Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/B3osDG38ZDrGf88ro5_cPchMPNQ.roa
File: B3osDG38ZDrGf88ro5_cPchMPNQ.roa (raw, json)
Hash identifier: cHTpc3o5rIlsqZtfKdAwi89vReD0eYn50sK/4Phfd3o=
Subject key identifier: 07:7A:2C:0C:6D:FC:64:3A:C6:7F:CF:2B:A3:9F:DC:3D:C8:4C:3C:D4
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019985DCC7611191EAAB61CFDC1A7169D069
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/B3osDG38ZDrGf88ro5_cPchMPNQ.roa
Signing time: Fri 26 Sep 2025 11:51:02 +0000
ROA not before: Fri 26 Sep 2025 11:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.68.0/22 maxlen: 22
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/22 maxlen: 24
188.208.126.0/24 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.136.0/22 maxlen: 24
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:85:dc:c7:61:11:91:ea:ab:61:cf:dc:1a:71:69:d0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Sep 26 11:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=077a2c0c6dfc643ac67fcf2ba39fdc3dc84c3cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:0a:39:1e:22:2a:e9:78:a6:2e:be:4e:c0:
64:6e:dc:54:b4:eb:e5:3c:e5:5a:29:0a:43:d2:aa:
7c:fc:81:ad:64:71:47:a4:c0:8a:2b:34:70:af:64:
59:f5:bf:b8:36:19:a3:11:cf:4b:92:98:44:0b:7a:
23:f1:61:7f:59:ba:a0:c4:95:07:d6:06:d3:9d:9c:
4d:2d:69:b6:08:a1:5f:dc:7b:5e:81:6a:bd:2b:90:
60:cc:2b:df:52:3f:0b:eb:e0:76:eb:e0:88:ff:a4:
b2:51:72:0b:5d:42:b4:31:7c:a1:e3:41:e4:80:4d:
ba:7a:34:5f:20:c1:5c:92:c1:45:4c:86:a3:ad:5b:
ca:07:8c:7c:9f:d9:9f:20:10:43:7d:69:b3:7e:a5:
67:82:52:2b:ef:76:c9:8f:d4:eb:1a:32:d8:b9:d1:
db:12:f1:d7:ef:e1:1a:24:11:02:dd:ee:9f:47:8f:
f6:d2:8c:aa:c5:18:69:4a:97:b5:17:f2:e4:93:36:
33:56:47:08:d8:7a:b3:8b:76:94:2d:bc:24:e7:79:
cb:8a:1a:44:7a:17:81:95:27:61:25:b6:37:09:e8:
2f:30:a5:ea:a2:67:e0:98:c3:0e:b1:de:29:a3:c5:
1c:42:2c:b6:04:43:7d:f7:2d:48:a7:dd:81:32:04:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7A:2C:0C:6D:FC:64:3A:C6:7F:CF:2B:A3:9F:DC:3D:C8:4C:3C:D4
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/B3osDG38ZDrGf88ro5_cPchMPNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.68.0/22
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/22
188.208.126.0/24
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.146.0/23
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
68:1a:06:3c:d9:97:52:62:9b:26:78:b6:2b:fb:df:e9:7c:e9:
07:c3:d3:a4:e6:24:85:16:1d:83:14:9c:f0:50:f6:03:d9:b2:
5b:49:69:cf:cf:99:aa:1b:44:2d:05:ef:ae:0a:ef:8f:56:83:
31:6f:cb:a6:41:55:06:d8:13:df:45:a6:2a:33:b5:b3:f8:37:
9d:8e:e2:aa:a4:52:4e:0b:bd:5d:76:03:d6:0e:5f:a3:02:27:
c9:db:2e:47:9c:a4:de:72:15:5a:a2:d9:5a:67:c0:1a:cc:00:
98:f5:4b:9c:d7:dd:db:6c:83:86:de:16:94:c5:41:48:10:8f:
ca:37:10:68:0d:3d:37:b6:43:54:ca:d0:7e:40:38:7b:61:6f:
64:81:a6:d6:56:bf:15:2f:81:a1:b4:ae:c0:cc:27:d2:ec:28:
dc:cf:ce:4d:39:aa:37:f9:4a:fd:21:64:31:bf:99:e4:64:1a:
b2:1f:9f:08:b9:1a:1c:57:0b:59:a5:18:2b:b4:3a:ab:96:98:
de:67:3c:bc:2c:68:82:52:8f:a8:88:f9:94:cf:67:08:44:e3:
9b:6e:3a:a1:8f:38:76:7a:d5:9f:af:87:67:8c:70:9c:ee:67:
c4:8c:45:92:b5:8d:ef:32:5e:d6:16:70:65:a9:eb:18:14:dd:
6d:b2:a3:2c
-----BEGIN CERTIFICATE-----
MIIHrTCCBpWgAwIBAgISAZmF3MdhEZHqq2HP3BpxadBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjUwOTI2MTE1MTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzdhMmMwYzZkZmM2NDNhYzY3ZmNmMmJhMzlmZGMzZGM4NGMzY2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXoKOR4iKul4pi6+TsBkbtxUtOvl
POVaKQpD0qp8/IGtZHFHpMCKKzRwr2RZ9b+4NhmjEc9LkphEC3oj8WF/WbqgxJUH
1gbTnZxNLWm2CKFf3HtegWq9K5BgzCvfUj8L6+B26+CI/6SyUXILXUK0MXyh40Hk
gE26ejRfIMFcksFFTIajrVvKB4x8n9mfIBBDfWmzfqVnglIr73bJj9TrGjLYudHb
EvHX7+EaJBEC3e6fR4/20oyqxRhpSpe1F/LkkzYzVkcI2Hqzi3aULbwk53nLihpE
eheBlSdhJbY3CegvMKXqomfgmMMOsd4po8UcQiy2BEN99y1Ip92BMgTChwIDAQAB
o4IEuTCCBLUwHQYDVR0OBBYEFAd6LAxt/GQ6xn/PK6Of3D3ITDzUMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvQjNvc0RHMzhaRHJHZjg4cm81X2NQY2hNUE5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICzQYIKwYBBQUHAQcBAf8EggK8MIICuDCCAqUEAgABMIIC
nQMEBgU4QAMEBCVLEAMEBiVLQAMEBy43AAMEA1XMsAMEAlZoxAMEA1ZpOAMEA1Zp
UAMEAlZprAMEAlZp0AMEA1ZqkDALAwQEVmrQAwMAVmoDBAJWa0ADBANWa6ADBANZ
IDgDBANZIIgDBAJZIKwDBAJZIPwDBAJZIkQDBANZIsADBAJZIswDBAJZIugDBANZ
IwgDBANZIygDBAJZI1QDBAJZI8gDBAJZJJwDBAJZJSwDBABZJWgDBAJZJiADBAJZ
JkADBAJZJkwDBAJZJ0wDBAJZJ1QDBANZJ2ADBANZJ3ADBAJZKOQDBAZZKUADBAJZ
KkADBANZKkgDBAJZKmgDBAJZKoADBAJZKrQDBAJZKuADBAJZK4ADBAJZK6gDBAJZ
LJgDBAJZLSgDBAJZLqQwCwMEB1xygAMDAlxwAwQDXXFAAwQDXXFQAwQCXXFcAwQC
XXH0AwQDXXOIAwMAXXQDBARddTAwDAMEAl11RAMEBF11QAMEA111gDAMAwQCXXWM
AwQDXXWQMAwDBAJddZwDBAJddagDBAJddrADBAJddrwDBANdd2ADBAJdd2wDBANd
d4AwDAMEAl13jAMEA113kAMEA113oDAMAwQCXXfEAwQEXXfAMAwDBAJdd+QDBARd
d+ADBAResEADAwBtuTAMAwQEsoRwAwQGsoSAAwQCuRxoAwQCvNBgAwQCvNBoAwQC
vNBwAwQCvNB4AwQAvNB+AwQCvNDAAwQCvNDMAwQDvNHYMAwDBAS80vADBAK80vgD
BAK81AADBAO81AgDBAO81BgDBAO81CgDBAK81SQDBAK81TQDBAK81dwDBAK81ewD
BAK81fQDBAK81jwDBAK81ogDBAG81pIDBAO81sgDBAK81/wDAwC87QMEBdQAwDAN
BAIAAjAHAwUDKgIKMDANBgkqhkiG9w0BAQsFAAOCAQEAaBoGPNmXUmKbJni2K/vf
6XzpB8PTpOYkhRYdgxSc8FD2A9myW0lpz8+ZqhtELQXvrgrvj1aDMW/LpkFVBtgT
30WmKjO1s/g3nY7iqqRSTgu9XXYD1g5fowInydsuR5yk3nIVWqLZWmfAGswAmPVL
nNfd22yDht4WlMVBSBCPyjcQaA09N7ZDVMrQfkA4e2FvZIGm1la/FS+BobSuwMwn
0uwo3M/OTTmqN/lK/SFkMb+Z5GQash+fCLkaHFcLWaUYK7Q6q5aY3mc8vCxoglKP
qIj5lM9nCETjm246oY84dnrVn6+HZ4xwnO5nxIxFkrWN7zJe1hZwZanrGBTdbbKj
LA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:41:15 2025 by rpki-client