Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/IPRJvTT5abzwXEgwtUATo_Cruio.roa
File: IPRJvTT5abzwXEgwtUATo_Cruio.roa (raw, json)
Hash identifier: nJcyG7boelvA22L3V0LARmjaagoz8Y3rCUmqrcO3Btw=
Subject key identifier: 20:F4:49:BD:34:F9:69:BC:F0:5C:48:30:B5:40:13:A3:F0:AB:BA:2A
Certificate issuer: /CN=1a59e9a3fc3fb5b0d582056a3b24553c56bd27f0
Certificate serial: 019C2E4EA9DF7B4995AC85A94A51C4A6BA33
Authority key identifier: 1A:59:E9:A3:FC:3F:B5:B0:D5:82:05:6A:3B:24:55:3C:56:BD:27:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/IPRJvTT5abzwXEgwtUATo_Cruio.roa
Signing time: Thu 05 Feb 2026 14:57:13 +0000
ROA not before: Thu 05 Feb 2026 14:57:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15805
IP address blocks: 31.216.64.0/18 maxlen: 18
31.216.64.0/19 maxlen: 19
31.216.64.0/20 maxlen: 20
31.216.64.0/21 maxlen: 21
31.216.64.0/22 maxlen: 22
31.216.68.0/22 maxlen: 22
31.216.72.0/21 maxlen: 21
31.216.76.0/24 maxlen: 24
31.216.80.0/20 maxlen: 20
31.216.80.0/21 maxlen: 21
31.216.80.0/24 maxlen: 24
31.216.83.0/24 maxlen: 24
31.216.86.0/24 maxlen: 24
31.216.88.0/21 maxlen: 21
31.216.96.0/19 maxlen: 19
31.216.96.0/20 maxlen: 20
31.216.96.0/21 maxlen: 21
31.216.104.0/21 maxlen: 21
31.216.112.0/20 maxlen: 20
31.216.117.0/24 maxlen: 24
82.102.32.0/19 maxlen: 19
82.102.32.0/20 maxlen: 20
82.102.32.0/21 maxlen: 21
82.102.32.0/22 maxlen: 22
82.102.32.0/23 maxlen: 23
82.102.34.0/23 maxlen: 23
82.102.36.0/22 maxlen: 22
82.102.36.0/23 maxlen: 23
82.102.38.0/23 maxlen: 23
82.102.38.0/24 maxlen: 24
82.102.40.0/21 maxlen: 21
82.102.40.0/22 maxlen: 22
82.102.42.0/24 maxlen: 24
82.102.44.0/22 maxlen: 22
82.102.45.0/24 maxlen: 24
82.102.48.0/20 maxlen: 20
82.102.48.0/21 maxlen: 21
82.102.48.0/22 maxlen: 22
82.102.48.0/23 maxlen: 23
82.102.48.0/24 maxlen: 24
82.102.49.0/24 maxlen: 24
82.102.50.0/23 maxlen: 23
82.102.50.0/24 maxlen: 24
82.102.51.0/24 maxlen: 24
82.102.52.0/22 maxlen: 22
82.102.52.0/23 maxlen: 23
82.102.56.0/21 maxlen: 21
82.102.56.0/22 maxlen: 22
82.102.60.0/22 maxlen: 22
82.102.62.0/24 maxlen: 24
94.46.196.0/22 maxlen: 22
94.46.196.0/23 maxlen: 23
94.46.198.0/23 maxlen: 23
94.46.200.0/22 maxlen: 22
94.46.200.0/23 maxlen: 23
94.46.202.0/23 maxlen: 23
94.46.208.0/21 maxlen: 21
94.46.208.0/22 maxlen: 22
94.46.212.0/22 maxlen: 22
94.46.214.0/24 maxlen: 24
94.46.224.0/20 maxlen: 20
94.46.224.0/21 maxlen: 21
94.46.224.0/22 maxlen: 22
94.46.228.0/22 maxlen: 22
94.46.228.0/24 maxlen: 24
94.46.232.0/21 maxlen: 21
94.46.237.0/24 maxlen: 24
185.52.88.0/22 maxlen: 22
185.52.88.0/23 maxlen: 23
185.52.90.0/23 maxlen: 23
213.207.128.0/18 maxlen: 18
213.207.128.0/19 maxlen: 19
213.207.128.0/20 maxlen: 20
213.207.128.0/23 maxlen: 23
