Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/yT13HA89M9lex7KTGn39CizxepM.roa
File: yT13HA89M9lex7KTGn39CizxepM.roa (raw, json)
Hash identifier: cUKc2MzhQ8fQzkrbpUsocGqB25zuQeATEp9/WG+cVbA=
Subject key identifier: C9:3D:77:1C:0F:3D:33:D9:5E:C7:B2:93:1A:7D:FD:0A:2C:F1:7A:93
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 019C7110CF5F1AC6C5E1C1DBB12C8D3CDEFE
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/yT13HA89M9lex7KTGn39CizxepM.roa
Signing time: Wed 18 Feb 2026 14:04:12 +0000
ROA not before: Wed 18 Feb 2026 14:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24875
IP address blocks: 2.58.21.0/24 maxlen: 24
46.182.108.0/24 maxlen: 24
80.89.224.0/20 maxlen: 24
80.89.236.0/23 maxlen: 23
89.105.192.0/19 maxlen: 19
89.105.192.0/20 maxlen: 20
89.105.208.0/20 maxlen: 20
185.80.232.0/22 maxlen: 22
185.80.232.0/23 maxlen: 23
185.80.234.0/23 maxlen: 23
185.147.12.0/22 maxlen: 24
2001:968::/29 maxlen: 29
2001:968::/32 maxlen: 32
2001:968:15::/48 maxlen: 48
2001:968:100::/48 maxlen: 48
2001:968:675::/48 maxlen: 48
2001:968:676::/48 maxlen: 48
2001:968:677::/48 maxlen: 48
2001:968:678::/48 maxlen: 48
2001:968:679::/48 maxlen: 48
2001:968:780::/48 maxlen: 48
2001:968:1007::/48 maxlen: 48
2001:968:1400::/48 maxlen: 48
2001:968:2001::/48 maxlen: 48
2001:968:2003::/48 maxlen: 48
2001:968:2004::/48 maxlen: 48
2001:968:2005::/48 maxlen: 48
2001:968:2006::/48 maxlen: 48
2001:968:2007::/48 maxlen: 48
2001:968:2008::/48 maxlen: 48
2001:968:2010::/48 maxlen: 48
2001:968:2013::/48 maxlen: 48
2001:968:2015::/48 maxlen: 48
2001:968:2016::/48 maxlen: 48
2001:968:2017::/48 maxlen: 48
2001:968:2019::/48 maxlen: 48
2001:968:2020::/48 maxlen: 48
2001:968:2021::/48 maxlen: 48
2001:968:2022::/48 maxlen: 48
2001:968:2023::/48 maxlen: 48
2001:968:2024::/48 maxlen: 48
2001:968:2025::/48 maxlen: 48
2001:968:2026::/48 maxlen: 48
2001:968:2027::/48 maxlen: 48
2001:968:2032::/48 maxlen: 48
2001:968:2035::/48 maxlen: 48
2001:968:2036::/48 maxlen: 48
2001:968:2037::/48 maxlen: 48
2001:968:2062::/48 maxlen: 48
2001:968:2101::/48 maxlen: 48
2001:968:2102::/48 maxlen: 48
2001:968:2103::/48 maxlen: 48
2001:968:2104::/48 maxlen: 48
2001:968:2106::/48 maxlen: 48
2001:968:2107::/48 maxlen: 48
2001:968:2108::/48 maxlen: 48
2001:968:2109::/48 maxlen: 48
2001:968:2110::/48 maxlen: 48
2001:968:2111::/48 maxlen: 48
2001:968:2112::/48 maxlen: 48
2001:968:2117::/48 maxlen: 48
2001:968:2118::/48 maxlen: 48
2001:968:2119::/48 maxlen: 48
2001:968:2127::/48 maxlen: 48
2001:968:2128::/48 maxlen: 48
2001:968:2129::/48 maxlen: 48
2001:968:2130::/48 maxlen: 48
2001:968:2131::/48 maxlen: 48
2001:968:2132::/48 maxlen: 48
2001:968:2133::/48 maxlen: 48
