Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/pgVasoGtiLKSu7Gip3svipxzZPk.roa
File: pgVasoGtiLKSu7Gip3svipxzZPk.roa (raw, json)
Hash identifier: 0SihNtYkT1G6gzAeawF0Zf7V1EZDtwvsDM2yXROG1dk=
Subject key identifier: A6:05:5A:B2:81:AD:88:B2:92:BB:B1:A2:A7:7B:2F:8A:9C:73:64:F9
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 019C56BF71BF9531EF09B13085444FAD3069
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/pgVasoGtiLKSu7Gip3svipxzZPk.roa
Signing time: Fri 13 Feb 2026 11:25:12 +0000
ROA not before: Fri 13 Feb 2026 11:25:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25400
IP address blocks: 46.15.0.0/16 maxlen: 16
46.212.0.0/17 maxlen: 17
46.212.0.0/20 maxlen: 20
46.212.16.0/20 maxlen: 20
46.212.48.0/20 maxlen: 20
46.212.64.0/21 maxlen: 21
46.212.72.0/21 maxlen: 21
46.212.80.0/21 maxlen: 21
46.212.88.0/21 maxlen: 21
46.212.128.0/17 maxlen: 17
46.249.224.0/19 maxlen: 19
46.249.224.0/22 maxlen: 22
46.249.230.0/23 maxlen: 23
46.249.233.0/24 maxlen: 24
46.249.234.0/23 maxlen: 23
46.249.236.0/23 maxlen: 23
46.249.238.0/24 maxlen: 24
46.249.252.0/22 maxlen: 22
62.73.192.0/18 maxlen: 18
62.73.252.0/24 maxlen: 24
62.97.160.0/19 maxlen: 19
62.97.168.0/22 maxlen: 22
62.97.172.0/23 maxlen: 23
62.113.128.0/19 maxlen: 19
62.141.128.0/19 maxlen: 19
78.156.0.0/19 maxlen: 24
80.232.0.0/17 maxlen: 17
80.232.34.0/24 maxlen: 24
80.232.124.0/24 maxlen: 24
80.239.0.0/17 maxlen: 17
80.239.119.0/24 maxlen: 24
82.194.192.0/19 maxlen: 19
82.194.198.0/24 maxlen: 24
82.194.204.0/22 maxlen: 22
82.194.204.0/23 maxlen: 23
82.194.206.0/23 maxlen: 23
82.194.209.0/24 maxlen: 24
82.194.210.0/24 maxlen: 24
82.194.216.0/24 maxlen: 24
82.194.218.0/23 maxlen: 23
84.38.144.0/20 maxlen: 20
84.208.0.0/13 maxlen: 17
84.208.20.0/24 maxlen: 24
84.208.21.0/24 maxlen: 24
84.208.22.0/23 maxlen: 23
84.208.192.0/20 maxlen: 20
84.208.208.0/20 maxlen: 20
84.208.224.0/20 maxlen: 20
84.208.240.0/20 maxlen: 20
84.209.80.0/20 maxlen: 20
84.209.210.0/24 maxlen: 24
84.209.216.0/24 maxlen: 24
84.209.218.0/24 maxlen: 24
84.209.221.0/24 maxlen: 24
84.209.234.0/24 maxlen: 24
84.209.240.0/20 maxlen: 20
84.210.112.0/20 maxlen: 20
84.210.128.0/20 maxlen: 20
84.210.160.0/23 maxlen: 23
84.210.178.0/23 maxlen: 23
84.210.186.0/23 maxlen: 23
84.210.208.0/20 maxlen: 20
84.210.251.0/24 maxlen: 24
84.211.2.0/23 maxlen: 23
84.211.36.0/23 maxlen: 23
84.211.42.0/24 maxlen: 24
84.211.48.0/20 maxlen: 20
84.212.0.0/20 maxlen: 20
84.212.16.0/20 maxlen: 20
84.212.32.0/20 maxlen: 20
84.212.240.0/20 maxlen: 20
84.213.16.0/20 maxlen: 20
84.213.128.0/20 maxlen: 20
84.213.135.0/24 maxlen: 24
84.213.144.0/20 maxlen: 20
84.213.152.0/22 maxlen: 22
84.213.156.0/22 maxlen: 22
