Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/oLb_BG6B2irYYvpJ_Dg1uPHKCq8.roa
File: oLb_BG6B2irYYvpJ_Dg1uPHKCq8.roa (raw, json)
Hash identifier: iEVASa2ks9RBbT4CSfXOVtY8JacDD8nYL36EtVLSvLc=
Subject key identifier: A0:B6:FF:04:6E:81:DA:2A:D8:62:FA:49:FC:38:35:B8:F1:CA:0A:AF
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 01A08F747168553E2E9BB336827EE1534CCC
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/oLb_BG6B2irYYvpJ_Dg1uPHKCq8.roa
Signing time: Fri 11 Sep 2026 07:52:47 +0000
ROA not before: Fri 11 Sep 2026 07:52:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16347
IP address blocks: 2.59.144.0/22 maxlen: 22
5.10.128.0/21 maxlen: 21
5.183.248.0/22 maxlen: 22
23.90.192.0/18 maxlen: 18
31.204.80.0/21 maxlen: 21
45.80.252.0/22 maxlen: 22
45.86.96.0/22 maxlen: 22
45.89.76.0/22 maxlen: 22
45.92.180.0/22 maxlen: 22
45.129.216.0/24 maxlen: 24
45.129.217.0/24 maxlen: 24
45.129.218.0/24 maxlen: 24
45.133.68.0/22 maxlen: 22
45.142.108.0/22 maxlen: 22
45.152.16.0/22 maxlen: 22
46.18.120.0/22 maxlen: 22
46.18.124.0/24 maxlen: 24
46.18.125.0/24 maxlen: 24
46.18.126.0/23 maxlen: 23
62.192.156.0/22 maxlen: 22
79.99.160.0/21 maxlen: 21
80.173.0.0/19 maxlen: 24
80.173.32.0/20 maxlen: 24
88.86.224.0/19 maxlen: 19
88.218.12.0/22 maxlen: 22
92.119.232.0/22 maxlen: 22
94.154.4.0/24 maxlen: 24
94.187.128.0/19 maxlen: 19
168.220.128.0/19 maxlen: 19
185.20.16.0/22 maxlen: 22
185.48.252.0/22 maxlen: 22
185.86.88.0/22 maxlen: 22
185.87.100.0/22 maxlen: 22
185.98.116.0/22 maxlen: 22
185.132.64.0/22 maxlen: 22
185.133.80.0/22 maxlen: 22
185.134.156.0/22 maxlen: 22
185.135.176.0/22 maxlen: 22
185.138.116.0/22 maxlen: 22
185.163.136.0/22 maxlen: 22
185.163.212.0/22 maxlen: 22
185.163.220.0/22 maxlen: 22
185.163.228.0/22 maxlen: 22
185.169.156.0/22 maxlen: 22
185.186.88.0/22 maxlen: 22
185.191.36.0/22 maxlen: 22
185.197.108.0/22 maxlen: 22
185.241.140.0/22 maxlen: 22
185.254.8.0/22 maxlen: 22
192.214.192.0/19 maxlen: 19
195.216.140.0/22 maxlen: 22
212.122.96.0/19 maxlen: 24
2a00:41e0::/29 maxlen: 29
2a00:6780::/29 maxlen: 32
2a00:6780::/32 maxlen: 32
2a01:648::/29 maxlen: 29
2a05:b780::/29 maxlen: 29
2a05:c100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:74:71:68:55:3e:2e:9b:b3:36:82:7e:e1:53:4c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Sep 11 07:52:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0b6ff046e81da2ad862fa49fc3835b8f1ca0aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:9d:d2:86:f6:d3:d0:6e:10:49:57:aa:be:
