Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/ebNjr6wF8ptJZsxCF_H1FATel2Q.roa
File: ebNjr6wF8ptJZsxCF_H1FATel2Q.roa (raw, json)
Hash identifier: T9p3ve877mC/eqYiFHAqylDZAjZLIpC4U6yL58ZPYIU=
Subject key identifier: 79:B3:63:AF:AC:05:F2:9B:49:66:CC:42:17:F1:F5:14:04:DE:97:64
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 01A0F246791C2B80E1DD25687107FA56234F
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/ebNjr6wF8ptJZsxCF_H1FATel2Q.roa
Signing time: Wed 30 Sep 2026 12:24:59 +0000
ROA not before: Wed 30 Sep 2026 12:24:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42772
IP address blocks: 37.17.0.0/17 maxlen: 17
37.17.6.0/23 maxlen: 23
37.17.8.0/21 maxlen: 21
37.17.16.0/22 maxlen: 22
37.17.20.0/22 maxlen: 22
37.17.24.0/21 maxlen: 21
37.17.32.0/21 maxlen: 21
37.17.40.0/21 maxlen: 21
37.17.48.0/20 maxlen: 20
37.17.64.0/19 maxlen: 19
37.17.96.0/20 maxlen: 20
37.17.112.0/22 maxlen: 22
37.17.117.0/24 maxlen: 24
37.17.118.0/24 maxlen: 24
37.17.119.0/24 maxlen: 24
37.17.120.0/21 maxlen: 21
46.53.128.0/21 maxlen: 21
46.53.128.0/24 maxlen: 24
46.53.129.0/24 maxlen: 24
46.53.130.0/24 maxlen: 24
46.53.131.0/24 maxlen: 24
46.53.132.0/24 maxlen: 24
46.53.133.0/24 maxlen: 24
46.53.134.0/24 maxlen: 24
46.53.135.0/24 maxlen: 24
46.53.136.0/21 maxlen: 21
46.53.136.0/24 maxlen: 24
46.53.137.0/24 maxlen: 24
46.53.138.0/24 maxlen: 24
46.53.139.0/24 maxlen: 24
46.53.140.0/24 maxlen: 24
46.53.141.0/24 maxlen: 24
46.53.142.0/23 maxlen: 23
46.53.142.0/24 maxlen: 24
46.53.143.0/24 maxlen: 24
46.53.144.0/21 maxlen: 21
46.53.144.0/24 maxlen: 24
46.53.145.0/24 maxlen: 24
46.53.146.0/24 maxlen: 24
46.53.147.0/24 maxlen: 24
46.53.148.0/24 maxlen: 24
46.53.149.0/24 maxlen: 24
46.53.150.0/24 maxlen: 24
46.53.151.0/24 maxlen: 24
46.53.152.0/21 maxlen: 21
46.53.160.0/21 maxlen: 21
46.53.163.0/24 maxlen: 24
46.53.164.0/24 maxlen: 24
46.53.165.0/24 maxlen: 24
46.53.167.0/24 maxlen: 24
46.53.168.0/21 maxlen: 21
46.53.173.0/24 maxlen: 24
46.53.174.0/23 maxlen: 23
46.53.176.0/22 maxlen: 22
46.53.180.0/22 maxlen: 22
46.53.184.0/21 maxlen: 21
46.53.184.0/23 maxlen: 23
46.53.186.0/24 maxlen: 24
46.53.189.0/24 maxlen: 24
46.53.190.0/23 maxlen: 23
46.53.192.0/22 maxlen: 22
46.53.192.0/24 maxlen: 24
46.53.193.0/24 maxlen: 24
46.53.194.0/24 maxlen: 24
46.53.195.0/24 maxlen: 24
46.53.197.0/24 maxlen: 24
46.53.198.0/23 maxlen: 23