213.207.129.0/24 maxlen: 24
213.207.130.0/23 maxlen: 23
213.207.134.0/23 maxlen: 23
213.207.135.0/24 maxlen: 24
213.207.137.0/24 maxlen: 24
213.207.139.0/24 maxlen: 24
213.207.140.0/24 maxlen: 24
213.207.141.0/24 maxlen: 24
213.207.142.0/24 maxlen: 24
213.207.143.0/24 maxlen: 24
213.207.144.0/20 maxlen: 20
213.207.144.0/24 maxlen: 24
213.207.145.0/24 maxlen: 24
213.207.150.0/24 maxlen: 24
213.207.152.0/23 maxlen: 23
213.207.153.0/24 maxlen: 24
213.207.154.0/23 maxlen: 23
213.207.155.0/24 maxlen: 24
213.207.156.0/24 maxlen: 24
213.207.159.0/24 maxlen: 24
213.207.160.0/19 maxlen: 19
213.207.160.0/20 maxlen: 20
213.207.168.0/21 maxlen: 21
213.207.168.0/22 maxlen: 22
213.207.172.0/22 maxlen: 22
213.207.174.0/23 maxlen: 23
213.207.174.0/24 maxlen: 24
213.207.175.0/24 maxlen: 24
213.207.176.0/21 maxlen: 21
213.207.176.0/22 maxlen: 22
213.207.178.0/23 maxlen: 23
213.207.180.0/22 maxlen: 22
213.207.180.0/23 maxlen: 23
213.207.182.0/23 maxlen: 23
213.207.184.0/21 maxlen: 21
213.207.184.0/24 maxlen: 24
213.207.186.0/24 maxlen: 24
213.207.188.0/23 maxlen: 23
213.207.190.0/24 maxlen: 24
2a02:640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2e:4e:a9:df:7b:49:95:ac:85:a9:4a:51:c4:a6:ba:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a59e9a3fc3fb5b0d582056a3b24553c56bd27f0
Validity
Not Before: Feb 5 14:57:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20f449bd34f969bcf05c4830b54013a3f0abba2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:e4:f2:10:6d:93:8e:35:b3:fc:b5:69:c9:
7e:d5:ac:98:0c:23:50:77:2e:47:12:93:40:42:75:
13:de:b0:9d:e2:40:52:b7:c7:a2:e7:08:49:ab:6d:
84:e5:84:e8:31:99:05:26:19:8d:82:a0:9a:c4:e2:
6b:5a:b4:ea:2a:02:ae:85:fa:fa:05:e5:c2:bb:93:
62:40:a3:27:54:c9:97:7d:cc:c0:4c:36:58:56:ea:
f1:6e:42:3c:3d:97:41:fe:5b:5f:7a:6b:d2:50:f5:
14:6d:58:d9:1c:3c:95:33:c8:3a:61:c7:90:14:6d:
1c:e5:81:82:2c:58:33:7d:f5:cc:24:db:30:23:65:
62:8c:86:6b:3b:5b:49:5c:a5:b6:ef:d2:1a:db:a9:
ee:0d:3b:6f:e8:02:36:1a:f2:da:2c:c3:a7:91:cd:
ee:7d:99:3f:c9:c1:75:d1:5d:f6:c9:9d:7d:43:60:
99:82:f8:6a:96:c2:a1:08:42:f0:05:cc:e5:56:42:
b3:11:ae:ed:c1:d4:7e:30:50:20:0e:f0:e4:f7:8c:
94:c8:4e:54:a4:cb:43:93:74:a4:7b:50:a3:fc:e6:
19:a5:af:e2:32:ae:28:af:16:35:ea:2f:48:61:22:
f3:8d:b3:c9:a5:d4:2f:0c:53:92:29:e1:9a:e4:46:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F4:49:BD:34:F9:69:BC:F0:5C:48:30:B5:40:13:A3:F0:AB:BA:2A
X509v3 Authority Key Identifier:
keyid:1A:59:E9:A3:FC:3F:B5:B0:D5:82:05:6A:3B:24:55:3C:56:BD:27:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/IPRJvTT5abzwXEgwtUATo_Cruio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.64.0/18
82.102.32.0/19
94.46.196.0-94.46.203.255
94.46.208.0/21
94.46.224.0/20
