Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/psz3ooNpY3e9tkjIuqr8uxPDos8.roa
File: psz3ooNpY3e9tkjIuqr8uxPDos8.roa (raw, json)
Hash identifier: hpkViONdIPDiBy+oJsX/iSPpgQZCaF4T8G0nqkis2l8=
Subject key identifier: A6:CC:F7:A2:83:69:63:77:BD:B6:48:C8:BA:AA:FC:BB:13:C3:A2:CF
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019FA8DC8F77E058845B18180D6A9600FFE1
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/psz3ooNpY3e9tkjIuqr8uxPDos8.roa
Signing time: Tue 28 Jul 2026 13:14:14 +0000
ROA not before: Tue 28 Jul 2026 13:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 2.59.49.0/24 maxlen: 24
31.222.248.0/24 maxlen: 24
45.15.238.0/24 maxlen: 24
45.93.80.0/24 maxlen: 24
45.132.38.0/24 maxlen: 24
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
45.139.52.0/24 maxlen: 24
45.139.53.0/24 maxlen: 24
45.139.55.0/24 maxlen: 24
45.139.126.0/24 maxlen: 24
45.139.127.0/24 maxlen: 24
45.140.64.0/24 maxlen: 24
45.142.39.0/24 maxlen: 24
45.146.24.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.149.129.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
45.159.84.0/24 maxlen: 24
45.159.87.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
94.158.189.0/24 maxlen: 24
157.22.0.0/24 maxlen: 24
157.22.1.0/24 maxlen: 24
157.22.2.0/24 maxlen: 24
157.22.3.0/24 maxlen: 24
157.22.4.0/24 maxlen: 24
157.22.5.0/24 maxlen: 24
157.22.6.0/24 maxlen: 24
157.22.7.0/24 maxlen: 24
157.22.8.0/24 maxlen: 24
157.22.9.0/24 maxlen: 24
157.22.10.0/24 maxlen: 24
157.22.11.0/24 maxlen: 24
157.22.12.0/24 maxlen: 24
157.22.13.0/24 maxlen: 24
157.22.14.0/24 maxlen: 24
157.22.15.0/24 maxlen: 24
157.22.20.0/24 maxlen: 24
157.22.21.0/24 maxlen: 24
157.22.22.0/24 maxlen: 24
157.22.23.0/24 maxlen: 24
157.22.24.0/24 maxlen: 24
157.22.25.0/24 maxlen: 24
157.22.26.0/24 maxlen: 24
157.22.27.0/24 maxlen: 24
157.22.28.0/24 maxlen: 24
157.22.29.0/24 maxlen: 24
157.22.30.0/24 maxlen: 24
157.22.31.0/24 maxlen: 24
157.22.32.0/24 maxlen: 24
157.22.33.0/24 maxlen: 24
157.22.34.0/24 maxlen: 24
157.22.35.0/24 maxlen: 24
157.22.36.0/24 maxlen: 24
157.22.37.0/24 maxlen: 24
157.22.38.0/24 maxlen: 24
157.22.39.0/24 maxlen: 24
157.22.40.0/24 maxlen: 24
157.22.41.0/24 maxlen: 24
157.22.42.0/24 maxlen: 24
157.22.43.0/24 maxlen: 24
157.22.48.0/24 maxlen: 24
157.22.49.0/24 maxlen: 24
157.22.50.0/24 maxlen: 24
157.22.51.0/24 maxlen: 24
157.22.52.0/24 maxlen: 24
157.22.53.0/24 maxlen: 24
157.22.54.0/24 maxlen: 24
157.22.55.0/24 maxlen: 24
157.22.56.0/24 maxlen: 24
