Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/lK5aoSeePB6ZndyRPiM_BJq60J0.roa
File: lK5aoSeePB6ZndyRPiM_BJq60J0.roa (raw, json)
Hash identifier: 9QEXPPwUc0DPoKULU+qtdfAfIA6UqP1XKN+kslkbGBk=
Subject key identifier: 94:AE:5A:A1:27:9E:3C:1E:99:9D:DC:91:3E:23:3F:04:9A:BA:D0:9D
Certificate issuer: /CN=78f9b70628daad93af188a2239828db2c29c14ec
Certificate serial: 019F2368DF0CFD4CDE02A72B35C906C6BDF4
Authority key identifier: 78:F9:B7:06:28:DA:AD:93:AF:18:8A:22:39:82:8D:B2:C2:9C:14:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/lK5aoSeePB6ZndyRPiM_BJq60J0.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13097
IP address blocks: 46.229.80.0/20 maxlen: 20
46.229.80.0/24 maxlen: 24
46.229.81.0/24 maxlen: 24
46.229.82.0/24 maxlen: 24
46.229.83.0/24 maxlen: 24
46.229.84.0/24 maxlen: 24
46.229.85.0/24 maxlen: 24
46.229.86.0/24 maxlen: 24
46.229.87.0/24 maxlen: 24
46.229.88.0/24 maxlen: 24
46.229.89.0/24 maxlen: 24
46.229.90.0/24 maxlen: 24
46.229.91.0/24 maxlen: 24
46.229.92.0/24 maxlen: 24
46.229.93.0/24 maxlen: 24
46.229.94.0/24 maxlen: 24
46.229.95.0/24 maxlen: 24
80.70.116.0/22 maxlen: 22
80.70.116.0/24 maxlen: 24
80.70.117.0/24 maxlen: 24
80.70.118.0/24 maxlen: 24
80.70.119.0/24 maxlen: 24
82.163.32.0/22 maxlen: 22
82.163.32.0/24 maxlen: 24
82.163.33.0/24 maxlen: 24
82.163.34.0/24 maxlen: 24
82.163.35.0/24 maxlen: 24
84.234.100.0/22 maxlen: 22
84.234.100.0/24 maxlen: 24
84.234.101.0/24 maxlen: 24
84.234.102.0/24 maxlen: 24
84.234.103.0/24 maxlen: 24
89.189.32.0/20 maxlen: 20
89.189.32.0/24 maxlen: 24
89.189.33.0/24 maxlen: 24
89.189.34.0/24 maxlen: 24
89.189.35.0/24 maxlen: 24
89.189.36.0/24 maxlen: 24
89.189.37.0/24 maxlen: 24
89.189.38.0/24 maxlen: 24
89.189.39.0/24 maxlen: 24
89.189.40.0/24 maxlen: 24
89.189.41.0/24 maxlen: 24
89.189.42.0/24 maxlen: 24
89.189.43.0/24 maxlen: 24
89.189.44.0/24 maxlen: 24
89.189.45.0/24 maxlen: 24
89.189.46.0/24 maxlen: 24
89.189.47.0/24 maxlen: 24
89.189.56.0/21 maxlen: 21
89.189.56.0/24 maxlen: 24
89.189.57.0/24 maxlen: 24
89.189.58.0/24 maxlen: 24
89.189.59.0/24 maxlen: 24
89.189.60.0/24 maxlen: 24
89.189.61.0/24 maxlen: 24
89.189.62.0/24 maxlen: 24
89.189.63.0/24 maxlen: 24
185.138.36.0/22 maxlen: 22
185.138.36.0/23 maxlen: 23
185.138.36.0/24 maxlen: 24
185.138.37.0/24 maxlen: 24
185.138.38.0/23 maxlen: 23
185.138.38.0/24 maxlen: 24
185.138.39.0/24 maxlen: 24
185.178.12.0/22 maxlen: 22
