Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/cjwbOJtXa2kt3CFJB7UkbYV9oq8.roa
File: cjwbOJtXa2kt3CFJB7UkbYV9oq8.roa (raw, json)
Hash identifier: OqZn/Ns7ibJgbGiTjuz4lHbfFzpm2v7TCBQjtoWY4Bw=
Subject key identifier: 72:3C:1B:38:9B:57:6B:69:2D:DC:21:49:07:B5:24:6D:85:7D:A2:AF
Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Certificate serial: 01A0F5F920414E361BDFA5722A70CD66B96E
Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/cjwbOJtXa2kt3CFJB7UkbYV9oq8.roa
Signing time: Thu 01 Oct 2026 05:38:59 +0000
ROA not before: Thu 01 Oct 2026 05:38:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58172
IP address blocks: 45.133.232.0/23 maxlen: 23
45.135.131.0/24 maxlen: 24
80.173.160.0/24 maxlen: 24
80.173.161.0/24 maxlen: 24
80.173.162.0/24 maxlen: 24
80.173.163.0/24 maxlen: 24
80.173.164.0/24 maxlen: 24
80.173.165.0/24 maxlen: 24
80.173.166.0/24 maxlen: 24
91.213.49.0/24 maxlen: 24
94.131.60.0/24 maxlen: 24
94.131.61.0/24 maxlen: 24
94.131.62.0/24 maxlen: 24
94.131.63.0/24 maxlen: 24
94.131.224.0/24 maxlen: 24
94.131.225.0/24 maxlen: 24
94.131.226.0/23 maxlen: 23
94.131.226.0/24 maxlen: 24
94.131.227.0/24 maxlen: 24
94.131.228.0/24 maxlen: 24
94.131.229.0/24 maxlen: 24
94.131.230.0/24 maxlen: 24
94.131.231.0/24 maxlen: 24
94.131.232.0/24 maxlen: 24
94.131.233.0/24 maxlen: 24
94.131.234.0/23 maxlen: 23
94.131.234.0/24 maxlen: 24
94.131.235.0/24 maxlen: 24
94.131.236.0/23 maxlen: 23
94.131.236.0/24 maxlen: 24
94.131.237.0/24 maxlen: 24
94.131.239.0/24 maxlen: 24
141.133.144.0/24 maxlen: 24
141.133.145.0/24 maxlen: 24
141.133.146.0/24 maxlen: 24
141.133.147.0/24 maxlen: 24
153.56.200.0/24 maxlen: 24
153.56.201.0/24 maxlen: 24
153.56.202.0/24 maxlen: 24
153.56.203.0/24 maxlen: 24
153.56.204.0/24 maxlen: 24
153.56.205.0/24 maxlen: 24
157.22.232.0/24 maxlen: 24
157.22.233.0/24 maxlen: 24
157.22.234.0/24 maxlen: 24
157.22.237.0/24 maxlen: 24
157.22.238.0/24 maxlen: 24
157.22.239.0/24 maxlen: 24
185.191.212.0/24 maxlen: 24
185.210.139.0/24 maxlen: 24
193.148.60.0/24 maxlen: 24
194.35.124.0/24 maxlen: 24
213.232.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:f9:20:41:4e:36:1b:df:a5:72:2a:70:cd:66:b9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee
Validity
Not Before: Oct 1 05:38:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=723c1b389b576b692ddc214907b5246d857da2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:e5:4e:5b:68:46:c2:e3:2f:fa:1a:ab:dd:
e3:72:fd:14:de:f2:7f:88:14:e1:ab:3b:5d:2a:6c:
26:e2:8e:ba:45:8a:a9:c1:46:25:52:64:b5:c4:49:
fd:14:ad:0b:c8:c4:5e:f3:47:f7:16:96:85:5e:88:
73:e4:4f:60:be:74:ef:18:e5:ee:86:9f:d5:57:7f:
f9:d2:29:8b:6a:c0:e2:db:d5:2f:e3:17:b4:44:83:
9a:b3:65:3d:8f:5b:07:04:68:83:c9:d7:de:63:4a:
c0:9a:61:c9:c0:7f:17:d5:7c:55:71:c3:aa:b2:26:
4b:44:35:a8:78:ab:66:6b:58:38:d3:14:7c:7a:21:
77:c6:a0:0e:c4:f7:cc:8a:1a:e1:dd:82:71:c2:4d:
e5:54:75:72:3a:09:50:d6:e7:0f:6f:e4:fe:81:41:
01:d3:83:37:5e:e5:5f:0b:18:22:47:0b:b5:b6:95:
01:5b:b6:09:01:8d:3b:40:da:b6:b5:44:dd:93:7d:
34:0e:0a:e1:73:a4:f5:2d:4b:7c:55:70:b7:c0:23:
58:09:45:80:e4:21:74:4b:fa:53:b2:c0:be:f7:fe:
d5:32:d5:95:7b:75:96:67:1c:d4:47:e7:9f:90:13:
52:10:7a:20:3a:f6:84:5a:22:d0:1e:ef:9e:37:7e:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3C:1B:38:9B:57:6B:69:2D:DC:21:49:07:B5:24:6D:85:7D:A2:AF
X509v3 Authority Key Identifier:
keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/cjwbOJtXa2kt3CFJB7UkbYV9oq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.232.0/23
45.135.131.0/24
80.173.160.0-80.173.166.255
91.213.49.0/24
94.131.60.0/22
94.131.224.0-94.131.237.255
94.131.239.0/24
141.133.144.0/22
153.56.200.0-153.56.205.255
157.22.232.0-157.22.234.255
157.22.237.0-157.22.239.255
185.191.212.0/24
185.210.139.0/24
193.148.60.0/24
194.35.124.0/24
213.232.206.0/24
Signature Algorithm: sha256WithRSAEncryption
60:bd:a7:35:13:2a:d3:7c:54:f2:bc:35:77:fe:16:a3:9c:6c:
ad:99:0b:39:32:ce:69:8b:2d:45:7a:59:d3:8f:fc:c8:48:bd:
12:b4:c6:1e:ac:1e:32:ac:05:0c:93:28:73:b7:d6:5a:1a:dd:
09:3d:ea:36:56:50:4f:9f:33:53:ed:dc:f0:82:3f:8e:f7:ed:
1e:74:79:4c:bb:c8:c1:c4:74:a1:23:5a:54:aa:1e:51:f7:c0:
a7:28:28:b9:f5:08:28:1e:63:f3:e8:2d:92:15:b9:58:18:3d:
d8:f5:a7:56:49:ff:4c:b5:34:b1:3c:e9:49:75:69:7b:75:4d:
28:6d:69:88:97:e5:2b:1a:08:ed:a4:93:97:40:dd:af:54:f5:
19:69:70:9d:3f:5f:bc:e2:c8:cf:e4:e5:0a:7f:69:5d:87:0c:
f2:52:c8:10:74:d3:77:90:97:d1:49:fa:0f:2e:fc:b3:07:fe:
91:fe:31:9b:9a:92:cb:ac:88:5e:bb:54:27:43:88:e5:81:04:
3e:3e:09:27:3a:ae:00:9b:ab:2f:fb:15:b7:14:1b:20:e5:89:
4f:cc:66:76:4e:7e:de:21:30:3f:04:94:7f:f5:99:e9:91:4e:
15:e1:83:d3:71:dc:4d:ed:86:f8:3f:24:75:a7:cd:de:db:84:
40:ab:3d:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgISAaD1+SBBTjYb36VyKnDNZrluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjM2M2NjVlNTFjYzRjYjVjYWYwNWI4Mjk0ODQzZTI3MzNh
MTNkZWUwHhcNMjYxMDAxMDUzODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjNjMWIzODliNTc2YjY5MmRkYzIxNDkwN2I1MjQ2ZDg1N2RhMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlXlTltoRsLjL/oaq93jcv0U3vJ/
iBThqztdKmwm4o66RYqpwUYlUmS1xEn9FK0LyMRe80f3FpaFXohz5E9gvnTvGOXu
hp/VV3/50imLasDi29Uv4xe0RIOas2U9j1sHBGiDydfeY0rAmmHJwH8X1XxVccOq
siZLRDWoeKtma1g40xR8eiF3xqAOxPfMihrh3YJxwk3lVHVyOglQ1ucPb+T+gUEB
04M3XuVfCxgiRwu1tpUBW7YJAY07QNq2tUTdk300Dgrhc6T1LUt8VXC3wCNYCUWA
5CF0S/pTssC+9/7VMtWVe3WWZxzUR+efkBNSEHogOvaEWiLQHu+eN35I2QIDAQAB
o4ICkDCCAowwHQYDVR0OBBYEFHI8GzibV2tpLdwhSQe1JG2FfaKvMB8GA1UdIwQY
MBaAFEw8Zl5RzEy1yvBbgpSEPiczoT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUt
MWE2NWI5MWJlZTU4LzEvY2p3Yk9KdFhhMmt0M0NGSkI3VWtiWVY5b3E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUtMWE2NWI5MWJlZTU4
LzEvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAEwgYgDBAEt
hegDBAAth4MwDAMEBVCtoAMEAFCtpgMEAFvVMQMEAl6DPDAMAwQFXoPgAwQBXoPs
AwQAXoPvAwQCjYWQMAwDBAOZOMgDBAGZOMwwDAMEA50W6AMEAJ0W6jAMAwQAnRbt
AwQEnRbgAwQAub/UAwQAudKLAwQAwZQ8AwQAwiN8AwQA1ejOMA0GCSqGSIb3DQEB
CwUAA4IBAQBgvac1EyrTfFTyvDV3/hajnGytmQs5Ms5piy1FelnTj/zISL0StMYe
rB4yrAUMkyhzt9ZaGt0JPeo2VlBPnzNT7dzwgj+O9+0edHlMu8jBxHShI1pUqh5R
98CnKCi59QgoHmPz6C2SFblYGD3Y9adWSf9MtTSxPOlJdWl7dU0obWmIl+UrGgjt
pJOXQN2vVPUZaXCdP1+84sjP5OUKf2ldhwzyUsgQdNN3kJfRSfoPLvyzB/6R/jGb
mpLLrIheu1QnQ4jlgQQ+PgknOq4Am6sv+xW3FBsg5YlPzGZ2Tn7eITA/BJR/9Znp
kU4V4YPTcdxN7Yb4PyR1p83e24RAqz3b
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:50:22 2026 by rpki-client