Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/D30wBvo6GdQk07GrbjXC-y7kfQg.roa
File: D30wBvo6GdQk07GrbjXC-y7kfQg.roa (raw, json)
Hash identifier: PtMGitpAQ1ws80rS+qjGvkY94JZdrap7rW2dJVfQ0rw=
Subject key identifier: 0F:7D:30:06:FA:3A:19:D4:24:D3:B1:AB:6E:35:C2:FB:2E:E4:7D:08
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019D02BA81600E5862410112134064D3E27A
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/D30wBvo6GdQk07GrbjXC-y7kfQg.roa
Signing time: Wed 18 Mar 2026 20:54:30 +0000
ROA not before: Wed 18 Mar 2026 20:54:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23959
IP address blocks: 45.14.64.0/22 maxlen: 24
45.14.70.0/24 maxlen: 24
45.14.105.0/24 maxlen: 24
45.14.107.0/24 maxlen: 24
45.66.128.0/22 maxlen: 24
45.66.216.0/22 maxlen: 24
45.82.76.0/22 maxlen: 32
45.130.21.0/24 maxlen: 24
45.142.125.0/24 maxlen: 24
45.142.126.0/24 maxlen: 24
45.142.127.0/24 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.232.0/24 maxlen: 24
45.143.233.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
45.143.235.0/24 maxlen: 24
45.149.156.0/22 maxlen: 24
45.159.48.0/22 maxlen: 24
79.143.140.0/22 maxlen: 24
88.214.22.0/24 maxlen: 24
91.200.240.0/24 maxlen: 24
91.200.242.0/24 maxlen: 24
91.200.243.0/24 maxlen: 24
92.60.43.0/24 maxlen: 24
94.124.119.0/24 maxlen: 24
95.214.164.0/24 maxlen: 24
95.214.165.0/24 maxlen: 24
141.98.196.0/24 maxlen: 24
141.98.197.0/24 maxlen: 24
141.98.198.0/24 maxlen: 24
147.78.240.0/21 maxlen: 24
149.62.44.0/24 maxlen: 24
149.62.45.0/24 maxlen: 24
149.62.46.0/24 maxlen: 24
149.62.47.0/24 maxlen: 24
176.119.148.0/22 maxlen: 24
185.194.54.0/24 maxlen: 24
185.200.64.0/24 maxlen: 24
185.200.66.0/24 maxlen: 24
193.32.148.0/22 maxlen: 24
193.111.30.0/23 maxlen: 24
194.36.24.0/24 maxlen: 24
194.104.153.0/24 maxlen: 24
194.104.154.0/24 maxlen: 24
194.104.155.0/24 maxlen: 24
194.114.136.0/24 maxlen: 24
195.245.219.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
2a09:7::/36 maxlen: 48
2a0d:c7c1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:02:ba:81:60:0e:58:62:41:01:12:13:40:64:d3:e2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Mar 18 20:54:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f7d3006fa3a19d424d3b1ab6e35c2fb2ee47d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:41:7e:da:a3:ac:b2:29:5d:a5:dc:a8:de:61:
c3:d7:0a:d2:b3:0d:e5:f1:45:7f:d5:d3:ba:10:0b:
53:ec:53:85:5b:1e:02:ae:c3:dc:e0:0e:a8:cb:1f:
57:6a:ca:70:9e:28:71:a1:bf:09:bf:bb:dd:15:f7:
f4:0c:7a:74:27:af:12:04:03:d8:bf:0b:f6:5d:a6:
84:d8:a0:0b:4b:3d:ef:0d:be:d6:d0:96:74:f1:d6:
39:78:e2:45:8f:cd:c9:39:2a:62:fa:1f:7c:3c:20:
d5:2c:99:22:8b:cc:f2:03:d0:27:03:ce:db:3a:38:
ce:0c:8e:5d:c1:b8:1a:a5:d5:0e:40:69:29:00:2e:
68:4b:df:0c:4c:6a:4d:23:67:49:e3:08:49:97:7b:
f0:95:23:99:f9:73:b8:22:13:10:ab:c5:af:53:e9:
1d:53:02:5b:d5:17:8a:fa:52:0f:f2:0f:27:3a:d7:
e9:bc:2c:57:76:b2:ed:e9:59:4c:b2:d3:50:13:16:
12:e1:c4:c2:c7:2d:f2:57:db:ba:33:18:b0:8c:e2:
42:56:23:e2:2e:b7:6c:31:47:dc:79:d2:8f:21:80:
4a:5b:63:24:dd:4e:a5:c8:77:f7:b1:4a:6e:a6:a8:
df:c4:c3:e3:f8:89:db:49:08:26:06:a3:5f:4d:0e:
b4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7D:30:06:FA:3A:19:D4:24:D3:B1:AB:6E:35:C2:FB:2E:E4:7D:08
