Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/_-6BMmBQ0AjWxQJhGIsBkpBk0MY.roa
File: _-6BMmBQ0AjWxQJhGIsBkpBk0MY.roa (raw, json)
Hash identifier: tFUIbxKks+dCCY65mjpFHkwOHonNu23gAu+XuHi4a8k=
Subject key identifier: FF:EE:81:32:60:50:D0:08:D6:C5:02:61:18:8B:01:92:90:64:D0:C6
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 019E0B1836F003CD2E46538C6FD1923AF833
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/_-6BMmBQ0AjWxQJhGIsBkpBk0MY.roa
Signing time: Sat 09 May 2026 04:56:36 +0000
ROA not before: Sat 09 May 2026 04:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48282
IP address blocks: 45.150.36.0/24 maxlen: 24
45.150.37.0/24 maxlen: 24
45.150.38.0/24 maxlen: 24
45.150.39.0/24 maxlen: 24
62.113.112.0/24 maxlen: 24
62.113.113.0/24 maxlen: 24
62.113.114.0/24 maxlen: 24
62.113.115.0/24 maxlen: 24
62.113.116.0/24 maxlen: 24
62.113.117.0/24 maxlen: 24
62.113.118.0/24 maxlen: 24
62.113.119.0/24 maxlen: 24
83.217.212.0/24 maxlen: 24
83.217.213.0/24 maxlen: 24
83.217.214.0/24 maxlen: 24
83.217.215.0/24 maxlen: 24
84.54.44.0/24 maxlen: 24
84.54.47.0/24 maxlen: 24
85.198.108.0/24 maxlen: 24
85.198.109.0/24 maxlen: 24
85.198.110.0/24 maxlen: 24
85.198.111.0/24 maxlen: 24
88.210.34.0/24 maxlen: 24
88.210.35.0/24 maxlen: 24
88.210.52.0/24 maxlen: 24
88.210.53.0/24 maxlen: 24
88.210.54.0/24 maxlen: 24
88.210.55.0/24 maxlen: 24
88.218.60.0/24 maxlen: 24
88.218.61.0/24 maxlen: 24
88.218.62.0/24 maxlen: 24
88.218.63.0/24 maxlen: 24
91.142.72.0/24 maxlen: 24
91.142.73.0/24 maxlen: 24
91.142.74.0/24 maxlen: 24
91.142.75.0/24 maxlen: 24
91.184.244.0/24 maxlen: 24
91.184.245.0/24 maxlen: 24
91.184.246.0/24 maxlen: 24
91.184.247.0/24 maxlen: 24
91.212.150.0/24 maxlen: 24
93.183.92.0/24 maxlen: 24
93.183.93.0/24 maxlen: 24
93.183.94.0/24 maxlen: 24
93.183.95.0/24 maxlen: 24
94.103.83.0/24 maxlen: 24
94.103.84.0/24 maxlen: 24
94.103.85.0/24 maxlen: 24
94.103.86.0/24 maxlen: 24
94.103.87.0/24 maxlen: 24
94.103.88.0/24 maxlen: 24
94.103.89.0/24 maxlen: 24
94.103.90.0/24 maxlen: 24
94.103.91.0/24 maxlen: 24
94.103.92.0/24 maxlen: 24
94.103.93.0/24 maxlen: 24
95.142.33.0/24 maxlen: 24
95.142.34.0/24 maxlen: 24
95.142.45.0/24 maxlen: 24
95.142.46.0/24 maxlen: 24
95.142.47.0/24 maxlen: 24
109.172.84.0/24 maxlen: 24
109.172.85.0/24 maxlen: 24
