32
2a00:1761:a000::/35 maxlen: 35
2a00:1761:a000::/40 maxlen: 40
2a00:1761:a100::/40 maxlen: 40
2a00:1761:a200::/40 maxlen: 40
2a00:1761:a300::/40 maxlen: 40
2a00:1762::/32 maxlen: 32
2a00:1762:8000::/40 maxlen: 40
2a00:1762:8100::/40 maxlen: 40
2a00:1763::/32 maxlen: 32
2a00:1763:8000::/40 maxlen: 40
2a00:1763:8100::/40 maxlen: 40
2a00:1765::/32 maxlen: 32
2a00:1765:8000::/40 maxlen: 40
2a00:1765:8100::/40 maxlen: 40
2a03:3000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:96:87:48:61:89:ee:25:57:35:bc:d8:8f:4a:c1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Jun 30 08:12:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e52953e902f6a2e4b621133a0f3348eabb02bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:07:33:51:b3:9e:9c:90:a4:91:39:69:8b:
75:02:51:f0:21:a2:db:4e:43:ae:90:8c:da:c6:73:
b9:c1:3e:7b:e5:d9:2a:b9:9e:64:68:f8:7c:b8:f3:
27:39:12:5d:c6:39:d4:31:a2:5e:21:fc:dd:8c:73:
f2:53:f9:36:57:d5:25:ac:32:0b:e4:f1:81:20:4d:
02:21:e0:2d:d0:4d:89:73:18:26:19:c7:26:f4:74:
23:3f:29:a1:04:53:4a:e6:f5:ca:83:94:08:46:8d:
c6:17:08:86:d6:ae:33:6e:68:a3:b8:55:61:6d:c6:
57:6f:9c:d7:0e:ad:71:59:b3:a4:5d:42:7a:0a:c2:
36:d4:dc:91:54:f8:de:0e:29:33:02:7d:3c:35:63:
f0:bb:96:f4:d3:59:56:f4:b8:44:c8:a2:0a:22:21:
94:d7:67:70:93:8d:f8:dd:99:9d:0c:0c:93:78:be:
68:a6:a7:37:eb:39:02:ae:19:21:5d:d9:ab:b3:30:
4f:ac:da:a4:8d:d2:59:11:4c:cc:88:76:b9:5b:60:
69:05:93:9d:67:3e:18:b6:68:e4:e3:49:e6:23:9d:
28:7a:3b:cd:16:09:e8:ac:49:f0:d6:8a:7a:e7:3a:
ff:3e:db:79:a5:04:20:53:96:42:82:d8:82:be:7e:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:52:95:3E:90:2F:6A:2E:4B:62:11:33:A0:F3:34:8E:AB:B0:2B:ED
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/flKVPpAvai5LYhEzoPM0jquwK-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.0.0/17
46.53.128.0-46.53.195.255
46.53.197.0-46.53.255.255
46.56.129.0-46.56.255.255
46.182.48.0/21
77.74.32.0/21
93.191.96.0/21
128.65.0.0/18
128.140.240.0/20
178.163.128.0/17
185.61.104.0/22
195.222.64.0/19
IPv6:
2a00:1760::/30
2a00:1765::/32
2a03:3000::/32
Signature Algorithm: sha256WithRSAEncryption
99:7d:da:6f:62:14:ea:77:0a:6c:85:28:5b:82:2a:1a:f4:92:
aa:8c:c3:ad:e9:5d:8d:a5:09:bc:28:f8:86:71:83:e2:b1:4f:
00:3a:4a:6d:dc:88:46:ec:55:54:42:a5:4c:fb:9b:e5:a9:c1:
1e:b0:15:a3:16:29:8e:f9:cc:50:87:42:27:45:e1:0d:c5:fa:
62:df:14:31:fd:c2:a8:4d:f6:40:81:df:8d:a0:33:a2:7a:cc:
3a:88:e7:c3:18:cf:1c:ea:dc:32:1d:94:6e:af:c4:94:4e:77:
1f:ba:b5:5e:f2:7f:5f:08:df:d8:8e:30:c3:7c:62:62:72:80:
d6:00:f9:64:a1:05:90:30:3b:e9:a5:d6:e2:d3:8e:6d:e1:6c:
29:7d:c0:86:4a:24:c1:27:b9:97:48:63:98:b1:34:7a:51:0d:
39:5b:11:a2:18:44:a0:53:ce:61:11:ad:c9:74:19:8c:f7:9a:
ae:a0:57:e9:75:23:e7:9a:82:d5:f3:51:0b:16:5a:c4:a6:fe:
59:c6:4b:4e:94:62:86:cd:c9:4e:bd:98:9a:e7:8c:70:cc:b9:
fa:32:24:96:0b:ff:bc:03:a0:1f:05:f5:62:bc:c2:e2:b1:13:
04:9d:e0:92:71:da:e1:da:48:66:e5:07:48:a1:38:65:5a:4f:
2a:e4:7f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:17 2026 by rpki-client