Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/DZwqiWSn_F55yvhwp8dj7miPLsg.roa
File: DZwqiWSn_F55yvhwp8dj7miPLsg.roa (raw, json)
Hash identifier: xysHFYijRrvtjE9RE1rvWX6tjIQeGfq58aqN5RN9Gro=
Subject key identifier: 0D:9C:2A:89:64:A7:FC:5E:79:CA:F8:70:A7:C7:63:EE:68:8F:2E:C8
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 01A1A9F6AD1BAAED69AD9DB0860988BB947F
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/DZwqiWSn_F55yvhwp8dj7miPLsg.roa
Signing time: Thu 05 Nov 2026 04:27:58 +0000
ROA not before: Thu 05 Nov 2026 04:27:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204170
IP address blocks: 5.102.176.0/21 maxlen: 21
5.102.176.0/24 maxlen: 24
5.102.178.0/24 maxlen: 24
5.102.179.0/24 maxlen: 24
5.102.180.0/24 maxlen: 24
5.102.181.0/24 maxlen: 24
5.102.182.0/24 maxlen: 24
5.102.183.0/24 maxlen: 24
78.111.32.0/20 maxlen: 20
78.111.32.0/24 maxlen: 24
78.111.33.0/24 maxlen: 24
78.111.34.0/24 maxlen: 24
78.111.35.0/24 maxlen: 24
78.111.36.0/24 maxlen: 24
78.111.37.0/24 maxlen: 24
78.111.38.0/24 maxlen: 24
78.111.39.0/24 maxlen: 24
78.111.40.0/24 maxlen: 24
78.111.41.0/24 maxlen: 24
78.111.42.0/24 maxlen: 24
78.111.43.0/24 maxlen: 24
78.111.44.0/24 maxlen: 24
78.111.45.0/24 maxlen: 24
78.111.46.0/24 maxlen: 24
78.111.47.0/24 maxlen: 24
84.242.32.0/20 maxlen: 20
84.242.32.0/24 maxlen: 24
84.242.33.0/24 maxlen: 24
84.242.34.0/24 maxlen: 24
84.242.35.0/24 maxlen: 24
84.242.36.0/24 maxlen: 24
84.242.37.0/24 maxlen: 24
84.242.38.0/24 maxlen: 24
84.242.39.0/24 maxlen: 24
84.242.40.0/24 maxlen: 24
84.242.41.0/24 maxlen: 24
84.242.42.0/24 maxlen: 24
84.242.43.0/24 maxlen: 24
84.242.44.0/24 maxlen: 24
84.242.45.0/24 maxlen: 24
84.242.46.0/24 maxlen: 24
84.242.47.0/24 maxlen: 24
94.176.16.0/20 maxlen: 20
94.176.16.0/24 maxlen: 24
94.176.17.0/24 maxlen: 24
94.176.18.0/24 maxlen: 24
94.176.19.0/24 maxlen: 24
94.176.20.0/24 maxlen: 24
94.176.21.0/24 maxlen: 24
94.176.22.0/24 maxlen: 24
94.176.23.0/24 maxlen: 24
94.176.24.0/24 maxlen: 24
94.176.25.0/24 maxlen: 24
94.176.26.0/24 maxlen: 24
94.176.27.0/24 maxlen: 24
94.176.28.0/24 maxlen: 24
94.176.29.0/24 maxlen: 24
94.176.30.0/24 maxlen: 24
94.176.31.0/24 maxlen: 24
96.9.128.0/19 maxlen: 19
96.9.128.0/24 maxlen: 24
96.9.129.0/24 maxlen: 24
96.9.130.0/24 maxlen: 24
96.9.131.0/24 maxlen: 24
96.9.132.0/24 maxlen: 24
96.9.133.0/24 maxlen: 24
96.9.134.0/24 maxlen: 24
96.9.135.0/24 maxlen: 24
96.9.136.0/24 maxlen: 24
96.9.137.0/24 maxlen: 24
96.9.138.0/24 maxlen: 24
96.9.139.0/24 maxlen: 24
96.9.140.0/24 maxlen: 24
96.9.141.0/24 maxlen: 24
96.9.142.0/24 maxlen: 24
96.9.143.0/24 maxlen: 24
96.9.144.0/24 maxlen: 24
96.9.146.0/24 maxlen: 24
96.9.147.0/24 maxlen: 24
96.9.148.0/24 maxlen: 24
96.9.149.0/24 maxlen: 24
96.9.150.0/24 maxlen: 24
96.9.151.0/24 maxlen: 24
96.9.152.0/24 maxlen: 24
96.9.153.0/24 maxlen: 24
96.9.154.0/24 maxlen: 24
96.9.155.0/24 maxlen: 24
96.9.156.0/24 maxlen: 24
96.9.157.0/24 maxlen: 24
96.9.158.0/24 maxlen: 24
96.9.159.0/24 maxlen: 24
141.105.168.0/21 maxlen: 21
141.105.168.0/24 maxlen: 24
141.105.169.0/24 maxlen: 24
141.105.170.0/24 maxlen: 24
141.105.171.0/24 maxlen: 24
141.105.172.0/24 maxlen: 24
141.105.173.0/24 maxlen: 24
141.105.174.0/24 maxlen: 24
141.105.175.0/24 maxlen: 24
178.20.16.0/21 maxlen: 21
178.20.16.0/24 maxlen: 24
178.20.17.0/24 maxlen: 24
178.20.18.0/24 maxlen: 24
178.20.19.0/24 maxlen: 24
178.20.20.0/24 maxlen: 24
178.20.21.0/24 maxlen: 24