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/D30wBvo6GdQk07GrbjXC-y7kfQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.64.0/22
45.14.70.0/24
45.14.105.0/24
45.14.107.0/24
45.66.128.0/22
45.66.216.0/22
45.82.76.0/22
45.130.21.0/24
45.142.125.0-45.142.127.255
45.143.232.0/22
45.149.156.0/22
45.159.48.0/22
79.143.140.0/22
88.214.22.0/24
91.200.240.0/24
91.200.242.0/23
92.60.43.0/24
94.124.119.0/24
95.214.164.0/23
141.98.196.0-141.98.198.255
147.78.240.0/21
149.62.44.0/22
176.119.148.0/22
185.194.54.0/24
185.200.64.0/24
185.200.66.0/24
193.32.148.0/22
193.111.30.0/23
194.36.24.0/24
194.104.153.0-194.104.155.255
194.114.136.0/24
195.245.219.0/24
195.245.241.0-195.245.242.255
IPv6:
2a09:7::/36
2a0d:c7c1::/32
Signature Algorithm: sha256WithRSAEncryption
4b:76:99:ef:b3:62:2c:6c:a4:2c:4d:23:31:6e:de:ec:00:f1:
09:13:70:63:b9:eb:e9:e6:d5:ad:5a:f4:f7:97:0f:7d:c6:d3:
2f:8d:15:9f:77:84:d4:dc:1b:43:fb:7a:35:90:15:40:cb:55:
0b:6a:69:4a:96:8f:56:00:4e:f2:63:73:cd:92:22:1b:a8:3b:
30:48:a4:c6:98:f1:e1:c7:aa:b1:0f:ce:17:25:4d:ad:51:f2:
6a:f8:1b:f9:45:20:98:24:57:64:5a:b2:65:0e:e9:41:37:88:
07:b5:f7:f4:9b:06:07:ac:84:11:c8:22:05:52:25:91:1d:59:
bb:87:1c:88:e7:56:b7:36:01:bc:7e:db:ce:78:d6:12:7e:fc:
0c:9e:45:40:b1:ab:ca:79:fc:b9:7f:38:4e:05:f2:f2:6d:d3:
2e:61:2d:59:f5:e7:1d:1a:9b:ff:37:71:cf:b9:8a:f0:b3:03:
7c:54:f9:0f:6e:ad:0f:9a:de:66:cd:96:b1:72:30:b8:5f:2b:
2c:bb:c5:ad:f5:5e:b7:90:3e:75:e9:ca:59:be:91:d2:35:b7:
23:99:e5:2b:d5:50:3b:4c:7e:c1:a3:c1:ac:21:3e:32:b0:b1:
74:3b:2b:ea:d5:37:64:5d:f8:a3:19:a2:b2:e0:30:34:0d:2e:
24:22:2e:30
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgISAZ0CuoFgDlhiQQESE0Bk0+J6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjYwMzE4MjA1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjdkMzAwNmZhM2ExOWQ0MjRkM2IxYWI2ZTM1YzJmYjJlZTQ3ZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0F+2qOssildpdyo3mHD1wrSsw3l
8UV/1dO6EAtT7FOFWx4CrsPc4A6oyx9Xaspwnihxob8Jv7vdFff0DHp0J68SBAPY
vwv2XaaE2KALSz3vDb7W0JZ08dY5eOJFj83JOSpi+h98PCDVLJkii8zyA9AnA87b
OjjODI5dwbgapdUOQGkpAC5oS98MTGpNI2dJ4whJl3vwlSOZ+XO4IhMQq8WvU+kd
UwJb1ReK+lIP8g8nOtfpvCxXdrLt6VlMstNQExYS4cTCxy3yV9u6MxiwjOJCViPi
LrdsMUfcedKPIYBKW2Mk3U6lyHf3sUpupqjfxMPj+InbSQgmBqNfTQ60zwIDAQAB
o4IDCDCCAwQwHQYDVR0OBBYEFA99MAb6OhnUJNOxq241wvsu5H0IMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvRDMwd0J2bzZHZFFrMDdHcmJqWEMteTdrZlFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCB7QQCAAEwgeYD
BAItDkADBAAtDkYDBAAtDmkDBAAtDmsDBAItQoADBAItQtgDBAItUkwDBAAtghUw
DAMEAC2OfQMEBy2OAAMEAi2P6AMEAi2VnAMEAi2fMAMEAk+PjAMEAFjWFgMEAFvI
8AMEAVvI8gMEAFw8KwMEAF58dwMEAV/WpDAMAwQCjWLEAwQAjWLGAwQDk07wAwQC
lT4sAwQCsHeUAwQAucI2AwQAuchAAwQAuchCAwQCwSCUAwQBwW8eAwQAwiQYMAwD
BADCaJkDBALCaJgDBADCcogDBADD9dswDAMEAMP18QMEAMP18jAVBAIAAjAPAwYE
KgkABwADBQAqDcfBMA0GCSqGSIb3DQEBCwUAA4IBAQBLdpnvs2IsbKQsTSMxbt7s
APEJE3Bjuevp5tWtWvT3lw99xtMvjRWfd4TU3BtD+3o1kBVAy1ULamlKlo9WAE7y
Y3PNkiIbqDswSKTGmPHhx6qxD84XJU2tUfJq+Bv5RSCYJFdkWrJlDulBN4gHtff0
mwYHrIQRyCIFUiWRHVm7hxyI51a3NgG8ftvOeNYSfvwMnkVAsavKefy5fzhOBfLy
bdMuYS1Z9ecdGpv/N3HPuYrwswN8VPkPbq0Pmt5mzZaxcjC4Xyssu8Wt9V63kD51
6cpZvpHSNbcjmeUr1VA7TH7Bo8GsIT4ysLF0Oyvq1TdkXfijGaKy4DA0DS4kIi4w
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:03:51 2026 by rpki-client