46.53.200.0/22 maxlen: 22
46.53.204.0/24 maxlen: 24
46.53.205.0/24 maxlen: 24
46.53.206.0/24 maxlen: 24
46.53.207.0/24 maxlen: 24
46.53.208.0/24 maxlen: 24
46.53.210.0/24 maxlen: 24
46.53.211.0/24 maxlen: 24
46.53.212.0/22 maxlen: 22
46.53.216.0/23 maxlen: 23
46.53.216.0/24 maxlen: 24
46.53.217.0/24 maxlen: 24
46.53.218.0/23 maxlen: 23
46.53.218.0/24 maxlen: 24
46.53.219.0/24 maxlen: 24
46.53.220.0/23 maxlen: 23
46.53.222.0/23 maxlen: 23
46.53.224.0/22 maxlen: 22
46.53.228.0/22 maxlen: 22
46.53.232.0/21 maxlen: 21
46.53.240.0/21 maxlen: 21
46.53.240.0/22 maxlen: 22
46.53.248.0/21 maxlen: 21
46.53.248.0/22 maxlen: 22
46.56.129.0/24 maxlen: 24
46.56.130.0/23 maxlen: 23
46.56.132.0/24 maxlen: 24
46.56.133.0/24 maxlen: 24
46.56.134.0/24 maxlen: 24
46.56.135.0/24 maxlen: 24
46.56.136.0/23 maxlen: 23
46.56.138.0/23 maxlen: 23
46.56.140.0/22 maxlen: 22
46.56.144.0/20 maxlen: 20
46.56.160.0/21 maxlen: 21
46.56.168.0/21 maxlen: 21
46.56.176.0/20 maxlen: 20
46.56.176.0/21 maxlen: 21
46.56.184.0/21 maxlen: 21
46.56.192.0/21 maxlen: 21
46.56.200.0/21 maxlen: 21
46.56.208.0/24 maxlen: 24
46.56.209.0/24 maxlen: 24
46.56.210.0/24 maxlen: 24
46.56.211.0/24 maxlen: 24
46.56.212.0/24 maxlen: 24
46.56.213.0/24 maxlen: 24
46.56.214.0/23 maxlen: 23
46.56.214.0/24 maxlen: 24
46.56.216.0/21 maxlen: 21
46.56.224.0/21 maxlen: 21
46.56.232.0/21 maxlen: 21
46.56.240.0/21 maxlen: 21
46.56.248.0/21 maxlen: 21
46.182.48.0/21 maxlen: 21
77.74.32.0/21 maxlen: 21
77.74.34.0/24 maxlen: 24
77.74.35.0/24 maxlen: 24
77.74.36.0/24 maxlen: 24
77.74.37.0/24 maxlen: 24
77.74.38.0/24 maxlen: 24
77.74.39.0/24 maxlen: 24
93.191.96.0/22 maxlen: 22
93.191.100.0/24 maxlen: 24
93.191.101.0/24 maxlen: 24
93.191.102.0/24 maxlen: 24
93.191.103.0/24 maxlen: 24
128.65.0.0/18 maxlen: 18
128.65.0.0/24 maxlen: 24
128.65.1.0/24 maxlen: 24
128.65.2.0/23 maxlen: 23
128.65.4.0/23 maxlen: 23
128.65.6.0/23 maxlen: 23
128.65.8.0/21 maxlen: 21
128.65.16.0/22 maxlen: 22
128.65.20.0/22 maxlen: 22
128.65.24.0/21 maxlen: 21
128.65.24.0/22 maxlen: 22
128.65.28.0/22 maxlen: 22
128.65.32.0/21 maxlen: 21
128.65.40.0/21 maxlen: 21
128.65.48.0/20 maxlen: 20
128.65.56.0/21 maxlen: 21
128.65.56.0/22 maxlen: 22
128.65.60.0/22 maxlen: 22
128.140.240.0/20 maxlen: 20
128.140.240.0/24 maxlen: 24
128.140.244.0/22 maxlen: 22
128.140.248.0/22 maxlen: 22
178.163.128.0/17 maxlen: 17
