Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/PIy2X6gr5Y9iv0RP_4Ke57kPXi0.roa
File: PIy2X6gr5Y9iv0RP_4Ke57kPXi0.roa (raw, json)
Hash identifier: j2X8XcNX5Gk/PHm6/WrrXfprfGTtFbkjBIzsBqssUC0=
Subject key identifier: 3C:8C:B6:5F:A8:2B:E5:8F:62:BF:44:4F:FF:82:9E:E7:B9:0F:5E:2D
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 01A19BA8F6B3A2E54E384B9376A7D38F28B0
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/PIy2X6gr5Y9iv0RP_4Ke57kPXi0.roa
Signing time: Mon 02 Nov 2026 09:48:24 +0000
ROA not before: Mon 02 Nov 2026 09:48:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9119
IP address blocks: 2.58.48.0/22 maxlen: 22
45.8.0.0/22 maxlen: 22
45.15.44.0/22 maxlen: 22
45.15.44.0/23 maxlen: 23
45.15.46.0/24 maxlen: 24
45.156.140.0/23 maxlen: 23
45.156.140.0/24 maxlen: 24
46.163.0.0/19 maxlen: 19
46.163.32.0/20 maxlen: 20
46.163.48.0/21 maxlen: 21
46.163.56.0/23 maxlen: 23
46.163.56.0/24 maxlen: 24
46.163.58.0/23 maxlen: 23
46.163.58.0/24 maxlen: 24
46.163.59.0/24 maxlen: 24
46.163.60.0/22 maxlen: 22
46.163.60.0/23 maxlen: 23
46.163.62.0/23 maxlen: 23
80.65.160.0/20 maxlen: 20
80.65.160.0/24 maxlen: 24
80.65.161.0/24 maxlen: 24
80.65.162.0/24 maxlen: 24
80.65.163.0/24 maxlen: 24
80.65.164.0/24 maxlen: 24
80.65.165.0/24 maxlen: 24
80.65.166.0/24 maxlen: 24
80.65.167.0/24 maxlen: 24
80.65.168.0/24 maxlen: 24
80.65.169.0/24 maxlen: 24
80.65.170.0/24 maxlen: 24
80.65.171.0/24 maxlen: 24
80.65.172.0/22 maxlen: 22
80.65.172.0/24 maxlen: 24
80.65.173.0/24 maxlen: 24
80.65.174.0/24 maxlen: 24
80.65.175.0/24 maxlen: 24
84.41.0.0/18 maxlen: 18
84.41.0.0/19 maxlen: 19
84.41.0.0/21 maxlen: 21
84.41.32.0/19 maxlen: 19
84.41.64.0/19 maxlen: 19
84.41.96.0/21 maxlen: 21
84.41.104.0/22 maxlen: 22
84.41.108.0/23 maxlen: 23
84.41.110.0/24 maxlen: 24
84.41.111.0/24 maxlen: 24
84.41.112.0/23 maxlen: 23
84.41.114.0/24 maxlen: 24
84.41.115.0/24 maxlen: 24
84.41.116.0/22 maxlen: 22
84.41.120.0/23 maxlen: 23
84.41.122.0/23 maxlen: 23
84.41.124.0/22 maxlen: 22
85.208.172.0/24 maxlen: 24
85.208.173.0/24 maxlen: 24
85.208.174.0/24 maxlen: 24
85.208.175.0/24 maxlen: 24
91.132.74.0/23 maxlen: 23
147.78.216.0/22 maxlen: 22
147.78.216.0/24 maxlen: 24
147.78.217.0/24 maxlen: 24
147.78.218.0/24 maxlen: 24
185.54.128.0/23 maxlen: 23
185.54.128.0/24 maxlen: 24
185.54.130.0/24 maxlen: 24
185.54.131.0/24 maxlen: 24
185.175.0.0/22 maxlen: 22
212.13.224.0/19 maxlen: 19
212.103.128.0/19 maxlen: 19
213.253.64.0/19 maxlen: 19
213.253.96.0/20 maxlen: 20
213.253.96.0/21 maxlen: 21
213.253.104.0/22 maxlen: 22
213.253.108.0/22 maxlen: 22
213.253.108.0/24 maxlen: 24
213.253.109.0/24 maxlen: 24
213.253.110.0/24 maxlen: 24
213.253.111.0/24 maxlen: 24
213.253.112.0/22 maxlen: 22
213.253.116.0/22 maxlen: 22
213.253.120.0/22 maxlen: 22
213.253.124.0/22 maxlen: 22
217.199.128.0/20 maxlen: 24
217.199.128.0/24 maxlen: 24
217.199.129.0/24 maxlen: 24
217.199.130.0/24 maxlen: 24
217.199.131.0/24 maxlen: 24
217.199.132.0/24 maxlen: 24
217.199.133.0/24 maxlen: 24
217.199.134.0/24 maxlen: 24
217.199.135.0/24 maxlen: 24
217.199.136.0/24 maxlen: 24
