Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/_eOaEicMkKKbiwUmCfYmS46987o.roa
File: _eOaEicMkKKbiwUmCfYmS46987o.roa (raw, json)
Hash identifier: BD38gTS64MApM1VCH/ZNlIeeCLbbXCbnCN+Xqd56/3o=
Subject key identifier: FD:E3:9A:12:27:0C:90:A2:9B:8B:05:26:09:F6:26:4B:8E:BD:F3:BA
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 019BFF73FFD0DC30141F5B7A2AC864D55362
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/_eOaEicMkKKbiwUmCfYmS46987o.roa
Signing time: Tue 27 Jan 2026 12:35:50 +0000
ROA not before: Tue 27 Jan 2026 12:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 45.128.20.0/22 maxlen: 24
46.183.210.0/23 maxlen: 24
46.183.212.0/22 maxlen: 24
82.97.196.0/23 maxlen: 24
85.204.241.0/24 maxlen: 24
89.38.106.0/23 maxlen: 24
89.39.214.0/24 maxlen: 24
91.238.148.0/23 maxlen: 24
103.218.252.0/24 maxlen: 24
136.242.96.0/19 maxlen: 24
176.223.168.0/22 maxlen: 24
185.77.250.0/23 maxlen: 24
188.211.250.0/24 maxlen: 24
188.211.251.0/24 maxlen: 24
188.212.131.0/24 maxlen: 24
188.214.89.0/24 maxlen: 24
188.215.233.0/24 maxlen: 24
188.241.59.0/24 maxlen: 24
188.241.127.0/24 maxlen: 24
188.241.128.0/22 maxlen: 24
188.241.132.0/23 maxlen: 24
193.37.200.0/22 maxlen: 24
193.169.8.0/23 maxlen: 24
193.192.52.0/23 maxlen: 24
193.239.172.0/23 maxlen: 24
193.239.246.0/23 maxlen: 24
194.24.234.0/23 maxlen: 24
194.88.134.0/23 maxlen: 24
194.135.26.0/24 maxlen: 24
194.135.27.0/24 maxlen: 24
194.135.132.0/23 maxlen: 24
194.246.106.0/23 maxlen: 24
195.2.196.0/23 maxlen: 24
195.13.48.0/23 maxlen: 24
195.34.80.0/23 maxlen: 24
195.93.140.0/23 maxlen: 24
195.128.188.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
195.135.192.0/23 maxlen: 24
195.189.250.0/23 maxlen: 24
195.210.44.0/23 maxlen: 24
195.254.140.0/23 maxlen: 24
203.168.136.0/21 maxlen: 24
203.168.144.0/20 maxlen: 24
207.45.0.0/21 maxlen: 24
207.45.24.0/21 maxlen: 24
213.159.10.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
222.167.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:73:ff:d0:dc:30:14:1f:5b:7a:2a:c8:64:d5:53:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jan 27 12:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fde39a12270c90a29b8b052609f6264b8ebdf3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:06:ec:3d:0a:e0:54:cc:fc:7e:20:24:05:
a5:aa:2e:18:a1:b5:0d:62:3f:f5:0f:f6:17:63:48:
1c:4f:36:3b:34:43:2e:63:65:57:54:c3:20:72:ff:
18:55:13:5f:f9:19:fb:4a:6d:82:db:59:68:b1:fe:
76:4c:1e:22:ca:79:f0:85:9f:ed:4c:e4:73:62:8a:
7b:cb:7d:f3:cc:33:a2:bc:d5:e0:fa:a0:31:a6:19:
bc:60:0b:52:7c:cb:0e:1b:76:d7:69:b4:76:da:16:
9c:57:3d:ec:07:69:cb:0c:58:22:92:61:f9:48:af:
fb:56:d2:67:d6:c1:49:9d:57:f1:d4:68:0e:9e:2e:
36:12:76:62:cf:34:bb:c1:48:76:9d:c0:c3:11:f6:
68:3c:ae:59:b7:90:9a:0e:c6:8f:ab:df:b2:2b:6a:
39:91:e6:da:ad:07:23:a9:28:cf:a1:4e:ed:41:f8:
58:c6:e3:c3:a2:2f:f9:08:1b:91:51:0e:5c:c3:5f:
f7:c7:b6:31:57:31:18:54:9c:74:0a:91:03:b1:3c:
0e:0d:75:e2:64:d2:95:cf:b5:fe:67:db:81:b8:76:
2a:a0:f6:e2:4f:c9:b0:1e:f1:76:9d:c8:6f:b7:1a:
4d:54:39:01:56:a5:16:c5:c5:76:ad:2b:3e:9f:fe:
b8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E3:9A:12:27:0C:90:A2:9B:8B:05:26:09:F6:26:4B:8E:BD:F3:BA
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/_eOaEicMkKKbiwUmCfYmS46987o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.20.0/22
46.183.210.0-46.183.215.255
82.97.196.0/23
85.204.241.0/24
