Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/a1yc42V-N-R9nuiUHT_5nx23kBo.roa
File: a1yc42V-N-R9nuiUHT_5nx23kBo.roa (raw, json)
Hash identifier: pcnsN6odbwtaSuAqzGLjQYPQaRTOc1j8zI3P5nSyJ6o=
Subject key identifier: 6B:5C:9C:E3:65:7E:37:E4:7D:9E:E8:94:1D:3F:F9:9F:1D:B7:90:1A
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019D7736E71E600A5B13C439B00524EA574E
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/a1yc42V-N-R9nuiUHT_5nx23kBo.roa
Signing time: Fri 10 Apr 2026 11:46:20 +0000
ROA not before: Fri 10 Apr 2026 11:46:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 2.59.168.0/22 maxlen: 22
2.59.168.0/24 maxlen: 24
2.59.169.0/24 maxlen: 24
2.59.170.0/24 maxlen: 24
2.59.171.0/24 maxlen: 24
45.14.132.0/22 maxlen: 22
45.14.132.0/24 maxlen: 24
45.14.133.0/24 maxlen: 24
45.14.134.0/24 maxlen: 24
45.14.135.0/24 maxlen: 24
45.82.64.0/22 maxlen: 22
45.82.64.0/24 maxlen: 24
45.82.65.0/24 maxlen: 24
45.82.66.0/24 maxlen: 24
45.82.67.0/24 maxlen: 24
62.112.8.0/22 maxlen: 22
62.112.8.0/24 maxlen: 24
62.112.9.0/24 maxlen: 24
62.112.10.0/24 maxlen: 24
62.112.11.0/24 maxlen: 24
80.79.4.0/22 maxlen: 22
80.79.4.0/24 maxlen: 24
80.79.5.0/24 maxlen: 24
80.79.6.0/24 maxlen: 24
80.79.7.0/24 maxlen: 24
89.38.96.0/22 maxlen: 22
89.38.96.0/24 maxlen: 24
89.38.97.0/24 maxlen: 24
89.38.98.0/24 maxlen: 24
89.38.99.0/24 maxlen: 24
89.39.104.0/22 maxlen: 22
89.39.104.0/24 maxlen: 24
89.39.105.0/24 maxlen: 24
89.39.106.0/24 maxlen: 24
89.39.107.0/24 maxlen: 24
91.229.23.0/24 maxlen: 24
91.232.105.0/24 maxlen: 24
93.190.136.0/21 maxlen: 21
93.190.136.0/24 maxlen: 24
93.190.137.0/24 maxlen: 24
93.190.138.0/24 maxlen: 24
93.190.139.0/24 maxlen: 24
93.190.140.0/22 maxlen: 22
93.190.140.0/24 maxlen: 24
93.190.141.0/24 maxlen: 24
93.190.142.0/24 maxlen: 24
93.190.143.0/24 maxlen: 24
109.236.80.0/20 maxlen: 20
109.236.80.0/24 maxlen: 24
109.236.81.0/24 maxlen: 24
109.236.82.0/24 maxlen: 24
109.236.83.0/24 maxlen: 24
109.236.84.0/24 maxlen: 24
109.236.85.0/24 maxlen: 24
109.236.86.0/24 maxlen: 24
109.236.87.0/24 maxlen: 24
109.236.88.0/24 maxlen: 24
109.236.89.0/24 maxlen: 24
109.236.90.0/24 maxlen: 24
109.236.91.0/24 maxlen: 24
109.236.92.0/24 maxlen: 24
109.236.93.0/24 maxlen: 24
109.236.94.0/24 maxlen: 24
109.236.95.0/24 maxlen: 24
175.110.112.0/20 maxlen: 20
175.110.112.0/24 maxlen: 24
175.110.113.0/24 maxlen: 24
175.110.114.0/24 maxlen: 24
175.110.115.0/24 maxlen: 24
175.110.116.0/24 maxlen: 24
175.110.117.0/24 maxlen: 24
175.110.118.0/24 maxlen: 24
175.110.119.0/24 maxlen: 24
175.110.120.0/24 maxlen: 24
175.110.121.0/24 maxlen: 24
175.110.122.0/24 maxlen: 24
175.110.123.0/24 maxlen: 24
175.110.124.0/24 maxlen: 24