217.199.137.0/24 maxlen: 24
217.199.138.0/24 maxlen: 24
217.199.139.0/24 maxlen: 24
217.199.140.0/24 maxlen: 24
217.199.141.0/24 maxlen: 24
217.199.142.0/24 maxlen: 24
217.199.143.0/24 maxlen: 24
2a02:800::/32 maxlen: 32
2a02:801::/32 maxlen: 32
2a02:801::/33 maxlen: 33
2a02:805::/33 maxlen: 33
2a09:e140::/29 maxlen: 29
2a0b:c300::/29 maxlen: 29
2a0b:c306::/32 maxlen: 32
2a0b:c307::/32 maxlen: 32
2a0e:1e80::/29 maxlen: 29
2a0e:2e00::/29 maxlen: 29
2a0f:2180::/29 maxlen: 29
2a0f:a6c0::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:a8:f6:b3:a2:e5:4e:38:4b:93:76:a7:d3:8f:28:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Nov 2 09:48:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c8cb65fa82be58f62bf444fff829ee7b90f5e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:6b:f2:fd:cc:1a:83:78:b8:5c:65:9b:07:
69:c0:fc:c9:76:64:d3:fd:0d:28:ac:ff:cf:9d:30:
bd:e5:a5:20:bd:b4:56:81:81:91:fe:68:cf:d4:51:
24:7f:93:e0:96:06:fa:a8:e3:98:e6:9c:db:e1:c3:
19:3d:53:75:c8:3c:72:24:23:f6:0f:34:0d:6f:41:
3f:08:ad:4a:92:b1:1a:b1:ad:93:f7:fd:54:df:4d:
13:dc:7e:cc:c2:87:99:c0:2f:0d:63:97:40:89:3f:
5c:13:4e:de:00:49:e2:ea:3a:48:e0:e1:7a:e6:e1:
5a:2c:9b:b9:81:fb:84:28:f9:6d:ea:7c:f2:72:e9:
f7:b4:d0:29:e6:ee:67:d1:16:d8:4e:d1:4d:32:3d:
70:ba:fd:27:70:17:71:ec:27:3c:a7:e4:11:8e:15:
a3:a4:97:47:9d:8f:1b:a2:26:5d:66:c7:c4:fe:05:
57:3d:82:23:98:f1:80:5d:49:2c:b3:0e:88:ce:49:
1c:e1:b6:3e:fc:e6:b8:b1:a8:f8:a0:2e:25:1a:09:
19:bf:98:e4:2c:f2:55:43:68:41:be:c1:29:06:b3:
99:ce:80:cd:70:33:f2:91:f2:36:52:94:63:5a:f3:
91:4c:95:92:29:1c:1f:10:ad:17:15:e8:4a:7c:0a:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8C:B6:5F:A8:2B:E5:8F:62:BF:44:4F:FF:82:9E:E7:B9:0F:5E:2D
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/PIy2X6gr5Y9iv0RP_4Ke57kPXi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.48.0/22
45.8.0.0/22
45.15.44.0/22
45.156.140.0/23
46.163.0.0/18
80.65.160.0/20
84.41.0.0/17
85.208.172.0/22
91.132.74.0/23
147.78.216.0/22
185.54.128.0/22
185.175.0.0/22
212.13.224.0/19
212.103.128.0/19
213.253.64.0/18
217.199.128.0/20
IPv6:
2a02:800::/31
2a02:805::/33
2a09:e140::/29
2a0b:c300::/29
2a0e:1e80::/29
2a0e:2e00::/29
2a0f:2180::/29
2a0f:a6c0::/36
Signature Algorithm: sha256WithRSAEncryption
47:64:4c:b9:b6:a0:ca:71:e8:09:1d:cc:99:8f:20:ce:68:20:
a9:fa:96:cb:9f:98:fb:70:e0:86:7c:f0:7c:78:e5:4b:0e:88:
bc:13:47:97:ed:58:4e:21:a9:69:27:38:11:c1:5e:ca:12:40:
42:4c:27:8b:37:11:af:b1:a5:7c:de:9c:e8:73:27:10:be:59:
60:6f:06:1f:2e:bf:b8:df:76:fc:b7:1a:06:cb:14:0f:2e:0f:
ca:14:52:9d:af:be:70:46:5f:f6:4b:e9:ca:8c:91:b2:10:f0:
eb:e2:2a:40:f6:2d:82:43:83:ab:11:59:e4:83:19:bf:c9:23:
a2:db:df:81:4a:0b:25:0e:92:a2:31:8b:e5:03:61:c8:42:73:
fc:6e:af:00:af:47:c7:28:7e:28:50:83:cc:d0:fa:0a:92:84:
19:5c:c4:6f:9c:e5:d7:c2:2a:38:e4:93:e7:20:da:3e:7b:a5:
45:7a:20:f8:16:15:ae:37:5e:7c:bc:94:26:5e:cc:4c:a5:ee:
3c:a0:44:f1:ba:c6:91:08:18:f1:c1:32:21:e6:4d:18:0b:db:
96:07:53:d0:5e:e1:b6:36:1f:fc:7d:6c:5b:20:ab:39:e7:69:
68:3c:88:b6:1a:c0:1b:e1:6c:f5:c4:0d:de:73:58:10:be:1f:
ad:ba:96:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:49:48 2026 by rpki-client