Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/tN-kQy8aPMBnCCMoTBdyR8g7aFY.roa
File: tN-kQy8aPMBnCCMoTBdyR8g7aFY.roa (raw, json)
Hash identifier: ndjqvay0HNkTp1bfXurPq1sQDj2ISSXGlvnjsKWMyAw=
Subject key identifier: B4:DF:A4:43:2F:1A:3C:C0:67:08:23:28:4C:17:72:47:C8:3B:68:56
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 019D4E71FA9CF6DB1EA1637583FC6A2041EB
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/tN-kQy8aPMBnCCMoTBdyR8g7aFY.roa
Signing time: Thu 02 Apr 2026 13:46:25 +0000
ROA not before: Thu 02 Apr 2026 13:46:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48635
IP address blocks: 2.57.57.0/24 maxlen: 24
5.157.80.0/21 maxlen: 24
31.25.96.0/21 maxlen: 24
31.25.98.0/24 maxlen: 24
31.186.168.0/21 maxlen: 24
46.17.0.0/21 maxlen: 24
62.84.240.0/21 maxlen: 24
62.221.248.0/21 maxlen: 24
62.221.250.0/24 maxlen: 24
77.94.248.0/21 maxlen: 24
79.99.128.0/21 maxlen: 24
91.198.106.0/24 maxlen: 24
91.238.176.0/23 maxlen: 24
92.63.168.0/21 maxlen: 24
92.63.168.0/24 maxlen: 24
92.63.169.0/24 maxlen: 24
93.180.64.0/21 maxlen: 24
93.187.220.0/22 maxlen: 24
109.70.0.0/21 maxlen: 24
109.72.80.0/20 maxlen: 24
109.106.160.0/20 maxlen: 24
109.106.176.0/21 maxlen: 24
128.140.216.0/21 maxlen: 24
145.131.0.0/20 maxlen: 24
145.131.16.0/20 maxlen: 24
145.131.32.0/20 maxlen: 24
176.117.58.0/23 maxlen: 24
185.27.140.0/22 maxlen: 24
185.27.172.0/22 maxlen: 22
185.28.56.0/22 maxlen: 24
185.37.68.0/22 maxlen: 24
185.56.144.0/22 maxlen: 24
185.66.248.0/22 maxlen: 24
185.89.4.0/22 maxlen: 24
185.94.228.0/24 maxlen: 24
185.94.230.0/23 maxlen: 24
185.95.31.0/24 maxlen: 24
185.103.156.0/22 maxlen: 24
185.103.240.0/22 maxlen: 24
185.103.242.0/23 maxlen: 24
185.107.212.0/22 maxlen: 24
185.107.224.0/23 maxlen: 24
185.109.216.0/22 maxlen: 24
185.159.240.0/22 maxlen: 24
185.175.200.0/22 maxlen: 24
185.182.56.0/22 maxlen: 24
185.182.56.0/24 maxlen: 24
185.187.12.0/22 maxlen: 24
185.223.32.0/22 maxlen: 24
185.224.88.0/22 maxlen: 24
185.231.200.0/22 maxlen: 24
185.232.248.0/22 maxlen: 24
193.23.143.0/24 maxlen: 24
193.164.192.0/23 maxlen: 24
194.247.30.0/23 maxlen: 24
195.20.8.0/22 maxlen: 24
195.238.74.0/23 maxlen: 24
2001:678:76c::/48 maxlen: 48
2001:67c:28fc::/48 maxlen: 48
2a00:f10::/29 maxlen: 48
2a00:f60::/32 maxlen: 48
2a00:9b60::/40 maxlen: 48
2a01:b940::/29 maxlen: 48
2a02:2968::/29 maxlen: 48
2a02:40c1::/32 maxlen: 48
2a03:3060::/29 maxlen: 48
2a04:6bc0::/36 maxlen: 48
2a05:1500::/29 maxlen: 48
2a05:1500:600::/40 maxlen: 48
2a06:4040::/29 maxlen: 48
2a0b:7280::/29 maxlen: 48
2a0b:8f80::/29 maxlen: 48
