Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/pAa4twbgch_NoibL7fcENGRZDqc.roa
File: pAa4twbgch_NoibL7fcENGRZDqc.roa (raw, json)
Hash identifier: bT577lKWRgaDRixbmeW8XPo7ur0o3DBiy64cY6iV2LU=
Subject key identifier: A4:06:B8:B7:06:E0:72:1F:CD:A2:26:CB:ED:F7:04:34:64:59:0E:A7
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 019FA7C37DFF9643B2624AFA4643336D96C9
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/pAa4twbgch_NoibL7fcENGRZDqc.roa
Signing time: Tue 28 Jul 2026 08:07:14 +0000
ROA not before: Tue 28 Jul 2026 08:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12302
IP address blocks: 46.97.0.0/16 maxlen: 16
46.97.0.0/21 maxlen: 21
46.97.8.0/21 maxlen: 21
46.97.16.0/21 maxlen: 21
46.97.24.0/21 maxlen: 21
46.97.32.0/21 maxlen: 21
46.97.40.0/21 maxlen: 21
46.97.48.0/21 maxlen: 21
46.97.56.0/21 maxlen: 21
46.97.64.0/21 maxlen: 21
46.97.72.0/21 maxlen: 21
46.97.80.0/21 maxlen: 21
46.97.88.0/21 maxlen: 21
46.97.96.0/21 maxlen: 21
46.97.104.0/21 maxlen: 21
46.97.104.0/24 maxlen: 24
46.97.112.0/21 maxlen: 21
46.97.117.0/24 maxlen: 24
46.97.120.0/21 maxlen: 21
46.97.128.0/21 maxlen: 21
46.97.128.0/24 maxlen: 24
46.97.136.0/21 maxlen: 21
46.97.144.0/21 maxlen: 21
46.97.152.0/21 maxlen: 21
46.97.152.0/24 maxlen: 24
46.97.153.0/24 maxlen: 24
46.97.155.0/24 maxlen: 24
46.97.156.0/24 maxlen: 24
46.97.160.0/21 maxlen: 21
46.97.160.0/24 maxlen: 24
46.97.161.0/24 maxlen: 24
46.97.162.0/24 maxlen: 24
46.97.163.0/24 maxlen: 24
46.97.168.0/21 maxlen: 21
46.97.176.0/21 maxlen: 21
46.97.184.0/21 maxlen: 21
46.97.192.0/21 maxlen: 21
46.97.200.0/21 maxlen: 21
46.97.208.0/21 maxlen: 21
46.97.216.0/21 maxlen: 21
46.97.224.0/21 maxlen: 21
46.97.232.0/21 maxlen: 21
46.97.240.0/21 maxlen: 21
46.97.248.0/21 maxlen: 21
81.12.128.0/17 maxlen: 17
81.12.128.0/21 maxlen: 21
81.12.128.0/23 maxlen: 23
81.12.130.0/24 maxlen: 24
81.12.132.0/23 maxlen: 23
81.12.134.0/24 maxlen: 24
81.12.136.0/21 maxlen: 21
81.12.144.0/21 maxlen: 21
81.12.152.0/21 maxlen: 21
81.12.153.0/24 maxlen: 24
81.12.159.0/24 maxlen: 24
81.12.160.0/21 maxlen: 21
81.12.168.0/21 maxlen: 21
81.12.176.0/21 maxlen: 21
81.12.184.0/21 maxlen: 21
81.12.192.0/21 maxlen: 21
81.12.192.0/24 maxlen: 24
81.12.195.0/24 maxlen: 24
81.12.199.0/24 maxlen: 24
81.12.200.0/21 maxlen: 21
81.12.200.0/23 maxlen: 23
81.12.208.0/21 maxlen: 21
81.12.216.0/21 maxlen: 21
81.12.224.0/21 maxlen: 21
81.12.228.0/24 maxlen: 24
81.12.229.0/24 maxlen: 24
