Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/C5OsBMz5fQykWMCwQdFhSa-dVME.roa
File: C5OsBMz5fQykWMCwQdFhSa-dVME.roa (raw, json)
Hash identifier: VBECbuwyUI1l/OYWc21n03EPHCXetAxOxte4Dp1kyt0=
Subject key identifier: 0B:93:AC:04:CC:F9:7D:0C:A4:58:C0:B0:41:D1:61:49:AF:9D:54:C1
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 019A173112F6FE26B48F68E370FB32EB0049
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/C5OsBMz5fQykWMCwQdFhSa-dVME.roa
Signing time: Fri 24 Oct 2025 17:08:03 +0000
ROA not before: Fri 24 Oct 2025 17:08:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 31.131.12.0/22 maxlen: 22
31.133.24.0/22 maxlen: 22
31.133.192.0/24 maxlen: 24
31.133.193.0/24 maxlen: 24
31.133.194.0/24 maxlen: 24
31.133.195.0/24 maxlen: 24
31.133.196.0/23 maxlen: 23
31.133.198.0/24 maxlen: 24
31.133.199.0/24 maxlen: 24
31.135.1.0/24 maxlen: 24
31.135.7.0/24 maxlen: 24
37.97.122.0/23 maxlen: 23
64.43.66.0/23 maxlen: 23
64.43.68.0/22 maxlen: 22
64.43.80.0/21 maxlen: 21
77.36.4.0/22 maxlen: 22
77.36.8.0/21 maxlen: 21
77.36.28.0/23 maxlen: 23
77.36.30.0/24 maxlen: 24
77.36.32.0/22 maxlen: 22
77.36.36.0/23 maxlen: 23
77.36.38.0/23 maxlen: 23
77.36.40.0/21 maxlen: 21
77.36.48.0/22 maxlen: 22
77.36.52.0/23 maxlen: 23
77.36.57.0/24 maxlen: 24
77.36.60.0/24 maxlen: 24
77.36.65.0/24 maxlen: 24
77.36.68.0/22 maxlen: 22
77.36.80.0/21 maxlen: 21
77.36.89.0/24 maxlen: 24
77.36.90.0/23 maxlen: 23
77.36.92.0/22 maxlen: 22
77.36.96.0/20 maxlen: 20
77.232.192.0/23 maxlen: 24
77.232.194.0/23 maxlen: 23
77.232.196.0/22 maxlen: 22
77.232.200.0/22 maxlen: 22
77.232.204.0/22 maxlen: 22
77.232.208.0/21 maxlen: 21
77.232.220.0/22 maxlen: 22
81.161.12.0/22 maxlen: 22
85.204.196.0/23 maxlen: 24
86.104.132.0/23 maxlen: 24
89.34.74.0/23 maxlen: 24
89.42.232.0/23 maxlen: 24
89.44.100.0/23 maxlen: 24
89.45.92.0/23 maxlen: 24
89.46.112.0/23 maxlen: 24
91.218.252.0/23 maxlen: 23
91.218.254.0/23 maxlen: 23
91.223.158.0/24 maxlen: 24
91.225.34.0/24 maxlen: 24
91.225.35.0/24 maxlen: 24
91.228.119.0/24 maxlen: 24
91.229.6.0/24 maxlen: 24
91.229.16.0/23 maxlen: 23
91.229.31.0/24 maxlen: 24
91.229.156.0/23 maxlen: 23
91.229.158.0/24 maxlen: 24
91.229.159.0/24 maxlen: 24
91.231.223.0/24 maxlen: 24
91.231.224.0/23 maxlen: 23
91.231.226.0/24 maxlen: 24
91.232.16.0/23 maxlen: 23
91.232.254.0/24 maxlen: 24
91.233.2.0/23 maxlen: 23
91.233.202.0/23 maxlen: 23
91.234.150.0/23 maxlen: 23
91.234.220.0/23 maxlen: 23
91.234.222.0/23 maxlen: 23
91.236.77.0/24 maxlen: 24
91.236.237.0/24 maxlen: 24
