Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/EYW0DPWxBVq8OkJlufsQTH29-zg.roa
File: EYW0DPWxBVq8OkJlufsQTH29-zg.roa (raw, json)
Hash identifier: LYmKFSnt04HxJKJsThK8gfh7k7FUGUtbXQNPAEzqIUM=
Subject key identifier: 11:85:B4:0C:F5:B1:05:5A:BC:3A:42:65:B9:FB:10:4C:7D:BD:FB:38
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 019C7001D09549B6143CFC6A0F4A41873D2D
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/EYW0DPWxBVq8OkJlufsQTH29-zg.roa
Signing time: Wed 18 Feb 2026 09:08:12 +0000
ROA not before: Wed 18 Feb 2026 09:08:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2860
IP address blocks: 62.169.64.0/18 maxlen: 18
78.130.0.0/17 maxlen: 17
79.168.0.0/15 maxlen: 15
79.168.0.0/18 maxlen: 18
79.168.64.0/18 maxlen: 18
79.168.128.0/18 maxlen: 18
79.168.192.0/18 maxlen: 18
79.169.0.0/18 maxlen: 18
79.169.64.0/18 maxlen: 18
79.169.128.0/18 maxlen: 18
79.169.192.0/18 maxlen: 18
80.243.80.0/20 maxlen: 20
81.84.0.0/16 maxlen: 16
81.84.0.0/18 maxlen: 18
81.84.64.0/18 maxlen: 18
81.84.128.0/18 maxlen: 18
81.84.192.0/18 maxlen: 18
83.132.0.0/16 maxlen: 16
83.132.0.0/18 maxlen: 18
83.132.64.0/18 maxlen: 18
83.132.128.0/18 maxlen: 18
83.132.192.0/18 maxlen: 18
83.144.128.0/18 maxlen: 18
85.138.0.0/15 maxlen: 15
85.138.0.0/18 maxlen: 18
85.138.64.0/18 maxlen: 18
85.138.128.0/18 maxlen: 18
85.138.192.0/18 maxlen: 18
85.139.0.0/18 maxlen: 18
85.139.64.0/18 maxlen: 18
85.139.128.0/18 maxlen: 18
85.139.192.0/18 maxlen: 18
87.196.0.0/16 maxlen: 16
87.196.0.0/18 maxlen: 18
87.196.64.0/19 maxlen: 19
88.157.0.0/18 maxlen: 18
88.157.134.0/24 maxlen: 24
88.157.230.0/24 maxlen: 24
88.157.231.0/24 maxlen: 24
88.210.64.0/18 maxlen: 18
89.152.0.0/14 maxlen: 14
89.152.0.0/18 maxlen: 18
89.152.64.0/18 maxlen: 18
89.152.128.0/18 maxlen: 18
89.152.192.0/18 maxlen: 18
89.153.0.0/18 maxlen: 18
89.153.64.0/18 maxlen: 18
89.153.128.0/18 maxlen: 18
89.153.192.0/18 maxlen: 18
89.154.0.0/18 maxlen: 18
89.154.64.0/18 maxlen: 18
89.154.128.0/18 maxlen: 18
89.154.192.0/18 maxlen: 18
89.155.0.0/18 maxlen: 18
89.155.64.0/18 maxlen: 18
89.155.128.0/18 maxlen: 18
89.155.192.0/18 maxlen: 18
89.180.0.0/15 maxlen: 15
89.180.0.0/16 maxlen: 16
89.180.128.0/18 maxlen: 18
89.181.0.0/16 maxlen: 16
89.181.128.0/18 maxlen: 18
89.181.192.0/18 maxlen: 18
93.102.0.0/16 maxlen: 16
93.102.0.0/18 maxlen: 18
93.102.64.0/18 maxlen: 18
94.132.0.0/15 maxlen: 15
94.132.0.0/18 maxlen: 18
94.132.64.0/18 maxlen: 18
94.132.128.0/18 maxlen: 18
94.132.192.0/18 maxlen: 18
94.133.0.0/18 maxlen: 18
94.133.64.0/18 maxlen: 18
94.133.128.0/18 maxlen: 18
94.133.192.0/18 maxlen: 18
95.92.0.0/14 maxlen: 14
95.92.0.0/18 maxlen: 18
95.92.64.0/18 maxlen: 18
95.92.128.0/18 maxlen: 18
95.92.192.0/18 maxlen: 18
95.93.0.0/18 maxlen: 18
95.93.64.0/18 maxlen: 18
95.93.128.0/18 maxlen: 18
95.93.192.0/18 maxlen: 18
95.94.0.0/18 maxlen: 18
95.94.64.0/18 maxlen: 18
95.94.128.0/18 maxlen: 18
95.94.192.0/18 maxlen: 18
95.95.0.0/18 maxlen: 18
95.95.64.0/18 maxlen: 18
95.95.128.0/18 maxlen: 18
95.95.192.0/18 maxlen: 18
109.48.0.0/14 maxlen: 14
109.48.0.0/18 maxlen: 18
109.48.64.0/18 maxlen: 18
109.48.128.0/18 maxlen: 18
109.48.192.0/18 maxlen: 18
109.49.0.0/18 maxlen: 18
109.49.64.0/18 maxlen: 18
109.49.128.0/18 maxlen: 18