109.172.86.0/24 maxlen: 24
109.172.87.0/24 maxlen: 24
109.172.88.0/24 maxlen: 24
109.172.89.0/24 maxlen: 24
109.172.90.0/24 maxlen: 24
109.172.91.0/24 maxlen: 24
138.16.160.0/24 maxlen: 24
138.16.161.0/24 maxlen: 24
138.16.162.0/24 maxlen: 24
138.16.163.0/24 maxlen: 24
138.16.164.0/24 maxlen: 24
138.16.165.0/24 maxlen: 24
138.16.166.0/24 maxlen: 24
138.16.167.0/24 maxlen: 24
138.16.168.0/24 maxlen: 24
138.16.169.0/24 maxlen: 24
138.16.170.0/24 maxlen: 24
138.16.171.0/24 maxlen: 24
138.16.172.0/24 maxlen: 24
138.16.173.0/24 maxlen: 24
138.16.174.0/24 maxlen: 24
138.16.175.0/24 maxlen: 24
138.16.176.0/24 maxlen: 24
138.16.177.0/24 maxlen: 24
138.16.178.0/24 maxlen: 24
138.16.179.0/24 maxlen: 24
138.16.180.0/24 maxlen: 24
138.16.181.0/24 maxlen: 24
138.16.182.0/24 maxlen: 24
138.16.183.0/24 maxlen: 24
138.16.184.0/24 maxlen: 24
138.16.185.0/24 maxlen: 24
138.16.186.0/24 maxlen: 24
138.16.187.0/24 maxlen: 24
138.16.188.0/24 maxlen: 24
138.16.189.0/24 maxlen: 24
138.16.190.0/24 maxlen: 24
138.16.191.0/24 maxlen: 24
178.20.40.0/24 maxlen: 24
178.20.41.0/24 maxlen: 24
178.20.42.0/24 maxlen: 24
178.20.43.0/24 maxlen: 24
178.20.44.0/24 maxlen: 24
178.20.45.0/24 maxlen: 24
178.20.46.0/24 maxlen: 24
178.20.47.0/24 maxlen: 24
178.130.131.0/24 maxlen: 24
178.217.98.0/24 maxlen: 24
178.217.99.0/24 maxlen: 24
185.209.28.0/24 maxlen: 24
185.209.29.0/24 maxlen: 24
185.209.30.0/24 maxlen: 24
185.209.31.0/24 maxlen: 24
185.231.152.0/24 maxlen: 24
185.231.153.0/24 maxlen: 24
185.231.154.0/24 maxlen: 24
185.231.155.0/24 maxlen: 24
192.144.56.0/24 maxlen: 24
192.144.57.0/24 maxlen: 24
192.144.58.0/24 maxlen: 24
192.144.59.0/24 maxlen: 24
193.124.64.0/24 maxlen: 24
193.124.65.0/24 maxlen: 24
193.124.66.0/24 maxlen: 24
193.124.67.0/24 maxlen: 24
193.124.128.0/24 maxlen: 24
193.124.129.0/24 maxlen: 24
193.124.130.0/24 maxlen: 24
193.124.131.0/24 maxlen: 24
193.178.170.0/24 maxlen: 24
195.2.66.0/24 maxlen: 24
195.2.67.0/24 maxlen: 24
195.2.70.0/24 maxlen: 24
195.2.71.0/24 maxlen: 24
195.2.73.0/24 maxlen: 24
195.2.74.0/24 maxlen: 24
195.2.75.0/24 maxlen: 24
195.2.76.0/24 maxlen: 24
195.2.78.0/24 maxlen: 24
195.2.79.0/24 maxlen: 24
195.2.80.0/24 maxlen: 24
195.2.81.0/24 maxlen: 24
195.2.84.0/24 maxlen: 24
195.2.85.0/24 maxlen: 24
212.118.45.0/24 maxlen: 24