84.213.162.0/23 maxlen: 23
84.214.0.0/20 maxlen: 20
84.214.16.0/20 maxlen: 20
84.214.32.0/20 maxlen: 20
84.214.46.0/23 maxlen: 23
84.214.64.0/20 maxlen: 20
84.214.64.0/23 maxlen: 23
84.214.68.0/23 maxlen: 23
84.214.114.0/24 maxlen: 24
84.214.138.0/23 maxlen: 23
84.214.168.0/24 maxlen: 24
84.214.172.0/22 maxlen: 22
84.214.192.0/24 maxlen: 24
84.214.193.0/24 maxlen: 24
84.214.229.0/24 maxlen: 24
84.214.236.0/22 maxlen: 22
84.214.242.0/23 maxlen: 23
84.215.16.0/20 maxlen: 20
84.215.32.0/20 maxlen: 20
84.215.96.0/20 maxlen: 20
84.215.248.0/21 maxlen: 21
85.19.0.0/16 maxlen: 16
89.8.0.0/15 maxlen: 15
89.9.254.0/24 maxlen: 24
89.254.64.0/18 maxlen: 18
93.124.128.0/17 maxlen: 17
109.108.192.0/19 maxlen: 19
109.108.192.0/24 maxlen: 24
109.108.194.0/23 maxlen: 23
109.108.200.0/21 maxlen: 21
109.108.200.0/22 maxlen: 22
109.108.213.0/24 maxlen: 24
109.108.216.0/21 maxlen: 21
109.163.0.0/17 maxlen: 17
109.163.124.0/24 maxlen: 24
158.58.152.0/21 maxlen: 21
158.58.152.0/23 maxlen: 23
176.11.0.0/16 maxlen: 16
176.74.208.0/21 maxlen: 21
178.17.144.0/20 maxlen: 20
178.232.0.0/16 maxlen: 16
185.46.224.0/22 maxlen: 22
185.71.208.0/22 maxlen: 22
185.72.96.0/22 maxlen: 22
185.97.84.0/22 maxlen: 22
185.138.32.0/22 maxlen: 22
185.201.120.0/22 maxlen: 22
188.113.64.0/18 maxlen: 18
188.113.66.0/23 maxlen: 23
188.113.68.0/22 maxlen: 22
188.113.68.0/23 maxlen: 23
188.113.71.0/24 maxlen: 24
188.113.74.0/23 maxlen: 23
188.113.76.0/24 maxlen: 24
188.113.78.0/23 maxlen: 23
188.113.80.0/21 maxlen: 21
188.113.92.0/22 maxlen: 22
188.113.92.0/23 maxlen: 23
188.113.94.0/23 maxlen: 23
188.113.104.0/21 maxlen: 21
188.113.112.0/20 maxlen: 20
188.113.112.0/22 maxlen: 22
188.113.116.0/22 maxlen: 22
188.124.128.0/19 maxlen: 19
188.124.145.0/24 maxlen: 24
188.124.148.0/22 maxlen: 22
188.124.152.0/21 maxlen: 21
188.126.192.0/19 maxlen: 19
188.126.197.0/24 maxlen: 24
188.126.200.0/21 maxlen: 21
188.126.214.0/24 maxlen: 24
195.70.160.0/19 maxlen: 19
212.20.192.0/19 maxlen: 19
212.37.224.0/19 maxlen: 19
212.45.160.0/19 maxlen: 19
212.125.192.0/18 maxlen: 18
212.125.252.0/22 maxlen: 22
212.169.64.0/18 maxlen: 18
213.188.0.0/19 maxlen: 19
213.225.64.0/18 maxlen: 18
213.236.128.0/17 maxlen: 17
213.236.171.0/24 maxlen: 24
217.68.96.0/19 maxlen: 19
2a00:a540::/32 maxlen: 32
2a02:228::/29 maxlen: 29
2a02:228:1c15::/48 maxlen: 48
2a02:fe0::/29 maxlen: 40
2a02:fe0:dd05::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:bf:71:bf:95:31:ef:09:b1:30:85:44:4f:ad:30:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Feb 13 11:25:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6055ab281ad88b292bbb1a2a77b2f8a9c7364f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:37:68:43:38:62:ed:a4:19:00:d6:d8:af:
61:c5:38:9c:e1:3e:78:7e:0f:96:d8:48:63:b3:f0:
2d:f8:f2:67:d1:a9:07:e2:c9:15:34:ce:0d:51:3c:
59:b1:2e:b1:29:fc:5f:f6:8c:d7:52:8d:6b:42:b9:
00:78:59:b9:e3:00:07:6a:27:9c:97:5f:39:69:48:
70:11:a0:50:31:eb:d1:35:ed:5a:08:dc:5b:2f:26:
4a:da:5a:1b:a6:1b:52:92:49:f9:95:35:96:8d:da:
cd:7e:21:fd:a2:e0:7c:cd:58:98:50:d7:97:18:e7:
41:c3:dc:91:82:e5:77:2a:ba:13:9d:63:48:72:ca:
69:ce:df:ee:f7:23:fe:b9:ef:c2:c8:75:02:1e:cf:
80:67:da:11:f9:a0:4a:6b:63:63:67:0f:78:83:25:
6b:76:aa:ae:1b:3c:db:4c:80:c7:d9:b2:1d:b0:00:
c5:71:1a:16:13:cc:43:78:47:a0:2b:69:82:76:c9:
70:68:ac:f9:df:6a:9b:52:c5:dd:d8:ae:36:ac:86:
70:7c:c6:59:e9:c0:e8:58:3c:1d:af:20:8a:8f:57:
0c:af:38:49:70:9b:9b:f5:34:c1:94:61:59:e0:f5:
5d:1c:af:ed:66:f5:46:75:63:71:a5:a6:73:73:6b:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:05:5A:B2:81:AD:88:B2:92:BB:B1:A2:A7:7B:2F:8A:9C:73:64:F9
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/pgVasoGtiLKSu7Gip3svipxzZPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.15.0.0/16
46.212.0.0/16
46.249.224.0/19
62.73.192.0/18
62.97.160.0/19
62.113.128.0/19
62.141.128.0/19
78.156.0.0/19
80.232.0.0/17
80.239.0.0/17
82.194.192.0/19
84.38.144.0/20
84.208.0.0/13
85.19.0.0/16
89.8.0.0/15
89.254.64.0/18
93.124.128.0/17
109.108.192.0/19
109.163.0.0/17
158.58.152.0/21
176.11.0.0/16
176.74.208.0/21
178.17.144.0/20
178.232.0.0/16
185.46.224.0/22
185.71.208.0/22
185.72.96.0/22
185.97.84.0/22
185.138.32.0/22
185.201.120.0/22
188.113.64.0/18
188.124.128.0/19
188.126.192.0/19
195.70.160.0/19
212.20.192.0/19
212.37.224.0/19
212.45.160.0/19
212.125.192.0/18
212.169.64.0/18
213.188.0.0/19
213.225.64.0/18
213.236.128.0/17
217.68.96.0/19
IPv6:
2a00:a540::/32
2a02:228::/29
2a02:fe0::/29
Signature Algorithm: sha256WithRSAEncryption
14:55:c5:46:a8:9f:01:46:fa:3a:2c:f2:74:14:71:f6:85:80:
f8:62:a6:b9:2b:d0:d0:22:76:26:62:b8:b9:12:19:78:96:7b:
8f:21:cf:14:b9:35:80:63:ad:78:1f:fa:6e:91:86:ff:30:b1:
70:5d:95:b9:80:c3:89:77:52:74:6a:e5:14:29:23:07:8f:1b:
e2:26:d3:95:d5:4f:08:b2:26:70:47:40:62:9a:af:5a:e8:ea:
eb:4a:aa:c5:d6:d4:04:49:0a:05:86:e9:3a:ab:a1:00:35:75:
62:1b:13:8c:63:31:7f:8f:b1:55:f9:9d:a6:ba:3e:0d:c5:1c:
2d:4c:34:16:81:50:26:5c:df:32:a0:9b:a8:08:71:27:55:66:
e3:93:84:cb:bd:13:70:95:bb:3a:0e:a0:29:84:1c:9a:1c:f5:
4f:8a:58:1b:0d:5d:8d:83:e9:d3:e8:bc:18:04:f9:83:8e:db:
8c:a0:73:7a:98:46:6b:bf:e6:83:5c:7f:af:94:5a:6c:db:30:
ba:75:f3:a7:4b:dd:4a:c1:db:ee:81:bf:f9:5f:fb:74:1f:0d:
65:45:81:42:d3:3a:4c:c8:1b:38:10:81:26:05:c7:f1:34:7b:
93:1e:0b:95:0e:13:12:94:6a:ad:45:b5:ff:cf:00:bc:61:a9:
b9:8d:a2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:42 2026 by rpki-client