Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/7izG6fNpTq-NL06d7czuIt77-L8.roa
File: 7izG6fNpTq-NL06d7czuIt77-L8.roa (raw, json)
Hash identifier: 8ll53FTGfSxP5nLSMjhmPrU7L9CxT0FDrRQxp7FUvvA=
Subject key identifier: EE:2C:C6:E9:F3:69:4E:AF:8D:2F:4E:9D:ED:CC:EE:22:DE:FB:F8:BF
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 01A1CE16C17F18022604D013AD26D67D23AD
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/7izG6fNpTq-NL06d7czuIt77-L8.roa
Signing time: Thu 12 Nov 2026 04:49:20 +0000
ROA not before: Thu 12 Nov 2026 04:49:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29182
IP address blocks: 37.46.128.0/23 maxlen: 23
37.46.130.0/23 maxlen: 23
37.46.132.0/23 maxlen: 23
37.46.134.0/23 maxlen: 23
45.10.216.0/22 maxlen: 22
45.66.12.0/22 maxlen: 22
45.141.208.0/22 maxlen: 22
45.150.8.0/22 maxlen: 22
62.109.0.0/20 maxlen: 20
62.109.0.0/21 maxlen: 21
62.109.8.0/21 maxlen: 21
62.109.16.0/21 maxlen: 21
62.109.24.0/22 maxlen: 22
62.109.28.0/22 maxlen: 22
77.246.156.0/22 maxlen: 22
77.246.156.0/23 maxlen: 23
77.246.158.0/23 maxlen: 23
80.87.192.0/23 maxlen: 23
80.87.194.0/23 maxlen: 23
80.87.196.0/23 maxlen: 23
80.87.198.0/23 maxlen: 23
80.87.200.0/23 maxlen: 23
80.87.202.0/24 maxlen: 24
80.87.203.0/24 maxlen: 24
82.146.32.0/21 maxlen: 21
82.146.32.0/23 maxlen: 23
82.146.34.0/23 maxlen: 23
82.146.36.0/23 maxlen: 23
82.146.38.0/23 maxlen: 23
82.146.40.0/21 maxlen: 21
82.146.48.0/23 maxlen: 23
82.146.50.0/23 maxlen: 23
82.146.52.0/23 maxlen: 23
82.146.54.0/23 maxlen: 23
82.146.56.0/21 maxlen: 21
82.202.160.0/23 maxlen: 23
82.202.162.0/23 maxlen: 23
82.202.165.0/24 maxlen: 24
82.202.166.0/23 maxlen: 23
82.202.168.0/23 maxlen: 23
82.202.170.0/23 maxlen: 23
82.202.172.0/23 maxlen: 23
82.202.174.0/23 maxlen: 23
83.220.168.0/23 maxlen: 23
83.220.170.0/23 maxlen: 23
83.220.172.0/23 maxlen: 23
83.220.174.0/23 maxlen: 23
85.198.72.0/23 maxlen: 23
85.198.74.0/23 maxlen: 23
85.198.116.0/23 maxlen: 23
85.198.118.0/23 maxlen: 23
89.169.40.0/23 maxlen: 23
89.169.42.0/23 maxlen: 23
91.132.188.0/22 maxlen: 22
91.240.84.0/23 maxlen: 23
91.240.86.0/23 maxlen: 23
92.63.96.0/21 maxlen: 21
92.63.104.0/22 maxlen: 22
92.63.108.0/22 maxlen: 22
92.63.108.0/24 maxlen: 24
92.63.109.0/24 maxlen: 24
92.63.110.0/23 maxlen: 23
92.118.88.0/22 maxlen: 22
153.76.160.0/20 maxlen: 20
176.12.64.0/21 maxlen: 21
185.43.4.0/23 maxlen: 23
185.43.6.0/23 maxlen: 23
185.63.188.0/22 maxlen: 22
185.146.156.0/23 maxlen: 23
185.146.158.0/23 maxlen: 23
185.246.64.0/23 maxlen: 23
185.246.66.0/23 maxlen: 23
185.253.32.0/23 maxlen: 23
185.253.34.0/23 maxlen: 23
195.140.144.0/23 maxlen: 23
195.140.146.0/23 maxlen: 23
212.109.192.0/22 maxlen: 22
212.109.196.0/23 maxlen: 23
212.109.198.0/23 maxlen: 23
212.109.216.0/23 maxlen: 23
212.109.218.0/23 maxlen: 23
212.109.220.0/23 maxlen: 23
212.109.222.0/24 maxlen: 24
212.109.223.0/24 maxlen: 24