2001:968:2134::/48 maxlen: 48
2001:968:2135::/48 maxlen: 48
2001:968:2137::/48 maxlen: 48
2001:968:2138::/48 maxlen: 48
2001:968:2139::/48 maxlen: 48
2001:968:2140::/48 maxlen: 48
2001:968:2143::/48 maxlen: 48
2001:968:2144::/48 maxlen: 48
2001:968:2145::/48 maxlen: 48
2001:968:2146::/48 maxlen: 48
2001:968:2147::/48 maxlen: 48
2001:968:2148::/48 maxlen: 48
2001:968:2150::/48 maxlen: 48
2001:968:2151::/48 maxlen: 48
2001:968:2152::/48 maxlen: 48
2001:968:2153::/48 maxlen: 48
2001:968:2155::/48 maxlen: 48
2001:968:2158::/48 maxlen: 48
2001:968:2160::/48 maxlen: 48
2001:968:2162::/48 maxlen: 48
2001:968:2164::/48 maxlen: 48
2001:968:2171::/48 maxlen: 48
2001:968:2172::/48 maxlen: 48
2001:968:2173::/48 maxlen: 48
2001:968:2174::/48 maxlen: 48
2001:968:2177::/48 maxlen: 48
2001:968:2178::/48 maxlen: 48
2001:968:2179::/48 maxlen: 48
2001:968:2180::/48 maxlen: 48
2001:968:2181::/48 maxlen: 48
2001:968:2182::/48 maxlen: 48
2001:968:2184::/48 maxlen: 48
2001:968:2185::/48 maxlen: 48
2001:968:2186::/48 maxlen: 48
2001:968:2188::/48 maxlen: 48
2001:968:2189::/48 maxlen: 48
2001:968:2190::/48 maxlen: 48
2001:968:2191::/48 maxlen: 48
2001:968:2192::/48 maxlen: 48
2001:968:2193::/48 maxlen: 48
2001:968:2194::/48 maxlen: 48
2001:968:2195::/48 maxlen: 48
2001:968:2197::/48 maxlen: 48
2001:968:2198::/48 maxlen: 48
2001:968:2226::/48 maxlen: 48
2001:968:2227::/48 maxlen: 48
2001:968:2412::/48 maxlen: 48
2001:968:3295::/48 maxlen: 48
2a00:11f8::/29 maxlen: 29
2a00:11f8::/32 maxlen: 32
2a07:5440::/29 maxlen: 29
2a07:5440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:10:cf:5f:1a:c6:c5:e1:c1:db:b1:2c:8d:3c:de:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Feb 18 14:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c93d771c0f3d33d95ec7b2931a7dfd0a2cf17a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:ab:c4:b6:48:bf:4d:7f:9c:0f:cc:9e:8d:
f4:e1:83:99:cf:17:6e:2c:25:b6:ba:cd:74:48:1f:
95:87:94:cc:83:58:c8:e4:9b:16:ec:cb:a4:3d:ac:
68:31:12:f2:d8:90:26:86:cf:56:57:fe:59:8a:64:
b7:1d:42:3b:b8:1b:02:99:53:03:17:47:2f:36:31:
6d:ff:9d:5a:e8:3e:8c:83:27:02:58:27:f2:31:e4:
eb:49:c9:cc:c3:f7:c5:e4:81:3a:eb:62:f2:6b:7d:
91:fe:74:ee:2f:9e:09:44:48:66:65:d8:43:0d:fb:
bd:45:34:7c:5e:43:40:05:c8:1f:8a:65:a7:71:d6:
78:d1:ef:04:0f:26:fe:c9:cf:89:a0:70:4c:cc:d0:
08:63:d8:bc:20:7e:97:e4:7e:7e:a0:c4:9b:45:ee:
b7:c5:ab:06:b5:7f:eb:c1:fe:af:d1:1f:f1:80:73:
a5:94:b4:5f:59:b6:2d:c1:1b:71:a2:d1:40:e8:c1:
fa:7a:8e:e4:a1:47:fc:f9:90:a3:90:4b:7d:2c:bc:
7c:2e:e3:43:e3:d9:45:82:99:7a:8f:72:4f:21:55:
02:6b:f7:1d:dc:8b:a2:c2:e2:42:64:6c:53:ce:d9:
3e:bd:92:ad:91:58:e0:b0:8d:c2:35:c1:04:95:74:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3D:77:1C:0F:3D:33:D9:5E:C7:B2:93:1A:7D:FD:0A:2C:F1:7A:93