65:d3:b3:79:67:3c:31:2f:25:01:7d:38:5c:98:17:
e5:44:7f:e6:40:5e:80:04:39:c4:59:3c:98:6f:98:
59:34:60:6c:ff:45:ee:9f:b9:0f:cb:46:0b:00:4e:
2d:7a:e5:21:ad:b0:df:0f:9c:c2:63:42:99:24:a2:
c2:51:62:41:ab:22:61:db:ac:27:ed:ca:38:18:d7:
af:60:1a:63:b5:5b:ea:fd:64:8b:f3:36:da:bc:0a:
da:35:dd:38:7a:92:05:05:b3:f9:2c:30:e0:0d:a6:
e5:18:e6:2c:06:46:b2:c0:71:a4:80:f5:bd:d3:64:
44:6d:54:5b:5e:e7:b1:f0:92:df:ce:59:1d:dd:f9:
e7:d3:6d:e5:c2:b0:c9:85:f8:c1:dd:f4:67:fc:f8:
0c:2a:97:00:d4:a4:da:9c:8d:56:e0:8c:7c:45:f2:
d2:ba:e6:0b:75:04:1f:d4:f2:a4:22:30:19:04:5a:
8e:cd:c6:af:38:ae:67:56:32:af:33:fb:63:41:4d:
f7:18:17:05:2a:3c:46:6c:52:2d:ed:7d:7a:48:23:
2a:50:0c:bc:a9:32:14:9e:7a:78:88:3b:27:80:ac:
b1:e2:08:be:32:94:7f:f0:5c:d9:60:06:d2:19:2e:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B6:FF:04:6E:81:DA:2A:D8:62:FA:49:FC:38:35:B8:F1:CA:0A:AF
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/oLb_BG6B2irYYvpJ_Dg1uPHKCq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.144.0/22
5.10.128.0/21
5.183.248.0/22
23.90.192.0/18
31.204.80.0/21
45.80.252.0/22
45.86.96.0/22
45.89.76.0/22
45.92.180.0/22
45.129.216.0-45.129.218.255
45.133.68.0/22
45.142.108.0/22
45.152.16.0/22
46.18.120.0/21
62.192.156.0/22
79.99.160.0/21
80.173.0.0-80.173.47.255
88.86.224.0/19
88.218.12.0/22
92.119.232.0/22
94.154.4.0/24
94.187.128.0/19
168.220.128.0/19
185.20.16.0/22
185.48.252.0/22
185.86.88.0/22
185.87.100.0/22
185.98.116.0/22
185.132.64.0/22
185.133.80.0/22
185.134.156.0/22
185.135.176.0/22
185.138.116.0/22
185.163.136.0/22
185.163.212.0/22
185.163.220.0/22
185.163.228.0/22
185.169.156.0/22
185.186.88.0/22
185.191.36.0/22
185.197.108.0/22
185.241.140.0/22
185.254.8.0/22
192.214.192.0/19
195.216.140.0/22
212.122.96.0/19
IPv6:
2a00:41e0::/29
2a00:6780::/29
2a01:648::/29
2a05:b780::/29
2a05:c100::/29
Signature Algorithm: sha256WithRSAEncryption
93:21:40:a4:68:a1:34:eb:f6:bb:7e:48:ac:f9:76:c2:05:bf:
eb:97:bd:f2:3f:d4:3d:8d:77:79:d2:17:bc:e9:a8:b5:7e:44:
6c:0b:ea:eb:bf:3e:0d:cf:71:b2:b6:c1:82:6e:ff:93:26:5c:
81:fa:f5:84:11:40:78:6e:db:f2:96:28:31:b6:fd:aa:0e:29:
e4:ae:ff:26:88:e2:52:a6:e3:ef:d1:29:1f:5f:fe:2b:5b:95:
e5:32:7b:08:1b:4c:39:8e:34:cd:56:86:24:b3:3b:42:a5:60:
fd:e4:56:40:f9:54:94:59:f1:46:08:64:37:a5:14:0c:8c:df:
b6:4a:08:de:e8:30:36:31:8e:20:26:94:43:4f:be:fb:24:a1:
39:d6:a8:19:9b:40:51:39:ba:d4:a4:0b:65:05:fc:8d:d0:30:
14:a8:a2:89:3b:d1:c0:06:92:34:3c:44:e8:41:a8:cd:1d:95:
1d:e9:b7:fd:56:48:72:28:9f:33:3a:69:fe:a6:ff:2c:4f:ef:
99:a7:68:1d:65:98:46:f2:e1:0c:61:a5:8e:da:a7:8f:1f:88:
9f:bf:d6:48:73:72:ab:b7:8f:00:6b:66:85:ab:d2:7b:71:40:
4a:19:51:71:95:b0:b8:b1:35:3a:fb:99:79:64:3c:4d:b0:92:
aa:75:91:7c
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgISAaCPdHFoVT4um7M2gn7hU0zMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZDk5MDEzMTQ2N2I3N2QxMTE2MmI3OWZiZTNiMDZjYThh
YjJkMzkwHhcNMjYwOTExMDc1MjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGI2ZmYwNDZlODFkYTJhZDg2MmZhNDlmYzM4MzViOGYxY2EwYWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCGd0ob209BuEElXqr5l07N5Zzwx
LyUBfThcmBflRH/mQF6ABDnEWTyYb5hZNGBs/0Xun7kPy0YLAE4teuUhrbDfD5zC
Y0KZJKLCUWJBqyJh26wn7co4GNevYBpjtVvq/WSL8zbavAraNd04epIFBbP5LDDg
DablGOYsBkaywHGkgPW902REbVRbXuex8JLfzlkd3fnn023lwrDJhfjB3fRn/PgM
KpcA1KTanI1W4Ix8RfLSuuYLdQQf1PKkIjAZBFqOzcavOK5nVjKvM/tjQU33GBcF
KjxGbFIt7X16SCMqUAy8qTIUnnp4iDsngKyx4gi+MpR/8FzZYAbSGS6SCwIDAQAB
o4IDWzCCA1cwHQYDVR0OBBYEFKC2/wRugdoq2GL6Sfw4NbjxygqvMB8GA1UdIwQY
MBaAFIfZkBMUZ7d9ERYrefvjsGyoqy05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMt
YjhlOGIzNGRiMjkwLzEvb0xiX0JHNkIyaXJZWXZwSl9EZzF1UEhLQ3E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMtYjhlOGIzNGRiMjkw
LzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBbwYIKwYBBQUHAQcBAf8EggFeMIIBWjCCASsEAgABMIIB
IwMEAgI7kAMEAwUKgAMEAgW3+AMEBhdawAMEAx/MUAMEAi1Q/AMEAi1WYAMEAi1Z
TAMEAi1ctDAMAwQDLYHYAwQALYHaAwQCLYVEAwQCLY5sAwQCLZgQAwQDLhJ4AwQC
PsCcAwQDT2OgMAsDAwBQrQMEBFCtIAMEBVhW4AMEAljaDAMEAlx36AMEAF6aBAME
BV67gAMEBajcgAMEArkUEAMEArkw/AMEArlWWAMEArlXZAMEArlidAMEArmEQAME
ArmFUAMEArmGnAMEArmHsAMEArmKdAMEArmjiAMEArmj1AMEArmj3AMEArmj5AME
ArmpnAMEArm6WAMEArm/JAMEArnFbAMEArnxjAMEArn+CAMEBcDWwAMEAsPYjAME
BdR6YDApBAIAAjAjAwUDKgBB4AMFAyoAZ4ADBQMqAQZIAwUDKgW3gAMFAyoFwQAw
DQYJKoZIhvcNAQELBQADggEBAJMhQKRooTTr9rt+SKz5dsIFv+uXvfI/1D2Nd3nS
F7zpqLV+RGwL6uu/Pg3PcbK2wYJu/5MmXIH69YQRQHhu2/KWKDG2/aoOKeSu/yaI
4lKm4+/RKR9f/itbleUyewgbTDmONM1WhiSzO0KlYP3kVkD5VJRZ8UYIZDelFAyM
37ZKCN7oMDYxjiAmlENPvvskoTnWqBmbQFE5utSkC2UF/I3QMBSoook70cAGkjQ8
ROhBqM0dlR3pt/1WSHIonzM6af6m/yxP75mnaB1lmEby4QxhpY7ap48fiJ+/1khz
cqu3jwBrZoWr0ntxQEoZUXGVsLixNTr7mXlkPE2wkqp1kXw=
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:31:41 2026 by rpki-client