Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/Dw5M8CQ09TqrEtFh2HGlj7qEdPc.roa
File: Dw5M8CQ09TqrEtFh2HGlj7qEdPc.roa (raw, json)
Hash identifier: ldAJBJ14SPpRFbm3Y5h/3eh/S9up2AW/fNHTte8cKTM=
Subject key identifier: 0F:0E:4C:F0:24:34:F5:3A:AB:12:D1:61:D8:71:A5:8F:BA:84:74:F7
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 019D42B42D90F49460637AD57BC2187B066A
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/Dw5M8CQ09TqrEtFh2HGlj7qEdPc.roa
Signing time: Tue 31 Mar 2026 07:03:17 +0000
ROA not before: Tue 31 Mar 2026 07:03:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29314
IP address blocks: 31.11.128.0/17 maxlen: 17
31.11.128.0/24 maxlen: 24
31.11.129.0/24 maxlen: 24
31.11.130.0/24 maxlen: 24
31.11.131.0/24 maxlen: 24
31.11.132.0/22 maxlen: 22
31.11.172.0/24 maxlen: 24
31.11.202.0/24 maxlen: 24
31.11.208.0/22 maxlen: 22
31.11.228.0/24 maxlen: 24
31.22.96.0/21 maxlen: 21
31.22.100.0/23 maxlen: 23
31.135.168.0/21 maxlen: 21
31.135.175.0/24 maxlen: 24
37.8.192.0/18 maxlen: 18
37.8.208.0/24 maxlen: 24
37.8.214.0/24 maxlen: 24
37.8.230.0/24 maxlen: 24
37.8.231.0/24 maxlen: 24
37.77.152.0/21 maxlen: 21
62.122.112.0/21 maxlen: 21
77.222.224.0/21 maxlen: 21
77.222.232.0/21 maxlen: 21
77.222.240.0/20 maxlen: 20
77.222.248.0/22 maxlen: 22
77.222.252.0/22 maxlen: 22
78.31.152.0/21 maxlen: 21
78.31.209.0/24 maxlen: 24
78.88.0.0/17 maxlen: 17
78.88.16.0/24 maxlen: 24
78.88.28.0/22 maxlen: 22
78.88.28.0/24 maxlen: 24
78.88.29.0/24 maxlen: 24
78.88.30.0/24 maxlen: 24
78.88.31.0/24 maxlen: 24
78.88.43.0/24 maxlen: 24
78.88.74.0/24 maxlen: 24
78.88.123.0/24 maxlen: 24
78.88.128.0/17 maxlen: 17
78.88.188.0/22 maxlen: 22
78.88.216.0/22 maxlen: 22
82.139.0.0/18 maxlen: 18
82.139.32.0/21 maxlen: 21
82.139.48.0/21 maxlen: 21
83.143.40.0/21 maxlen: 21
83.143.136.0/21 maxlen: 21
83.243.104.0/21 maxlen: 21
88.156.0.0/18 maxlen: 18
88.156.64.0/18 maxlen: 18
88.156.64.0/24 maxlen: 24
88.156.78.0/24 maxlen: 24
88.156.80.176/28 maxlen: 28
88.156.128.0/18 maxlen: 18
88.156.128.0/21 maxlen: 21
88.156.128.0/23 maxlen: 23
88.156.130.0/23 maxlen: 23
88.156.132.0/23 maxlen: 23
88.156.134.0/23 maxlen: 23
88.156.136.0/21 maxlen: 21
88.156.164.0/22 maxlen: 22
88.156.192.0/18 maxlen: 18
88.156.222.0/24 maxlen: 24
88.156.226.0/23 maxlen: 23
88.156.255.0/24 maxlen: 24
89.151.0.0/18 maxlen: 18
89.151.6.0/24 maxlen: 24
89.151.16.0/20 maxlen: 20
89.151.40.0/21 maxlen: 21
91.192.76.0/22 maxlen: 22
91.192.76.0/24 maxlen: 24
91.192.78.0/24 maxlen: 24
91.230.159.0/24 maxlen: 24
91.230.162.0/23 maxlen: 23
91.230.164.0/22 maxlen: 22
91.231.116.0/23 maxlen: 23
91.238.232.0/22 maxlen: 22
93.105.0.0/17 maxlen: 17
93.105.40.0/24 maxlen: 24
93.105.42.0/24 maxlen: 24
93.105.128.0/17 maxlen: 17
93.105.142.0/24 maxlen: 24
93.105.144.0/22 maxlen: 22
93.105.168.0/21 maxlen: 21
93.105.176.0/23 maxlen: 23
93.105.178.0/23 maxlen: 23
93.105.179.0/24 maxlen: 24
93.105.180.0/24 maxlen: 24
