Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B5iAEas3LiBbBT1HlYSjG_llX5Q.roa
File: B5iAEas3LiBbBT1HlYSjG_llX5Q.roa (raw, json)
Hash identifier: aKDL7LukjDsiCe+a4WTQn90hYswowP8RRUH4I7jncj0=
Subject key identifier: 07:98:80:11:AB:37:2E:20:5B:05:3D:47:95:84:A3:1B:F9:65:5F:94
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019A4F2E92C2F7CEC142EB09AE05AC2BC987
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B5iAEas3LiBbBT1HlYSjG_llX5Q.roa
Signing time: Tue 04 Nov 2025 14:04:03 +0000
ROA not before: Tue 04 Nov 2025 14:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34224
IP address blocks: 31.13.195.0/24 maxlen: 32
31.13.197.0/24 maxlen: 32
31.13.216.0/21 maxlen: 32
31.13.217.0/24 maxlen: 32
31.13.221.0/24 maxlen: 32
31.13.223.0/24 maxlen: 32
31.13.230.0/24 maxlen: 32
31.13.236.0/22 maxlen: 32
31.13.241.0/24 maxlen: 32
31.13.245.0/24 maxlen: 32
37.60.138.0/24 maxlen: 32
37.60.139.0/24 maxlen: 32
45.81.38.0/24 maxlen: 32
45.139.123.0/24 maxlen: 24
82.115.210.0/24 maxlen: 32
83.143.115.0/24 maxlen: 32
87.120.6.0/23 maxlen: 32
87.120.6.0/24 maxlen: 32
87.120.8.0/24 maxlen: 32
87.120.13.0/24 maxlen: 32
87.120.33.0/24 maxlen: 24
87.120.37.0/24 maxlen: 32
87.120.39.0/24 maxlen: 32
87.120.43.0/24 maxlen: 32
87.120.61.0/24 maxlen: 32
87.120.109.0/24 maxlen: 32
87.120.128.0/23 maxlen: 32
87.120.133.0/24 maxlen: 32
87.120.134.0/24 maxlen: 32
87.120.135.0/24 maxlen: 32
87.120.176.0/24 maxlen: 32
87.120.195.0/24 maxlen: 32
87.120.199.0/24 maxlen: 32
87.120.200.0/24 maxlen: 32
87.120.201.0/24 maxlen: 32
87.120.206.0/23 maxlen: 32
87.120.206.0/24 maxlen: 32
87.120.207.0/24 maxlen: 32
87.120.217.0/24 maxlen: 32
87.120.223.0/24 maxlen: 32
87.120.253.0/24 maxlen: 32
87.120.254.0/24 maxlen: 32
87.120.255.0/24 maxlen: 32
87.121.0.0/23 maxlen: 32
87.121.0.0/24 maxlen: 32
87.121.1.0/24 maxlen: 32
87.121.2.0/24 maxlen: 24
87.121.6.0/23 maxlen: 32
87.121.32.0/24 maxlen: 24
87.121.42.0/24 maxlen: 32
87.121.52.0/24 maxlen: 32
87.121.64.0/24 maxlen: 32
87.121.83.0/24 maxlen: 32
87.121.90.0/23 maxlen: 32
87.121.110.0/24 maxlen: 32
87.121.111.0/24 maxlen: 32
87.121.112.0/24 maxlen: 32
87.121.113.0/24 maxlen: 32
87.121.118.0/24 maxlen: 32
87.121.150.0/23 maxlen: 32
87.121.150.0/24 maxlen: 32
87.121.151.0/24 maxlen: 32
87.121.161.0/24 maxlen: 32
91.92.0.0/24 maxlen: 32
91.92.1.0/24 maxlen: 32
91.92.2.0/24 maxlen: 32
91.92.65.0/24 maxlen: 32
91.92.66.0/24 maxlen: 32
91.92.105.0/24 maxlen: 32
91.92.109.0/24 maxlen: 32
91.92.139.0/24 maxlen: 32
91.92.198.0/23 maxlen: 32
91.92.219.0/24 maxlen: 32
