Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/l7F_vL3lMscLrv6DlqsFJBbdp0E.roa
File: l7F_vL3lMscLrv6DlqsFJBbdp0E.roa (raw, json)
Hash identifier: 0lvRZFep/l3fsLuqh0If2Lf+dcuObYSB9+H7T7470Kg=
Subject key identifier: 97:B1:7F:BC:BD:E5:32:C7:0B:AE:FE:83:96:AB:05:24:16:DD:A7:41
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A1D08788A4F1C478668BD901E528B64748
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/l7F_vL3lMscLrv6DlqsFJBbdp0E.roa
Signing time: Thu 12 Nov 2026 16:11:45 +0000
ROA not before: Thu 12 Nov 2026 16:11:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.208.0/22 maxlen: 24
86.105.208.0/23 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.162.0/24 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.252.0/22 maxlen: 22
89.34.65.0/24 maxlen: 24
89.34.66.0/24 maxlen: 24
89.34.67.0/24 maxlen: 24
89.34.68.0/22 maxlen: 22
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.9.0/24 maxlen: 24
89.35.14.0/24 maxlen: 24
89.35.40.0/21 maxlen: 21
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.131.0/24 maxlen: 24
93.117.140.0/22 maxlen: 24
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.128.0/21 maxlen: 21
93.119.160.0/21 maxlen: 21
93.119.197.0/24 maxlen: 24
93.119.198.0/24 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.120.0/22 maxlen: 24
188.208.126.0/24 maxlen: 24
188.208.127.0/24 maxlen: 24
188.209.216.0/21 maxlen: 24
188.212.0.0/22 maxlen: 22
188.212.9.0/24 maxlen: 24
188.212.10.0/24 maxlen: 24
188.212.11.0/24 maxlen: 24
188.212.12.0/24 maxlen: 24
188.212.13.0/24 maxlen: 24
188.212.15.0/24 maxlen: 24
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.214.144.0/22 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:87:88:a4:f1:c4:78:66:8b:d9:01:e5:28:b6:47:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Nov 12 16:11:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97b17fbcbde532c70baefe8396ab052416dda741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:03:72:61:cd:15:74:3a:46:83:95:3b:95:
25:eb:99:0e:c0:38:bb:05:f5:2f:2f:f1:c6:d4:90:
a8:fa:f7:d5:c8:e8:e2:93:e5:e2:bd:62:eb:3c:b1:
00:94:9e:2d:ef:91:ee:c9:12:13:fc:69:1e:96:18:
53:45:2c:05:4f:02:63:ad:0f:d2:b7:ba:5c:f6:54:
c9:d2:ff:7f:16:6d:9d:45:00:64:94:ad:cc:9f:4a:
7f:59:77:27:bf:60:ca:a5:44:84:62:0a:89:2d:7a:
9e:b5:ab:e9:ec:e9:93:4a:89:d4:e9:e7:e2:0c:08:
f3:e7:39:08:69:6b:03:2e:e6:70:7c:34:58:26:bb:
82:80:33:ae:bb:e8:cb:03:11:77:ed:24:0b:e2:8e:
f2:2f:9e:55:3c:e4:39:1c:87:b8:b2:da:26:f6:2f:
52:c6:03:2a:1e:89:7f:ea:d7:8d:09:d0:0e:cf:e3:
67:90:29:76:96:1e:54:db:b1:72:50:5b:5c:95:a5:
68:50:09:be:a8:e0:38:3b:4d:23:7b:71:9c:f0:ff:
64:b7:8e:14:64:87:68:53:56:76:ff:4e:0e:40:ce:
fe:52:ca:44:b0:61:89:3b:8e:82:ec:d3:65:1f:1e:
12:46:3e:7e:5e:23:5f:12:b5:d0:09:80:89:8e:72:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B1:7F:BC:BD:E5:32:C7:0B:AE:FE:83:96:AB:05:24:16:DD:A7:41
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/l7F_vL3lMscLrv6DlqsFJBbdp0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.162.0/24
89.32.56.0/21
89.32.136.0/21
89.32.252.0/22
89.34.65.0-89.34.71.255
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.9.0/24
89.35.14.0/24
89.35.40.0/21
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.131.0/24
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.119.96.0/21
93.119.128.0/21
93.119.160.0/21
93.119.197.0-93.119.198.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.120.0/22
188.208.126.0/23
188.209.216.0/21
188.212.0.0/22
188.212.9.0-188.212.13.255
188.212.15.0/24
188.212.24.0/21
188.212.40.0/21
188.214.144.0/22
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
70:0a:18:9f:07:c9:1e:a9:39:33:fe:2f:8f:8f:3a:00:4f:27:
5c:8b:42:b3:0f:17:80:32:59:e1:7a:54:26:57:82:7c:be:80:
2c:ea:42:f1:ea:4f:77:c2:32:da:12:17:1e:b5:b2:24:6b:e1:
90:81:10:58:1c:a2:d3:74:d3:94:c3:42:c4:c4:b8:aa:ee:92:
97:26:58:f6:ec:1c:d0:49:11:77:ca:ec:e4:f8:4e:3c:d9:62:
a4:79:3d:11:38:12:6d:04:7a:f8:33:f3:8b:5c:61:99:a5:3d:
69:ca:de:8b:a1:9b:12:e0:2c:1a:33:5f:ed:b2:c5:de:90:65:
d0:de:22:db:11:70:29:2b:3a:bf:a1:5b:b1:0f:56:99:69:eb:
ac:64:6c:ed:62:df:50:f0:bd:a0:2a:7e:37:6d:c7:4e:cb:59:
5d:da:72:91:f1:00:b5:64:f6:65:90:20:9e:ef:79:7c:0e:f8:
3c:e7:7f:d7:69:55:ff:66:7d:c9:28:b2:f0:60:d6:b3:97:1c:
0e:13:87:7e:17:da:5b:e6:9c:fd:ad:bf:ba:8c:09:b2:0d:d9:
42:96:c0:1c:cf:ac:47:bb:63:08:dc:ed:1c:55:3a:c0:22:0a:
f5:26:6a:80:b8:b7:ad:2e:55:0f:05:e8:a1:67:61:8a:f6:37:
16:bd:20:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:42:38 2026 by rpki-client