Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/2Lnq1jxuG7fOPywXcCckZ3LXYVE.roa
File: 2Lnq1jxuG7fOPywXcCckZ3LXYVE.roa (raw, json)
Hash identifier: Z9zocPPJpITlN/Qieci7x6zAoTFoCQUxqVuzJp2IlpM=
Subject key identifier: D8:B9:EA:D6:3C:6E:1B:B7:CE:3F:2C:17:70:27:24:67:72:D7:61:51
Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial: 01A0F0ED506A742C2BE7BD4497F6A3FA9B4F
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/2Lnq1jxuG7fOPywXcCckZ3LXYVE.roa
Signing time: Wed 30 Sep 2026 06:07:59 +0000
ROA not before: Wed 30 Sep 2026 06:07:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48282
IP address blocks: 45.150.36.0/24 maxlen: 24
45.150.37.0/24 maxlen: 24
45.150.38.0/24 maxlen: 24
45.150.39.0/24 maxlen: 24
62.113.112.0/24 maxlen: 24
62.113.113.0/24 maxlen: 24
62.113.114.0/24 maxlen: 24
62.113.115.0/24 maxlen: 24
62.113.116.0/24 maxlen: 24
62.113.117.0/24 maxlen: 24
62.113.118.0/24 maxlen: 24
62.113.119.0/24 maxlen: 24
83.217.212.0/24 maxlen: 24
83.217.213.0/24 maxlen: 24
83.217.214.0/24 maxlen: 24
83.217.215.0/24 maxlen: 24
84.54.44.0/24 maxlen: 24
84.54.47.0/24 maxlen: 24
85.198.108.0/24 maxlen: 24
85.198.109.0/24 maxlen: 24
85.198.110.0/24 maxlen: 24
85.198.111.0/24 maxlen: 24
88.210.34.0/24 maxlen: 24
88.210.35.0/24 maxlen: 24
88.210.52.0/24 maxlen: 24
88.210.53.0/24 maxlen: 24
88.210.54.0/24 maxlen: 24
88.210.55.0/24 maxlen: 24
88.218.60.0/24 maxlen: 24
88.218.61.0/24 maxlen: 24
88.218.62.0/24 maxlen: 24
88.218.63.0/24 maxlen: 24
91.142.72.0/24 maxlen: 24
91.142.73.0/24 maxlen: 24
91.142.74.0/24 maxlen: 24
91.142.75.0/24 maxlen: 24
91.184.244.0/24 maxlen: 24
91.184.245.0/24 maxlen: 24
91.184.246.0/24 maxlen: 24
91.184.247.0/24 maxlen: 24
91.212.150.0/24 maxlen: 24
93.183.92.0/24 maxlen: 24
93.183.93.0/24 maxlen: 24
93.183.94.0/24 maxlen: 24
93.183.95.0/24 maxlen: 24
94.103.83.0/24 maxlen: 24
94.103.84.0/24 maxlen: 24
94.103.85.0/24 maxlen: 24
94.103.86.0/24 maxlen: 24
94.103.87.0/24 maxlen: 24
94.103.88.0/24 maxlen: 24
94.103.89.0/24 maxlen: 24
94.103.90.0/24 maxlen: 24
94.103.91.0/24 maxlen: 24
94.103.92.0/24 maxlen: 24
94.103.93.0/24 maxlen: 24
95.142.33.0/24 maxlen: 24
95.142.34.0/24 maxlen: 24
95.142.45.0/24 maxlen: 24
95.142.46.0/24 maxlen: 24
95.142.47.0/24 maxlen: 24
109.172.84.0/24 maxlen: 24
109.172.85.0/24 maxlen: 24
109.172.86.0/24 maxlen: 24
109.172.87.0/24 maxlen: 24
109.172.88.0/24 maxlen: 24
