Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/jaE8nn1rO58pvqUua1UrZ-d0dAA.roa
File: jaE8nn1rO58pvqUua1UrZ-d0dAA.roa (raw, json)
Hash identifier: Sx5Ur+2c1QVItDTXbKf1TR4pTl+o+P/WqOx/ljx3+2U=
Subject key identifier: 8D:A1:3C:9E:7D:6B:3B:9F:29:BE:A5:2E:6B:55:2B:67:E7:74:74:00
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 019D027EE98A1082852640109DDF74E7DC33
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/jaE8nn1rO58pvqUua1UrZ-d0dAA.roa
Signing time: Wed 18 Mar 2026 19:49:24 +0000
ROA not before: Wed 18 Mar 2026 19:49:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54825
IP address blocks: 45.11.244.0/23 maxlen: 23
86.109.0.0/24 maxlen: 24
86.109.1.0/24 maxlen: 24
86.109.2.0/23 maxlen: 23
86.109.2.0/24 maxlen: 24
86.109.3.0/24 maxlen: 24
86.109.4.0/23 maxlen: 23
86.109.4.0/24 maxlen: 24
86.109.5.0/24 maxlen: 24
86.109.6.0/24 maxlen: 24
86.109.7.0/24 maxlen: 24
86.109.8.0/24 maxlen: 24
86.109.9.0/24 maxlen: 24
86.109.10.0/23 maxlen: 23
86.109.12.0/24 maxlen: 24
86.109.13.0/24 maxlen: 24
86.109.14.0/23 maxlen: 23
93.187.216.0/23 maxlen: 23
93.187.218.0/23 maxlen: 23
136.144.48.0/23 maxlen: 23
136.144.50.0/23 maxlen: 23
136.144.52.0/23 maxlen: 23
136.144.54.0/23 maxlen: 23
136.144.56.0/23 maxlen: 23
136.144.58.0/23 maxlen: 23
136.144.60.0/23 maxlen: 23
136.144.62.0/23 maxlen: 23
139.178.64.0/22 maxlen: 22
139.178.68.0/22 maxlen: 22
139.178.72.0/22 maxlen: 22
139.178.72.0/23 maxlen: 23
139.178.74.0/23 maxlen: 23
139.178.76.0/22 maxlen: 22
139.178.76.0/23 maxlen: 23
139.178.78.0/23 maxlen: 23
139.178.80.0/21 maxlen: 21
139.178.88.0/22 maxlen: 22
139.178.92.0/23 maxlen: 23
139.178.94.0/23 maxlen: 23
145.40.64.0/23 maxlen: 23
145.40.66.0/24 maxlen: 24
145.40.67.0/24 maxlen: 24
145.40.68.0/24 maxlen: 24
145.40.69.0/24 maxlen: 24
145.40.70.0/23 maxlen: 23
145.40.72.0/24 maxlen: 24
145.40.73.0/24 maxlen: 24
145.40.74.0/23 maxlen: 23
145.40.75.0/24 maxlen: 24
145.40.76.0/23 maxlen: 23
145.40.78.0/24 maxlen: 24
145.40.79.0/24 maxlen: 24
145.40.79.0/26 maxlen: 26
145.40.80.0/23 maxlen: 23
145.40.82.0/23 maxlen: 23
145.40.84.0/23 maxlen: 23
145.40.86.0/23 maxlen: 23
145.40.88.0/24 maxlen: 24
145.40.89.0/24 maxlen: 24
145.40.90.0/24 maxlen: 24
145.40.91.0/24 maxlen: 24
145.40.92.0/22 maxlen: 22
145.40.96.0/23 maxlen: 23
145.40.98.0/23 maxlen: 23
145.40.100.0/24 maxlen: 24
145.40.101.0/24 maxlen: 24
145.40.102.0/23 maxlen: 23
145.40.102.0/24 maxlen: 24
145.40.103.0/24 maxlen: 24
145.40.104.0/22 maxlen: 22
145.40.108.0/22 maxlen: 22
145.40.112.0/22 maxlen: 22
145.40.116.0/22 maxlen: 22
145.40.120.0/22 maxlen: 22
145.40.124.0/22 maxlen: 22
147.28.128.0/23 maxlen: 23
147.28.131.0/24 maxlen: 24
147.28.132.0/22 maxlen: 22
147.28.136.0/23 maxlen: 23
147.28.138.0/23 maxlen: 23
147.28.140.0/22 maxlen: 22
147.28.140.0/24 maxlen: 24
147.28.141.0/24 maxlen: 24
147.28.142.0/23 maxlen: 23
147.28.144.0/23 maxlen: 23
147.28.146.0/23 maxlen: 23
147.28.148.0/23 maxlen: 23
147.28.150.0/23 maxlen: 23
147.28.152.0/24 maxlen: 24
147.28.153.0/24 maxlen: 24
