Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/KhDrwlFP6aiC5k5GCfYw68uYlHw.roa
File: KhDrwlFP6aiC5k5GCfYw68uYlHw.roa (raw, json)
Hash identifier: w9Og4AKlZrHlXf9IbBUey0FWxSl8Lqbezlc0i6FxZ/8=
Subject key identifier: 2A:10:EB:C2:51:4F:E9:A8:82:E6:4E:46:09:F6:30:EB:CB:98:94:7C
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A0B32ED99261EEDD9A39AAC96C733D6F85
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/KhDrwlFP6aiC5k5GCfYw68uYlHw.roa
Signing time: Fri 18 Sep 2026 06:23:07 +0000
ROA not before: Fri 18 Sep 2026 06:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.208.0/22 maxlen: 24
86.105.208.0/23 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.252.0/22 maxlen: 22
89.34.65.0/24 maxlen: 24
89.34.66.0/24 maxlen: 24
89.34.67.0/24 maxlen: 24
89.34.68.0/22 maxlen: 22
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.131.0/24 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.128.0/21 maxlen: 21
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.200.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.120.0/22 maxlen: 24
188.208.126.0/24 maxlen: 24
188.208.127.0/24 maxlen: 24
188.209.216.0/21 maxlen: 24
188.212.0.0/22 maxlen: 22
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:2e:d9:92:61:ee:dd:9a:39:aa:c9:6c:73:3d:6f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Sep 18 06:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a10ebc2514fe9a882e64e4609f630ebcb98947c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:8f:e1:a9:51:4f:25:54:99:74:b0:6f:1d:
31:78:aa:9f:32:67:76:67:98:7f:25:99:1b:bf:70:
18:e8:82:23:e6:8f:08:82:8c:9d:4c:61:a2:f3:5d:
5d:97:ed:32:00:94:4b:6d:65:45:94:58:b6:b7:d0:
cd:59:f0:1e:8e:dd:45:5c:dd:6a:35:60:8b:b8:aa:
0a:da:02:f3:70:07:dd:91:98:35:1f:a0:82:7b:04:
9e:68:0b:e7:db:07:46:7b:ab:19:01:76:63:b1:ca:
52:ed:6b:27:a0:c8:6d:67:c7:2a:dc:cc:b1:83:f4:
c3:44:bd:7d:56:10:39:b8:c3:0a:08:db:dc:02:b8:
02:fe:69:8a:fd:bd:03:36:31:5c:db:7e:85:26:45:
6f:ee:5c:ba:72:52:ea:31:e1:98:e4:66:c3:e5:9b:
80:43:b7:12:74:7a:33:28:5c:48:56:0c:54:06:d0:
bd:cb:19:fd:da:88:c0:0a:d8:69:90:4a:72:4d:1c:
c3:25:5c:6d:91:56:d4:24:b1:91:b9:96:64:b9:36:
2c:32:d6:90:75:d1:25:c9:96:88:07:8c:9e:7a:e3:
33:92:8b:67:ad:2f:e5:e5:64:6c:7b:cb:09:bd:8e:
bd:f2:97:39:2b:ad:96:f9:94:d7:d8:2e:6f:64:a9:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:10:EB:C2:51:4F:E9:A8:82:E6:4E:46:09:F6:30:EB:CB:98:94:7C
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/KhDrwlFP6aiC5k5GCfYw68uYlHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.252.0/22
89.34.65.0-89.34.71.255
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.131.0/24
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.119.96.0/21
93.119.128.0/21
93.119.144.0/21
93.119.160.0/21
93.119.200.0/21
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.120.0/22
188.208.126.0/23
188.209.216.0/21
188.212.0.0/22
188.212.24.0/21
188.212.40.0/21
188.214.146.0/23
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
c8:89:20:4d:0a:4b:2a:72:f7:fe:6b:08:75:bd:cf:36:ad:5e:
58:d7:d5:3c:88:05:ca:10:0f:8e:15:45:e5:2b:b9:e8:04:60:
f7:bb:25:94:87:ad:0e:31:2d:66:f4:7f:29:ff:4e:31:e9:dc:
5c:e6:52:d2:c6:c6:a2:9f:9a:be:3c:5e:cb:99:d2:68:01:69:
11:41:ae:bb:88:30:aa:9d:b5:35:8c:24:43:10:3b:90:2c:7b:
0e:e4:93:75:9b:cd:87:16:62:95:70:13:b5:24:ea:d1:67:29:
92:12:4c:24:bc:70:41:c5:22:87:d0:35:dc:47:0b:22:bf:59:
c6:25:18:93:a4:dd:b9:b2:ff:89:b2:ed:56:99:b9:d9:dd:e1:
ad:7c:c9:a4:01:08:90:68:82:7f:53:13:40:90:08:1f:fb:3d:
dd:2f:7b:bd:3a:c4:cc:a6:f5:5b:f6:9a:ac:51:6a:38:e5:27:
23:c5:3f:61:fc:e2:4f:74:c4:48:ad:bc:e9:31:4d:5b:95:c9:
51:84:f4:97:d4:d9:84:5a:e9:d1:14:9a:cb:3f:08:8b:c8:0f:
53:d5:c8:25:77:37:d6:ba:2c:10:4a:f9:c6:d3:29:ca:2b:22:
e5:bd:66:76:d6:4f:16:7c:a0:ee:67:68:6e:84:a2:5d:e9:0d:
28:5d:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:49:11 2026 by rpki-client