Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/_MudUc0Pvd1GYebW0sO-A_Kjoi8.roa
File: _MudUc0Pvd1GYebW0sO-A_Kjoi8.roa (raw, json)
Hash identifier: 0tsgFf8KNSTJt7JGL5ElSL3liAR6QXHJEZNRAwsMx5E=
Subject key identifier: FC:CB:9D:51:CD:0F:BD:DD:46:61:E6:D6:D2:C3:BE:03:F2:A3:A2:2F
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A0C9618788185463D4DE4D62D4A6C748E5
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/_MudUc0Pvd1GYebW0sO-A_Kjoi8.roa
Signing time: Tue 22 Sep 2026 13:50:07 +0000
ROA not before: Tue 22 Sep 2026 13:50:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.208.0/22 maxlen: 24
86.105.208.0/23 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.252.0/22 maxlen: 22
89.34.65.0/24 maxlen: 24
89.34.66.0/24 maxlen: 24
89.34.67.0/24 maxlen: 24
89.34.68.0/22 maxlen: 22
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.14.0/24 maxlen: 24
89.35.40.0/21 maxlen: 21
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.131.0/24 maxlen: 24
93.117.140.0/22 maxlen: 24
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.128.0/21 maxlen: 21
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.200.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.120.0/22 maxlen: 24
188.208.126.0/24 maxlen: 24
188.208.127.0/24 maxlen: 24
188.209.216.0/21 maxlen: 24
188.212.0.0/22 maxlen: 22
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:61:87:88:18:54:63:d4:de:4d:62:d4:a6:c7:48:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Sep 22 13:50:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fccb9d51cd0fbddd4661e6d6d2c3be03f2a3a22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a7:09:29:49:9f:8f:c0:7e:64:41:b4:56:7d:
c4:a9:45:03:a9:46:66:9e:63:66:ac:ea:59:3a:68:
7f:37:16:66:54:85:a7:d3:e8:09:4c:ac:a0:12:ba:
ca:b9:24:81:9e:f8:0f:4a:fb:d5:27:c4:68:8f:d0:
92:06:13:c7:d4:71:e3:2e:de:32:e1:a1:73:b1:2b:
21:16:a2:98:9a:f5:8f:14:c3:0f:e2:83:a2:83:70:
df:91:7c:30:32:11:ee:48:0f:96:b4:bf:2f:37:17:
30:3e:99:3e:76:8d:77:8d:30:0c:36:31:f3:c6:3e:
ff:4a:96:b9:e5:55:ce:95:a4:15:5a:d6:65:92:38:
b0:f4:0f:25:ea:63:f4:2d:bd:cc:c6:df:7b:44:9a:
16:93:4a:da:37:36:82:20:b7:c5:73:b6:ae:06:70:
fd:24:63:ed:fd:c1:81:d2:3a:17:6a:96:c5:a6:2a:
69:9a:d7:ac:5f:1f:82:07:aa:3f:88:50:96:81:6c:
df:9a:cf:e5:6f:8c:a7:b2:df:4a:9f:bc:f9:bf:e5:
5a:ef:ef:5c:0e:5e:7a:f2:96:47:fb:78:07:c0:59:
e6:0b:68:1c:68:cb:84:ba:6c:1a:4b:a2:26:7f:22:
51:f1:3a:50:17:9d:86:cf:c9:ac:33:e4:63:38:c8:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CB:9D:51:CD:0F:BD:DD:46:61:E6:D6:D2:C3:BE:03:F2:A3:A2:2F
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/_MudUc0Pvd1GYebW0sO-A_Kjoi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
89.32.56.0/21
89.32.136.0/21
89.32.252.0/22
89.34.65.0-89.34.71.255
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.14.0/24
89.35.40.0/21
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.131.0/24
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.119.96.0/21
93.119.128.0/21
93.119.144.0/21
93.119.160.0/21
93.119.200.0/21
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.120.0/22
188.208.126.0/23
188.209.216.0/21
188.212.0.0/22
188.212.24.0/21
188.212.40.0/21
188.214.146.0/23
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
51:58:f1:f7:f1:0c:58:f3:05:cb:7a:d8:8e:0a:2a:8f:e3:da:
4a:4d:a6:e5:78:b7:a9:c2:a1:d3:51:4a:8f:c4:53:fe:e3:b2:
e5:c3:ab:24:e8:59:67:07:12:a3:ef:eb:c3:03:62:e5:fa:d6:
73:5d:c3:da:87:e5:63:95:4d:d2:5c:50:b2:6f:20:b6:fc:c3:
9d:c1:dc:53:82:46:39:43:11:ad:c9:fd:46:ab:32:2d:4b:b1:
95:29:12:42:68:57:ca:54:86:8b:67:f8:5b:f9:ad:87:1b:6a:
c8:45:b7:dc:69:03:4b:4b:51:6f:af:df:37:2b:17:e8:05:b1:
44:41:30:3f:99:fa:d8:79:e1:a8:e0:f2:e0:9d:fa:2b:f3:9b:
e8:96:07:88:57:2c:4d:79:21:02:57:27:78:dd:5b:de:54:03:
a6:82:08:34:07:6a:22:91:6f:2e:e4:a7:d4:ca:d7:06:a9:c3:
fe:6f:a2:3d:32:38:55:11:99:16:64:d0:81:05:ef:10:ab:69:
30:25:6e:fb:55:34:c1:f5:b0:e6:a8:3f:0b:3c:84:55:06:cc:
a6:32:4b:a7:57:cf:92:d0:cf:78:f0:7f:41:78:74:54:31:a6:
6c:79:dc:ea:9c:8c:b5:19:c5:5b:b8:e3:b9:aa:63:02:a5:c5:
2b:b5:2a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:20:56 2026 by rpki-client