Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/1LnRA2WyzV_dyZS_0yAjyMck4lg.roa
File: 1LnRA2WyzV_dyZS_0yAjyMck4lg.roa (raw, json)
Hash identifier: DWJ44hrlXJiKZ5C59wYc7MWeTNpqV4OQ2hYim15HwUM=
Subject key identifier: D4:B9:D1:03:65:B2:CD:5F:DD:C9:94:BF:D3:20:23:C8:C7:24:E2:58
Certificate issuer: /CN=522399c2789b1a5504f81671cff220c04eaf59f1
Certificate serial: 019D42473BBF247B5F4E0A34394F72511F2D
Authority key identifier: 52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/1LnRA2WyzV_dyZS_0yAjyMck4lg.roa
Signing time: Tue 31 Mar 2026 05:04:17 +0000
ROA not before: Tue 31 Mar 2026 05:04:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42781
IP address blocks: 80.184.3.0/24 maxlen: 24
80.184.9.0/24 maxlen: 24
80.184.10.0/24 maxlen: 24
80.184.11.0/24 maxlen: 24
80.184.12.0/23 maxlen: 23
80.184.17.0/24 maxlen: 24
80.184.19.0/24 maxlen: 24
80.184.21.0/24 maxlen: 24
80.184.24.0/22 maxlen: 22
80.184.29.0/24 maxlen: 24
80.184.55.0/24 maxlen: 24
80.184.56.0/24 maxlen: 24
80.184.77.0/24 maxlen: 24
80.184.85.0/24 maxlen: 24
80.184.95.0/24 maxlen: 24
80.184.107.0/24 maxlen: 24
80.184.109.0/24 maxlen: 24
80.184.110.0/24 maxlen: 24
80.184.117.0/24 maxlen: 24
80.184.120.0/22 maxlen: 22
80.184.124.0/24 maxlen: 24
80.184.125.0/24 maxlen: 24
80.184.127.0/24 maxlen: 24
80.184.135.0/24 maxlen: 24
80.184.140.0/23 maxlen: 23
80.184.144.0/22 maxlen: 22
80.184.148.0/22 maxlen: 22
80.184.165.0/24 maxlen: 24
80.184.190.0/24 maxlen: 24
80.184.200.0/24 maxlen: 24
80.184.204.0/22 maxlen: 22
80.184.216.0/22 maxlen: 22
80.184.221.0/24 maxlen: 24
80.184.224.0/22 maxlen: 22
80.184.229.0/24 maxlen: 24
80.184.245.0/24 maxlen: 24
158.94.180.0/23 maxlen: 23
158.94.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:47:3b:bf:24:7b:5f:4e:0a:34:39:4f:72:51:1f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522399c2789b1a5504f81671cff220c04eaf59f1
Validity
Not Before: Mar 31 05:04:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4b9d10365b2cd5fddc994bfd32023c8c724e258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:4b:c0:88:dd:ae:66:ee:9e:ed:26:9d:cc:
aa:d8:bf:21:e2:36:34:66:43:d5:95:4c:08:02:3e:
32:ec:4b:01:06:e8:80:c0:ae:d3:40:ed:62:05:74:
b3:3a:e9:85:0f:02:74:67:35:a2:8e:8d:37:52:4a:
0c:a3:3f:b8:6a:c4:80:22:12:fb:c6:e4:4c:eb:d3:
9c:27:4b:b2:ca:40:c0:00:90:ef:bf:4d:31:45:b1:
29:1b:6a:1a:2b:af:0b:35:2f:50:e5:8a:f5:c8:20:
c3:2b:c5:49:81:d9:00:80:e1:7e:5f:f8:55:4f:12:
81:8c:b7:4b:c6:de:9e:c4:3f:ac:04:01:24:3c:70:
e2:d5:01:0a:f2:18:90:4b:c9:17:93:62:1c:20:32:
28:05:1a:bd:40:37:2e:64:a2:d9:44:90:60:f3:84:
a6:75:0e:f3:30:af:3d:d4:2e:ad:a9:4a:11:df:bf:
89:44:f1:93:f7:0c:99:07:25:ae:ce:7b:23:92:ed:
d1:6c:89:0c:72:b7:21:1a:7f:9f:26:8e:07:68:1c:
29:fd:2d:dc:68:f0:40:e9:87:62:f4:cc:7b:fa:a3:
21:9a:1c:75:1b:e3:74:02:61:84:6e:87:d8:ce:51:
7f:9c:ff:23:4a:d3:7c:01:f7:cc:0f:82:a6:b2:54:
d6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B9:D1:03:65:B2:CD:5F:DD:C9:94:BF:D3:20:23:C8:C7:24:E2:58
X509v3 Authority Key Identifier:
keyid:52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/1LnRA2WyzV_dyZS_0yAjyMck4lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.184.3.0/24
80.184.9.0-80.184.13.255
80.184.17.0/24
80.184.19.0/24
80.184.21.0/24
80.184.24.0/22
80.184.29.0/24
