Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/wMacMmZmC6K_Z3E-FK6eIoDMt20.roa
File: wMacMmZmC6K_Z3E-FK6eIoDMt20.roa (raw, json)
Hash identifier: hMurJd6LHvL4x1id8j/j+B6VkNrcZEazX5VFQz1CkR0=
Subject key identifier: C0:C6:9C:32:66:66:0B:A2:BF:67:71:3E:14:AE:9E:22:80:CC:B7:6D
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 019C4C0C30732836DA3AD0F5FEEE488F0138
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/wMacMmZmC6K_Z3E-FK6eIoDMt20.roa
Signing time: Wed 11 Feb 2026 09:33:13 +0000
ROA not before: Wed 11 Feb 2026 09:33:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 37.123.208.0/24 maxlen: 24
37.123.210.0/24 maxlen: 24
45.133.250.0/24 maxlen: 24
109.202.96.0/24 maxlen: 24
109.202.97.0/24 maxlen: 24
109.202.98.0/24 maxlen: 24
109.202.99.0/24 maxlen: 24
109.202.100.0/24 maxlen: 24
109.202.101.0/24 maxlen: 24
109.202.102.0/24 maxlen: 24
109.202.103.0/24 maxlen: 24
109.202.104.0/24 maxlen: 24
109.202.106.0/24 maxlen: 24
109.202.107.0/24 maxlen: 24
109.202.108.0/24 maxlen: 24
109.202.109.0/24 maxlen: 24
109.202.111.0/24 maxlen: 24
109.232.224.0/24 maxlen: 24
109.232.225.0/24 maxlen: 24
109.232.226.0/24 maxlen: 24
109.232.227.0/24 maxlen: 24
109.232.228.0/24 maxlen: 24
109.232.229.0/24 maxlen: 24
109.232.230.0/24 maxlen: 24
109.232.231.0/24 maxlen: 24
134.19.176.0/24 maxlen: 24
134.19.177.0/24 maxlen: 24
134.19.178.0/24 maxlen: 24
134.19.179.0/24 maxlen: 24
134.19.180.0/24 maxlen: 24
134.19.181.0/24 maxlen: 24
134.19.182.0/24 maxlen: 24
134.19.183.0/24 maxlen: 24
134.19.184.0/24 maxlen: 24
134.19.185.0/24 maxlen: 24
134.19.186.0/24 maxlen: 24
134.19.187.0/24 maxlen: 24
134.19.188.0/24 maxlen: 24
134.19.189.0/24 maxlen: 24
134.19.190.0/23 maxlen: 23
185.23.213.0/24 maxlen: 24
185.23.214.0/24 maxlen: 24
185.23.215.0/24 maxlen: 24
188.95.48.0/24 maxlen: 24
188.95.49.0/24 maxlen: 24
188.95.50.0/24 maxlen: 24
188.95.51.0/24 maxlen: 24
188.95.52.0/24 maxlen: 24
188.95.53.0/24 maxlen: 24
188.95.54.0/24 maxlen: 24
188.95.55.0/24 maxlen: 24
213.152.160.0/24 maxlen: 24
213.152.161.0/24 maxlen: 24
213.152.162.0/24 maxlen: 24
213.152.163.0/24 maxlen: 24
213.152.164.0/24 maxlen: 24
213.152.165.0/24 maxlen: 24
213.152.166.0/24 maxlen: 24
213.152.167.0/24 maxlen: 24
213.152.168.0/24 maxlen: 24
213.152.169.0/24 maxlen: 24
213.152.170.0/24 maxlen: 24
213.152.171.0/24 maxlen: 24
213.152.172.0/24 maxlen: 24
213.152.173.0/24 maxlen: 24
213.152.174.0/24 maxlen: 24
213.152.176.0/24 maxlen: 24
213.152.177.0/24 maxlen: 24
213.152.178.0/24 maxlen: 24
213.152.179.0/24 maxlen: 24
213.152.180.0/24 maxlen: 24
213.152.181.0/24 maxlen: 24
213.152.182.0/24 maxlen: 24
213.152.183.0/24 maxlen: 24
213.152.184.0/24 maxlen: 24
213.152.185.0/24 maxlen: 24
213.152.186.0/24 maxlen: 24
213.152.187.0/24 maxlen: 24
213.152.188.0/22 maxlen: 22
213.152.188.0/24 maxlen: 24
213.152.189.0/24 maxlen: 24
213.152.190.0/24 maxlen: 24
2a00:1678:127::/48 maxlen: 48
2a00:1678:a2b::/48 maxlen: 48
2a00:1678:b17::/48 maxlen: 48
2a00:1678:be1::/48 maxlen: 48
2a00:1678:be2::/48 maxlen: 48
2a00:1678:1122::/48 maxlen: 48
2a00:1678:1194::/48 maxlen: 48
2a00:1678:1337::/48 maxlen: 48
2a00:1678:2470::/48 maxlen: 48
