
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/mjwkmBYfgYlamUR-2NpRbrUlBoU.roa
File: mjwkmBYfgYlamUR-2NpRbrUlBoU.roa (raw, json)
Hash identifier: oOhe9AfJ6DR69OMTtpbwRW3hwy+BVcfgV3r0EOwD9Oc=
Subject key identifier: 9A:3C:24:98:16:1F:81:89:5A:99:44:7E:D8:DA:51:6E:B5:25:06:85
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01986476E0769BDAFAE71BEB11A323FE4B97
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/mjwkmBYfgYlamUR-2NpRbrUlBoU.roa
Signing time: Fri 01 Aug 2025 07:09:28 +0000
ROA not before: Fri 01 Aug 2025 07:09:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.68.0/22 maxlen: 22
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.115.0.0/16 maxlen: 24
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.117.48.0/20 maxlen: 24
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/22 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.136.0/22 maxlen: 24
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
212.0.192.0/19 maxlen: 32
2a02:a30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:76:e0:76:9b:da:fa:e7:1b:eb:11:a3:23:fe:4b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Aug 1 07:09:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a3c2498161f81895a99447ed8da516eb5250685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:ef:15:87:d1:a9:fb:5c:e2:3a:7c:d0:20:
ea:71:27:3e:ee:4f:a0:ac:2f:a9:9a:35:f8:de:a2:
f0:28:95:53:ad:2c:81:88:21:e0:83:a4:54:5c:67:
96:05:13:d6:74:ed:0d:f6:a4:32:c9:c0:33:53:6d:
1c:d9:2b:de:7f:74:47:97:ae:d6:9c:b0:53:f2:79:
44:a9:eb:5f:5b:df:d2:f9:f2:a6:ab:72:bc:fc:a2:
0a:75:c2:73:b8:a9:9a:83:24:56:92:39:db:f0:3d:
08:82:ee:a3:29:9d:0f:c0:fd:3a:58:9b:6a:f0:9d:
35:56:1a:c5:53:e8:c4:4d:58:b4:4f:15:80:97:5a:
08:bc:27:37:81:32:3c:e7:63:f4:5b:2e:98:de:6a:
d4:0d:fb:ef:70:e0:8f:c3:43:3d:ff:ac:34:0b:0d:
51:15:3b:94:3c:6a:30:74:6d:3a:8d:71:78:df:50:
8e:80:e1:0d:ee:a4:93:2e:96:cc:8e:b4:3a:5e:63:
8a:c9:59:87:99:8a:e9:92:fc:1a:d6:6f:71:d8:9d:
8c:80:a5:0d:e1:b8:d3:bb:2a:54:2f:9b:1a:48:e0:
02:65:85:10:31:e4:a8:b6:51:07:cb:0d:4e:1a:ac:
ee:3d:6c:72:86:3f:4b:54:ed:31:8a:4b:f7:73:79:
e1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3C:24:98:16:1F:81:89:5A:99:44:7E:D8:DA:51:6E:B5:25:06:85
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/mjwkmBYfgYlamUR-2NpRbrUlBoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.68.0/22
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/22
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.146.0/23
188.214.200.0/21
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/29
Signature Algorithm: sha256WithRSAEncryption
26:f9:8e:b5:3d:8f:94:84:39:3b:a9:8d:26:fb:d1:2e:70:ec:
86:1e:fe:c5:66:d7:f8:1b:5f:2e:45:65:03:4d:e4:f0:fb:91:
b9:bd:6c:21:5e:ba:80:3f:b8:9d:f7:b2:4d:d4:48:72:dd:66:
46:ac:7a:91:1e:11:5d:33:74:89:2e:71:1c:1a:80:76:f2:fd:
1e:45:d7:ff:ce:6b:94:8b:74:f6:b5:7b:81:45:a9:0c:3d:e8:
03:a6:f7:7a:82:26:44:a9:f2:ae:e5:a2:a6:ed:9b:47:c4:0e:
6d:77:9e:a0:26:0f:b2:2f:b9:02:ed:fa:43:8e:bd:a7:4d:68:
6f:e1:2e:e2:d7:08:77:52:60:85:9c:5c:99:9d:c2:51:e4:73:
cf:58:14:e5:d2:ea:5e:7c:c5:57:c4:40:34:96:e8:79:0b:40:
85:98:3c:72:2f:41:60:fd:04:1e:ef:fc:ae:6c:ff:cd:2e:3d:
c8:e5:13:e8:00:6a:19:0d:c8:e9:34:8b:58:11:28:a7:ca:06:
c7:41:45:e6:d1:71:d9:77:4a:f1:df:5e:2a:38:39:e5:43:7c:
b1:fe:58:d7:40:11:55:3f:3f:5e:52:e8:be:a1:88:b7:63:13:
db:4f:f6:5e:7a:c8:da:64:c8:50:35:a2:8e:88:02:40:0b:5c:
1d:f9:3b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:31:17 2025 by rpki-client