212.118.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0b:18:36:f0:03:cd:2e:46:53:8c:6f:d1:92:3a:f8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: May 9 04:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffee81326050d008d6c50261188b01929064d0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:61:a6:c9:34:09:22:88:99:4e:e7:8f:0f:
ad:4c:a5:da:29:9c:6f:a4:6f:fb:6d:0f:f1:58:09:
c1:1e:fd:f6:a7:0b:3b:1c:e8:e1:b1:98:34:3d:2d:
f4:7a:3b:23:9b:eb:56:a1:81:5c:cf:8a:a8:7e:e9:
6a:ec:a7:40:6a:35:b2:2f:93:57:d6:65:7d:e4:5d:
f9:cb:8f:f4:b3:b1:4a:aa:d8:93:d9:26:82:64:ef:
4c:9e:bf:77:7f:6a:f6:17:4d:d8:29:15:f9:e0:af:
df:83:fb:19:a2:c1:86:bb:9d:10:24:95:50:93:d8:
a9:de:ca:f2:93:f3:00:57:ca:36:32:e8:cb:52:10:
c8:02:36:35:b6:17:b6:13:7e:56:26:b7:09:37:e7:
8a:56:bd:f4:2e:82:ad:f4:24:81:12:ad:fa:6c:8d:
be:e1:53:9b:0e:37:54:c5:39:39:db:00:37:6a:f7:
1e:ed:bf:97:00:7c:22:4f:6b:47:c5:8f:70:f7:d7:
b5:9c:d1:27:8e:44:bd:a2:db:8b:9e:d1:f1:ab:0b:
ad:df:2d:c0:be:58:12:29:e7:28:57:c8:04:df:ff:
c2:47:56:73:79:35:1d:93:f0:20:2b:78:31:4f:8f:
b0:84:bc:e6:19:5a:c1:46:e3:0f:fb:4b:38:bc:f6:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EE:81:32:60:50:D0:08:D6:C5:02:61:18:8B:01:92:90:64:D0:C6
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/_-6BMmBQ0AjWxQJhGIsBkpBk0MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.36.0/22
62.113.112.0/21
83.217.212.0/22
84.54.44.0/24
84.54.47.0/24
85.198.108.0/22
88.210.34.0/23
88.210.52.0/22
88.218.60.0/22
91.142.72.0/22
91.184.244.0/22
91.212.150.0/24
93.183.92.0/22
94.103.83.0-94.103.93.255
95.142.33.0-95.142.34.255
95.142.45.0-95.142.47.255
109.172.84.0-109.172.91.255
138.16.160.0/19
178.20.40.0/21
178.130.131.0/24
178.217.98.0/23
185.209.28.0/22
185.231.152.0/22
192.144.56.0/22
193.124.64.0/22
193.124.128.0/22
193.178.170.0/24
195.2.66.0/23
195.2.70.0/23
195.2.73.0-195.2.76.255
195.2.78.0-195.2.81.255
195.2.84.0/23
212.118.45.0/24
212.118.56.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:09:cd:fb:0a:27:7c:b2:09:e1:1b:e4:cd:ca:60:17:51:a6:
29:a4:8b:9b:47:84:d4:60:f6:b7:76:83:84:d0:a7:c0:3c:89:
cc:f2:9e:84:84:68:00:25:ec:96:55:6d:55:3c:d1:89:45:1d:
2d:bd:77:b3:e1:d6:69:40:24:88:2e:3f:b9:1a:be:3d:54:87:
84:26:dd:1a:bc:d1:40:ca:a4:7f:75:a0:af:b5:6f:91:97:70:
ae:5f:b1:fa:ec:0d:b3:44:42:7e:a0:c4:b3:ef:f2:4c:84:02:
92:95:ed:06:42:f8:fc:21:ff:69:a7:ce:19:91:b9:d8:ae:b1:
6d:ea:c0:e3:c6:31:8e:2d:d2:3d:d4:f2:5e:54:32:cf:4e:b5:
8c:cc:c8:46:77:f0:83:c8:8e:e4:d4:a1:69:ae:59:5b:10:ee:
ce:c9:30:7d:a8:28:2f:0b:53:7c:cc:cb:1a:50:ac:92:7d:35:
6f:dd:f9:10:63:24:aa:c7:96:b1:99:5b:65:66:82:d6:42:53:
59:6a:44:ee:0e:51:02:eb:95:03:c5:e5:ba:31:23:6e:9e:48:
6b:c8:71:33:68:4c:78:b4:12:f1:c0:44:7c:0b:99:77:94:73:
92:04:b8:77:d7:63:00:56:77:15:08:fe:4e:42:f6:59:1c:a7:
64:24:b8:8d
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgISAZ4LGDbwA80uRlOMb9GSOvgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MDMyNTFkYjY5NjkzMzYyYTkyN2UyYjEzMDQ2Nzk0NWM1
NGYwZmMwHhcNMjYwNTA5MDQ1NjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmVlODEzMjYwNTBkMDA4ZDZjNTAyNjExODhiMDE5MjkwNjRkMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcFhpsk0CSKImU7njw+tTKXaKZxv
pG/7bQ/xWAnBHv32pws7HOjhsZg0PS30ejsjm+tWoYFcz4qofulq7KdAajWyL5NX
1mV95F35y4/0s7FKqtiT2SaCZO9Mnr93f2r2F03YKRX54K/fg/sZosGGu50QJJVQ
k9ip3sryk/MAV8o2MujLUhDIAjY1the2E35WJrcJN+eKVr30LoKt9CSBEq36bI2+
4VObDjdUxTk52wA3avce7b+XAHwiT2tHxY9w99e1nNEnjkS9otuLntHxqwut3y3A
vlgSKecoV8gE3//CR1ZzeTUdk/AgK3gxT4+whLzmGVrBRuMP+0s4vPYC1QIDAQAB
o4IDCDCCAwQwHQYDVR0OBBYEFP/ugTJgUNAI1sUCYRiLAZKQZNDGMB8GA1UdIwQY
MBaAFFUDJR22lpM2KpJ+KxMEZ5RcVPD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2It
M2NiYWQ1YjkwNGI1LzEvXy02Qk1tQlEwQWpXeFFKaEdJc0JrcEJrME1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2ItM2NiYWQ1YjkwNGI1
LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCCAQMEAgABMIH8
AwQCLZYkAwQDPnFwAwQCU9nUAwQAVDYsAwQAVDYvAwQCVcZsAwQBWNIiAwQCWNI0
AwQCWNo8AwQCW45IAwQCW7j0AwQAW9SWAwQCXbdcMAwDBABeZ1MDBAFeZ1wwDAME
AF+OIQMEAF+OIjAMAwQAX44tAwQEX44gMAwDBAJtrFQDBAJtrFgDBAWKEKADBAOy
FCgDBACygoMDBAGy2WIDBAK50RwDBAK555gDBALAkDgDBALBfEADBALBfIADBADB
sqoDBAHDAkIDBAHDAkYwDAMEAMMCSQMEAMMCTDAMAwQBwwJOAwQBwwJQAwQBwwJU
AwQA1HYtAwQA1HY4MA0GCSqGSIb3DQEBCwUAA4IBAQDBCc37Cid8sgnhG+TNymAX
UaYppIubR4TUYPa3doOE0KfAPInM8p6EhGgAJeyWVW1VPNGJRR0tvXez4dZpQCSI
Lj+5Gr49VIeEJt0avNFAyqR/daCvtW+Rl3CuX7H67A2zREJ+oMSz7/JMhAKSle0G
Qvj8If9pp84ZkbnYrrFt6sDjxjGOLdI91PJeVDLPTrWMzMhGd/CDyI7k1KFprllb
EO7OyTB9qCgvC1N8zMsaUKySfTVv3fkQYySqx5axmVtlZoLWQlNZakTuDlEC65UD
xeW6MSNunkhryHEzaEx4tBLxwER8C5l3lHOSBLh312MAVncVCP5OQvZZHKdkJLiN
-----END CERTIFICATE-----
Generated at Wed May 13 17:09:33 2026 by rpki-client