175.110.125.0/24 maxlen: 24
175.110.126.0/24 maxlen: 24
175.110.127.0/24 maxlen: 24
178.132.0.0/21 maxlen: 21
178.132.0.0/24 maxlen: 24
178.132.1.0/24 maxlen: 24
178.132.2.0/24 maxlen: 24
178.132.3.0/24 maxlen: 24
178.132.4.0/24 maxlen: 24
178.132.5.0/24 maxlen: 24
178.132.6.0/24 maxlen: 24
178.132.7.0/24 maxlen: 24
178.218.196.0/22 maxlen: 22
178.218.196.0/24 maxlen: 24
178.218.197.0/24 maxlen: 24
178.218.198.0/24 maxlen: 24
178.218.199.0/24 maxlen: 24
185.2.80.0/22 maxlen: 22
185.2.80.0/24 maxlen: 24
185.2.81.0/24 maxlen: 24
185.2.82.0/24 maxlen: 24
185.2.83.0/24 maxlen: 24
185.4.112.0/22 maxlen: 22
185.21.60.0/22 maxlen: 22
185.21.60.0/24 maxlen: 24
185.21.61.0/24 maxlen: 24
185.21.62.0/24 maxlen: 24
185.21.63.0/24 maxlen: 24
185.100.232.0/22 maxlen: 22
185.100.232.0/24 maxlen: 24
185.100.233.0/24 maxlen: 24
185.100.234.0/24 maxlen: 24
185.100.235.0/24 maxlen: 24
185.132.132.0/22 maxlen: 22
185.132.132.0/24 maxlen: 24
185.132.133.0/24 maxlen: 24
185.132.134.0/24 maxlen: 24
185.132.135.0/24 maxlen: 24
185.132.176.0/22 maxlen: 22
185.132.176.0/24 maxlen: 24
185.132.177.0/24 maxlen: 24
185.132.178.0/24 maxlen: 24
185.132.179.0/24 maxlen: 24
185.165.240.0/22 maxlen: 22
185.165.240.0/24 maxlen: 24
185.165.241.0/24 maxlen: 24
185.165.242.0/24 maxlen: 24
185.165.243.0/24 maxlen: 24
185.172.88.0/22 maxlen: 22
185.172.88.0/24 maxlen: 24
185.172.89.0/24 maxlen: 24
185.172.90.0/24 maxlen: 24
185.172.91.0/24 maxlen: 24
185.173.160.0/22 maxlen: 22
185.173.160.0/24 maxlen: 24
185.173.161.0/24 maxlen: 24
185.173.162.0/24 maxlen: 24
185.173.163.0/24 maxlen: 24
185.177.124.0/22 maxlen: 22
185.177.124.0/24 maxlen: 24
185.177.125.0/24 maxlen: 24
185.177.126.0/24 maxlen: 24
185.177.127.0/24 maxlen: 24
185.180.220.0/22 maxlen: 22
185.180.220.0/24 maxlen: 24
185.180.221.0/24 maxlen: 24
185.180.222.0/24 maxlen: 24
185.180.223.0/24 maxlen: 24
185.182.192.0/22 maxlen: 22
185.182.192.0/24 maxlen: 24
185.182.193.0/24 maxlen: 24
185.182.194.0/24 maxlen: 24
185.182.195.0/24 maxlen: 24
185.183.32.0/22 maxlen: 22
185.183.32.0/24 maxlen: 24
185.183.33.0/24 maxlen: 24
185.183.34.0/24 maxlen: 24
185.183.35.0/24 maxlen: 24
185.184.192.0/22 maxlen: 22
185.184.192.0/24 maxlen: 24
185.184.193.0/24 maxlen: 24
185.184.194.0/24 maxlen: 24
185.184.195.0/24 maxlen: 24
185.185.48.0/22 maxlen: 22
185.185.48.0/24 maxlen: 24
185.185.49.0/24 maxlen: 24
185.185.50.0/24 maxlen: 24
185.185.51.0/24 maxlen: 24
185.191.0.0/22 maxlen: 22
185.191.0.0/24 maxlen: 24
185.191.1.0/24 maxlen: 24
185.191.2.0/24 maxlen: 24
185.191.3.0/24 maxlen: 24
193.200.164.0/24 maxlen: 24
194.88.104.0/22 maxlen: 22
194.88.104.0/24 maxlen: 24
194.88.105.0/24 maxlen: 24