157.22.57.0/24 maxlen: 24
157.22.58.0/24 maxlen: 24
157.22.59.0/24 maxlen: 24
157.22.60.0/24 maxlen: 24
157.22.61.0/24 maxlen: 24
157.22.62.0/24 maxlen: 24
157.22.63.0/24 maxlen: 24
157.22.64.0/24 maxlen: 24
157.22.65.0/24 maxlen: 24
157.22.66.0/24 maxlen: 24
157.22.67.0/24 maxlen: 24
157.22.68.0/24 maxlen: 24
157.22.70.0/24 maxlen: 24
157.22.71.0/24 maxlen: 24
157.22.76.0/24 maxlen: 24
157.22.77.0/24 maxlen: 24
157.22.78.0/24 maxlen: 24
157.22.79.0/24 maxlen: 24
157.22.80.0/24 maxlen: 24
157.22.81.0/24 maxlen: 24
157.22.82.0/24 maxlen: 24
157.22.83.0/24 maxlen: 24
157.22.84.0/24 maxlen: 24
157.22.85.0/24 maxlen: 24
157.22.86.0/24 maxlen: 24
157.22.87.0/24 maxlen: 24
157.22.88.0/24 maxlen: 24
157.22.89.0/24 maxlen: 24
157.22.90.0/24 maxlen: 24
157.22.91.0/24 maxlen: 24
157.22.92.0/24 maxlen: 24
157.22.93.0/24 maxlen: 24
157.22.94.0/24 maxlen: 24
157.22.95.0/24 maxlen: 24
157.22.96.0/24 maxlen: 24
157.22.97.0/24 maxlen: 24
157.22.98.0/24 maxlen: 24
157.22.99.0/24 maxlen: 24
157.22.104.0/24 maxlen: 24
157.22.105.0/24 maxlen: 24
157.22.106.0/24 maxlen: 24
157.22.107.0/24 maxlen: 24
157.22.108.0/24 maxlen: 24
157.22.109.0/24 maxlen: 24
157.22.110.0/24 maxlen: 24
157.22.111.0/24 maxlen: 24
157.22.112.0/24 maxlen: 24
157.22.113.0/24 maxlen: 24
157.22.114.0/24 maxlen: 24
157.22.115.0/24 maxlen: 24
157.22.116.0/24 maxlen: 24
157.22.117.0/24 maxlen: 24
157.22.118.0/24 maxlen: 24
157.22.120.0/24 maxlen: 24
157.22.121.0/24 maxlen: 24
157.22.122.0/24 maxlen: 24
157.22.123.0/24 maxlen: 24
176.56.37.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
178.212.143.0/24 maxlen: 24
185.46.175.0/24 maxlen: 24
185.92.211.0/24 maxlen: 24
185.161.79.0/24 maxlen: 24
193.31.5.0/24 maxlen: 24
193.33.66.0/24 maxlen: 24
193.56.29.0/24 maxlen: 24
193.58.170.0/24 maxlen: 24
194.32.238.0/24 maxlen: 24
194.32.239.0/24 maxlen: 24
194.56.180.0/24 maxlen: 24
195.64.110.0/24 maxlen: 24
195.96.146.0/24 maxlen: 24
212.18.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:dc:8f:77:e0:58:84:5b:18:18:0d:6a:96:00:ff:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jul 28 13:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6ccf7a283696377bdb648c8baaafcbb13c3a2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:28:2f:c2:41:6a:50:41:5b:6c:5c:2f:76:
74:05:55:47:b4:64:00:f7:88:20:08:c5:82:61:60:
eb:20:07:f8:33:f9:8f:19:19:80:45:3a:6c:ef:6e:
23:cb:e4:e6:2d:e2:43:30:66:0f:c8:0a:5c:d4:70:
1f:69:ae:d6:b3:9d:c2:17:bc:55:0b:9b:0c:90:ba:
7d:dc:1c:b3:2a:9c:9a:60:23:82:77:05:20:52:99:
1a:d9:e4:3f:0b:54:18:24:ac:29:14:b7:3d:cf:2e:
f3:03:dd:5e:2c:fa:54:5c:9d:d8:1b:f1:f7:49:46:
6b:e4:aa:c7:9a:52:ba:94:13:ba:f2:21:39:89:27:
5d:ea:34:f6:32:37:fe:1f:65:fa:6e:5d:85:f6:a6:
34:e9:53:45:a7:39:07:ab:d3:9f:bc:bd:d5:0e:0f:
59:1f:ed:a1:a3:e3:10:63:4b:ba:0b:a6:d1:b9:e0:
80:bf:f4:e3:5d:cb:91:74:4c:44:79:f9:e8:ee:3b:
4d:ab:d2:1b:da:0b:e6:94:44:41:7d:9e:73:b3:eb:
13:48:73:07:fa:c5:2c:e0:a8:f5:37:06:9f:b3:c4:
91:29:6d:7e:b6:32:d5:34:e9:75:77:79:0d:53:fe:
65:7d:2e:e0:14:83:d2:cb:29:0b:ab:9f:0d:02:1c:
49:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CC:F7:A2:83:69:63:77:BD:B6:48:C8:BA:AA:FC:BB:13:C3:A2:CF
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/psz3ooNpY3e9tkjIuqr8uxPDos8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.49.0/24
31.222.248.0/24
45.15.238.0/24
45.93.80.0/24
45.132.38.0/24
45.132.128.0/23
45.138.213.0-45.138.214.255
45.139.52.0/23
45.139.55.0/24
45.139.126.0/23
45.140.64.0/24
45.142.39.0/24
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.149.129.0/24
45.152.116.0/23
45.159.84.0/24
45.159.87.0/24
91.206.68.0/24
91.236.121.0/24
94.158.189.0/24
157.22.0.0/20
157.22.20.0-157.22.43.255
157.22.48.0-157.22.68.255
157.22.70.0/23
157.22.76.0-157.22.99.255
157.22.104.0-157.22.118.255
157.22.120.0/22
176.56.37.0/24
176.222.56.0/23
176.222.59.0/24
178.212.143.0/24
185.46.175.0/24
185.92.211.0/24
185.161.79.0/24
193.31.5.0/24
193.33.66.0/24
193.56.29.0/24
193.58.170.0/24
194.32.238.0/23
194.56.180.0/24
195.64.110.0/24
195.96.146.0/24
212.18.103.0/24
Signature Algorithm: sha256WithRSAEncryption
09:0d:da:fa:fc:a8:f5:43:91:7d:55:27:73:dd:0c:35:7d:51:
df:ad:a4:95:7c:1e:8d:86:80:62:e6:e7:2e:3b:2c:d0:c0:03:
30:d5:37:71:ef:65:dd:58:a1:27:b0:04:e6:e7:65:90:d6:5d:
f3:e3:13:61:51:30:15:c5:71:b8:8e:04:ce:99:86:e5:62:09:
38:52:db:8e:82:ee:10:56:f4:d2:07:da:d4:a0:32:d4:bb:95:
62:71:5b:0c:50:c7:8c:a5:89:82:04:94:02:b8:88:f6:c4:06:
2c:42:dd:3e:88:8c:eb:52:81:0a:13:b4:04:ec:b9:a7:0d:3f:
db:1a:4c:54:16:78:bd:e0:7d:f5:49:77:17:bd:14:0e:87:09:
1d:c0:72:a7:fc:5d:8b:34:6a:a8:0c:9b:e6:a5:79:2d:76:35:
66:c4:fd:58:b6:42:13:cb:b1:12:27:93:80:14:46:df:53:cb:
f0:43:23:26:f4:e8:7a:8b:58:b4:ec:a4:df:60:d6:3d:9f:c2:
20:26:d3:53:ce:16:6a:e4:4c:2a:15:7c:59:c7:52:9c:70:00:
4e:25:18:bf:fc:af:bb:31:0c:06:7b:49:7a:d4:70:af:83:1b:
ef:1a:9d:18:6d:1f:a6:77:10:83:4d:04:4b:a7:9e:3d:b9:a9:
d8:f2:85:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:44 2026 by rpki-client