91.237.48.0/24 maxlen: 24
91.239.0.0/22 maxlen: 22
91.239.178.0/24 maxlen: 24
91.239.222.0/23 maxlen: 23
91.240.156.0/22 maxlen: 22
91.245.176.0/21 maxlen: 21
91.246.184.0/22 maxlen: 22
91.246.188.0/22 maxlen: 22
91.246.196.0/22 maxlen: 22
93.120.8.0/24 maxlen: 24
93.120.9.0/24 maxlen: 24
93.120.12.0/22 maxlen: 22
93.120.27.0/24 maxlen: 24
93.120.28.0/23 maxlen: 23
93.120.30.0/24 maxlen: 24
93.120.46.0/24 maxlen: 24
93.120.48.0/20 maxlen: 20
93.120.64.0/21 maxlen: 21
93.120.74.0/24 maxlen: 24
93.120.75.0/24 maxlen: 24
93.120.76.0/22 maxlen: 22
93.120.80.0/22 maxlen: 22
93.120.85.0/24 maxlen: 24
93.120.86.0/23 maxlen: 23
93.120.88.0/23 maxlen: 23
93.120.90.0/24 maxlen: 24
93.120.92.0/23 maxlen: 23
93.120.94.0/23 maxlen: 23
93.120.112.0/21 maxlen: 21
93.120.120.0/22 maxlen: 22
93.120.124.0/22 maxlen: 22
109.207.140.0/23 maxlen: 23
171.25.223.0/24 maxlen: 24
176.96.48.0/22 maxlen: 22
176.96.56.0/21 maxlen: 21
176.96.93.0/24 maxlen: 24
176.96.176.0/22 maxlen: 22
176.96.180.0/22 maxlen: 22
176.97.144.0/22 maxlen: 22
176.97.148.0/22 maxlen: 22
176.98.56.0/22 maxlen: 22
176.98.60.0/22 maxlen: 22
176.107.64.0/20 maxlen: 24
176.107.72.0/21 maxlen: 21
176.110.106.0/24 maxlen: 24
176.110.114.0/23 maxlen: 23
176.111.0.0/22 maxlen: 22
176.111.4.0/22 maxlen: 22
176.112.84.0/22 maxlen: 22
176.116.40.0/21 maxlen: 21
176.118.88.0/22 maxlen: 22
176.118.92.0/22 maxlen: 22
176.121.96.0/21 maxlen: 21
176.124.176.0/22 maxlen: 22
176.124.180.0/22 maxlen: 22
178.159.147.0/24 maxlen: 24
178.159.148.0/22 maxlen: 22
178.159.152.0/21 maxlen: 21
185.9.236.0/22 maxlen: 22
185.9.240.0/22 maxlen: 22
185.104.196.0/22 maxlen: 24
188.191.248.0/22 maxlen: 22
188.191.252.0/22 maxlen: 22
188.213.233.0/24 maxlen: 24
193.0.190.0/24 maxlen: 24
193.36.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:31:12:f6:fe:26:b4:8f:68:e3:70:fb:32:eb:00:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Oct 24 17:08:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b93ac04ccf97d0ca458c0b041d16149af9d54c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3e:b2:4f:9b:1b:0d:ae:32:07:64:f8:28:51:
77:c3:53:13:22:a7:c1:13:dc:6c:33:82:cc:5e:94:
ee:9d:62:1f:c3:23:38:bd:d7:b7:51:4e:50:98:e4:
1d:7b:af:9a:54:0e:e7:4d:74:f3:1f:f8:49:78:62:
d9:cd:30:cc:29:9a:ea:59:a6:2d:0e:31:e4:d8:34:
f9:a0:71:48:02:34:c1:d7:8a:3b:5e:63:28:6b:22:
95:3b:6f:55:c1:91:29:91:6a:20:c9:58:a8:56:22:
be:7a:7d:99:48:f9:bc:1f:8f:25:bf:d7:b8:e7:84:
07:32:80:29:f6:b1:44:a1:17:9d:48:7b:55:a3:b6:
d1:55:47:51:de:8b:ce:fa:8d:78:d2:74:a3:71:c2:
51:38:d2:b6:7c:bb:32:0b:cb:34:32:e5:99:e7:84:
af:f1:27:cc:6a:eb:5e:9e:75:f3:1a:0a:90:86:07:
c3:54:a4:02:ad:05:c6:23:22:1d:0a:c9:86:0b:ed:
3b:e0:7a:7c:78:4a:03:32:7d:1c:cc:37:ff:26:b5:
4f:9c:bd:99:20:48:f1:33:d1:37:ca:16:89:1c:ee:
bf:61:bf:9f:46:7f:ff:c2:7f:44:0c:43:c7:76:fa:
8d:12:db:8d:a6:ef:f5:90:7f:35:d1:32:3c:9e:27:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:93:AC:04:CC:F9:7D:0C:A4:58:C0:B0:41:D1:61:49:AF:9D:54:C1
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/C5OsBMz5fQykWMCwQdFhSa-dVME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.12.0/22
31.133.24.0/22
31.133.192.0/21
31.135.1.0/24
31.135.7.0/24
37.97.122.0/23
64.43.66.0-64.43.71.255
64.43.80.0/21
77.36.4.0-77.36.15.255
77.36.28.0-77.36.30.255
77.36.32.0-77.36.53.255
77.36.57.0/24
77.36.60.0/24
77.36.65.0/24
77.36.68.0/22
77.36.80.0/21
77.36.89.0-77.36.111.255
77.232.192.0-77.232.215.255
77.232.220.0/22
81.161.12.0/22
85.204.196.0/23
86.104.132.0/23
89.34.74.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
89.46.112.0/23
91.218.252.0/22
91.223.158.0/24
91.225.34.0/23
91.228.119.0/24
91.229.6.0/24
91.229.16.0/23
91.229.31.0/24
91.229.156.0/22
91.231.223.0-91.231.226.255
91.232.16.0/23
91.232.254.0/24
91.233.2.0/23
91.233.202.0/23
91.234.150.0/23
91.234.220.0/22
91.236.77.0/24
91.236.237.0/24
91.237.48.0/24
91.239.0.0/22
91.239.178.0/24
91.239.222.0/23
91.240.156.0/22
91.245.176.0/21
91.246.184.0/21
91.246.196.0/22
93.120.8.0/23
93.120.12.0/22
93.120.27.0-93.120.30.255
93.120.46.0/24
93.120.48.0-93.120.71.255
93.120.74.0-93.120.83.255
93.120.85.0-93.120.90.255
93.120.92.0/22
93.120.112.0/20
109.207.140.0/23
171.25.223.0/24
176.96.48.0/22
176.96.56.0/21
176.96.93.0/24
176.96.176.0/21
176.97.144.0/21
176.98.56.0/21
176.107.64.0/20
176.110.106.0/24
176.110.114.0/23
176.111.0.0/21
176.112.84.0/22
176.116.40.0/21
176.118.88.0/21
176.121.96.0/21
176.124.176.0/21
178.159.147.0-178.159.159.255
185.9.236.0-185.9.243.255
185.104.196.0/22
188.191.248.0/21
188.213.233.0/24
193.0.190.0/24
193.36.192.0/21
Signature Algorithm: sha256WithRSAEncryption
38:66:47:f5:bb:ef:fd:97:d1:f4:87:c7:e8:fc:d6:e3:f7:9c:
32:a9:dc:32:78:01:a0:88:65:62:82:90:1d:b5:ac:1b:8a:97:
74:22:ef:3d:6f:e5:1a:01:c2:7d:38:47:5c:28:ab:f9:32:59:
b0:b9:9f:0f:93:d3:2b:0b:1e:73:33:39:e7:13:72:f5:0d:13:
8e:d1:3e:26:78:5d:83:1e:f3:8f:94:0c:02:0b:9c:25:05:68:
d7:01:18:fc:4d:91:84:b0:45:27:62:5f:aa:34:15:af:35:65:
ae:4a:cf:51:71:9d:be:a9:42:11:f1:05:6e:c8:dd:10:fe:0f:
34:3f:b7:e6:1f:a4:4b:c0:19:76:ed:01:f9:e1:af:a6:31:96:
23:01:3f:eb:92:85:9e:5d:34:5e:4b:ec:05:3b:d9:e3:87:55:
71:5a:bb:34:ec:35:62:81:04:09:5c:09:42:a2:a0:5d:70:11:
26:c1:af:fc:df:1b:84:34:3b:20:bd:7b:9d:90:83:8f:c0:68:
ec:2a:73:85:6b:82:09:7c:e7:62:e7:a2:34:46:c1:68:7a:84:
06:ed:a2:8c:d3:4f:1c:4c:1e:59:ac:9e:8c:27:0e:27:12:12:
5c:1d:9c:1d:c8:62:9d:1b:cc:b3:91:39:58:80:40:3e:a1:96:
1c:52:8f:0f
-----BEGIN CERTIFICATE-----
MIIHZzCCBk+gAwIBAgISAZoXMRL2/ia0j2jjcPsy6wBJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjUxMDI0MTcwODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjkzYWMwNGNjZjk3ZDBjYTQ1OGMwYjA0MWQxNjE0OWFmOWQ1NGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5z6yT5sbDa4yB2T4KFF3w1MTIqfB
E9xsM4LMXpTunWIfwyM4vde3UU5QmOQde6+aVA7nTXTzH/hJeGLZzTDMKZrqWaYt
DjHk2DT5oHFIAjTB14o7XmMoayKVO29VwZEpkWogyVioViK+en2ZSPm8H48lv9e4
54QHMoAp9rFEoRedSHtVo7bRVUdR3ovO+o140nSjccJRONK2fLsyC8s0MuWZ54Sv
8SfMautennXzGgqQhgfDVKQCrQXGIyIdCsmGC+074Hp8eEoDMn0czDf/JrVPnL2Z
IEjxM9E3yhaJHO6/Yb+fRn//wn9EDEPHdvqNEtuNpu/1kH810TI8niehNQIDAQAB
o4IEczCCBG8wHQYDVR0OBBYEFAuTrATM+X0MpFjAsEHRYUmvnVTBMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvQzVPc0JNejVmUXlrV01Dd1FkRmhTYS1kVk1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIChwYIKwYBBQUHAQcBAf8EggJ2MIICcjCCAm4EAgABMIIC
ZgMEAh+DDAMEAh+FGAMEAx+FwAMEAB+HAQMEAB+HBwMEASVhejAMAwQBQCtCAwQD
QCtAAwQDQCtQMAwDBAJNJAQDBARNJAAwDAMEAk0kHAMEAE0kHjAMAwQFTSQgAwQB
TSQ0AwQATSQ5AwQATSQ8AwQATSRBAwQCTSREAwQDTSRQMAwDBABNJFkDBARNJGAw
DAMEBk3owAMEA03o0AMEAk3o3AMEAlGhDAMEAVXMxAMEAVZohAMEAVkiSgMEAVkq
6AMEAVksZAMEAVktXAMEAVkucAMEAlva/AMEAFvfngMEAVvhIgMEAFvkdwMEAFvl
BgMEAVvlEAMEAFvlHwMEAlvlnDAMAwQAW+ffAwQAW+fiAwQBW+gQAwQAW+j+AwQB
W+kCAwQBW+nKAwQBW+qWAwQCW+rcAwQAW+xNAwQAW+ztAwQAW+0wAwQCW+8AAwQA
W++yAwQBW+/eAwQCW/CcAwQDW/WwAwQDW/a4AwQCW/bEAwQBXXgIAwQCXXgMMAwD
BABdeBsDBABdeB4DBABdeC4wDAMEBF14MAMEA114QDAMAwQBXXhKAwQCXXhQMAwD
BABdeFUDBABdeFoDBAJdeFwDBARdeHADBAFtz4wDBACrGd8DBAKwYDADBAOwYDgD
BACwYF0DBAOwYLADBAOwYZADBAOwYjgDBASwa0ADBACwbmoDBAGwbnIDBAOwbwAD
BAKwcFQDBAOwdCgDBAOwdlgDBAOweWADBAOwfLAwDAMEALKfkwMEBbKfgDAMAwQC
uQnsAwQCuQnwAwQCuWjEAwQDvL/4AwQAvNXpAwQAwQC+AwQDwSTAMA0GCSqGSIb3
DQEBCwUAA4IBAQA4Zkf1u+/9l9H0h8fo/Nbj95wyqdwyeAGgiGVigpAdtawbipd0
Iu89b+UaAcJ9OEdcKKv5MlmwuZ8Pk9MrCx5zMznnE3L1DROO0T4meF2DHvOPlAwC
C5wlBWjXARj8TZGEsEUnYl+qNBWvNWWuSs9RcZ2+qUIR8QVuyN0Q/g80P7fmH6RL
wBl27QH54a+mMZYjAT/rkoWeXTReS+wFO9njh1VxWrs07DVigQQJXAlCoqBdcBEm
wa/83xuENDsgvXudkIOPwGjsKnOFa4IJfOdi56I0RsFoeoQG7aKM008cTB5ZrJ6M
Jw4nEhJcHZwdyGKdG8yzkTlYgEA+oZYcUo8P
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:30:05 2025 by rpki-client