178.163.128.0/24 maxlen: 24
178.163.129.0/24 maxlen: 24
178.163.130.0/24 maxlen: 24
178.163.131.0/24 maxlen: 24
178.163.132.0/24 maxlen: 24
178.163.133.0/24 maxlen: 24
178.163.134.0/24 maxlen: 24
178.163.135.0/24 maxlen: 24
178.163.136.0/24 maxlen: 24
178.163.138.0/24 maxlen: 24
178.163.140.0/22 maxlen: 22
178.163.144.0/21 maxlen: 21
178.163.152.0/21 maxlen: 21
178.163.160.0/24 maxlen: 24
178.163.161.0/24 maxlen: 24
178.163.162.0/24 maxlen: 24
178.163.163.0/24 maxlen: 24
178.163.164.0/24 maxlen: 24
178.163.165.0/24 maxlen: 24
178.163.168.0/21 maxlen: 21
178.163.176.0/21 maxlen: 21
178.163.184.0/21 maxlen: 21
178.163.192.0/22 maxlen: 22
178.163.196.0/22 maxlen: 22
178.163.200.0/23 maxlen: 23
178.163.202.0/23 maxlen: 23
178.163.204.0/23 maxlen: 23
178.163.206.0/23 maxlen: 23
178.163.208.0/21 maxlen: 21
178.163.216.0/22 maxlen: 22
185.61.104.0/23 maxlen: 23
185.61.105.0/24 maxlen: 24
185.61.106.0/23 maxlen: 23
195.222.64.0/20 maxlen: 20
195.222.64.0/24 maxlen: 24
195.222.66.0/24 maxlen: 24
195.222.67.0/24 maxlen: 24
195.222.68.0/24 maxlen: 24
195.222.70.0/24 maxlen: 24
195.222.71.0/24 maxlen: 24
195.222.72.0/24 maxlen: 24
195.222.73.0/24 maxlen: 24
195.222.79.0/24 maxlen: 24
195.222.80.0/21 maxlen: 21
195.222.80.0/24 maxlen: 24
195.222.81.0/24 maxlen: 24
195.222.82.0/24 maxlen: 24
195.222.88.0/23 maxlen: 23
195.222.90.0/24 maxlen: 24
195.222.91.0/24 maxlen: 24
195.222.92.0/22 maxlen: 22
195.222.92.0/24 maxlen: 24
195.222.95.0/24 maxlen: 24
2a00:1760::/32 maxlen: 32
2a00:1760:8000::/40 maxlen: 40
2a00:1760:8100::/40 maxlen: 40
2a00:1760:c000::/40 maxlen: 40
2a00:1760:c100::/40 maxlen: 40
2a00:1760:c200::/40 maxlen: 40
2a00:1760:c300::/40 maxlen: 40
2a00:1761::/32 maxlen: 32
2a00:1761:a000::/35 maxlen: 35
2a00:1761:a000::/40 maxlen: 40
2a00:1761:a100::/40 maxlen: 40
2a00:1761:a200::/40 maxlen: 40
2a00:1761:a300::/40 maxlen: 40
2a00:1761:c000::/36 maxlen: 36
2a00:1762::/32 maxlen: 32
2a00:1762:8000::/40 maxlen: 40
2a00:1762:8100::/40 maxlen: 40
2a00:1763::/32 maxlen: 32
2a00:1763:8000::/40 maxlen: 40
2a00:1763:8100::/40 maxlen: 40
2a00:1765::/32 maxlen: 32
2a00:1765:8000::/40 maxlen: 40
2a00:1765:8100::/40 maxlen: 40
2a03:3000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:46:79:1c:2b:80:e1:dd:25:68:71:07:fa:56:23:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Sep 30 12:24:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79b363afac05f29b4966cc4217f1f51404de9764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:79:a7:09:ee:3d:94:80:32:2e:d5:fc:4e:
1f:1c:fb:df:90:6a:b0:d9:52:68:6a:0a:86:62:63:
67:d5:9f:5c:d1:9a:11:4d:cb:10:b4:d7:b8:15:8f:
3a:24:ea:09:89:23:72:e7:30:c6:dc:31:8a:26:a0:
e3:f5:03:44:d6:d4:0d:0f:5c:54:37:cf:d3:c2:a8:
fd:3e:ef:44:f6:a3:d9:9a:93:63:7f:c5:ff:95:8e:
2f:56:e3:74:12:7d:f1:de:bd:1c:5c:53:9d:69:98:
90:36:59:21:d0:96:d3:56:b1:81:51:4c:52:d4:a6:
3a:93:7d:5f:f7:51:7e:64:b1:c1:b8:83:1e:a0:08:
01:48:94:c2:a3:d7:4b:f1:0c:4e:e2:b2:41:01:30:
67:e8:83:fb:0b:af:b9:68:0f:a0:1e:75:74:52:b1:
2f:16:ea:ac:02:02:09:b5:eb:69:3a:8e:1d:2d:d4:
87:cc:64:4d:4f:92:77:ef:19:e0:f6:e4:4e:f4:01:
6d:55:02:5d:19:4b:77:1a:ac:7b:34:c9:d1:d5:b3:
af:da:54:d9:81:5b:39:69:46:ca:c2:99:a8:94:32:
84:42:fd:ba:73:96:35:ad:92:1f:71:e6:fd:2a:ca:
70:a9:3f:ec:73:65:6d:b6:88:16:cd:ef:51:26:97:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B3:63:AF:AC:05:F2:9B:49:66:CC:42:17:F1:F5:14:04:DE:97:64
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/ebNjr6wF8ptJZsxCF_H1FATel2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.0.0/17
46.53.128.0-46.53.195.255
46.53.197.0-46.53.208.255
46.53.210.0-46.53.255.255
46.56.129.0-46.56.255.255
46.182.48.0/21
77.74.32.0/21
93.191.96.0/21
128.65.0.0/18
128.140.240.0/20
178.163.128.0/17
185.61.104.0/22
195.222.64.0/19
IPv6:
2a00:1760::/30
2a00:1765::/32
2a03:3000::/32
Signature Algorithm: sha256WithRSAEncryption
27:54:5f:0f:a0:ad:14:e5:ab:90:4a:60:6b:1b:11:45:95:de:
8a:42:8e:6c:2e:cd:d4:45:a6:ad:08:7a:57:c1:5b:60:f4:a5:
e0:10:15:db:56:b2:98:85:ab:4c:36:1e:a2:25:ce:b4:33:30:
ee:de:27:37:37:64:c7:70:e9:ad:ff:2b:41:9b:2f:26:95:ea:
bf:07:0a:15:cc:e2:9f:19:79:cd:10:33:d9:7f:40:32:6e:37:
b9:e4:8c:83:30:eb:c7:79:f1:49:6f:2b:b1:b6:93:b2:37:ba:
f0:0e:25:23:9a:10:b0:eb:32:18:31:d4:d9:1c:04:22:cf:18:
e2:d0:a7:10:b9:7e:38:72:d3:c5:97:52:07:41:a5:1c:2c:5a:
df:92:10:31:b9:98:8a:2d:94:03:c0:b3:f2:db:0f:8c:2d:10:
45:8f:3b:01:21:df:7e:5b:e2:65:f0:68:17:a4:75:f9:35:7c:
6f:2b:74:46:fb:f1:1f:29:aa:0c:ac:10:36:ce:72:ce:e9:0d:
88:7b:cf:34:df:7a:d2:3a:cc:02:70:8b:d3:f4:0e:54:31:1e:
bb:47:61:3e:43:2f:9c:6b:0d:48:10:50:13:03:34:44:2c:07:
f8:ef:be:05:7f:0e:aa:5f:fb:49:ef:95:fe:b8:d6:4c:18:81:
20:24:48:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:26:21 2026 by rpki-client