194.88.106.0/24 maxlen: 24
194.88.107.0/24 maxlen: 24
212.8.240.0/24 maxlen: 24
212.8.242.0/23 maxlen: 23
212.8.242.0/24 maxlen: 24
212.8.243.0/24 maxlen: 24
212.8.248.0/23 maxlen: 23
212.8.248.0/24 maxlen: 24
212.8.249.0/24 maxlen: 24
212.8.250.0/24 maxlen: 24
212.8.252.0/23 maxlen: 23
212.8.252.0/24 maxlen: 24
212.8.253.0/24 maxlen: 24
217.23.0.0/20 maxlen: 20
217.23.0.0/24 maxlen: 24
217.23.1.0/24 maxlen: 24
217.23.2.0/24 maxlen: 24
217.23.3.0/24 maxlen: 24
217.23.4.0/24 maxlen: 24
217.23.5.0/24 maxlen: 24
217.23.6.0/24 maxlen: 24
217.23.7.0/24 maxlen: 24
217.23.8.0/24 maxlen: 24
217.23.9.0/24 maxlen: 24
217.23.10.0/24 maxlen: 24
217.23.11.0/24 maxlen: 24
217.23.12.0/24 maxlen: 24
217.23.13.0/24 maxlen: 24
217.23.14.0/24 maxlen: 24
217.23.15.0/24 maxlen: 24
2a00:7c80::/29 maxlen: 32
2a00:7c81::/32 maxlen: 32
2a00:7c82::/32 maxlen: 32
2a00:7c83::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:36:e7:1e:60:0a:5b:13:c4:39:b0:05:24:ea:57:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Apr 10 11:46:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b5c9ce3657e37e47d9ee8941d3ff99f1db7901a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:75:2e:d3:e8:2b:3e:ba:24:53:56:61:bd:
00:08:0c:6b:00:d3:5d:08:5a:0f:f4:fe:14:09:60:
e4:29:f0:cb:e4:6c:20:d5:1d:76:4a:c6:51:ab:62:
42:5a:fa:fc:72:91:59:66:d2:5d:ce:20:3a:6b:73:
fc:68:a4:58:42:db:7a:10:e0:88:9b:18:ea:24:eb:
44:60:5d:02:d1:aa:ad:66:43:cf:b3:78:26:c0:02:
f6:92:38:c8:a6:a3:52:14:83:0e:60:06:80:83:3c:
a6:42:2d:19:f7:cb:f8:1b:da:be:a0:95:06:73:65:
dd:4d:2f:98:2e:50:ad:a4:e4:c2:31:95:db:fd:a3:
64:45:14:66:7b:fd:c5:e9:36:0e:ce:61:9b:a6:e0:
b2:c8:36:13:9a:22:a6:b1:86:f8:15:cf:9a:fd:1f:
a7:d6:04:c2:87:0a:1d:39:32:56:99:a9:12:5e:b8:
23:d1:26:65:2c:68:c3:7e:ac:3e:8f:10:5c:84:7e:
be:fe:c6:56:05:51:5e:b8:2f:b9:f7:39:ad:18:76:
1b:1d:c4:70:e8:d7:50:2e:41:2c:77:eb:6d:36:f1:
32:67:af:72:06:ae:44:a5:48:d7:1d:e3:b2:a2:1a:
b5:92:18:81:0c:89:85:53:16:8c:98:4b:49:f7:15:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5C:9C:E3:65:7E:37:E4:7D:9E:E8:94:1D:3F:F9:9F:1D:B7:90:1A
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/a1yc42V-N-R9nuiUHT_5nx23kBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.168.0/22
45.14.132.0/22
45.82.64.0/22
62.112.8.0/22
80.79.4.0/22
89.38.96.0/22
89.39.104.0/22
91.229.23.0/24
91.232.105.0/24
93.190.136.0/21
109.236.80.0/20
175.110.112.0/20
178.132.0.0/21
178.218.196.0/22
185.2.80.0/22
185.4.112.0/22
185.21.60.0/22
185.100.232.0/22
185.132.132.0/22
185.132.176.0/22
185.165.240.0/22
185.172.88.0/22
185.173.160.0/22
185.177.124.0/22
185.180.220.0/22
185.182.192.0/22
185.183.32.0/22
185.184.192.0/22
185.185.48.0/22