147.28.154.0/23 maxlen: 23
147.28.156.0/23 maxlen: 23
147.28.158.0/23 maxlen: 23
147.28.160.0/23 maxlen: 23
147.28.162.0/23 maxlen: 23
147.28.164.0/23 maxlen: 23
147.28.166.0/23 maxlen: 23
147.28.168.0/23 maxlen: 23
147.28.170.0/23 maxlen: 23
147.28.172.0/23 maxlen: 23
147.28.174.0/23 maxlen: 23
147.28.176.0/23 maxlen: 23
147.28.178.0/23 maxlen: 23
147.28.180.0/23 maxlen: 23
147.28.182.0/23 maxlen: 23
147.28.184.0/23 maxlen: 23
147.28.186.0/23 maxlen: 23
147.28.188.0/24 maxlen: 24
147.28.189.0/24 maxlen: 24
147.28.190.0/23 maxlen: 23
147.28.192.0/22 maxlen: 22
147.28.192.0/24 maxlen: 24
147.28.193.0/24 maxlen: 24
147.28.194.0/24 maxlen: 24
147.28.195.0/24 maxlen: 24
147.28.196.0/23 maxlen: 23
147.28.198.0/24 maxlen: 24
147.28.199.0/24 maxlen: 24
147.28.200.0/24 maxlen: 24
147.28.201.0/24 maxlen: 24
147.28.202.0/24 maxlen: 24
147.28.203.0/24 maxlen: 24
147.28.204.0/23 maxlen: 23
147.28.206.0/23 maxlen: 23
147.28.208.0/23 maxlen: 23
147.28.210.0/23 maxlen: 23
147.28.212.0/24 maxlen: 24
147.28.214.0/23 maxlen: 23
147.28.216.0/23 maxlen: 23
147.28.218.0/24 maxlen: 24
147.28.219.0/24 maxlen: 24
147.28.220.0/23 maxlen: 23
147.28.222.0/23 maxlen: 23
147.28.224.0/24 maxlen: 24
147.28.225.0/24 maxlen: 24
147.28.226.0/23 maxlen: 23
147.28.228.0/24 maxlen: 24
147.28.229.0/24 maxlen: 24
147.28.230.0/24 maxlen: 24
147.28.231.0/24 maxlen: 24
147.28.232.0/24 maxlen: 24
147.28.233.0/24 maxlen: 24
147.28.234.0/24 maxlen: 24
147.28.235.0/24 maxlen: 24
147.28.240.0/24 maxlen: 24
147.28.241.0/24 maxlen: 24
147.28.242.0/24 maxlen: 24
147.28.244.0/24 maxlen: 24
147.28.246.0/23 maxlen: 23
147.28.248.0/23 maxlen: 23
147.75.32.0/23 maxlen: 23
147.75.34.0/24 maxlen: 24
147.75.35.0/24 maxlen: 24
147.75.36.0/22 maxlen: 22
147.75.38.0/23 maxlen: 23
147.75.40.0/23 maxlen: 23
147.75.42.0/24 maxlen: 24
147.75.43.0/24 maxlen: 24
147.75.44.0/24 maxlen: 24
147.75.45.0/24 maxlen: 24
147.75.46.0/24 maxlen: 24
147.75.47.0/24 maxlen: 24
147.75.48.0/24 maxlen: 24
147.75.49.0/24 maxlen: 24
147.75.50.0/23 maxlen: 23
147.75.50.0/24 maxlen: 24
147.75.51.0/24 maxlen: 24
147.75.52.0/24 maxlen: 24
147.75.53.0/24 maxlen: 24
147.75.54.0/23 maxlen: 23
147.75.54.0/24 maxlen: 24
147.75.55.0/24 maxlen: 24
147.75.56.0/23 maxlen: 23
147.75.56.0/24 maxlen: 24
147.75.57.0/24 maxlen: 24
147.75.58.0/24 maxlen: 24
147.75.59.0/24 maxlen: 24
147.75.60.0/24 maxlen: 24
147.75.61.0/24 maxlen: 24
147.75.62.0/23 maxlen: 23
147.75.62.0/24 maxlen: 24
147.75.63.0/24 maxlen: 24
147.75.64.0/22 maxlen: 22
147.75.68.0/22 maxlen: 22
147.75.72.0/21 maxlen: 21
147.75.72.0/24 maxlen: 24
147.75.73.0/24 maxlen: 24
147.75.74.0/24 maxlen: 24
147.75.75.0/24 maxlen: 24
147.75.76.0/24 maxlen: 24
147.75.77.0/24 maxlen: 24
147.75.78.0/24 maxlen: 24
147.75.79.0/24 maxlen: 24
147.75.80.0/22 maxlen: 22
147.75.84.0/23 maxlen: 23
147.75.86.0/23 maxlen: 23
147.75.88.0/22 maxlen: 22
147.75.92.0/22 maxlen: 22
147.75.96.0/22 maxlen: 22
147.75.96.0/23 maxlen: 23
147.75.96.0/24 maxlen: 24
147.75.97.0/24 maxlen: 24