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/yT13HA89M9lex7KTGn39CizxepM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.21.0/24
46.182.108.0/24
80.89.224.0/20
89.105.192.0/19
185.80.232.0/22
185.147.12.0/22
IPv6:
2001:968::/29
2a00:11f8::/29
2a07:5440::/29
Signature Algorithm: sha256WithRSAEncryption
2e:91:44:61:70:e3:7b:68:7f:4a:9b:85:4e:cc:5d:1c:c2:c3:
25:dd:8b:d7:a6:85:87:58:f9:e2:29:dd:b0:a6:ba:0a:16:6d:
04:ca:1e:9f:c1:cb:d5:ce:01:65:0a:22:8f:3c:88:a2:c3:bf:
ba:d7:fa:f9:46:4d:9b:d4:6a:78:4d:87:7f:ad:dd:7f:f6:a8:
59:19:42:f7:7b:9d:92:f3:b3:4c:83:30:e0:77:3a:55:ce:1d:
63:3f:bb:46:58:fd:7d:6a:d3:28:8e:d4:3d:dd:3b:29:32:23:
32:a7:d6:3c:6e:08:78:81:5a:93:2a:06:6a:50:72:a7:78:a3:
f0:d4:53:d3:ac:60:0d:61:fa:fc:e2:81:9d:ca:48:3b:48:2d:
6b:8b:e9:dd:26:89:f1:9d:26:9b:e6:bf:b0:f9:ce:cc:0e:8c:
0c:e0:4a:43:e6:30:7c:97:ed:8f:78:6c:ab:44:43:a5:2a:14:
31:f5:48:c2:66:09:dc:62:96:a6:b5:1f:79:14:18:3d:9b:23:
3b:e9:91:42:df:b4:f4:eb:71:d3:9d:a7:e8:9a:57:b6:79:02:
cb:40:34:5d:12:7d:c1:7d:6f:e0:6f:f3:53:8f:27:e7:84:4a:
ed:3d:01:e0:cf:37:96:55:f8:ba:32:58:12:24:88:ae:fd:41:
99:c8:8a:b4
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAZxxEM9fGsbF4cHbsSyNPN7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz
Zjc5MzAwHhcNMjYwMjE4MTQwNDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTNkNzcxYzBmM2QzM2Q5NWVjN2IyOTMxYTdkZmQwYTJjZjE3YTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAarxLZIv01/nA/Mno304YOZzxdu
LCW2us10SB+Vh5TMg1jI5JsW7MukPaxoMRLy2JAmhs9WV/5ZimS3HUI7uBsCmVMD
F0cvNjFt/51a6D6MgycCWCfyMeTrScnMw/fF5IE662Lya32R/nTuL54JREhmZdhD
Dfu9RTR8XkNABcgfimWncdZ40e8EDyb+yc+JoHBMzNAIY9i8IH6X5H5+oMSbRe63
xasGtX/rwf6v0R/xgHOllLRfWbYtwRtxotFA6MH6eo7koUf8+ZCjkEt9LLx8LuND
49lFgpl6j3JPIVUCa/cd3IuiwuJCZGxTztk+vZKtkVjgsI3CNcEElXTh6wIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFMk9dxwPPTPZXseykxp9/Qos8XqTMB8GA1UdIwQY
MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt
MDBiY2Q5YjkxYzFiLzEveVQxM0hBODlNOWxleDdLVEduMzlDaXp4ZXBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi
LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTAqBAIAATAkAwQAAjoVAwQA
LrZsAwQEUFngAwQFWWnAAwQCuVDoAwQCuZMMMBsEAgACMBUDBQMgAQloAwUDKgAR
+AMFAyoHVEAwDQYJKoZIhvcNAQELBQADggEBAC6RRGFw43tof0qbhU7MXRzCwyXd
i9emhYdY+eIp3bCmugoWbQTKHp/By9XOAWUKIo88iKLDv7rX+vlGTZvUanhNh3+t
3X/2qFkZQvd7nZLzs0yDMOB3OlXOHWM/u0ZY/X1q0yiO1D3dOykyIzKn1jxuCHiB
WpMqBmpQcqd4o/DUU9OsYA1h+vzigZ3KSDtILWuL6d0mifGdJpvmv7D5zswOjAzg
SkPmMHyX7Y94bKtEQ6UqFDH1SMJmCdxilqa1H3kUGD2bIzvpkULftPTrcdOdp+ia
V7Z5AstANF0SfcF9b+Bv81OPJ+eESu09AeDPN5ZV+LoyWBIkiK79QZnIirQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:54:30 2026 by rpki-client