213.159.208.0/23 maxlen: 23
213.159.210.0/23 maxlen: 23
213.159.212.0/23 maxlen: 23
213.159.214.0/23 maxlen: 23
2a09:f900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:16:c1:7f:18:02:26:04:d0:13:ad:26:d6:7d:23:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Nov 12 04:49:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee2cc6e9f3694eaf8d2f4e9dedccee22defbf8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:9a:5e:c8:be:59:e3:86:fb:29:91:12:a3:
56:28:1e:b9:c1:ef:08:71:80:f8:23:77:3f:68:76:
dc:c4:7f:a9:77:34:bf:44:22:0d:1f:09:db:41:5b:
cd:ac:a4:b9:52:d3:68:26:2d:d1:89:fe:2f:9f:06:
00:01:e3:54:1f:ec:a7:34:08:4a:63:e5:6e:64:69:
39:80:c1:16:7a:3f:9e:56:ee:d3:99:2d:af:cb:9f:
53:c9:f0:5c:9b:5d:18:8b:c0:f4:a3:3b:96:2d:95:
41:06:19:38:d1:ad:37:e4:79:f5:1c:42:bc:d0:ce:
cc:39:0b:ac:fe:b5:ad:fb:a0:f6:5c:db:a9:ce:a5:
ce:15:0e:f1:50:e1:dd:4a:9d:f9:61:35:f8:42:92:
fe:8c:eb:53:c5:5e:5a:eb:a7:b4:51:09:98:29:48:
f3:f7:74:1d:6c:62:0c:2c:fd:c0:36:ce:70:da:8d:
0f:37:c4:19:20:0b:55:f8:0b:61:b2:88:cd:c5:78:
ef:73:fb:7e:79:c8:eb:6c:fd:36:98:70:d8:86:44:
37:d1:cc:07:cd:d2:09:c7:32:4c:3b:a1:43:58:93:
83:02:64:02:14:90:02:25:bd:02:56:8c:e0:02:99:
a3:df:44:b2:25:dc:62:39:ce:8c:b3:85:0e:7a:8c:
ca:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2C:C6:E9:F3:69:4E:AF:8D:2F:4E:9D:ED:CC:EE:22:DE:FB:F8:BF
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/7izG6fNpTq-NL06d7czuIt77-L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.128.0/21
45.10.216.0/22
45.66.12.0/22
45.141.208.0/22
45.150.8.0/22
62.109.0.0/19
77.246.156.0/22
80.87.192.0-80.87.203.255
82.146.32.0/19
82.202.160.0/22
82.202.165.0-82.202.175.255
83.220.168.0/21
85.198.72.0/22
85.198.116.0/22
89.169.40.0/22
91.132.188.0/22
91.240.84.0/22
92.63.96.0/20
92.118.88.0/22
153.76.160.0/20
176.12.64.0/21
185.43.4.0/22
185.63.188.0/22
185.146.156.0/22
185.246.64.0/22
185.253.32.0/22
195.140.144.0/22
212.109.192.0/21
212.109.216.0/21
213.159.208.0/21
IPv6:
2a09:f900::/48
Signature Algorithm: sha256WithRSAEncryption
76:1f:3f:14:b4:b2:b1:63:84:2d:91:0b:24:a3:33:0a:97:4d:
49:cf:34:46:b9:24:c8:81:c4:79:c4:08:c4:07:24:7d:99:3a:
36:92:ab:18:b3:4a:8c:c7:8d:c6:15:30:bb:d5:60:06:60:2f:
09:f8:6a:c4:50:97:5a:d4:37:74:b5:98:d7:49:16:02:79:cd:
59:92:f1:c2:0c:2d:97:6c:ac:27:13:a6:2b:0b:cf:ac:48:18:
87:82:4d:ae:fd:83:e8:9e:32:48:14:34:4a:75:b4:52:07:0e:
d9:6c:40:73:a4:f2:ce:4e:82:7e:f8:6b:57:f4:0e:55:d0:bd:
b5:bd:cb:f2:68:d5:e1:59:cd:b5:66:1f:f0:8d:c1:d6:0c:79:
7c:c7:74:19:2c:d7:14:77:29:2c:0c:e4:ac:af:8c:65:6c:91:
f5:8a:a5:1a:63:58:63:40:03:cb:be:ee:1a:a7:2d:ab:07:7c:
6f:c4:c7:32:a4:e2:17:d0:db:04:68:e8:f6:61:cf:d3:2a:36:
5a:fa:c7:bb:9d:00:20:ca:fb:26:06:ac:42:83:30:20:6a:0f:
0b:1b:19:b4:67:c8:35:e1:f9:ad:1f:0e:41:a6:a5:f2:d4:3b:
ce:99:57:d4:f6:09:39:d0:3c:51:c6:84:6f:76:46:33:89:72:
29:f9:f4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:05:48 2026 by rpki-client