178.20.22.0/24 maxlen: 24
178.20.23.0/24 maxlen: 24
185.29.140.0/22 maxlen: 22
185.29.140.0/24 maxlen: 24
185.29.141.0/24 maxlen: 24
185.29.142.0/24 maxlen: 24
185.29.143.0/24 maxlen: 24
185.112.104.0/22 maxlen: 22
185.112.104.0/24 maxlen: 24
185.112.105.0/24 maxlen: 24
185.112.106.0/24 maxlen: 24
185.112.107.0/24 maxlen: 24
199.48.224.0/24 maxlen: 24
206.167.33.0/24 maxlen: 24
2a0a:c740::/32 maxlen: 48
2a0a:c740::/48 maxlen: 48
2a0a:c740:2::/48 maxlen: 48
2a0a:c740:3::/48 maxlen: 48
2a0a:c740:4::/48 maxlen: 48
2a0a:c740:5::/48 maxlen: 48
2a0a:c740:7::/48 maxlen: 48
2a0a:c740:8::/48 maxlen: 48
2a0a:c740:a::/48 maxlen: 48
2a0a:c740:b::/48 maxlen: 48
2a0a:c740:100::/48 maxlen: 48
2a0a:c740:200::/48 maxlen: 48
2a0a:c740:1009::/48 maxlen: 48
2a0a:c740:1063::/48 maxlen: 48
2a0a:c740:1064::/48 maxlen: 48
2a0a:c740:2000::/48 maxlen: 48
2a0a:c740:2009::/48 maxlen: 48
2a0a:c740:2063::/48 maxlen: 48
2a0a:c740:2064::/48 maxlen: 48
2a0a:c740:9998::/48 maxlen: 48
2a0a:c740:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:f6:ad:1b:aa:ed:69:ad:9d:b0:86:09:88:bb:94:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Nov 5 04:27:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d9c2a8964a7fc5e79caf870a7c763ee688f2ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:af:5d:51:65:8d:6a:28:d1:a8:fe:d9:87:
e5:91:e2:16:08:a2:ed:b3:24:ed:44:fb:e7:1b:8d:
ed:60:8e:a3:0d:af:cd:1a:b9:cf:62:d6:4b:58:2d:
5f:1c:1a:45:4a:47:0e:5c:a4:f5:49:af:9f:86:c7:
e8:a2:b5:f1:93:6c:6c:36:a8:46:a0:f1:eb:29:9c:
3a:80:88:0d:3b:05:86:dd:c4:27:b1:13:a1:cf:e1:
7a:e9:66:75:94:37:79:fe:94:da:74:1b:ae:b0:90:
ea:e7:5c:ff:cd:ce:b4:95:3f:d7:72:89:bd:0b:fb:
a8:08:c8:c4:cb:62:11:92:60:6b:11:1e:f6:41:ad:
f6:02:96:df:6b:a2:05:b2:c5:03:b2:5b:ad:70:6e:
7d:4c:44:f7:1b:3e:4b:cf:a8:cb:ac:ae:a0:b4:32:
37:f2:f5:21:0c:bf:48:e8:e9:82:59:09:2a:9e:c2:
8d:84:b2:e3:0e:e0:d2:db:a3:c7:08:b6:8c:1b:90:
b8:3c:fb:f2:1e:74:09:c0:c4:7d:6a:63:4c:89:4a:
a9:a0:c9:52:c9:90:57:a8:9f:11:47:4a:b2:cb:f6:
05:f8:e4:d8:72:e9:81:75:7b:b4:ec:28:25:fe:2b:
67:c2:15:8a:0a:03:b4:49:8b:86:87:5a:f5:56:a6:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9C:2A:89:64:A7:FC:5E:79:CA:F8:70:A7:C7:63:EE:68:8F:2E:C8
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/DZwqiWSn_F55yvhwp8dj7miPLsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.176.0/21
78.111.32.0/20
84.242.32.0/20
94.176.16.0/20
96.9.128.0/19
141.105.168.0/21
178.20.16.0/21
185.29.140.0/22
185.112.104.0/22
199.48.224.0/24
206.167.33.0/24
IPv6:
2a0a:c740::/32
Signature Algorithm: sha256WithRSAEncryption
4c:f2:00:d6:08:f7:1f:9f:bf:48:c4:aa:51:b4:b1:ef:df:93:
89:1d:92:d8:74:c9:0f:65:5e:a9:b0:b6:b5:42:9b:34:a8:58:
79:39:81:35:e7:1a:bd:9b:17:18:ad:47:4e:47:b0:94:a3:2a:
94:1c:c4:37:1e:97:68:a3:80:e6:1c:b2:e3:c8:14:94:7d:d6:
a2:8d:c2:d5:2b:de:61:33:13:37:a2:ce:0a:d2:0a:d6:db:f2:
d6:ae:c9:4d:33:6a:c8:ad:5a:9d:9d:7c:b4:2e:b0:58:8b:d1:
f4:97:c7:27:a9:ca:ae:7f:c3:18:84:4b:4a:6e:2c:ae:15:1b:
25:a3:48:62:9c:6b:8e:cd:dd:da:9a:16:41:d5:cb:07:dc:76:
06:88:b4:70:39:5d:08:68:5e:05:0b:0e:a3:1d:cf:a3:3e:8a:
8c:2a:10:a9:97:f9:4d:00:b0:44:fb:90:87:e9:32:82:15:5c:
2d:52:fa:90:cd:94:a4:7a:8f:87:fe:9e:39:ec:da:eb:43:1b:
10:2a:f4:6c:5d:3d:97:3b:c9:c1:8c:8c:71:e2:0a:56:65:98:
21:3a:6e:9f:5a:22:6a:db:91:0d:6d:5e:10:60:7f:28:2f:99:
89:95:fe:50:3c:d9:c6:7b:65:fe:4d:58:4e:18:a0:d7:f0:ae:
28:c2:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 08:49:55 2026 by rpki-client