2a00:1678:3cc0::/48 maxlen: 48
2a00:1678:5524::/48 maxlen: 48
2a00:1678:5afe::/48 maxlen: 48
2a00:1678:b00b::/48 maxlen: 48
2a00:1678:baba::/48 maxlen: 48
2a00:1678:da7a::/48 maxlen: 48
2a00:1678:dea1::/48 maxlen: 48
2a00:1678:efa5::/48 maxlen: 48
2a00:1678:f113::/48 maxlen: 48
2a00:1678:fa11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:0c:30:73:28:36:da:3a:d0:f5:fe:ee:48:8f:01:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Feb 11 09:33:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0c69c3266660ba2bf67713e14ae9e2280ccb76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:61:50:9c:cb:e2:c1:79:ef:5b:78:1f:1b:
36:a1:dc:1d:96:8b:79:a9:66:9e:cb:f3:96:50:0c:
90:b1:e6:ed:ab:31:26:16:7d:84:c2:c3:3e:dd:d1:
aa:c5:d9:53:ae:1a:32:d8:b1:67:22:15:ee:c9:18:
4a:b6:e5:18:96:74:31:11:da:0f:b7:63:d2:8c:78:
55:43:21:52:8f:37:3a:58:9f:3a:44:ca:d7:c4:86:
8f:f9:46:44:07:02:f6:ef:7d:68:5f:f4:0c:82:2d:
fc:8a:e0:3a:b1:aa:5b:22:ba:f0:75:47:98:77:a2:
e4:f6:88:36:a0:93:bb:b1:fc:96:76:80:2a:9d:1f:
d1:ff:6d:b5:c8:ed:4c:e9:31:d0:ce:38:43:70:8c:
2f:56:d3:c4:b1:40:0a:b4:f1:84:82:df:e5:8d:48:
7c:4d:38:c8:2b:40:ed:15:27:19:1d:55:56:9b:57:
90:76:a0:b4:02:d2:81:1f:bf:cd:75:39:23:21:c0:
60:df:3f:89:58:7c:d1:8f:12:7d:49:a3:54:88:ed:
79:56:8d:86:d5:13:dc:68:36:c1:5d:f5:dc:3c:ce:
59:89:9a:1e:d2:c5:b3:26:86:a7:b3:08:aa:35:4a:
04:1e:6f:ae:b7:7e:ae:f8:87:a5:44:3e:15:65:7e:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C6:9C:32:66:66:0B:A2:BF:67:71:3E:14:AE:9E:22:80:CC:B7:6D
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/wMacMmZmC6K_Z3E-FK6eIoDMt20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.208.0/24
37.123.210.0/24
45.133.250.0/24
109.202.96.0-109.202.104.255
109.202.106.0-109.202.109.255
109.202.111.0/24
109.232.224.0/21
134.19.176.0/20
185.23.213.0-185.23.215.255
188.95.48.0/21
213.152.160.0-213.152.174.255
213.152.176.0/20
IPv6:
2a00:1678:127::/48
2a00:1678:a2b::/48
2a00:1678:b17::/48
2a00:1678:be1::-2a00:1678:be2:ffff:ffff:ffff:ffff:ffff
2a00:1678:1122::/48
2a00:1678:1194::/48
2a00:1678:1337::/48
2a00:1678:2470::/48
2a00:1678:3cc0::/48
2a00:1678:5524::/48
2a00:1678:5afe::/48
2a00:1678:b00b::/48
2a00:1678:baba::/48
2a00:1678:da7a::/48
2a00:1678:dea1::/48
2a00:1678:efa5::/48
2a00:1678:f113::/48
2a00:1678:fa11::/48
Signature Algorithm: sha256WithRSAEncryption
09:84:44:c6:83:b3:a0:0c:49:0a:a9:8b:33:4f:6b:26:3c:66:
96:f7:f1:14:60:65:74:47:1c:e1:86:4b:e8:55:3e:af:33:10:
d9:c3:6c:01:9c:29:92:89:0e:7d:da:b5:18:09:1b:04:ed:31:
fc:c1:9c:4f:dc:f7:df:92:90:62:fa:be:23:62:31:f9:be:b4:
5e:35:0b:c7:20:b9:09:eb:33:ac:95:2f:e6:fc:71:12:1a:f2:
64:ff:d0:bb:6f:ae:93:38:b1:43:db:b8:12:e7:dd:c3:f5:72:
23:1a:52:cb:99:87:50:7a:e7:8c:f0:5e:81:c3:15:62:52:ff:
8d:b5:4c:cc:03:e5:37:15:fd:2d:da:8c:b5:fe:fc:29:6d:ce:
ff:84:60:78:85:85:12:c9:b1:44:2c:a6:18:e4:70:c1:6d:45:
67:b1:d2:c8:7a:8a:a2:4e:69:79:b9:32:cd:87:14:26:1f:30:
a9:4d:e8:9a:e2:d6:a3:4d:57:9b:cb:f6:89:5b:54:54:67:e8:
35:89:49:90:81:46:8c:84:b3:ad:12:40:1d:88:b3:8c:27:bc:
fe:eb:53:69:38:3e:8d:9c:e7:40:be:33:06:fe:62:89:d1:5b:
8b:af:6c:9c:91:df:b1:59:f9:53:13:98:30:9a:87:06:de:04:
85:2a:b6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:53 2026 by rpki-client