185.178.12.0/24 maxlen: 24
185.178.13.0/24 maxlen: 24
185.178.14.0/24 maxlen: 24
185.178.15.0/24 maxlen: 24
213.178.192.0/20 maxlen: 20
213.178.192.0/24 maxlen: 24
213.178.193.0/24 maxlen: 24
213.178.194.0/24 maxlen: 24
213.178.195.0/24 maxlen: 24
213.178.196.0/24 maxlen: 24
213.178.197.0/24 maxlen: 24
213.178.198.0/24 maxlen: 24
213.178.199.0/24 maxlen: 24
213.178.200.0/24 maxlen: 24
213.178.201.0/24 maxlen: 24
213.178.202.0/24 maxlen: 24
213.178.203.0/24 maxlen: 24
213.178.204.0/24 maxlen: 24
213.178.205.0/24 maxlen: 24
213.178.206.0/24 maxlen: 24
213.178.207.0/24 maxlen: 24
2a01:7540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:df:0c:fd:4c:de:02:a7:2b:35:c9:06:c6:bd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78f9b70628daad93af188a2239828db2c29c14ec
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94ae5aa1279e3c1e999ddc913e233f049abad09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a8:23:f7:d5:ba:86:67:63:5e:34:f8:6f:6f:
8c:a1:6d:6c:16:e5:3a:98:5b:d7:f9:e2:26:77:84:
89:f0:2c:46:6a:fe:3f:f8:d5:72:15:f4:dc:33:86:
de:37:7e:97:fb:e9:50:41:a6:46:ad:b8:ca:c4:15:
59:1b:45:92:4f:68:f6:5a:62:7d:df:88:13:90:6c:
59:4a:6d:e7:68:10:7e:cf:43:b0:e8:17:48:bf:2d:
01:ec:8a:d1:67:60:9f:79:07:0c:d7:e6:f0:93:22:
dc:b2:07:25:e2:30:a4:30:2d:4e:3b:63:b0:26:47:
65:ac:62:13:e6:86:23:4a:be:44:7b:b8:e1:e3:8f:
9c:e8:d1:a8:a4:15:8f:86:b4:23:6d:78:f6:ec:38:
60:96:60:20:02:0f:8b:5c:42:a3:67:ef:62:0b:9e:
7c:2c:fb:d2:55:2b:ab:66:25:58:57:f9:e8:bd:f6:
0c:b3:90:43:a6:d3:1e:b8:79:db:5a:00:6f:b0:cb:
53:78:ce:f8:08:5a:09:0e:f4:aa:b5:68:0f:18:f4:
ad:c9:7b:1c:76:00:a3:10:1d:f0:aa:a6:c5:a4:1e:
ee:f9:5d:ad:94:22:71:f3:08:f8:66:17:20:52:71:
e6:59:5b:4a:5e:7a:76:0b:74:64:89:68:39:a9:c4:
7a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AE:5A:A1:27:9E:3C:1E:99:9D:DC:91:3E:23:3F:04:9A:BA:D0:9D
X509v3 Authority Key Identifier:
keyid:78:F9:B7:06:28:DA:AD:93:AF:18:8A:22:39:82:8D:B2:C2:9C:14:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/lK5aoSeePB6ZndyRPiM_BJq60J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.80.0/20
80.70.116.0/22
82.163.32.0/22
84.234.100.0/22
89.189.32.0/20
89.189.56.0/21
185.138.36.0/22
185.178.12.0/22
213.178.192.0/20
IPv6:
2a01:7540::/32
Signature Algorithm: sha256WithRSAEncryption
8b:8a:a4:6d:6e:d7:74:70:0d:03:04:ed:6f:2f:82:dd:5f:30:
bf:c5:28:85:c5:6e:31:52:5c:b0:e8:0d:19:13:f5:66:a5:ec:
c9:32:e7:f3:49:44:01:80:9a:e5:aa:ad:95:d8:75:68:82:42:
8c:0b:39:1a:85:f1:c6:cb:78:be:e9:43:99:c2:ef:b5:36:61:
a3:05:b1:53:46:e2:4c:e2:d7:34:96:f6:5f:82:63:aa:75:1e:
0b:89:ec:5f:9c:fb:70:76:5c:1f:71:d1:cc:fe:29:fd:6a:b8:
cd:56:5b:30:ff:f9:9c:6d:9f:dc:33:b9:f9:a1:bc:c0:e2:66:
b8:1c:5b:fe:e4:9b:10:52:2a:46:6f:6d:6b:df:c2:a4:57:87:
60:88:f3:9b:b1:91:e0:90:62:69:29:48:34:04:6d:29:bd:c4:
c0:0f:fe:de:16:da:63:3b:2d:02:22:e6:34:5c:a7:fd:fb:e6:
af:7d:c2:91:36:00:58:2c:68:ff:fc:e5:b5:95:a2:f9:d6:79:
9d:15:90:3d:fe:af:f2:95:b4:09:90:5e:36:d7:cd:49:ed:3d:
99:87:4c:c3:aa:32:39:c0:67:26:dc:a0:6d:5b:94:f8:62:6b:
0b:cb:2d:d7:b9:f5:ad:be:9a:45:d2:42:c7:4c:92:09:53:db:
df:ff:81:a2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZ8jaN8M/UzeAqcrNckGxr30MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZjliNzA2MjhkYWFkOTNhZjE4OGEyMjM5ODI4ZGIyYzI5
YzE0ZWMwHhcNMjYwNzAyMTUxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGFlNWFhMTI3OWUzYzFlOTk5ZGRjOTEzZTIzM2YwNDlhYmFkMDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7agj99W6hmdjXjT4b2+MoW1sFuU6
mFvX+eImd4SJ8CxGav4/+NVyFfTcM4beN36X++lQQaZGrbjKxBVZG0WST2j2WmJ9
34gTkGxZSm3naBB+z0Ow6BdIvy0B7IrRZ2CfeQcM1+bwkyLcsgcl4jCkMC1OO2Ow
JkdlrGIT5oYjSr5Ee7jh44+c6NGopBWPhrQjbXj27DhglmAgAg+LXEKjZ+9iC558
LPvSVSurZiVYV/novfYMs5BDptMeuHnbWgBvsMtTeM74CFoJDvSqtWgPGPStyXsc
dgCjEB3wqqbFpB7u+V2tlCJx8wj4ZhcgUnHmWVtKXnp2C3RkiWg5qcR6tQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFJSuWqEnnjwemZ3ckT4jPwSautCdMB8GA1UdIwQY
MBaAFHj5twYo2q2TrxiKIjmCjbLCnBTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVBtM0JpamFyWk92R0lvaU9ZS05zc0tjRk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgt
MDA2NmY1NDFmYWVhLzEvbEs1YW9TZWVQQjZabmR5UlBpTV9CSnE2MEowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgtMDA2NmY1NDFmYWVh
LzEvZVBtM0JpamFyWk92R0lvaU9ZS05zc0tjRk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQELuVQAwQC
UEZ0AwQCUqMgAwQCVOpkAwQEWb0gAwQDWb04AwQCuYokAwQCubIMAwQE1bLAMA0E
AgACMAcDBQAqAXVAMA0GCSqGSIb3DQEBCwUAA4IBAQCLiqRtbtd0cA0DBO1vL4Ld
XzC/xSiFxW4xUlyw6A0ZE/VmpezJMufzSUQBgJrlqq2V2HVogkKMCzkahfHGy3i+
6UOZwu+1NmGjBbFTRuJM4tc0lvZfgmOqdR4LiexfnPtwdlwfcdHM/in9arjNVlsw
//mcbZ/cM7n5obzA4ma4HFv+5JsQUipGb21r38KkV4dgiPObsZHgkGJpKUg0BG0p
vcTAD/7eFtpjOy0CIuY0XKf9++avfcKRNgBYLGj//OW1laL51nmdFZA9/q/ylbQJ
kF42181J7T2Zh0zDqjI5wGcm3KBtW5T4YmsLyy3XufWtvppF0kLHTJIJU9vf/4Gi
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:41 2026 by rpki-client