185.191.0.0/22
193.200.164.0/24
194.88.104.0/22
212.8.240.0/24
212.8.242.0/23
212.8.248.0-212.8.250.255
212.8.252.0/23
217.23.0.0/20
IPv6:
2a00:7c80::/29
Signature Algorithm: sha256WithRSAEncryption
17:54:7e:04:68:ad:15:cd:35:03:a5:22:e2:cb:97:87:5d:a8:
d6:50:4f:c2:b1:d4:2c:d0:75:18:58:11:43:45:d9:93:85:3a:
22:a4:2c:46:22:96:7b:bd:f6:80:3a:06:c0:88:20:09:0f:d9:
88:43:bf:43:11:90:93:2e:66:c1:8b:32:bc:35:8f:4f:cd:0b:
c8:55:26:1e:5a:6c:c9:eb:f4:3f:6b:e2:85:fd:a3:d2:9e:fa:
9a:02:57:e5:15:02:1a:7f:43:c3:41:5c:d2:ec:c3:b2:47:ee:
f7:c6:8d:9e:72:cc:a2:f8:2e:78:d8:25:58:5c:6c:7a:65:f6:
eb:a2:96:e4:e9:76:37:35:2e:27:f4:8a:93:2a:af:c5:bc:be:
27:a6:5c:42:19:dd:1c:e6:62:8d:bc:59:d2:99:ed:51:f1:09:
d8:53:44:8b:da:a3:1c:33:f0:dd:95:f3:ea:a0:aa:6f:d1:8f:
5f:7c:2d:f2:b6:1e:45:4d:6b:c0:c9:40:c8:56:bc:4c:58:e2:
da:08:38:e3:8e:f3:31:bc:0d:20:19:24:c0:f4:e2:fc:59:5e:
7a:53:b6:69:7f:25:71:0a:a6:b8:e0:72:54:82:0b:de:33:1d:
3d:eb:e2:f0:55:ca:f6:55:0e:25:e8:55:72:49:55:7e:2f:2a:
ad:b8:99:c3
-----BEGIN CERTIFICATE-----
MIIF8zCCBNugAwIBAgISAZ13NuceYApbE8Q5sAUk6ldOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwNDEwMTE0NjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjVjOWNlMzY1N2UzN2U0N2Q5ZWU4OTQxZDNmZjk5ZjFkYjc5MDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyh1LtPoKz66JFNWYb0ACAxrANNd
CFoP9P4UCWDkKfDL5Gwg1R12SsZRq2JCWvr8cpFZZtJdziA6a3P8aKRYQtt6EOCI
mxjqJOtEYF0C0aqtZkPPs3gmwAL2kjjIpqNSFIMOYAaAgzymQi0Z98v4G9q+oJUG
c2XdTS+YLlCtpOTCMZXb/aNkRRRme/3F6TYOzmGbpuCyyDYTmiKmsYb4Fc+a/R+n
1gTChwodOTJWmakSXrgj0SZlLGjDfqw+jxBchH6+/sZWBVFeuC+59zmtGHYbHcRw
6NdQLkEsd+ttNvEyZ69yBq5EpUjXHeOyohq1khiBDImFUxaMmEtJ9xUBaQIDAQAB
o4IC/zCCAvswHQYDVR0OBBYEFGtcnONlfjfkfZ7olB0/+Z8dt5AaMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvYTF5YzQyVi1OLVI5bnVpVUhUXzVueDIza0JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBEwYIKwYBBQUHAQcBAf8EggECMIH/MIHtBAIAATCB5gME
AgI7qAMEAi0OhAMEAi1SQAMEAj5wCAMEAlBPBAMEAlkmYAMEAlknaAMEAFvlFwME
AFvoaQMEA12+iAMEBG3sUAMEBK9ucAMEA7KEAAMEArLaxAMEArkCUAMEArkEcAME
ArkVPAMEArlk6AMEArmEhAMEArmEsAMEArml8AMEArmsWAMEArmtoAMEArmxfAME
Arm03AMEArm2wAMEArm3IAMEArm4wAMEArm5MAMEArm/AAMEAMHIpAMEAsJYaAME
ANQI8AMEAdQI8jAMAwQD1Aj4AwQA1Aj6AwQB1Aj8AwQE2RcAMA0EAgACMAcDBQMq
AHyAMA0GCSqGSIb3DQEBCwUAA4IBAQAXVH4EaK0VzTUDpSLiy5eHXajWUE/CsdQs
0HUYWBFDRdmThToipCxGIpZ7vfaAOgbAiCAJD9mIQ79DEZCTLmbBizK8NY9PzQvI
VSYeWmzJ6/Q/a+KF/aPSnvqaAlflFQIaf0PDQVzS7MOyR+73xo2ecsyi+C542CVY
XGx6Zfbropbk6XY3NS4n9IqTKq/FvL4nplxCGd0c5mKNvFnSme1R8QnYU0SL2qMc
M/DdlfPqoKpv0Y9ffC3yth5FTWvAyUDIVrxMWOLaCDjjjvMxvA0gGSTA9OL8WV56
U7ZpfyVxCqa44HJUggveMx096+LwVcr2VQ4l6FVySVV+LyqtuJnD
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:07 2026 by rpki-client