109.172.89.0/24 maxlen: 24
109.172.90.0/24 maxlen: 24
109.172.91.0/24 maxlen: 24
138.16.160.0/24 maxlen: 24
138.16.161.0/24 maxlen: 24
138.16.162.0/24 maxlen: 24
138.16.163.0/24 maxlen: 24
138.16.164.0/24 maxlen: 24
138.16.165.0/24 maxlen: 24
138.16.166.0/24 maxlen: 24
138.16.167.0/24 maxlen: 24
138.16.168.0/24 maxlen: 24
138.16.169.0/24 maxlen: 24
138.16.170.0/24 maxlen: 24
138.16.171.0/24 maxlen: 24
138.16.172.0/24 maxlen: 24
138.16.173.0/24 maxlen: 24
138.16.174.0/24 maxlen: 24
138.16.175.0/24 maxlen: 24
138.16.176.0/24 maxlen: 24
138.16.177.0/24 maxlen: 24
138.16.178.0/24 maxlen: 24
138.16.179.0/24 maxlen: 24
138.16.180.0/24 maxlen: 24
138.16.181.0/24 maxlen: 24
138.16.182.0/24 maxlen: 24
138.16.183.0/24 maxlen: 24
138.16.184.0/24 maxlen: 24
138.16.185.0/24 maxlen: 24
138.16.186.0/24 maxlen: 24
138.16.187.0/24 maxlen: 24
138.16.188.0/24 maxlen: 24
138.16.189.0/24 maxlen: 24
138.16.190.0/24 maxlen: 24
138.16.191.0/24 maxlen: 24
178.20.40.0/24 maxlen: 24
178.20.41.0/24 maxlen: 24
178.20.42.0/24 maxlen: 24
178.20.43.0/24 maxlen: 24
178.20.44.0/24 maxlen: 24
178.20.45.0/24 maxlen: 24
178.20.46.0/24 maxlen: 24
178.20.47.0/24 maxlen: 24
178.130.131.0/24 maxlen: 24
178.217.98.0/24 maxlen: 24
178.217.99.0/24 maxlen: 24
185.209.28.0/24 maxlen: 24
185.209.29.0/24 maxlen: 24
185.209.30.0/24 maxlen: 24
185.209.31.0/24 maxlen: 24
185.231.152.0/24 maxlen: 24
185.231.153.0/24 maxlen: 24
185.231.154.0/24 maxlen: 24
185.231.155.0/24 maxlen: 24
192.144.56.0/24 maxlen: 24
192.144.57.0/24 maxlen: 24
192.144.58.0/24 maxlen: 24
192.144.59.0/24 maxlen: 24
193.124.64.0/24 maxlen: 24
193.124.65.0/24 maxlen: 24
193.124.66.0/24 maxlen: 24
193.124.67.0/24 maxlen: 24
193.124.128.0/24 maxlen: 24
193.124.129.0/24 maxlen: 24
193.124.130.0/24 maxlen: 24
193.124.131.0/24 maxlen: 24
193.178.170.0/24 maxlen: 24
195.2.66.0/24 maxlen: 24
195.2.67.0/24 maxlen: 24
195.2.70.0/24 maxlen: 24
195.2.71.0/24 maxlen: 24
195.2.73.0/24 maxlen: 24
195.2.74.0/24 maxlen: 24
195.2.75.0/24 maxlen: 24
195.2.76.0/24 maxlen: 24
195.2.78.0/24 maxlen: 24
195.2.79.0/24 maxlen: 24
195.2.80.0/24 maxlen: 24
195.2.81.0/24 maxlen: 24
195.2.84.0/24 maxlen: 24
195.2.85.0/24 maxlen: 24
195.133.56.0/24 maxlen: 24
195.133.57.0/24 maxlen: 24
195.133.60.0/24 maxlen: 24
195.133.61.0/24 maxlen: 24
212.118.45.0/24 maxlen: 24