109.49.192.0/18 maxlen: 18
109.50.64.0/18 maxlen: 18
109.50.128.0/18 maxlen: 18
109.50.192.0/18 maxlen: 18
109.51.0.0/18 maxlen: 18
109.51.64.0/18 maxlen: 18
109.51.128.0/18 maxlen: 18
109.51.192.0/18 maxlen: 18
185.224.164.0/22 maxlen: 22
212.113.160.0/19 maxlen: 19
213.22.0.0/16 maxlen: 16
213.22.0.0/18 maxlen: 18
213.22.64.0/18 maxlen: 18
213.22.128.0/18 maxlen: 18
213.22.192.0/18 maxlen: 18
217.70.64.0/20 maxlen: 20
2001:1588::/29 maxlen: 29
2a01:8::/29 maxlen: 29
2a01:8:8011::/48 maxlen: 48
2a01:10::/29 maxlen: 29
2a01:11::/33 maxlen: 33
2a01:11:8000::/33 maxlen: 33
2a01:14::/33 maxlen: 33
2a01:14:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:01:d0:95:49:b6:14:3c:fc:6a:0f:4a:41:87:3d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Feb 18 09:08:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1185b40cf5b1055abc3a4265b9fb104c7dbdfb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:80:9e:fa:73:e4:6f:f2:6a:5b:ad:d4:e8:2f:
0b:4a:71:b0:83:a7:ad:a3:09:e6:9e:f3:c5:0b:49:
1a:4d:32:f1:0f:f5:e6:50:7c:e9:96:06:b1:4a:94:
7a:67:f0:0d:54:fb:a9:c3:14:a6:3f:88:b3:2c:15:
b3:03:d1:73:30:66:2d:95:04:c1:11:d7:0b:c1:37:
47:7e:ef:3a:7b:29:9c:fa:e3:98:7e:ed:92:86:83:
d2:98:2e:74:a3:7f:e3:57:99:13:de:ac:8b:f1:aa:
e3:ab:57:54:3e:d5:3c:40:77:48:e1:82:13:8f:4a:
95:6e:d7:21:01:17:e5:ae:84:d6:5c:73:b4:a9:ac:
81:af:3b:22:31:b7:1e:b6:da:8c:49:cf:99:60:93:
3f:db:10:e4:1c:f5:48:df:e9:22:a4:c5:4f:ed:6b:
1b:a4:5f:fe:a2:05:d8:d7:e1:e4:04:ab:d3:a4:90:
be:db:d6:1a:6e:67:06:99:08:d0:e4:9e:8e:61:78:
a9:1b:d7:d3:6c:d9:32:31:82:2a:98:b8:9a:de:02:
70:57:99:fa:e4:fc:1e:99:c3:ce:1d:d6:f0:bd:ee:
a0:0b:fb:f0:73:85:68:78:bd:88:9d:17:b8:e0:46:
5f:e3:d9:71:d0:e2:e7:85:c4:a1:f2:1b:f2:48:e9:
e5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:85:B4:0C:F5:B1:05:5A:BC:3A:42:65:B9:FB:10:4C:7D:BD:FB:38
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/EYW0DPWxBVq8OkJlufsQTH29-zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.64.0/18
78.130.0.0/17
79.168.0.0/15
80.243.80.0/20
81.84.0.0/16
83.132.0.0/16
83.144.128.0/18
85.138.0.0/15
87.196.0.0/16
88.157.0.0/18
88.157.134.0/24
88.157.230.0/23
88.210.64.0/18
89.152.0.0/14
89.180.0.0/15
93.102.0.0/16
94.132.0.0/15
95.92.0.0/14
109.48.0.0/14
185.224.164.0/22
212.113.160.0/19
213.22.0.0/16
217.70.64.0/20
IPv6:
2001:1588::/29
2a01:8::-2a01:17:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9c:60:db:74:a5:66:85:f9:38:67:bc:37:9a:02:72:40:16:d8:
af:7b:e7:cb:45:3e:30:b6:89:7d:92:c2:b9:df:3c:c4:51:83:
67:a0:e0:5e:81:25:4c:e8:92:a7:0f:9b:95:49:a4:de:53:df:
cc:ac:fc:aa:df:c7:09:31:ec:0f:ce:ea:39:4b:72:a0:b1:04:
7a:53:0e:89:4b:55:e1:1e:1e:04:43:c4:57:b7:92:c7:6a:65:
88:ad:5d:83:7f:f5:9f:64:dd:ba:af:39:e7:17:e4:cc:4f:61:
ab:54:a7:ae:84:1e:62:29:09:aa:3b:6d:41:49:01:91:62:b3:
f7:87:38:50:68:91:1e:65:c8:72:1d:4a:1a:0a:67:b4:84:c4:
8f:6e:90:74:b9:e7:dc:54:58:77:1d:2e:0b:d4:b1:55:f3:f2:
ce:b0:d1:75:e5:09:ab:1c:f1:91:81:a1:41:9a:02:d9:43:95:
df:3a:77:33:ec:c7:71:96:f3:1e:ed:40:8a:0b:a1:90:0e:02:
bb:58:d6:c2:e1:09:c0:b2:97:af:26:c0:e4:18:dc:7c:83:10:
84:14:8e:72:83:b5:d4:16:57:a3:2e:44:e3:68:4a:f7:c8:f8:
3f:82:77:45:66:80:8c:cb:02:d2:b1:ab:35:1f:c4:bc:37:30:
50:0d:66:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:42 2026 by rpki-client