93.105.181.0/24 maxlen: 24
93.105.182.0/24 maxlen: 24
93.105.183.0/24 maxlen: 24
93.105.224.0/21 maxlen: 21
93.105.236.0/24 maxlen: 24
93.105.237.0/24 maxlen: 24
93.176.192.0/18 maxlen: 24
94.231.48.0/20 maxlen: 20
95.160.0.0/17 maxlen: 24
95.160.16.0/22 maxlen: 22
95.160.28.0/22 maxlen: 22
95.160.56.0/22 maxlen: 22
95.160.76.0/22 maxlen: 22
95.160.126.0/23 maxlen: 23
95.160.128.0/17 maxlen: 17
95.160.152.0/24 maxlen: 24
95.160.153.0/24 maxlen: 24
95.160.154.0/24 maxlen: 24
95.160.155.0/24 maxlen: 24
95.160.156.0/24 maxlen: 24
95.160.157.0/24 maxlen: 24
95.160.158.0/24 maxlen: 24
95.160.159.0/24 maxlen: 24
95.160.166.0/24 maxlen: 24
95.160.170.0/24 maxlen: 24
95.160.228.0/22 maxlen: 22
95.160.233.0/24 maxlen: 24
95.160.236.0/22 maxlen: 22
109.107.0.0/19 maxlen: 19
109.107.0.0/21 maxlen: 21
109.107.9.0/24 maxlen: 24
109.197.56.0/21 maxlen: 21
109.197.64.0/21 maxlen: 21
109.241.0.0/18 maxlen: 18
109.241.64.0/18 maxlen: 18
109.241.128.0/18 maxlen: 18
109.241.192.0/18 maxlen: 18
178.235.0.0/17 maxlen: 17
178.235.40.0/24 maxlen: 24
178.235.41.0/24 maxlen: 24
178.235.42.0/24 maxlen: 24
178.235.43.0/24 maxlen: 24
178.235.98.0/24 maxlen: 24
178.235.110.0/24 maxlen: 24
178.235.128.0/17 maxlen: 17
178.235.128.0/24 maxlen: 24
178.235.129.0/24 maxlen: 24
178.235.130.0/24 maxlen: 24
178.235.131.0/24 maxlen: 24
178.235.132.0/23 maxlen: 23
178.235.134.0/24 maxlen: 24
178.235.135.0/24 maxlen: 24
178.235.136.0/23 maxlen: 23
178.235.138.0/23 maxlen: 23
178.235.140.0/24 maxlen: 24
178.235.141.0/24 maxlen: 24
178.235.142.0/23 maxlen: 23
178.235.144.0/23 maxlen: 23
178.235.146.0/24 maxlen: 24
178.235.147.0/24 maxlen: 24
178.235.148.0/22 maxlen: 22
178.235.148.0/23 maxlen: 23
178.235.150.0/23 maxlen: 23
178.235.150.0/24 maxlen: 24
178.235.152.0/21 maxlen: 21
178.235.160.0/19 maxlen: 19
178.235.192.0/18 maxlen: 18
185.51.180.0/22 maxlen: 22
192.166.120.0/23 maxlen: 23
193.201.18.0/23 maxlen: 23
194.54.188.0/22 maxlen: 22
195.26.72.0/22 maxlen: 22
195.28.170.0/23 maxlen: 23
195.191.162.0/23 maxlen: 23
195.225.92.0/22 maxlen: 22
195.242.252.0/22 maxlen: 22
2a00:9f00::/32 maxlen: 32
2a00:9f00::/36 maxlen: 36
2a00:9f00::/48 maxlen: 48
2a00:9f00:1::/48 maxlen: 48
2a00:9f00:a::/48 maxlen: 48
2a00:9f00:c::/48 maxlen: 48
2a00:9f00:10::/48 maxlen: 48
2a00:9f00:aa::/48 maxlen: 48
2a00:9f00:bb::/48 maxlen: 48
2a00:9f00:cc::/48 maxlen: 48
2a00:9f00:1000::/36 maxlen: 36
2a00:9f00:2000::/36 maxlen: 36
2a00:9f00:2007::/48 maxlen: 48
2a00:9f00:3000::/36 maxlen: 36
2a00:9f00:4000::/36 maxlen: 36
2a00:9f00:5000::/36 maxlen: 36
2a00:9f00:6000::/36 maxlen: 36
2a00:9f00:7000::/36 maxlen: 36
2a00:9f00:8000::/36 maxlen: 36
2a00:9f00:9000::/36 maxlen: 36
2a00:9f00:a000::/36 maxlen: 36
2a00:9f00:abba::/48 maxlen: 48
2a00:9f00:b000::/36 maxlen: 36
2a00:9f00:babe::/48 maxlen: 48
2a00:9f00:beaf::/48 maxlen: 48
2a00:9f00:c000::/36 maxlen: 36
2a00:9f00:cafe::/48 maxlen: 48
2a00:9f00:d000::/36 maxlen: 36