147.75.98.0/24 maxlen: 24
147.75.99.0/24 maxlen: 24
147.75.100.0/22 maxlen: 22
147.75.104.0/22 maxlen: 22
147.75.108.0/23 maxlen: 23
147.75.110.0/23 maxlen: 23
147.75.192.0/21 maxlen: 21
147.75.192.0/24 maxlen: 24
147.75.193.0/24 maxlen: 24
147.75.194.0/23 maxlen: 23
147.75.196.0/22 maxlen: 22
147.75.196.0/24 maxlen: 24
147.75.197.0/24 maxlen: 24
147.75.198.0/24 maxlen: 24
147.75.199.0/24 maxlen: 24
147.75.200.0/22 maxlen: 22
147.75.204.0/23 maxlen: 23
147.75.206.0/24 maxlen: 24
147.75.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:02:7e:e9:8a:10:82:85:26:40:10:9d:df:74:e7:dc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Mar 18 19:49:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8da13c9e7d6b3b9f29bea52e6b552b67e7747400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:4c:cd:2b:41:3a:85:94:7a:8b:ae:42:bd:
3c:d0:0a:1a:9d:35:41:78:3d:a0:44:be:ef:88:bb:
dd:c6:ab:ab:4c:b8:2f:a7:ca:b1:02:a4:5a:a8:a0:
5a:ef:71:07:e8:a2:c6:8f:03:91:32:12:00:3d:dd:
68:a2:d7:30:a0:ad:8a:eb:49:3b:c4:ed:62:40:73:
fc:fa:71:56:46:a3:e2:a3:67:4a:81:18:6a:ce:0b:
04:91:bd:8b:90:9f:b5:c9:04:b9:ee:eb:14:7f:cd:
ef:09:54:aa:e2:ad:ad:bb:90:89:0e:b5:a4:7e:7c:
03:5e:84:cc:f0:66:c2:6b:1d:95:b9:d1:c1:5a:d5:
71:83:78:f8:a9:6f:57:ca:6f:30:fd:c0:b4:ff:0f:
99:08:ed:10:38:57:e9:7a:f5:7c:52:76:e9:92:20:
14:a6:93:ff:55:cc:23:75:0c:e3:dd:b9:7f:83:53:
7b:9e:92:9c:b6:15:37:79:99:91:b9:3c:6c:90:25:
46:f0:ed:63:84:3f:3a:92:0a:ed:02:7e:cc:e6:1a:
10:6a:40:85:08:97:bd:6c:10:47:34:2e:2a:1a:09:
35:25:8b:e9:f0:8c:d1:03:a1:75:87:9d:58:4d:5a:
74:87:90:6a:97:b6:51:4b:b1:aa:6a:fe:c5:26:c0:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A1:3C:9E:7D:6B:3B:9F:29:BE:A5:2E:6B:55:2B:67:E7:74:74:00
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/jaE8nn1rO58pvqUua1UrZ-d0dAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.244.0/23
86.109.0.0/20
93.187.216.0/22
136.144.48.0/20
139.178.64.0/19
145.40.64.0/18
147.28.128.0/23
147.28.131.0-147.28.212.255
147.28.214.0-147.28.235.255
147.28.240.0-147.28.242.255
147.28.244.0/24
147.28.246.0-147.28.249.255
147.75.32.0-147.75.111.255
147.75.192.0/20
Signature Algorithm: sha256WithRSAEncryption
11:1c:90:ee:f8:13:50:0c:88:18:f5:39:06:b5:3f:ca:a6:5c:
5b:7e:52:9c:e1:9b:a3:6b:e6:12:4c:21:e6:2a:80:f0:d0:ab:
fc:20:fd:04:a5:a9:08:1a:2b:1d:a9:b7:67:40:70:c1:29:cb:
3b:9f:da:4b:fc:22:4b:a9:73:b6:0c:be:81:17:84:e2:80:b1:
ed:12:92:b2:10:6d:92:10:e3:82:59:08:e8:65:89:f3:98:8d:
50:2b:c4:e3:99:e1:d2:14:4b:3a:7d:ea:5c:ea:e8:a5:8b:f8:
8c:99:41:db:4e:08:53:7c:cf:da:e0:5e:9a:8f:f6:39:8c:c1:
4b:2e:2f:cf:0d:64:97:9c:74:c6:fb:39:59:86:28:a7:5c:14:
1f:54:1e:63:d9:1b:8b:4a:e8:c6:1a:38:06:f7:ca:17:fd:64:
d3:77:80:24:5a:34:d8:3c:78:8f:fd:a7:52:61:fc:09:ae:2f:
e1:bb:f7:db:e9:5c:77:10:a1:14:92:f1:95:3f:65:48:93:e1:
09:23:8c:94:16:36:09:d0:92:6b:a3:ed:a5:93:29:4b:4e:e1:
e7:b0:2c:56:2c:65:c7:ae:d7:44:d5:af:67:b2:c2:ee:b6:fc:
07:6f:e1:2b:40:a5:d4:b2:78:bb:b2:1d:b9:bb:a2:49:f8:87:
ce:22:16:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:07:40 2026 by rpki-client