185.52.88.0/22
213.207.128.0/18
IPv6:
2a02:640::/29
Signature Algorithm: sha256WithRSAEncryption
80:e5:a7:a3:7e:84:75:03:8d:c2:3d:9f:4e:72:fd:16:05:a9:
a7:7d:b3:8c:34:80:6c:17:2a:c4:79:bd:31:30:99:b9:63:0c:
63:09:e0:d0:40:a0:68:61:0d:9e:de:f1:9e:28:9d:76:51:87:
0f:e5:fd:9f:2c:d4:2d:00:db:18:66:21:32:df:bb:bc:8d:8c:
a7:ff:a2:70:d5:be:e0:20:a7:60:99:1d:f7:20:df:42:7d:a5:
1b:6b:e8:83:2d:6b:3b:e7:36:4f:d2:e1:eb:50:72:7b:e7:9d:
11:e2:c3:d0:8b:b6:a2:73:7e:f8:0e:9d:5d:c8:25:f0:d5:5e:
7d:94:fa:d9:24:90:7e:c8:ed:31:dd:7f:a6:6e:ba:5b:d6:c4:
e3:0f:7e:d2:5d:76:e8:2b:da:0d:73:6c:61:cc:62:eb:03:c0:
6f:da:e6:9e:af:79:02:8c:b1:80:79:15:2a:90:ed:13:80:40:
48:6e:6f:90:d9:dd:0e:34:ce:e3:3e:3e:6b:24:98:9f:d4:40:
59:a5:34:46:bb:cf:7f:09:24:ae:7b:79:f6:39:e8:b3:d7:d6:
d9:cd:02:0f:db:08:43:7a:9f:95:c7:f8:19:ce:cb:cf:f2:5d:
7b:91:fe:8a:4f:32:31:ac:10:8b:96:19:4b:fe:d3:d0:86:86:
5b:6b:17:1e
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAZwuTqnfe0mVrIWpSlHEprozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNTllOWEzZmMzZmI1YjBkNTgyMDU2YTNiMjQ1NTNjNTZi
ZDI3ZjAwHhcNMjYwMjA1MTQ1NzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGY0NDliZDM0Zjk2OWJjZjA1YzQ4MzBiNTQwMTNhM2YwYWJiYTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYbk8hBtk441s/y1acl+1ayYDCNQ
dy5HEpNAQnUT3rCd4kBSt8ei5whJq22E5YToMZkFJhmNgqCaxOJrWrTqKgKuhfr6
BeXCu5NiQKMnVMmXfczATDZYVurxbkI8PZdB/ltfemvSUPUUbVjZHDyVM8g6YceQ
FG0c5YGCLFgzffXMJNswI2VijIZrO1tJXKW279Ia26nuDTtv6AI2GvLaLMOnkc3u
fZk/ycF10V32yZ19Q2CZgvhqlsKhCELwBczlVkKzEa7twdR+MFAgDvDk94yUyE5U
pMtDk3Ske1Cj/OYZpa/iMq4orxY16i9IYSLzjbPJpdQvDFOSKeGa5EYU1wIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFCD0Sb00+Wm88FxIMLVAE6Pwq7oqMB8GA1UdIwQY
MBaAFBpZ6aP8P7Ww1YIFajskVTxWvSfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xucG9fd190YkRWZ2dWcU95UlZQRmE5Sl9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNzY2ZmEtNTE1ZS00YmI3LWE2YTUt
ZTFlZjE0Mjc0NjMwLzEvSVBSSnZUVDVhYnp3WEVnd3RVQVRvX0NydWlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jNzY2ZmEtNTE1ZS00YmI3LWE2YTUtZTFlZjE0Mjc0NjMw
LzEvR2xucG9fd190YkRWZ2dWcU95UlZQRmE5Sl9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyAwQGH9hAAwQF
UmYgMAwDBAJeLsQDBAJeLsgDBANeLtADBAReLuADBAK5NFgDBAbVz4AwDQQCAAIw
BwMFAyoCBkAwDQYJKoZIhvcNAQELBQADggEBAIDlp6N+hHUDjcI9n05y/RYFqad9
s4w0gGwXKsR5vTEwmbljDGMJ4NBAoGhhDZ7e8Z4onXZRhw/l/Z8s1C0A2xhmITLf
u7yNjKf/onDVvuAgp2CZHfcg30J9pRtr6IMtazvnNk/S4etQcnvnnRHiw9CLtqJz
fvgOnV3IJfDVXn2U+tkkkH7I7THdf6ZuulvWxOMPftJddugr2g1zbGHMYusDwG/a
5p6veQKMsYB5FSqQ7ROAQEhub5DZ3Q40zuM+PmskmJ/UQFmlNEa7z38JJK57efY5
6LPX1tnNAg/bCEN6n5XH+BnOy8/yXXuR/opPMjGsEIuWGUv+09CGhltrFx4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:05:38 2026 by rpki-client