81.12.230.0/24 maxlen: 24
81.12.231.0/24 maxlen: 24
81.12.232.0/21 maxlen: 21
81.12.240.0/21 maxlen: 21
81.12.242.0/24 maxlen: 24
81.12.243.0/24 maxlen: 24
81.12.245.0/24 maxlen: 24
81.12.246.0/24 maxlen: 24
81.12.247.0/24 maxlen: 24
81.12.248.0/21 maxlen: 21
91.233.130.0/23 maxlen: 23
136.255.0.0/16 maxlen: 24
136.255.224.0/20 maxlen: 20
136.255.251.0/24 maxlen: 24
165.78.0.0/16 maxlen: 16
165.78.0.0/19 maxlen: 19
165.78.0.0/21 maxlen: 21
165.78.32.0/19 maxlen: 19
165.78.64.0/19 maxlen: 19
165.78.64.0/21 maxlen: 21
165.78.96.0/19 maxlen: 19
165.78.128.0/19 maxlen: 19
165.78.128.0/21 maxlen: 21
165.78.160.0/19 maxlen: 19
165.78.192.0/19 maxlen: 19
165.78.192.0/21 maxlen: 21
165.78.224.0/19 maxlen: 19
185.34.64.0/23 maxlen: 23
192.145.100.0/22 maxlen: 22
213.233.64.0/22 maxlen: 22
213.233.64.0/24 maxlen: 24
213.233.65.0/24 maxlen: 24
213.233.66.0/24 maxlen: 24
213.233.67.0/24 maxlen: 24
213.233.68.0/24 maxlen: 24
213.233.69.0/24 maxlen: 24
213.233.70.0/24 maxlen: 24
213.233.71.0/24 maxlen: 24
213.233.72.0/24 maxlen: 24
213.233.73.0/24 maxlen: 24
213.233.74.0/24 maxlen: 24
213.233.75.0/24 maxlen: 24
213.233.76.0/24 maxlen: 24
213.233.77.0/24 maxlen: 24
213.233.78.0/24 maxlen: 24
213.233.79.0/24 maxlen: 24
213.233.80.0/24 maxlen: 24
213.233.81.0/24 maxlen: 24
213.233.82.0/23 maxlen: 23
213.233.82.0/24 maxlen: 24
213.233.83.0/24 maxlen: 24
213.233.84.0/23 maxlen: 23
213.233.84.0/24 maxlen: 24
213.233.85.0/24 maxlen: 24
213.233.86.0/24 maxlen: 24
213.233.87.0/24 maxlen: 24
213.233.88.0/22 maxlen: 22
213.233.88.0/24 maxlen: 24
213.233.89.0/24 maxlen: 24
213.233.90.0/24 maxlen: 24
213.233.91.0/24 maxlen: 24
213.233.92.0/24 maxlen: 24
213.233.93.0/24 maxlen: 24
213.233.94.0/24 maxlen: 24
213.233.95.0/24 maxlen: 24
213.233.96.0/22 maxlen: 22
213.233.96.0/24 maxlen: 24
213.233.97.0/24 maxlen: 24
213.233.98.0/24 maxlen: 24
213.233.99.0/24 maxlen: 24
213.233.100.0/24 maxlen: 24
213.233.101.0/24 maxlen: 24
213.233.102.0/24 maxlen: 24
213.233.103.0/24 maxlen: 24
213.233.104.0/24 maxlen: 24
213.233.105.0/24 maxlen: 24
213.233.106.0/24 maxlen: 24
213.233.107.0/24 maxlen: 24
213.233.108.0/24 maxlen: 24
213.233.109.0/24 maxlen: 24
213.233.110.0/24 maxlen: 24
213.233.111.0/24 maxlen: 24
213.233.112.0/24 maxlen: 24
213.233.113.0/24 maxlen: 24
213.233.114.0/24 maxlen: 24
213.233.115.0/24 maxlen: 24
213.233.116.0/24 maxlen: 24
213.233.117.0/24 maxlen: 24
213.233.118.0/24 maxlen: 24
213.233.119.0/24 maxlen: 24