89.38.106.0/23
89.39.214.0/24
91.238.148.0/23
103.218.252.0/24
136.242.96.0/19
176.223.168.0/22
185.77.250.0/23
188.211.250.0/23
188.212.131.0/24
188.214.89.0/24
188.215.233.0/24
188.241.59.0/24
188.241.127.0-188.241.133.255
193.37.200.0/22
193.169.8.0/23
193.192.52.0/23
193.239.172.0/23
193.239.246.0/23
194.24.234.0/23
194.88.134.0/23
194.135.26.0/23
194.135.132.0/23
194.246.106.0/23
195.2.196.0/23
195.13.48.0/23
195.34.80.0/23
195.93.140.0/23
195.128.188.0/23
195.133.208.0/23
195.135.192.0/23
195.189.250.0/23
195.210.44.0/23
195.254.140.0/23
203.168.136.0-203.168.159.255
207.45.0.0/21
207.45.24.0/21
213.159.10.0-213.159.13.255
222.167.96.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:95:96:5f:a1:44:a5:29:f6:20:76:6e:b6:36:a7:18:df:a0:
61:b3:50:5c:eb:8b:fa:ff:12:ae:c7:02:9e:ed:37:bf:ad:b6:
2e:4b:a0:e4:1f:45:c1:41:d3:2a:3d:2b:47:f7:56:ec:52:a4:
c2:0e:cc:db:cf:1f:46:c6:8e:0a:06:cf:87:9c:d8:66:65:65:
c9:0e:b0:66:40:2a:0b:9f:95:0a:c6:04:9f:e2:84:61:5c:c8:
0d:fa:8d:4e:81:8f:f6:9d:ff:f8:87:52:ba:8b:c7:b0:6b:d7:
0e:81:25:59:04:4c:1c:e0:b2:d0:f0:95:12:7f:53:f7:53:62:
cd:8c:6f:0b:1c:f9:eb:63:16:c4:4e:eb:b7:48:ee:a2:d0:c7:
b0:11:e4:9e:4a:ab:1c:50:59:18:77:49:7c:fc:8a:62:3d:fd:
3b:86:bb:ee:af:fa:26:3a:2e:77:48:91:2f:b1:88:9a:64:9c:
c6:64:37:bb:c1:49:2c:4e:fd:5e:aa:44:d0:5a:be:8e:9f:99:
a3:96:4a:be:27:c1:ba:bd:74:09:89:01:5e:ca:9a:cb:74:3a:
f3:2c:a5:7f:08:80:90:ef:41:14:ce:a4:40:f1:a6:2f:e0:d4:
35:ed:44:7d:26:e7:cb:06:84:07:ab:92:3c:4e:12:dd:d6:bf:
e1:4a:a4:08
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgISAZv/c//Q3DAUH1t6Kshk1VNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1
MjM1MmQwHhcNMjYwMTI3MTIzNTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGUzOWExMjI3MGM5MGEyOWI4YjA1MjYwOWY2MjY0YjhlYmRmM2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmYG7D0K4FTM/H4gJAWlqi4YobUN
Yj/1D/YXY0gcTzY7NEMuY2VXVMMgcv8YVRNf+Rn7Sm2C21losf52TB4iynnwhZ/t
TORzYop7y33zzDOivNXg+qAxphm8YAtSfMsOG3bXabR22hacVz3sB2nLDFgikmH5
SK/7VtJn1sFJnVfx1GgOni42EnZizzS7wUh2ncDDEfZoPK5Zt5CaDsaPq9+yK2o5
kebarQcjqSjPoU7tQfhYxuPDoi/5CBuRUQ5cw1/3x7YxVzEYVJx0CpEDsTwODXXi
ZNKVz7X+Z9uBuHYqoPbiT8mwHvF2nchvtxpNVDkBVqUWxcV2rSs+n/64ewIDAQAB
o4IDKTCCAyUwHQYDVR0OBBYEFP3jmhInDJCim4sFJgn2JkuOvfO6MB8GA1UdIwQY
MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt
ODcxZjllZDcwOGUwLzEvX2VPYUVpY01rS0tiaXdVbUNmWW1TNDY5ODdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw
LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBPQYIKwYBBQUHAQcBAf8EggEsMIIBKDCCASQEAgABMIIB
HAMEAi2AFDAMAwQBLrfSAwQDLrfQAwQBUmHEAwQAVczxAwQBWSZqAwQAWSfWAwQB
W+6UAwQAZ9r8AwQFiPJgAwQCsN+oAwQBuU36AwQBvNP6AwQAvNSDAwQAvNZZAwQA
vNfpAwQAvPE7MAwDBAC88X8DBAG88YQDBALBJcgDBAHBqQgDBAHBwDQDBAHB76wD
BAHB7/YDBAHCGOoDBAHCWIYDBAHChxoDBAHCh4QDBAHC9moDBAHDAsQDBAHDDTAD
BAHDIlADBAHDXYwDBAHDgLwDBAHDhdADBAHDh8ADBAHDvfoDBAHD0iwDBAHD/oww
DAMEA8uoiAMEBcuogAMEA88tAAMEA88tGDAMAwQB1Z8KAwQB1Z8MAwQF3qdgMA0G
CSqGSIb3DQEBCwUAA4IBAQBclZZfoUSlKfYgdm62NqcY36Bhs1Bc64v6/xKuxwKe
7Te/rbYuS6DkH0XBQdMqPStH91bsUqTCDszbzx9Gxo4KBs+HnNhmZWXJDrBmQCoL
n5UKxgSf4oRhXMgN+o1OgY/2nf/4h1K6i8ewa9cOgSVZBEwc4LLQ8JUSf1P3U2LN
jG8LHPnrYxbETuu3SO6i0MewEeSeSqscUFkYd0l8/IpiPf07hrvur/omOi53SJEv
sYiaZJzGZDe7wUksTv1eqkTQWr6On5mjlkq+J8G6vXQJiQFeyprLdDrzLKV/CICQ
70EUzqRA8aYv4NQ17UR9JufLBoQHq5I8ThLd1r/hSqQI
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:19:56 2026 by rpki-client