Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/D0b2st4kB0weMy1uupHyMAGTb9g.roa
File: D0b2st4kB0weMy1uupHyMAGTb9g.roa (raw, json)
Hash identifier: vQda05HrzkU1IyMBB1j9zKmjTTBENzFC7uXcsT0ZP94=
Subject key identifier: 0F:46:F6:B2:DE:24:07:4C:1E:33:2D:6E:BA:91:F2:30:01:93:6F:D8
Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial: 01A0906EFABE7EBA32F528F51A89BC8D3BFA
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/D0b2st4kB0weMy1uupHyMAGTb9g.roa
Signing time: Fri 11 Sep 2026 12:26:27 +0000
ROA not before: Fri 11 Sep 2026 12:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48854
IP address blocks: 46.36.204.0/22 maxlen: 22
46.36.208.0/21 maxlen: 21
77.243.128.0/20 maxlen: 20
80.70.0.0/23 maxlen: 23
80.70.7.0/24 maxlen: 24
81.95.240.0/20 maxlen: 20
81.95.249.0/24 maxlen: 24
89.188.72.0/21 maxlen: 21
89.188.79.0/24 maxlen: 24
91.197.248.0/22 maxlen: 22
91.217.201.0/24 maxlen: 24
93.191.152.0/21 maxlen: 21
93.191.152.0/22 maxlen: 22
93.191.156.0/24 maxlen: 24
93.191.157.0/24 maxlen: 24
93.191.158.0/24 maxlen: 24
94.137.128.0/20 maxlen: 20
94.143.8.0/21 maxlen: 21
94.231.96.0/20 maxlen: 20
94.231.103.0/24 maxlen: 24
109.71.56.0/21 maxlen: 21
178.251.0.0/21 maxlen: 21
178.251.1.0/24 maxlen: 24
185.20.204.0/22 maxlen: 22
185.20.205.0/24 maxlen: 24
185.20.206.0/23 maxlen: 23
185.21.40.0/22 maxlen: 22
185.21.40.0/24 maxlen: 24
185.25.140.0/24 maxlen: 24
185.25.141.0/24 maxlen: 24
185.25.142.0/24 maxlen: 24
185.25.143.0/24 maxlen: 24
185.134.28.0/22 maxlen: 22
185.154.240.0/22 maxlen: 22
185.204.248.0/22 maxlen: 22
185.221.36.0/22 maxlen: 22
185.223.24.0/22 maxlen: 22
185.235.52.0/22 maxlen: 22
185.235.52.0/24 maxlen: 24
193.223.248.0/22 maxlen: 22
193.239.96.0/22 maxlen: 22
194.150.112.0/22 maxlen: 22
195.69.128.0/22 maxlen: 22
195.178.14.0/23 maxlen: 23
212.97.132.0/22 maxlen: 22
212.97.140.0/22 maxlen: 22
212.97.140.0/24 maxlen: 24
212.97.141.0/24 maxlen: 24
212.97.142.0/24 maxlen: 24
212.97.143.0/24 maxlen: 24
212.237.248.0/23 maxlen: 23
217.61.237.0/24 maxlen: 24
217.61.238.0/24 maxlen: 24
2a02:2338::/32 maxlen: 48
2a02:2339::/36 maxlen: 36
2a02:2339:4000::/34 maxlen: 48
2a03:2740::/48 maxlen: 48
2a06:eac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:6e:fa:be:7e:ba:32:f5:28:f5:1a:89:bc:8d:3b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Validity