80.184.55.0-80.184.56.255
80.184.77.0/24
80.184.85.0/24
80.184.95.0/24
80.184.107.0/24
80.184.109.0-80.184.110.255
80.184.117.0/24
80.184.120.0-80.184.125.255
80.184.127.0/24
80.184.135.0/24
80.184.140.0/23
80.184.144.0/21
80.184.165.0/24
80.184.190.0/24
80.184.200.0/24
80.184.204.0/22
80.184.216.0/22
80.184.221.0/24
80.184.224.0/22
80.184.229.0/24
80.184.245.0/24
158.94.180.0/23
Signature Algorithm: sha256WithRSAEncryption
86:bc:34:c7:75:20:d2:86:6d:02:58:2e:b1:80:01:34:e4:e8:
09:8b:14:a6:06:34:83:40:f1:0b:7d:e6:1c:27:60:65:34:bf:
a5:90:a0:d4:43:2a:30:c1:92:fe:64:a1:85:68:c5:9f:d6:77:
19:fe:27:71:13:1c:5d:99:e7:2d:2f:f3:0a:83:7c:56:71:8a:
a9:78:4a:95:ce:4f:e2:31:86:c5:3c:ed:62:f5:00:68:5f:fa:
7e:41:60:64:7a:6c:bd:d8:e8:45:e0:20:97:ac:95:ed:58:ca:
64:2d:84:a4:12:a5:54:2f:a0:76:dd:24:b6:fb:92:41:48:b7:
e7:dd:ab:ba:8d:3a:a2:28:10:06:6d:e4:2a:1f:d7:54:24:0f:
b9:9d:b2:28:0c:d7:47:19:a0:69:6d:49:d4:ee:92:60:d9:95:
09:70:96:4d:56:a6:7f:25:51:29:fa:c2:01:d1:f0:1a:4b:d3:
d6:80:e7:b5:21:e8:36:43:69:b0:fa:d9:52:e3:e6:b3:a3:0c:
24:6a:56:48:a9:bf:f9:d8:64:d5:2c:3a:5f:d7:60:21:b6:f6:
7e:26:02:af:30:f0:e1:2c:35:94:90:13:98:5a:71:aa:62:68:
54:3a:04:f2:37:19:68:5e:21:75:c8:cc:7e:b5:ca:6c:1a:d1:
e1:ee:63:04
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgISAZ1CRzu/JHtfTgo0OU9yUR8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMjM5OWMyNzg5YjFhNTUwNGY4MTY3MWNmZjIyMGMwNGVh
ZjU5ZjEwHhcNMjYwMzMxMDUwNDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGI5ZDEwMzY1YjJjZDVmZGRjOTk0YmZkMzIwMjNjOGM3MjRlMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoJLwIjdrmbunu0mncyq2L8h4jY0
ZkPVlUwIAj4y7EsBBuiAwK7TQO1iBXSzOumFDwJ0ZzWijo03UkoMoz+4asSAIhL7
xuRM69OcJ0uyykDAAJDvv00xRbEpG2oaK68LNS9Q5Yr1yCDDK8VJgdkAgOF+X/hV
TxKBjLdLxt6exD+sBAEkPHDi1QEK8hiQS8kXk2IcIDIoBRq9QDcuZKLZRJBg84Sm
dQ7zMK891C6tqUoR37+JRPGT9wyZByWuznsjku3RbIkMcrchGn+fJo4HaBwp/S3c
aPBA6Ydi9Mx7+qMhmhx1G+N0AmGEbofYzlF/nP8jStN8AffMD4KmslTWeQIDAQAB
o4IC1jCCAtIwHQYDVR0OBBYEFNS50QNlss1f3cmUv9MgI8jHJOJYMB8GA1UdIwQY
MBaAFFIjmcJ4mxpVBPgWcc/yIMBOr1nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlPWnduaWJHbFVFLUJaeHpfSWd3RTZ2V2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yMmQwMTEtZWQ0Mi00ZDE0LWE2NzAt
ZDVkNTFkMzc5NDlkLzEvMUxuUkEyV3l6Vl9keVpTXzB5QWp5TWNrNGxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8yMmQwMTEtZWQ0Mi00ZDE0LWE2NzAtZDVkNTFkMzc5NDlk
LzEvVWlPWnduaWJHbFVFLUJaeHpfSWd3RTZ2V2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHrBggrBgEFBQcBBwEB/wSB2zCB2DCB1QQCAAEwgc4DBABQ
uAMwDAMEAFC4CQMEAVC4DAMEAFC4EQMEAFC4EwMEAFC4FQMEAlC4GAMEAFC4HTAM
AwQAULg3AwQAULg4AwQAULhNAwQAULhVAwQAULhfAwQAULhrMAwDBABQuG0DBABQ
uG4DBABQuHUwDAMEA1C4eAMEAVC4fAMEAFC4fwMEAFC4hwMEAVC4jAMEA1C4kAME
AFC4pQMEAFC4vgMEAFC4yAMEAlC4zAMEAlC42AMEAFC43QMEAlC44AMEAFC45QME
AFC49QMEAZ5etDANBgkqhkiG9w0BAQsFAAOCAQEAhrw0x3Ug0oZtAlgusYABNOTo
CYsUpgY0g0DxC33mHCdgZTS/pZCg1EMqMMGS/mShhWjFn9Z3Gf4ncRMcXZnnLS/z
CoN8VnGKqXhKlc5P4jGGxTztYvUAaF/6fkFgZHpsvdjoReAgl6yV7VjKZC2EpBKl
VC+gdt0ktvuSQUi3592ruo06oigQBm3kKh/XVCQPuZ2yKAzXRxmgaW1J1O6SYNmV
CXCWTVamfyVRKfrCAdHwGkvT1oDntSHoNkNpsPrZUuPms6MMJGpWSKm/+dhk1Sw6
X9dgIbb2fiYCrzDw4Sw1lJATmFpxqmJoVDoE8jcZaF4hdcjMfrXKbBrR4e5jBA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:14:38 2026 by rpki-client