91.212.233.0/24 maxlen: 32
92.249.49.0/24 maxlen: 32
93.123.8.0/24 maxlen: 32
93.123.12.0/24 maxlen: 32
93.123.18.0/24 maxlen: 32
93.123.28.0/23 maxlen: 32
93.123.32.0/22 maxlen: 32
93.123.36.0/24 maxlen: 32
94.154.161.0/24 maxlen: 24
94.156.15.0/24 maxlen: 32
94.156.24.0/24 maxlen: 32
94.156.25.0/24 maxlen: 32
94.156.42.0/24 maxlen: 32
94.156.44.0/24 maxlen: 32
94.156.77.0/24 maxlen: 32
94.156.94.0/24 maxlen: 32
94.156.98.0/24 maxlen: 32
94.156.100.0/24 maxlen: 32
94.156.129.0/24 maxlen: 32
94.156.153.0/24 maxlen: 32
94.156.158.0/24 maxlen: 32
94.156.172.0/23 maxlen: 32
94.156.185.0/24 maxlen: 32
94.156.188.0/24 maxlen: 32
94.156.216.0/21 maxlen: 32
94.156.249.0/24 maxlen: 32
94.156.251.0/24 maxlen: 32
94.156.252.0/24 maxlen: 32
185.254.36.0/24 maxlen: 32
194.55.184.0/23 maxlen: 32
194.169.173.0/24 maxlen: 32
195.178.111.0/24 maxlen: 24
212.73.128.0/23 maxlen: 32
212.73.130.0/23 maxlen: 32
212.73.131.0/24 maxlen: 32
212.73.132.0/24 maxlen: 32
212.73.133.0/24 maxlen: 32
212.73.134.0/24 maxlen: 32
212.73.136.0/24 maxlen: 32
212.73.138.0/23 maxlen: 32
212.73.138.0/24 maxlen: 32
212.73.140.0/24 maxlen: 32
212.73.141.0/24 maxlen: 32
212.73.142.0/24 maxlen: 32
212.73.143.0/24 maxlen: 32
212.73.144.0/24 maxlen: 32
212.73.145.0/24 maxlen: 32
212.73.146.0/24 maxlen: 32
212.73.147.0/24 maxlen: 32
212.73.155.0/24 maxlen: 32
212.73.157.0/24 maxlen: 32
212.87.207.0/24 maxlen: 32
2a00:1728::/32 maxlen: 48
2a00:1728:0:d::/64 maxlen: 64
2a00:1728:1::/48 maxlen: 48
2a00:1728:3::/48 maxlen: 48
2a00:1728:1b::/48 maxlen: 48
2a00:1728:1f::/48 maxlen: 48
2a00:1728:21::/48 maxlen: 48
2a00:1728:23::/48 maxlen: 48
2a00:1728:25::/48 maxlen: 48
2a00:1728:27::/48 maxlen: 48
2a00:1728:2f::/48 maxlen: 48
2a00:1728:31::/48 maxlen: 48
2a00:1728:34::/48 maxlen: 48
2a00:1728:35::/48 maxlen: 48
2a00:1728:41::/48 maxlen: 48
2a00:1728:42::/48 maxlen: 48
2a00:1728:43::/48 maxlen: 48
2a00:1728:44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2e:92:c2:f7:ce:c1:42:eb:09:ae:05:ac:2b:c9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 4 14:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07988011ab372e205b053d479584a31bf9655f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:df:e6:b3:e4:16:47:39:31:51:28:0a:c5:
50:65:7a:31:6d:93:f2:bd:a4:5c:3e:c5:12:dc:2e:
90:b5:de:04:db:f2:6f:46:7b:d8:96:ae:b9:36:e5:
62:e0:6d:02:65:32:f2:0f:27:b7:83:75:60:f9:91:
3a:e8:ae:6a:11:09:20:48:a6:27:3e:33:aa:25:38:
0a:61:7f:43:43:4c:ab:e7:e4:c5:0e:a8:02:eb:61:
3d:44:f2:79:2c:12:f4:c9:b5:2f:cd:2e:8f:32:18:
97:71:f5:41:8a:94:47:00:25:8e:01:48:66:cd:c9:
81:1c:a5:04:d1:4b:d9:4f:48:ed:c7:a7:ae:eb:d3:
79:cb:31:c5:00:50:06:47:d9:31:1c:5f:70:d4:bf:
0c:e0:a1:c9:42:2b:f1:c4:fc:23:c7:7e:8f:a8:12:
52:c2:d8:91:56:06:8a:30:38:b8:b8:0c:fe:ce:af:
dd:01:41:88:b6:10:7b:db:c1:bc:15:b1:3f:c6:16:
88:69:dd:e7:9d:38:6c:47:1e:fc:16:50:4e:ce:6e:
46:02:69:b8:f9:ab:fe:20:cd:9c:a4:f8:3b:57:9a:
44:08:cb:86:e7:68:61:87:23:8a:4c:73:4b:64:0f:
35:c3:4e:6a:8f:bd:4e:2c:1d:d1:87:0b:81:30:c4:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:98:80:11:AB:37:2E:20:5B:05:3D:47:95:84:A3:1B:F9:65:5F:94
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B5iAEas3LiBbBT1HlYSjG_llX5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.195.0/24
31.13.197.0/24
31.13.216.0/21
31.13.230.0/24
31.13.236.0/22
31.13.241.0/24
31.13.245.0/24
37.60.138.0/23
45.81.38.0/24
45.139.123.0/24
82.115.210.0/24
83.143.115.0/24
87.120.6.0-87.120.8.255
87.120.13.0/24
87.120.33.0/24
87.120.37.0/24
87.120.39.0/24
87.120.43.0/24
87.120.61.0/24
87.120.109.0/24
87.120.128.0/23
87.120.133.0-87.120.135.255
87.120.176.0/24
87.120.195.0/24
87.120.199.0-87.120.201.255
87.120.206.0/23
87.120.217.0/24
87.120.223.0/24
87.120.253.0-87.121.2.255
87.121.6.0/23
87.121.32.0/24
87.121.42.0/24
87.121.52.0/24
87.121.64.0/24
87.121.83.0/24
87.121.90.0/23
87.121.110.0-87.121.113.255
87.121.118.0/24
87.121.150.0/23
87.121.161.0/24
91.92.0.0-91.92.2.255
91.92.65.0-91.92.66.255
91.92.105.0/24
91.92.109.0/24
91.92.139.0/24
91.92.198.0/23
91.92.219.0/24
91.212.233.0/24
92.249.49.0/24
93.123.8.0/24
93.123.12.0/24
93.123.18.0/24
93.123.28.0/23
93.123.32.0-93.123.36.255
94.154.161.0/24
94.156.15.0/24
94.156.24.0/23
94.156.42.0/24
94.156.44.0/24
94.156.77.0/24
94.156.94.0/24
94.156.98.0/24
94.156.100.0/24
94.156.129.0/24
94.156.153.0/24
94.156.158.0/24
94.156.172.0/23
94.156.185.0/24
94.156.188.0/24
94.156.216.0/21
94.156.249.0/24
94.156.251.0-94.156.252.255
185.254.36.0/24
194.55.184.0/23
194.169.173.0/24
195.178.111.0/24
212.73.128.0-212.73.134.255
212.73.136.0/24
212.73.138.0-212.73.147.255
212.73.155.0/24
212.73.157.0/24
212.87.207.0/24
IPv6:
2a00:1728::/32
Signature Algorithm: sha256WithRSAEncryption
ac:e4:72:90:1d:e4:10:9c:88:07:fc:9a:15:16:e5:80:2e:75:
a6:10:50:03:1f:77:f8:2b:c7:38:87:82:6d:88:c5:62:e4:f6:
d1:04:38:ab:44:ff:d2:1d:a7:e7:b4:a6:9f:0b:eb:18:02:99:
6e:5a:71:62:e5:7e:f5:02:eb:37:ef:4b:95:7a:ea:64:6a:e0:
92:90:a5:c7:7d:4b:6d:0c:9b:e8:5a:45:cd:00:cc:13:37:05:
e8:79:02:b2:e0:18:b5:60:f2:73:63:6b:99:98:ac:48:37:b7:
95:0c:f9:cb:10:34:0a:54:c2:69:f1:30:a5:45:13:61:e2:57:
d8:fe:64:2f:a8:a4:99:5e:d4:20:22:30:2c:78:6f:1c:73:2d:
9d:f1:3c:15:6a:ad:b8:b9:1e:6b:1c:64:34:09:29:59:b0:a9:
56:bf:da:2c:58:6a:f7:97:95:d1:d4:09:8d:ed:64:a9:cb:2f:
44:0f:88:27:aa:77:0f:27:3e:af:6c:5e:ab:44:e7:64:d7:ee:
36:98:eb:dc:38:9a:99:cf:a9:22:0d:7f:3e:53:7f:65:b8:53:
9b:60:cb:7c:a7:72:a8:c6:61:1e:c1:51:8f:48:bc:3c:8f:0f:
97:86:71:0c:d6:0c:8b:a2:f5:b5:f4:23:9d:7e:48:f0:12:a1:
07:5d:74:55
-----BEGIN CERTIFICATE-----
MIIHUzCCBjugAwIBAgISAZpPLpLC987BQusJrgWsK8mHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUxMTA0MTQwNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzk4ODAxMWFiMzcyZTIwNWIwNTNkNDc5NTg0YTMxYmY5NjU1Zjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VXf5rPkFkc5MVEoCsVQZXoxbZPy
vaRcPsUS3C6Qtd4E2/JvRnvYlq65NuVi4G0CZTLyDye3g3Vg+ZE66K5qEQkgSKYn
PjOqJTgKYX9DQ0yr5+TFDqgC62E9RPJ5LBL0ybUvzS6PMhiXcfVBipRHACWOAUhm
zcmBHKUE0UvZT0jtx6eu69N5yzHFAFAGR9kxHF9w1L8M4KHJQivxxPwjx36PqBJS
wtiRVgaKMDi4uAz+zq/dAUGIthB728G8FbE/xhaIad3nnThsRx78FlBOzm5GAmm4
+av+IM2cpPg7V5pECMuG52hhhyOKTHNLZA81w05qj71OLB3RhwuBMMR2hwIDAQAB
o4IEXzCCBFswHQYDVR0OBBYEFAeYgBGrNy4gWwU9R5WEoxv5ZV+UMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvQjVpQUVhczNMaUJiQlQxSGxZU2pHX2xsWDVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICcwYIKwYBBQUHAQcBAf8EggJiMIICXjCCAksEAgABMIIC
QwMEAB8NwwMEAB8NxQMEAx8N2AMEAB8N5gMEAh8N7AMEAB8N8QMEAB8N9QMEASU8
igMEAC1RJgMEAC2LewMEAFJz0gMEAFOPczAMAwQBV3gGAwQAV3gIAwQAV3gNAwQA
V3ghAwQAV3glAwQAV3gnAwQAV3grAwQAV3g9AwQAV3htAwQBV3iAMAwDBABXeIUD
BANXeIADBABXeLADBABXeMMwDAMEAFd4xwMEAVd4yAMEAVd4zgMEAFd42QMEAFd4
3zAMAwQAV3j9AwQAV3kCAwQBV3kGAwQAV3kgAwQAV3kqAwQAV3k0AwQAV3lAAwQA
V3lTAwQBV3laMAwDBAFXeW4DBAFXeXADBABXeXYDBAFXeZYDBABXeaEwCwMDAltc
AwQAW1wCMAwDBABbXEEDBABbXEIDBABbXGkDBABbXG0DBABbXIsDBAFbXMYDBABb
XNsDBABb1OkDBABc+TEDBABdewgDBABdewwDBABdexIDBAFdexwwDAMEBV17IAME
AF17JAMEAF6aoQMEAF6cDwMEAV6cGAMEAF6cKgMEAF6cLAMEAF6cTQMEAF6cXgME
AF6cYgMEAF6cZAMEAF6cgQMEAF6cmQMEAF6cngMEAV6crAMEAF6cuQMEAF6cvAME
A16c2AMEAF6c+TAMAwQAXpz7AwQAXpz8AwQAuf4kAwQBwje4AwQAwqmtAwQAw7Jv
MAwDBAfUSYADBADUSYYDBADUSYgwDAMEAdRJigMEAtRJkAMEANRJmwMEANRJnQME
ANRXzzANBAIAAjAHAwUAKgAXKDANBgkqhkiG9w0BAQsFAAOCAQEArORykB3kEJyI
B/yaFRblgC51phBQAx93+CvHOIeCbYjFYuT20QQ4q0T/0h2n57SmnwvrGAKZblpx
YuV+9QLrN+9LlXrqZGrgkpClx31LbQyb6FpFzQDMEzcF6HkCsuAYtWDyc2NrmZis
SDe3lQz5yxA0ClTCafEwpUUTYeJX2P5kL6ikmV7UICIwLHhvHHMtnfE8FWqtuLke
axxkNAkpWbCpVr/aLFhq95eV0dQJje1kqcsvRA+IJ6p3Dyc+r2xeq0TnZNfuNpjr
3Diamc+pIg1/PlN/ZbhTm2DLfKdyqMZhHsFRj0i8PI8Pl4ZxDNYMi6L1tfQjnX5I
8BKhB110VQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:06:31 2025 by rpki-client