213.233.120.0/24 maxlen: 24
213.233.121.0/24 maxlen: 24
213.233.122.0/24 maxlen: 24
213.233.123.0/24 maxlen: 24
213.233.124.0/24 maxlen: 24
213.233.125.0/24 maxlen: 24
213.233.126.0/24 maxlen: 24
213.233.127.0/24 maxlen: 24
217.10.192.0/24 maxlen: 24
217.10.193.0/24 maxlen: 24
217.10.194.0/24 maxlen: 24
217.10.195.0/24 maxlen: 24
217.10.196.0/24 maxlen: 24
217.10.197.0/24 maxlen: 24
217.10.198.0/24 maxlen: 24
217.10.199.0/24 maxlen: 24
217.10.200.0/24 maxlen: 24
217.10.201.0/24 maxlen: 24
217.10.202.0/24 maxlen: 24
217.10.203.0/24 maxlen: 24
217.10.204.0/24 maxlen: 24
217.10.205.0/24 maxlen: 24
217.10.206.0/24 maxlen: 24
217.10.207.0/24 maxlen: 24
217.10.208.0/24 maxlen: 24
217.10.209.0/24 maxlen: 24
217.10.210.0/24 maxlen: 24
217.10.211.0/24 maxlen: 24
217.10.212.0/24 maxlen: 24
217.10.213.0/24 maxlen: 24
217.10.214.0/24 maxlen: 24
217.10.215.0/24 maxlen: 24
217.10.216.0/24 maxlen: 24
217.10.217.0/24 maxlen: 24
217.10.218.0/24 maxlen: 24
217.10.219.0/24 maxlen: 24
217.10.220.0/24 maxlen: 24
217.10.221.0/24 maxlen: 24
217.10.222.0/24 maxlen: 24
217.10.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:c3:7d:ff:96:43:b2:62:4a:fa:46:43:33:6d:96:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Jul 28 08:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a406b8b706e0721fcda226cbedf7043464590ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:6a:a9:f5:29:34:f8:22:7f:cb:32:ca:a8:
60:e4:a7:b3:4f:69:83:38:09:75:4f:ca:00:a6:aa:
23:9e:b3:91:e2:74:66:8f:53:c8:46:c8:1d:21:e9:
5f:7a:87:85:a8:c1:82:49:29:00:32:6e:ca:12:11:
6d:b7:c2:a9:aa:2d:e5:2c:d6:a6:db:d1:db:b8:65:
53:95:d0:92:83:4f:36:6a:ef:9b:88:ee:79:9e:b6:
2e:d6:3c:66:0f:12:ba:54:cf:06:a2:a2:1f:d6:e4:
39:1b:29:03:0b:60:3c:ec:24:b8:28:c1:ff:e4:8a:
c6:00:84:db:11:75:b5:00:0f:b4:16:ba:84:45:31:
30:71:c6:6f:ac:5a:7c:d6:c8:f9:1e:8c:c8:88:62:
0c:8e:ad:71:1e:d6:30:58:3d:c2:53:29:3b:f7:aa:
1b:74:da:d0:bf:3c:f3:fd:21:b1:e7:ee:82:e0:da:
f6:12:27:26:66:f1:97:f1:c9:cb:b9:ff:8b:c5:22:
c3:87:74:96:7e:0f:d0:31:7f:05:8a:cf:c3:ff:34:
e1:d7:de:05:10:ff:28:e5:50:0e:4c:c5:56:19:19:
32:d7:e4:f5:c7:35:17:5b:f1:27:07:a7:a1:c3:aa:
d4:53:2f:ab:04:e5:d7:ba:b9:98:f1:14:a0:35:21:
da:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:06:B8:B7:06:E0:72:1F:CD:A2:26:CB:ED:F7:04:34:64:59:0E:A7
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/pAa4twbgch_NoibL7fcENGRZDqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.97.0.0/16
81.12.128.0/17
91.233.130.0/23