212.118.56.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.11.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:ed:50:6a:74:2c:2b:e7:bd:44:97:f6:a3:fa:9b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
Validity
Not Before: Sep 30 06:07:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8b9ead63c6e1bb7ce3f2c177027246772d76151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:d8:65:c5:7d:41:e2:5e:95:06:01:07:b2:
cf:c7:66:ab:12:0d:da:c2:6f:53:18:0a:1f:a8:31:
10:ab:27:a6:a7:2c:77:4f:11:bb:dc:5c:f5:c1:1f:
cd:cc:af:f2:8d:e4:8e:23:7a:5f:69:5b:bb:89:03:
53:0a:80:34:34:bf:22:12:fb:93:6e:d5:6f:ab:27:
d9:14:c1:86:56:e2:1e:9a:9d:19:67:eb:9e:da:ef:
bd:76:57:a9:01:9e:b4:ba:08:fb:cc:9e:30:e7:ee:
60:2b:79:82:48:47:1c:20:7a:be:3e:c9:e7:58:bc:
57:92:f2:e0:74:8c:2f:2a:fc:07:55:8f:53:8a:68:
7d:53:fc:0b:f1:af:b8:22:05:c2:1e:99:dc:ce:4b:
18:9b:ce:8f:57:1b:c3:9d:80:a5:6a:f7:3a:31:8c:
1d:f0:55:d1:43:b6:a3:a1:9c:32:01:0d:d1:4b:1c:
5e:ad:fd:73:b9:47:ba:3a:59:ec:41:e6:fe:3d:a6:
6b:a5:84:ed:0f:8f:be:d1:4a:54:e1:97:04:a0:50:
ee:74:0d:65:1f:8e:2f:39:e1:73:70:68:a4:ae:5f:
ea:4d:ca:c0:24:9a:4c:0d:c2:df:31:e2:10:6d:26:
09:ef:df:5a:5b:2f:94:71:c5:6a:71:74:09:a3:4d:
16:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B9:EA:D6:3C:6E:1B:B7:CE:3F:2C:17:70:27:24:67:72:D7:61:51
X509v3 Authority Key Identifier:
keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/2Lnq1jxuG7fOPywXcCckZ3LXYVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.36.0/22
62.113.112.0/21
83.217.212.0/22
84.54.44.0/24
84.54.47.0/24
85.198.108.0/22
88.210.34.0/23
88.210.52.0/22
88.218.60.0/22
91.142.72.0/22
91.184.244.0/22
91.212.150.0/24
93.183.92.0/22
94.103.83.0-94.103.93.255
95.142.33.0-95.142.34.255
95.142.45.0-95.142.47.255
109.172.84.0-109.172.91.255
138.16.160.0/19
178.20.40.0/21
178.130.131.0/24
178.217.98.0/23
185.209.28.0/22
185.231.152.0/22
192.144.56.0/22
193.124.64.0/22
193.124.128.0/22
193.178.170.0/24
195.2.66.0/23
195.2.70.0/23
195.2.73.0-195.2.76.255
195.2.78.0-195.2.81.255
195.2.84.0/23
195.133.56.0/23
195.133.60.0/23
212.118.45.0/24
212.118.56.0/24
212.193.10.0/23
212.193.14.0/23
Signature Algorithm: sha256WithRSAEncryption
19:a9:bf:12:35:64:9a:39:bd:30:30:56:08:6c:27:90:16:16:
8d:84:79:66:c2:de:09:85:30:92:8a:48:93:cf:2a:17:4a:4c:
b9:6a:18:d4:89:75:d4:d2:7f:06:ff:df:d8:e4:47:2b:1a:d8:
c1:4c:08:18:0a:91:b9:c5:04:cc:b6:6c:bd:a8:97:78:e4:97:
94:39:b0:47:1b:8d:0c:69:ba:b5:87:93:6d:81:73:7f:9d:96:
96:1f:83:b2:b4:2a:4c:bf:ed:81:6a:f6:53:58:a7:b5:c6:1f:
f3:4e:77:1e:ab:a1:fe:17:cb:b6:2e:24:bd:6d:78:40:f9:e7:
1a:c1:b6:7d:29:2b:fa:a6:a4:ac:c4:03:3f:25:fd:cb:be:46:
2c:8e:5a:d5:89:f4:95:7d:55:90:2a:e2:41:f2:1e:15:cf:74:
7e:2c:49:d2:26:d1:64:0c:fe:7c:7d:34:00:88:b4:b8:16:eb:
26:a9:a1:54:7f:9f:57:96:54:15:04:1f:99:25:27:d7:eb:3f:
ac:aa:12:43:6a:1f:c1:e3:f4:c8:aa:18:c6:8c:bc:c2:96:4b:
20:ed:56:24:44:b1:15:49:4f:44:6d:63:b1:22:c2:7d:a4:0f:
87:96:ac:c3:48:3e:ef:a1:d0:b4:3a:e3:ca:b8:0f:57:29:0b:
ec:c6:dc:92
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgISAaDw7VBqdCwr571El/aj+ptPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MDMyNTFkYjY5NjkzMzYyYTkyN2UyYjEzMDQ2Nzk0NWM1
NGYwZmMwHhcNMjYwOTMwMDYwNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGI5ZWFkNjNjNmUxYmI3Y2UzZjJjMTc3MDI3MjQ2NzcyZDc2MTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj7YZcV9QeJelQYBB7LPx2arEg3a
wm9TGAofqDEQqyempyx3TxG73Fz1wR/NzK/yjeSOI3pfaVu7iQNTCoA0NL8iEvuT
btVvqyfZFMGGVuIemp0ZZ+ue2u+9dlepAZ60ugj7zJ4w5+5gK3mCSEccIHq+Psnn
WLxXkvLgdIwvKvwHVY9Timh9U/wL8a+4IgXCHpnczksYm86PVxvDnYClavc6MYwd
8FXRQ7ajoZwyAQ3RSxxerf1zuUe6OlnsQeb+PaZrpYTtD4++0UpU4ZcEoFDudA1l
H44vOeFzcGikrl/qTcrAJJpMDcLfMeIQbSYJ799aWy+UccVqcXQJo00WfwIDAQAB
o4IDITCCAx0wHQYDVR0OBBYEFNi56tY8bhu3zj8sF3AnJGdy12FRMB8GA1UdIwQY
MBaAFFUDJR22lpM2KpJ+KxMEZ5RcVPD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2It
M2NiYWQ1YjkwNGI1LzEvMkxucTFqeHVHN2ZPUHl3WGNDY2taM0xYWVZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2ItM2NiYWQ1YjkwNGI1
LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNQYIKwYBBQUHAQcBAf8EggEkMIIBIDCCARwEAgABMIIB
FAMEAi2WJAMEAz5xcAMEAlPZ1AMEAFQ2LAMEAFQ2LwMEAlXGbAMEAVjSIgMEAljS
NAMEAljaPAMEAluOSAMEAlu49AMEAFvUlgMEAl23XDAMAwQAXmdTAwQBXmdcMAwD
BABfjiEDBABfjiIwDAMEAF+OLQMEBF+OIDAMAwQCbaxUAwQCbaxYAwQFihCgAwQD
shQoAwQAsoKDAwQBstliAwQCudEcAwQCueeYAwQCwJA4AwQCwXxAAwQCwXyAAwQA
wbKqAwQBwwJCAwQBwwJGMAwDBADDAkkDBADDAkwwDAMEAcMCTgMEAcMCUAMEAcMC
VAMEAcOFOAMEAcOFPAMEANR2LQMEANR2OAMEAdTBCgMEAdTBDjANBgkqhkiG9w0B
AQsFAAOCAQEAGam/EjVkmjm9MDBWCGwnkBYWjYR5ZsLeCYUwkopIk88qF0pMuWoY
1Il11NJ/Bv/f2ORHKxrYwUwIGAqRucUEzLZsvaiXeOSXlDmwRxuNDGm6tYeTbYFz
f52Wlh+DsrQqTL/tgWr2U1intcYf8053Hquh/hfLti4kvW14QPnnGsG2fSkr+qak
rMQDPyX9y75GLI5a1Yn0lX1VkCriQfIeFc90fixJ0ibRZAz+fH00AIi0uBbrJqmh
VH+fV5ZUFQQfmSUn1+s/rKoSQ2ofweP0yKoYxoy8wpZLIO1WJESxFUlPRG1jsSLC
faQPh5asw0g+76HQtDrjyrgPVykL7Mbckg==
-----END CERTIFICATE-----
Generated at Fri Oct 9 06:32:40 2026 by rpki-client