Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/e6qESxIj0nY-uZpPFa2lyVuqC9Q.roa
File: e6qESxIj0nY-uZpPFa2lyVuqC9Q.roa (raw, json)
Hash identifier: fHt+SuPBiZEhucf6WrHaEo2b5b2tZhp0/UZPGsQDWh0=
Subject key identifier: 7B:AA:84:4B:12:23:D2:76:3E:B9:9A:4F:15:AD:A5:C9:5B:AA:0B:D4
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019DF76ED60C305BF98137A8B63BFF1D550C
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/e6qESxIj0nY-uZpPFa2lyVuqC9Q.roa
Signing time: Tue 05 May 2026 09:18:49 +0000
ROA not before: Tue 05 May 2026 09:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.64.0/22 maxlen: 22
89.34.68.0/22 maxlen: 22
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/22 maxlen: 24
188.208.125.0/24 maxlen: 24
188.208.126.0/24 maxlen: 24
188.208.127.0/24 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:6e:d6:0c:30:5b:f9:81:37:a8:b6:3b:ff:1d:55:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: May 5 09:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7baa844b1223d2763eb99a4f15ada5c95baa0bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:b7:5c:87:a7:de:27:14:fb:3b:44:fc:31:
4b:4e:fb:45:3a:62:e2:d0:80:97:40:42:ed:20:19:
9e:38:13:64:d6:55:a2:29:ca:9e:67:e6:64:6e:7b:
bd:47:13:ce:85:a2:d2:d6:5d:6b:b8:23:01:0c:7a:
f6:b8:b6:7b:83:01:a7:2b:d3:7b:04:f3:6b:15:3b:
80:43:f1:71:ea:b3:a0:a0:10:25:9c:2c:37:a3:51:
7b:92:00:3f:7a:9c:2a:cd:1d:9d:de:11:08:51:22:
dd:c6:0b:63:f0:0b:cf:fe:28:39:54:a0:44:95:f6:
d7:37:ed:6c:b8:79:05:43:d7:ef:d3:9e:bc:d3:fe:
2d:78:48:b2:96:c0:f5:c4:ba:ed:92:be:00:a0:ea:
e5:1a:52:a1:76:97:59:43:e5:7e:99:8d:44:f1:4f:
82:4c:67:a4:7e:cd:c9:50:24:ca:1b:6c:a2:23:b1:
9c:39:2c:1f:c3:89:3a:28:18:23:ac:14:86:94:7a:
11:82:1b:50:ad:f0:39:fe:8b:d3:86:8c:b1:d2:7f:
95:13:a4:b0:bf:3e:aa:e4:ad:82:cb:7b:39:2c:ff:
20:bc:0c:01:b7:c4:c7:8c:a5:1f:70:90:d8:e6:8a:
d6:9d:43:17:39:12:98:9a:0f:b7:53:cd:8f:54:38:
f0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AA:84:4B:12:23:D2:76:3E:B9:9A:4F:15:AD:A5:C9:5B:AA:0B:D4
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/e6qESxIj0nY-uZpPFa2lyVuqC9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.64.0/21
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/22
188.208.125.0-188.208.127.255
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.146.0/23
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
9a:ce:3b:0f:c4:97:52:6a:08:de:20:7e:b6:b1:7f:86:03:f4:
5d:24:66:b8:27:1d:70:7b:bc:77:52:51:9d:96:c2:34:b4:17:
84:98:d1:69:da:b9:65:4e:00:60:5f:f6:9e:68:a6:8a:c6:b5:
2a:b9:32:6e:84:ea:1b:9d:81:9e:2e:64:95:c0:09:2c:c1:ef:
d7:8f:55:a5:6e:3b:5e:e7:c7:24:59:65:03:c7:61:3a:95:63:
fb:78:d9:9c:9f:c8:78:46:60:81:30:6d:42:67:4f:c0:e2:75:
5e:be:47:28:7a:ba:e1:1f:1d:28:6d:bd:0e:12:84:15:53:f4:
e2:19:f0:5d:84:6d:09:49:d2:66:e1:09:24:1d:d3:f5:d1:65:
09:d1:66:4e:53:8a:16:2c:11:d4:6f:22:cd:be:d9:77:83:2d:
34:fd:6a:9d:c3:a5:1a:dc:4b:99:42:4a:bd:5b:6e:48:02:c8:
ed:93:f7:54:f2:7f:28:bb:09:5e:64:de:78:d4:86:58:44:bb:
bf:d6:2f:92:70:3b:03:c1:45:bd:66:5e:5f:c4:83:3e:15:54:
27:9d:3f:65:48:39:8e:15:a7:e5:28:f6:cd:4b:d1:2d:59:22:
93:2a:b9:7b:2d:b8:87:03:1a:a7:fd:a0:fc:90:fb:05:9c:09:
22:b1:23:60
-----BEGIN CERTIFICATE-----
MIIHrzCCBpegAwIBAgISAZ33btYMMFv5gTeotjv/HVUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjYwNTA1MDkxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmFhODQ0YjEyMjNkMjc2M2ViOTlhNGYxNWFkYTVjOTViYWEwYmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn63XIen3icU+ztE/DFLTvtFOmLi
0ICXQELtIBmeOBNk1lWiKcqeZ+Zkbnu9RxPOhaLS1l1ruCMBDHr2uLZ7gwGnK9N7
BPNrFTuAQ/Fx6rOgoBAlnCw3o1F7kgA/epwqzR2d3hEIUSLdxgtj8AvP/ig5VKBE
lfbXN+1suHkFQ9fv05680/4teEiylsD1xLrtkr4AoOrlGlKhdpdZQ+V+mY1E8U+C
TGekfs3JUCTKG2yiI7GcOSwfw4k6KBgjrBSGlHoRghtQrfA5/ovThoyx0n+VE6Sw
vz6q5K2Cy3s5LP8gvAwBt8THjKUfcJDY5orWnUMXORKYmg+3U82PVDjwMwIDAQAB
o4IEuzCCBLcwHQYDVR0OBBYEFHuqhEsSI9J2PrmaTxWtpclbqgvUMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvZTZxRVN4SWowblktdVpwUEZhMmx5VnVxQzlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICzwYIKwYBBQUHAQcBAf8EggK+MIICujCCAqcEAgABMIIC
nwMEBgU4QAMEBCVLEAMEBiVLQAMEBy43AAMEA1XMsAMEAlZoxAMEA1ZpOAMEA1Zp
UAMEAlZprAMEAlZp0AMEA1ZqkDALAwQEVmrQAwMAVmoDBAJWa0ADBANWa6ADBANZ
IDgDBANZIIgDBAJZIKwDBAJZIPwDBANZIkADBANZIsADBAJZIswDBAJZIugDBANZ
IwgDBANZIygDBAJZI1QDBAJZI8gDBAJZJJwDBAJZJSwDBABZJWgDBAJZJiADBAJZ
JkADBAJZJkwDBAJZJ0wDBAJZJ1QDBANZJ2ADBANZJ3ADBAJZKOQDBAZZKUADBAJZ
KkADBANZKkgDBAJZKmgDBAJZKoADBAJZKrQDBAJZKuADBAJZK4ADBAJZK6gDBAJZ
LJgDBAJZLSgDBAJZLqQwCwMEB1xygAMDAlxwAwQDXXFAAwQDXXFQAwQCXXFcAwQC
XXH0AwQDXXOIAwMAXXQDBARddTAwDAMEAl11RAMEBF11QAMEA111gDAMAwQCXXWM
AwQDXXWQMAwDBAJddZwDBAJddagDBAJddrADBAJddrwDBANdd2ADBAJdd2wDBANd
d4AwDAMEAl13jAMEA113kAMEA113oDAMAwQCXXfEAwQEXXfAMAwDBAJdd+QDBARd
d+ADBAResEADAwBtuTAMAwQEsoRwAwQGsoSAAwQCuRxoAwQCvNBgAwQCvNBoAwQC
vNBwAwQCvNB4MAwDBAC80H0DBAe80AADBAK80MADBAK80MwDBAO80dgwDAMEBLzS
8AMEArzS+AMEArzUAAMEA7zUCAMEA7zUGAMEA7zUKAMEArzVJAMEArzVNAMEArzV
3AMEArzV7AMEArzV9AMEArzWPAMEAbzWkgMEA7zWyAMEArzX/AMDALztAwQF1ADA
MA0EAgACMAcDBQMqAgowMA0GCSqGSIb3DQEBCwUAA4IBAQCazjsPxJdSagjeIH62
sX+GA/RdJGa4Jx1we7x3UlGdlsI0tBeEmNFp2rllTgBgX/aeaKaKxrUquTJuhOob
nYGeLmSVwAkswe/Xj1Wlbjte58ckWWUDx2E6lWP7eNmcn8h4RmCBMG1CZ0/A4nVe
vkcoerrhHx0obb0OEoQVU/TiGfBdhG0JSdJm4QkkHdP10WUJ0WZOU4oWLBHUbyLN
vtl3gy00/Wqdw6Ua3EuZQkq9W25IAsjtk/dU8n8ouwleZN541IZYRLu/1i+ScDsD
wUW9Zl5fxIM+FVQnnT9lSDmOFaflKPbNS9EtWSKTKrl7LbiHAxqn/aD8kPsFnAki
sSNg
-----END CERTIFICATE-----
Generated at Wed May 13 03:59:20 2026 by rpki-client