2a0c:84c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:71:fa:9c:f6:db:1e:a1:63:75:83:fc:6a:20:41:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Apr 2 13:46:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4dfa4432f1a3cc0670823284c177247c83b6856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:72:24:0d:a4:5e:8b:b5:b8:c4:e5:eb:be:
de:78:73:ab:10:27:0b:ad:93:0d:50:e9:f7:74:05:
d9:2e:55:bb:57:89:08:e6:13:80:a5:0d:b9:75:d8:
6e:52:9d:ec:c2:d1:16:b9:15:f6:b3:07:d4:a0:86:
15:bb:df:7f:06:d9:a3:9e:21:1f:c4:f8:c9:bb:4c:
ab:55:7b:b7:ac:2c:6c:69:e0:e4:56:53:5a:b4:66:
0d:71:cc:ce:c0:49:fc:a9:34:2a:f0:67:04:09:e2:
33:a6:7e:36:88:1f:4d:bd:43:a5:b4:af:2f:f8:cc:
2d:b2:dd:c3:4a:1c:0f:81:71:ba:da:f5:74:44:75:
f6:a9:d3:cb:61:57:d4:0f:9e:12:02:a9:12:45:a2:
b3:dd:f7:e3:ae:87:eb:20:36:9e:eb:89:15:65:db:
bd:18:f8:28:f8:26:fd:30:b7:89:62:2f:74:46:6e:
94:d3:35:4c:8f:a6:b8:78:12:7e:46:b7:10:f3:dc:
13:87:f4:5d:89:57:28:18:8b:93:b8:ca:b9:28:d4:
25:d8:5e:90:d4:bb:36:e2:85:f0:21:ad:ff:9d:ad:
55:71:8a:33:db:89:ac:fc:28:be:04:3a:2e:8a:03:
4e:4b:70:b6:40:e2:8f:9e:14:39:56:fd:9f:ad:fc:
4c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DF:A4:43:2F:1A:3C:C0:67:08:23:28:4C:17:72:47:C8:3B:68:56
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/tN-kQy8aPMBnCCMoTBdyR8g7aFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.57.0/24
5.157.80.0/21
31.25.96.0/21
31.186.168.0/21
46.17.0.0/21
62.84.240.0/21
62.221.248.0/21
77.94.248.0/21
79.99.128.0/21
91.198.106.0/24
91.238.176.0/23
92.63.168.0/21
93.180.64.0/21
93.187.220.0/22
109.70.0.0/21
109.72.80.0/20
109.106.160.0-109.106.183.255
128.140.216.0/21
145.131.0.0-145.131.47.255
176.117.58.0/23
185.27.140.0/22
185.27.172.0/22
185.28.56.0/22
185.37.68.0/22
185.56.144.0/22
185.66.248.0/22
185.89.4.0/22
185.94.228.0/24
185.94.230.0/23
185.95.31.0/24
185.103.156.0/22
185.103.240.0/22
185.107.212.0/22
185.107.224.0/23
185.109.216.0/22
185.159.240.0/22
185.175.200.0/22
185.182.56.0/22
185.187.12.0/22
185.223.32.0/22
185.224.88.0/22
185.231.200.0/22
185.232.248.0/22
193.23.143.0/24
193.164.192.0/23
194.247.30.0/23
195.20.8.0/22
195.238.74.0/23
IPv6:
2001:678:76c::/48
2001:67c:28fc::/48
2a00:f10::/29
2a00:f60::/32
2a00:9b60::/40
2a01:b940::/29
2a02:2968::/29
2a02:40c1::/32
2a03:3060::/29
2a04:6bc0::/36
2a05:1500::/29
2a06:4040::/29
2a0b:7280::/29
2a0b:8f80::/29
2a0c:84c0::/29
Signature Algorithm: sha256WithRSAEncryption
69:fe:7a:a9:46:3f:36:78:4e:c0:cf:cc:cf:d6:c4:7b:ac:53:
9d:4c:ee:1b:3c:ef:e1:2b:33:74:95:33:af:a4:e5:8b:ee:ba:
a8:9c:e3:22:52:74:79:65:24:31:04:bb:20:82:d1:d1:d7:4f:
f9:c7:4a:e5:cf:7d:7a:f9:8b:9f:cf:78:eb:1e:20:03:78:a0:
83:31:c1:0a:7f:92:4a:88:52:12:57:c7:0d:18:c7:f9:84:ca:
51:9c:c0:51:dc:07:cc:e9:c5:39:ce:e6:c5:9d:54:ee:69:9f:
e2:5b:31:3e:65:c3:c1:32:ab:3b:96:38:fc:a1:56:6c:71:82:
78:e7:97:b1:53:1d:58:d3:04:53:9c:46:47:fe:7c:92:eb:80:
f2:9d:60:83:6f:53:f2:20:ca:e3:9a:2f:e5:9e:a5:52:fd:62:
c0:b0:81:83:0a:8f:7d:e6:1e:3b:36:7f:e2:43:db:6b:44:03:
34:20:80:a4:5e:4b:35:78:78:7d:7b:fe:ed:6e:aa:d3:1b:44:
6c:53:97:be:e5:a9:db:a8:b4:45:e5:77:13:c4:b8:f6:9c:fb:
a1:f9:17:93:56:a7:04:d3:e6:1b:2b:d7:f6:f4:4c:0d:f9:21:
9e:1a:99:28:23:9c:ef:59:ee:73:fd:b7:c3:87:63:b8:55:5e:
a6:99:9c:ce
-----BEGIN CERTIFICATE-----
MIIGpzCCBY+gAwIBAgISAZ1Ocfqc9tseoWN1g/xqIEHrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4
NGU4YzYwHhcNMjYwNDAyMTM0NjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGRmYTQ0MzJmMWEzY2MwNjcwODIzMjg0YzE3NzI0N2M4M2I2ODU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF9yJA2kXou1uMTl677eeHOrECcL
rZMNUOn3dAXZLlW7V4kI5hOApQ25ddhuUp3swtEWuRX2swfUoIYVu99/BtmjniEf
xPjJu0yrVXu3rCxsaeDkVlNatGYNcczOwEn8qTQq8GcECeIzpn42iB9NvUOltK8v
+Mwtst3DShwPgXG62vV0RHX2qdPLYVfUD54SAqkSRaKz3ffjrofrIDae64kVZdu9
GPgo+Cb9MLeJYi90Rm6U0zVMj6a4eBJ+RrcQ89wTh/RdiVcoGIuTuMq5KNQl2F6Q
1Ls24oXwIa3/na1VcYoz24ms/Ci+BDouigNOS3C2QOKPnhQ5Vv2frfxMAwIDAQAB
o4IDszCCA68wHQYDVR0OBBYEFLTfpEMvGjzAZwgjKEwXckfIO2hWMB8GA1UdIwQY
MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt
YjBkNzJlOTEwZWZlLzEvdE4ta1F5OGFQTUJuQ0NNb1RCZHlSOGc3YUZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl
LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBxwYIKwYBBQUHAQcBAf8EggG2MIIBsjCCATcEAgABMIIB
LwMEAAI5OQMEAwWdUAMEAx8ZYAMEAx+6qAMEAy4RAAMEAz5U8AMEAz7d+AMEA01e
+AMEA09jgAMEAFvGagMEAVvusAMEA1w/qAMEA120QAMEAl273AMEA21GAAMEBG1I
UDAMAwQFbWqgAwQDbWqwAwQDgIzYMAsDAwCRgwMEBJGDIAMEAbB1OgMEArkbjAME
ArkbrAMEArkcOAMEArklRAMEArk4kAMEArlC+AMEArlZBAMEALle5AMEAble5gME
ALlfHwMEArlnnAMEArln8AMEArlr1AMEAblr4AMEArlt2AMEArmf8AMEArmvyAME
Arm2OAMEArm7DAMEArnfIAMEArngWAMEArnnyAMEArno+AMEAMEXjwMEAcGkwAME
AcL3HgMEAsMUCAMEAcPuSjB1BAIAAjBvAwcAIAEGeAdsAwcAIAEGfCj8AwUDKgAP
EAMFACoAD2ADBgAqAJtgAAMFAyoBuUADBQMqAiloAwUAKgJAwQMFAyoDMGADBgQq
BGvAAAMFAyoFFQADBQMqBkBAAwUDKgtygAMFAyoLj4ADBQMqDITAMA0GCSqGSIb3
DQEBCwUAA4IBAQBp/nqpRj82eE7Az8zP1sR7rFOdTO4bPO/hKzN0lTOvpOWL7rqo
nOMiUnR5ZSQxBLsggtHR10/5x0rlz316+Yufz3jrHiADeKCDMcEKf5JKiFISV8cN
GMf5hMpRnMBR3AfM6cU5zubFnVTuaZ/iWzE+ZcPBMqs7ljj8oVZscYJ455exUx1Y
0wRTnEZH/nyS64DynWCDb1PyIMrjmi/lnqVS/WLAsIGDCo995h47Nn/iQ9trRAM0
IICkXks1eHh9e/7tbqrTG0RsU5e+5anbqLRF5XcTxLj2nPuh+ReTVqcE0+YbK9f2
9EwN+SGeGpkoI5zvWe5z/bfDh2O4VV6mmZzO
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:50:19 2026 by rpki-client