2a00:9f00:dead::/48 maxlen: 48
2a00:9f00:e000::/36 maxlen: 36
2a00:9f00:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:b4:2d:90:f4:94:60:63:7a:d5:7b:c2:18:7b:06:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Mar 31 07:03:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f0e4cf02434f53aab12d161d871a58fba8474f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:05:87:b0:9e:82:41:63:2e:09:90:29:a3:
1f:33:2e:2d:b4:c0:4e:03:8e:ec:06:13:31:07:c7:
0b:f1:a3:07:1b:66:f8:4f:8c:89:1a:79:3b:d9:f4:
17:a0:24:c2:39:85:8b:1b:38:10:13:e3:da:bc:79:
66:52:31:48:fc:00:6b:25:43:62:4d:66:d9:15:7d:
be:4b:56:3c:25:4c:6a:20:96:47:bc:c6:bb:76:24:
f7:d9:5b:ab:84:7c:27:a3:b8:df:c5:43:23:ae:98:
70:fa:da:60:93:8e:5b:b5:91:e7:0e:62:b4:2e:e2:
1a:26:01:b9:8f:05:df:e1:46:07:aa:eb:cf:83:3e:
ab:ab:b3:95:bb:5d:d6:72:7c:a4:ad:3e:65:1f:22:
1b:b0:e7:3b:83:ea:25:e0:7d:f5:2b:94:6f:c1:17:
b0:be:d1:24:1b:6a:53:91:c2:d2:ae:c8:1f:f5:a5:
2a:70:33:ab:bb:74:2a:54:25:b2:e2:31:15:02:23:
66:a3:dd:b7:54:61:d1:2e:09:d0:ee:96:e8:cf:ff:
71:7e:2e:db:3c:53:69:17:93:24:ac:8c:95:a1:be:
36:75:36:ca:07:93:f3:b2:ee:2b:45:ed:b3:d0:45:
10:c1:2f:b7:cb:e3:83:10:b0:9e:d3:80:53:22:ac:
ce:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0E:4C:F0:24:34:F5:3A:AB:12:D1:61:D8:71:A5:8F:BA:84:74:F7
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/Dw5M8CQ09TqrEtFh2HGlj7qEdPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.128.0/17
31.22.96.0/21
31.135.168.0/21
37.8.192.0/18
37.77.152.0/21
62.122.112.0/21
77.222.224.0/19
78.31.152.0/21
78.31.209.0/24
78.88.0.0/16
82.139.0.0/18
83.143.40.0/21
83.143.136.0/21
83.243.104.0/21
88.156.0.0/16
89.151.0.0/18
91.192.76.0/22
91.230.159.0/24
91.230.162.0-91.230.167.255
91.231.116.0/23
91.238.232.0/22
93.105.0.0/16
93.176.192.0/18
94.231.48.0/20
95.160.0.0/16
109.107.0.0/19
109.197.56.0-109.197.71.255
109.241.0.0/16
178.235.0.0/16
185.51.180.0/22
192.166.120.0/23
193.201.18.0/23
194.54.188.0/22
195.26.72.0/22
195.28.170.0/23
195.191.162.0/23
195.225.92.0/22
195.242.252.0/22
IPv6:
2a00:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
c2:55:1e:d9:42:71:0e:1a:d9:f0:fc:f4:fb:77:98:95:45:62:
93:8a:53:95:eb:2d:b1:a6:11:15:c3:1b:91:ec:90:6c:ce:52:
36:75:41:ee:9e:61:51:ac:86:2c:70:80:54:42:5e:34:76:92:
3c:a3:8f:7a:7f:0f:b0:2e:28:74:56:80:d2:5a:21:d1:63:20:
bc:82:75:4d:1a:99:48:35:e5:7d:b5:ac:cb:d9:87:9d:ff:05:
c8:66:76:63:32:27:e6:80:4c:75:e1:d6:23:37:16:81:cd:a1:
af:24:e5:78:b3:10:12:19:4d:ca:3a:6c:84:39:8f:bc:2a:86:
21:db:c0:32:5f:1c:d5:b7:18:2b:9e:76:e8:30:55:9a:19:3f:
1c:e0:f2:4d:3b:82:38:35:d1:73:60:a5:38:5f:5f:c7:b0:a8:
6a:3c:4e:82:57:38:2e:b1:e0:fd:0c:81:89:f6:91:77:b9:cd:
d2:8b:08:6a:7c:f2:51:45:3c:69:db:6a:0d:c7:05:b6:88:f3:
c9:e1:09:51:c8:02:81:7f:80:c2:af:47:04:32:ea:f9:f7:40:
b2:a6:ed:03:6f:3f:c8:05:3b:16:a8:66:40:5a:14:4d:44:01:
61:b0:4b:5e:60:51:b1:3e:0b:48:3f:0b:30:c9:17:c9:ac:b0:
ef:fc:fc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:01 2026 by rpki-client