Not Before: Sep 11 12:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f46f6b2de24074c1e332d6eba91f23001936fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:5e:d6:ce:5e:54:4b:c3:8d:70:c5:74:21:
c7:78:27:46:4d:dc:15:70:2d:2e:87:eb:b3:85:44:
1c:74:93:6a:c0:4a:1c:68:07:c3:c1:c8:ef:3d:e1:
a7:da:12:e8:d6:95:4d:4b:a9:e0:cd:b9:c1:a2:d8:
65:a4:62:e2:a9:46:77:db:83:23:37:8b:81:6f:13:
38:72:f9:5a:13:de:d5:09:c5:62:27:95:5d:d4:24:
0e:e2:07:2d:c4:92:09:51:f6:52:4b:a9:a8:f8:87:
ea:97:be:11:a9:a4:19:75:5e:02:72:13:db:5a:3d:
a9:1d:d4:6c:84:6a:b0:af:6b:fd:4b:1f:e6:a7:4d:
16:7a:a7:64:56:71:62:6e:1c:eb:6f:36:47:af:27:
14:e5:d5:5e:8e:07:67:f5:e6:0c:09:b6:9f:40:1f:
94:47:90:63:24:06:19:b7:2e:d2:d2:21:52:fc:b9:
e7:49:b2:3c:0f:61:5c:c6:e0:80:64:e2:17:43:f5:
72:cf:43:de:55:a6:36:71:3b:9c:fe:f8:aa:3a:5e:
e3:e9:b4:68:5d:ea:41:49:eb:a6:42:77:5b:ad:d2:
36:2e:78:09:c6:9a:38:44:18:f7:85:69:bc:d9:3a:
4b:15:90:f3:ce:3b:8f:e0:40:99:e0:2d:b1:82:53:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:46:F6:B2:DE:24:07:4C:1E:33:2D:6E:BA:91:F2:30:01:93:6F:D8
X509v3 Authority Key Identifier:
keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/D0b2st4kB0weMy1uupHyMAGTb9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.204.0-46.36.215.255
77.243.128.0/20
80.70.0.0/23
80.70.7.0/24
81.95.240.0/20
89.188.72.0/21
91.197.248.0/22
91.217.201.0/24
93.191.152.0/21
94.137.128.0/20
94.143.8.0/21
94.231.96.0/20
109.71.56.0/21
178.251.0.0/21
185.20.204.0/22
185.21.40.0/22
185.25.140.0/22
185.134.28.0/22
185.154.240.0/22
185.204.248.0/22
185.221.36.0/22
185.223.24.0/22
185.235.52.0/22
193.223.248.0/22
193.239.96.0/22
194.150.112.0/22
195.69.128.0/22
195.178.14.0/23
212.97.132.0/22
212.97.140.0/22
212.237.248.0/23
217.61.237.0-217.61.238.255
IPv6:
2a02:2338::-2a02:2339:fff:ffff:ffff:ffff:ffff:ffff
2a02:2339:4000::/34
2a03:2740::/48
2a06:eac0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:a8:24:dc:53:06:70:a2:0b:07:9c:3a:1f:f9:bc:0c:26:8d:
e5:93:7b:0c:a2:b6:34:83:fd:3a:ca:07:58:6f:a2:9f:32:70:
df:bd:45:56:ed:af:46:a2:b6:32:08:3f:33:9c:11:9b:8f:40:
82:78:15:fb:25:27:77:52:46:ea:9a:ec:8e:eb:02:1b:65:77:
15:36:f1:14:01:48:2b:f8:1e:97:03:2b:dd:ba:cc:f2:2b:2c:
00:d1:bd:5d:35:6f:1a:9d:1a:79:d6:9a:22:a6:7b:ee:8e:25:
a8:77:1f:48:26:a9:b9:66:34:8e:b2:2b:db:42:93:af:77:34:
c5:07:04:7f:e9:ed:dd:05:69:28:58:d6:be:1e:cb:57:99:c7:
05:24:2a:dd:0a:c0:0f:67:fd:00:5e:e6:fc:73:f0:c9:a3:19:
e9:ab:04:02:3a:e4:32:cd:ec:12:1e:39:3b:01:5e:69:5b:55:
b7:7b:1a:a9:37:8c:24:43:55:d7:18:14:12:dc:b4:d4:fb:b4:
c3:29:ba:03:0e:c5:36:07:cb:88:93:a1:af:b9:a1:d7:bd:d7:
65:04:da:3a:6a:6d:f5:29:21:1e:4f:3b:69:c7:2a:bc:68:14:
c4:c0:dd:0e:80:04:63:5e:12:ce:bd:f7:61:8e:08:54:ee:42:
23:c0:98:62
-----BEGIN CERTIFICATE-----
MIIGADCCBOigAwIBAgISAaCQbvq+froy9Sj1Gom8jTv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZTcyMDVmNWQ0MTI1N2E2YmI5NWY5MDBlZWMwYTExMjNl
NzUxNjQwHhcNMjYwOTExMTIyNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjQ2ZjZiMmRlMjQwNzRjMWUzMzJkNmViYTkxZjIzMDAxOTM2ZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2xe1s5eVEvDjXDFdCHHeCdGTdwV
cC0uh+uzhUQcdJNqwEocaAfDwcjvPeGn2hLo1pVNS6ngzbnBothlpGLiqUZ324Mj
N4uBbxM4cvlaE97VCcViJ5Vd1CQO4gctxJIJUfZSS6mo+Ifql74RqaQZdV4CchPb
Wj2pHdRshGqwr2v9Sx/mp00WeqdkVnFibhzrbzZHrycU5dVejgdn9eYMCbafQB+U
R5BjJAYZty7S0iFS/LnnSbI8D2FcxuCAZOIXQ/Vyz0PeVaY2cTuc/viqOl7j6bRo
XepBSeumQndbrdI2LngJxpo4RBj3hWm82TpLFZDzzjuP4ECZ4C2xglP5zwIDAQAB
o4IDDDCCAwgwHQYDVR0OBBYEFA9G9rLeJAdMHjMtbrqR8jABk2/YMB8GA1UdIwQY
MBaAFKTnIF9dQSV6a7lfkA7sChEj51FkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDkt
M2U1OWNlNDQ1YjFjLzEvRDBiMnN0NGtCMHdlTXkxdXVwSHlNQUdUYjlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDktM2U1OWNlNDQ1YjFj
LzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBIAYIKwYBBQUHAQcBAf8EggEPMIIBCzCB1wQCAAEwgdAw
DAMEAi4kzAMEAy4k0AMEBE3zgAMEAVBGAAMEAFBGBwMEBFFf8AMEA1m8SAMEAlvF
+AMEAFvZyQMEA12/mAMEBF6JgAMEA16PCAMEBF7nYAMEA21HOAMEA7L7AAMEArkU
zAMEArkVKAMEArkZjAMEArmGHAMEArma8AMEArnM+AMEArndJAMEArnfGAMEArnr
NAMEAsHf+AMEAsHvYAMEAsKWcAMEAsNFgAMEAcOyDgMEAtRhhAMEAtRhjAMEAdTt
+DAMAwQA2T3tAwQA2T3uMC8EAgACMCkwDwMFAyoCIzgDBgQqAiM5AAMGBioCIzlA
AwcAKgMnQAAAAwUDKgbqwDANBgkqhkiG9w0BAQsFAAOCAQEAf6gk3FMGcKILB5w6
H/m8DCaN5ZN7DKK2NIP9OsoHWG+inzJw371FVu2vRqK2Mgg/M5wRm49AgngV+yUn
d1JG6prsjusCG2V3FTbxFAFIK/gelwMr3brM8issANG9XTVvGp0aedaaIqZ77o4l
qHcfSCapuWY0jrIr20KTr3c0xQcEf+nt3QVpKFjWvh7LV5nHBSQq3QrAD2f9AF7m
/HPwyaMZ6asEAjrkMs3sEh45OwFeaVtVt3saqTeMJENV1xgUEty01Pu0wym6Aw7F
NgfLiJOhr7mh173XZQTaOmpt9SkhHk87accqvGgUxMDdDoAEY14Szr33YY4IVO5C
I8CYYg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:16 2026 by rpki-client