136.255.0.0/16
165.78.0.0/16
185.34.64.0/23
192.145.100.0/22
213.233.64.0/18
217.10.192.0/19
Signature Algorithm: sha256WithRSAEncryption
56:c3:90:aa:0d:cc:07:cb:a6:6b:b8:46:81:4e:28:48:14:cc:
ed:05:9c:25:c0:3e:db:36:2d:d5:30:51:0b:23:41:21:82:bd:
55:5d:98:9d:d1:a6:95:04:6c:fa:a2:2b:8f:d9:19:cd:e8:0d:
86:92:85:d4:22:bd:e5:ea:31:30:3a:91:03:91:fb:16:de:15:
33:21:62:e0:26:2a:c0:af:ca:33:07:5a:9a:03:4b:ae:71:01:
05:a9:91:c8:70:d2:36:ff:7e:d8:72:4f:62:80:44:86:7b:46:
a6:1c:76:d9:17:46:fa:38:55:a9:c3:d5:aa:3b:49:3c:9c:aa:
9e:f5:e8:2b:43:a0:43:bb:d3:92:40:33:37:c9:ad:50:79:b9:
02:f5:f4:d1:b6:a0:36:8f:ab:fa:2f:e7:d1:68:4a:43:9c:d6:
85:b9:36:1e:42:3c:53:d1:13:91:93:bc:e8:a6:ce:96:e9:fa:
ff:fc:af:ee:16:55:db:3f:b6:c4:f3:9e:e5:82:ae:00:54:45:
fb:ee:97:e1:0e:0d:e8:50:fd:5d:e6:5a:96:9d:32:cb:5c:95:
47:81:d4:d3:0f:92:de:2a:bc:fb:33:6a:1b:41:48:25:be:89:
a9:6e:05:3a:1c:70:a7:67:26:f2:d6:c3:a0:0f:46:43:42:6b:
dd:38:7a:80
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZ+nw33/lkOyYkr6RkMzbZbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl
NmJlMmQwHhcNMjYwNzI4MDgwNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDA2YjhiNzA2ZTA3MjFmY2RhMjI2Y2JlZGY3MDQzNDY0NTkwZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLdqqfUpNPgif8syyqhg5KezT2mD
OAl1T8oApqojnrOR4nRmj1PIRsgdIelfeoeFqMGCSSkAMm7KEhFtt8Kpqi3lLNam
29HbuGVTldCSg082au+biO55nrYu1jxmDxK6VM8GoqIf1uQ5GykDC2A87CS4KMH/
5IrGAITbEXW1AA+0FrqERTEwccZvrFp81sj5HozIiGIMjq1xHtYwWD3CUyk796ob
dNrQvzzz/SGx5+6C4Nr2EicmZvGX8cnLuf+LxSLDh3SWfg/QMX8Fis/D/zTh194F
EP8o5VAOTMVWGRky1+T1xzUXW/EnB6ehw6rUUy+rBOXXurmY8RSgNSHawwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFKQGuLcG4HIfzaImy+33BDRkWQ6nMB8GA1UdIwQY
MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt
ZjRjOTM2MDFjODU5LzEvcEFhNHR3YmdjaF9Ob2liTDdmY0VOR1JaRHFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5
LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzA5BAIAATAzAwMALmEDBAdR
DIADBAFb6YIDAwCI/wMDAKVOAwQBuSJAAwQCwJFkAwQG1elAAwQF2QrAMA0GCSqG
SIb3DQEBCwUAA4IBAQBWw5CqDcwHy6ZruEaBTihIFMztBZwlwD7bNi3VMFELI0Eh
gr1VXZid0aaVBGz6oiuP2RnN6A2GkoXUIr3l6jEwOpEDkfsW3hUzIWLgJirAr8oz
B1qaA0uucQEFqZHIcNI2/37Yck9igESGe0amHHbZF0b6OFWpw9WqO0k8nKqe9egr
Q6BDu9OSQDM3ya1QebkC9fTRtqA2j6v6L+fRaEpDnNaFuTYeQjxT0RORk7zops6W
6fr//K/uFlXbP7bE857lgq4AVEX77pfhDg3oUP1d5lqWnTLLXJVHgdTTD5LeKrz7
M2obQUglvompbgU6HHCnZyby1sOgD0ZDQmvdOHqA
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:24:16 2026 by rpki-client