Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/yTIlbASLhGy20gNJHs7xgFurDmw.roa
File: yTIlbASLhGy20gNJHs7xgFurDmw.roa (raw, json)
Hash identifier: VvcvHKECmREGY64u0qRfi/7VnvcvVrYWCm1LwNTSjAo=
Subject key identifier: C9:32:25:6C:04:8B:84:6C:B6:D2:03:49:1E:CE:F1:80:5B:AB:0E:6C
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A1D008481FD30184C3276A39E2A96039AA
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/yTIlbASLhGy20gNJHs7xgFurDmw.roa
Signing time: Thu 12 Nov 2026 13:52:45 +0000
ROA not before: Thu 12 Nov 2026 13:52:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41221
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 24
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 24
86.106.208.0/20 maxlen: 24
89.32.56.0/21 maxlen: 24
89.32.136.0/21 maxlen: 24
89.32.252.0/22 maxlen: 24
89.34.192.0/21 maxlen: 24
89.34.204.0/22 maxlen: 24
89.34.232.0/22 maxlen: 24
89.35.40.0/21 maxlen: 24
89.36.156.0/22 maxlen: 24
89.37.44.0/22 maxlen: 24
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 24
89.38.64.0/22 maxlen: 24
89.38.76.0/22 maxlen: 24
89.39.76.0/22 maxlen: 24
89.39.84.0/22 maxlen: 24
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 24
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 24
89.42.72.0/21 maxlen: 24
89.42.104.0/22 maxlen: 24
89.42.128.0/22 maxlen: 24
89.42.180.0/22 maxlen: 24
89.42.224.0/22 maxlen: 24
89.43.128.0/22 maxlen: 24
89.43.168.0/22 maxlen: 24
89.44.152.0/22 maxlen: 24
89.45.40.0/22 maxlen: 24
89.46.164.0/22 maxlen: 24
92.114.128.0/17 maxlen: 24
93.113.80.0/21 maxlen: 24
93.113.92.0/22 maxlen: 24
93.113.244.0/22 maxlen: 24
93.115.136.0/21 maxlen: 24
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 24
93.117.72.0/21 maxlen: 24
93.117.140.0/22 maxlen: 24
93.117.144.0/21 maxlen: 24
93.117.156.0/22 maxlen: 24
93.117.160.0/21 maxlen: 24
93.117.168.0/22 maxlen: 24
93.119.96.0/21 maxlen: 24
93.119.128.0/21 maxlen: 24
93.119.160.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/19 maxlen: 24
185.28.104.0/22 maxlen: 24
188.209.216.0/21 maxlen: 24
188.212.0.0/22 maxlen: 24
188.212.24.0/21 maxlen: 24
188.212.40.0/21 maxlen: 24
188.214.200.0/21 maxlen: 24
188.215.252.0/22 maxlen: 24
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:08:48:1f:d3:01:84:c3:27:6a:39:e2:a9:60:39:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Nov 12 13:52:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c932256c048b846cb6d203491ecef1805bab0e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:48:39:35:de:81:eb:63:e8:0c:79:02:29:
fd:a6:87:e7:50:5a:f7:37:26:4f:cc:66:ae:c8:1f:
ee:ae:26:6f:45:9f:46:98:ed:68:db:c5:64:27:6d:
ef:c8:38:63:19:81:6e:10:9f:6a:f4:84:9d:75:ea:
a6:cf:6a:95:90:48:97:0a:c1:26:7a:89:90:3b:08:
4c:b2:fa:81:df:29:17:b3:e9:d4:ee:73:48:a4:1b:
0b:0b:46:3a:50:46:60:39:63:76:eb:2e:87:c5:bb:
18:5a:66:9d:dc:fb:14:cc:ae:5c:7d:7e:1d:04:e1:
f7:28:58:4f:dc:cb:46:81:97:2f:5c:9f:60:aa:f7:
c4:ed:c8:73:1c:6d:93:02:eb:a3:5c:37:38:9a:38:
d0:88:03:d4:30:b6:6e:ea:b3:3b:c7:ba:8c:22:67:
93:88:32:23:7c:c9:7e:15:96:f5:a8:a5:78:80:56:
24:24:8f:e8:a5:a8:2d:25:92:e0:15:46:1f:f1:ea:
a7:0b:94:ed:c9:a0:e0:6f:8c:cf:89:79:39:11:b1:
57:ae:d9:da:ee:83:5a:82:0c:bd:4b:71:0f:8c:37:
2e:28:c0:0f:18:85:ec:82:d7:59:5f:dc:03:b7:71:
80:80:bc:57:77:c4:6f:dc:75:c0:a7:d3:25:ad:d6:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:32:25:6C:04:8B:84:6C:B6:D2:03:49:1E:CE:F1:80:5B:AB:0E:6C
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/yTIlbASLhGy20gNJHs7xgFurDmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
86.105.56.0/21
86.105.80.0/21
86.105.208.0/22
86.106.144.0/21
86.106.208.0/20
89.32.56.0/21
89.32.136.0/21
89.32.252.0/22
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.40.0/21
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0/17
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.119.96.0/21
93.119.128.0/21
93.119.160.0/21
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.159.255
185.28.104.0/22
188.209.216.0/21
188.212.0.0/22
188.212.24.0/21
188.212.40.0/21
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
Signature Algorithm: sha256WithRSAEncryption
14:ea:ad:b2:32:66:2e:3f:2b:ef:4c:96:5d:3d:d5:fa:81:13:
7f:ca:fe:6d:fb:e6:39:a3:04:bc:f8:86:f1:ac:9f:3b:43:5e:
b7:0b:aa:05:65:2b:ca:cb:45:85:61:f5:f0:74:42:58:61:c6:
80:6e:15:1d:4a:ae:31:7b:f9:7e:d8:ca:52:67:1e:0d:4f:c5:
8e:49:b0:cd:2b:68:92:71:19:27:a6:7c:f6:60:af:aa:17:1e:
0a:63:07:15:fa:8f:29:c6:4b:aa:f5:2f:91:26:88:28:ed:3a:
4a:22:a2:e0:f5:4e:a9:4e:ad:91:f6:f6:8d:dc:61:2f:7d:90:
d7:d8:6b:a6:bf:d6:fd:c1:5e:91:d5:05:38:2e:fa:3e:e9:ea:
9a:7c:b4:07:8f:7b:68:ea:8d:4d:5c:ac:77:a9:cc:b3:36:51:
d9:c2:2a:26:2e:ff:f2:36:66:02:76:9c:c6:ca:e6:c3:ad:a5:
88:2f:fe:7d:0f:3b:e3:4e:62:c9:a7:4a:cc:93:48:bc:3b:7d:
b0:f0:f9:2c:02:cd:2c:86:56:1a:ba:80:54:7a:57:f9:4e:72:
97:de:1d:82:8b:c0:07:f6:8b:e0:9d:87:f8:8a:51:de:1a:12:
2c:32:57:0b:36:08:3c:22:83:c5:f8:31:b8:8f:bf:cb:9f:29:
40:af:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:41:04 2026 by rpki-client