Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ko3tbulpcgKsKb1UYHu-TemeA7s.roa
File: ko3tbulpcgKsKb1UYHu-TemeA7s.roa (raw, json)
Hash identifier: 5V+iHEuqVMN7FRLUlsDsByZ9AMuqks9admiludCcZmY=
Subject key identifier: 92:8D:ED:6E:E9:69:72:02:AC:29:BD:54:60:7B:BE:4D:E9:9E:03:BB
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 019D9B89EF1A354A0408971FFA46F6B788D2
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ko3tbulpcgKsKb1UYHu-TemeA7s.roa
Signing time: Fri 17 Apr 2026 13:03:21 +0000
ROA not before: Fri 17 Apr 2026 13:03:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58272
IP address blocks: 37.18.0.0/24 maxlen: 24
37.18.23.0/24 maxlen: 24
37.18.60.0/24 maxlen: 24
37.18.63.0/24 maxlen: 24
37.18.78.0/24 maxlen: 24
37.18.82.0/24 maxlen: 24
37.18.103.0/24 maxlen: 24
37.18.106.0/24 maxlen: 24
37.18.125.0/24 maxlen: 24
37.18.126.0/24 maxlen: 24
37.230.130.0/24 maxlen: 24
37.230.132.0/24 maxlen: 24
37.230.134.0/24 maxlen: 24
37.230.135.0/24 maxlen: 24
37.230.145.0/24 maxlen: 24
37.230.151.0/24 maxlen: 24
37.230.163.0/24 maxlen: 24
37.230.176.0/24 maxlen: 24
37.230.177.0/24 maxlen: 24
37.230.178.0/24 maxlen: 24
37.230.182.0/24 maxlen: 24
37.230.183.0/24 maxlen: 24
37.230.187.0/24 maxlen: 24
37.230.200.0/24 maxlen: 24
37.230.208.0/24 maxlen: 24
37.230.226.0/24 maxlen: 24
37.230.227.0/24 maxlen: 24
37.230.231.0/24 maxlen: 24
37.230.238.0/24 maxlen: 24
37.230.253.0/24 maxlen: 24
37.230.254.0/24 maxlen: 24
37.230.255.0/24 maxlen: 24
46.243.140.0/24 maxlen: 24
46.243.148.0/24 maxlen: 24
46.243.149.0/24 maxlen: 24
46.243.163.0/24 maxlen: 24
46.243.214.0/24 maxlen: 24
46.243.215.0/24 maxlen: 24
46.243.217.0/24 maxlen: 24
46.243.220.0/24 maxlen: 24
46.243.221.0/24 maxlen: 24
46.243.222.0/24 maxlen: 24
46.243.223.0/24 maxlen: 24
46.243.224.0/24 maxlen: 24
46.243.225.0/24 maxlen: 24
46.243.236.0/24 maxlen: 24
46.243.237.0/24 maxlen: 24
46.243.238.0/24 maxlen: 24
46.243.239.0/24 maxlen: 24
46.243.240.0/24 maxlen: 24
46.243.241.0/24 maxlen: 24
46.243.242.0/24 maxlen: 24
46.243.243.0/24 maxlen: 24
46.243.246.0/23 maxlen: 23
46.243.246.0/24 maxlen: 24
46.243.247.0/24 maxlen: 24
46.243.248.0/24 maxlen: 24
46.243.249.0/24 maxlen: 24
46.243.250.0/24 maxlen: 24
46.243.251.0/24 maxlen: 24
128.0.71.0/24 maxlen: 24
141.101.132.0/24 maxlen: 24
141.101.133.0/24 maxlen: 24
141.101.134.0/24 maxlen: 24
141.101.135.0/24 maxlen: 24
141.101.136.0/24 maxlen: 24
141.101.143.0/24 maxlen: 24
141.101.144.0/24 maxlen: 24
141.101.145.0/24 maxlen: 24
141.101.146.0/24 maxlen: 24
141.101.147.0/24 maxlen: 24
141.101.148.0/24 maxlen: 24
141.101.149.0/24 maxlen: 24
141.101.150.0/24 maxlen: 24
141.101.153.0/24 maxlen: 24
141.101.154.0/24 maxlen: 24
141.101.155.0/24 maxlen: 24
141.101.156.0/24 maxlen: 24
141.101.157.0/24 maxlen: 24
141.101.158.0/24 maxlen: 24
141.101.159.0/24 maxlen: 24
141.101.160.0/24 maxlen: 24
141.101.161.0/24 maxlen: 24
141.101.162.0/24 maxlen: 24
141.101.163.0/24 maxlen: 24
141.101.164.0/24 maxlen: 24
141.101.165.0/24 maxlen: 24
141.101.166.0/24 maxlen: 24
141.101.167.0/24 maxlen: 24
141.101.168.0/24 maxlen: 24
141.101.169.0/24 maxlen: 24
141.101.170.0/24 maxlen: 24
141.101.171.0/24 maxlen: 24
141.101.172.0/24 maxlen: 24
141.101.173.0/24 maxlen: 24
141.101.174.0/24 maxlen: 24
141.101.179.0/24 maxlen: 24
141.101.189.0/24 maxlen: 24
141.101.190.0/24 maxlen: 24
141.101.191.0/24 maxlen: 24
141.101.198.0/24 maxlen: 24
141.101.209.0/24 maxlen: 24
141.101.216.0/24 maxlen: 24
141.101.217.0/24 maxlen: 24
141.101.218.0/24 maxlen: 24
141.101.219.0/24 maxlen: 24
141.101.230.0/24 maxlen: 24
141.101.233.0/24 maxlen: 24
141.101.235.0/24 maxlen: 24
141.101.237.0/24 maxlen: 24
141.101.238.0/24 maxlen: 24
141.101.242.0/24 maxlen: 24
141.101.245.0/24 maxlen: 24
141.101.252.0/24 maxlen: 24
141.101.253.0/24 maxlen: 24
141.101.254.0/24 maxlen: 24
141.101.255.0/24 maxlen: 24
178.170.136.0/24 maxlen: 24
178.170.137.0/24 maxlen: 24
178.170.138.0/24 maxlen: 24
178.170.139.0/24 maxlen: 24
178.170.140.0/24 maxlen: 24
178.170.141.0/24 maxlen: 24
178.170.142.0/24 maxlen: 24
178.170.144.0/24 maxlen: 24
178.170.145.0/24 maxlen: 24
178.170.146.0/24 maxlen: 24
178.170.172.0/24 maxlen: 24
178.170.187.0/24 maxlen: 24
178.170.188.0/24 maxlen: 24
178.170.189.0/24 maxlen: 24
178.170.244.0/24 maxlen: 24
185.4.148.0/24 maxlen: 24
185.4.149.0/24 maxlen: 24
185.4.150.0/24 maxlen: 24
185.4.151.0/24 maxlen: 24
188.72.80.0/24 maxlen: 24
188.72.81.0/24 maxlen: 24
188.72.82.0/24 maxlen: 24
188.72.83.0/24 maxlen: 24
188.72.84.0/24 maxlen: 24
188.72.85.0/24 maxlen: 24
188.72.86.0/24 maxlen: 24
188.72.87.0/24 maxlen: 24
188.72.89.0/24 maxlen: 24
188.72.95.0/24 maxlen: 24
188.72.97.0/24 maxlen: 24
188.72.98.0/24 maxlen: 24
188.72.101.0/24 maxlen: 24
188.72.102.0/24 maxlen: 24
188.72.114.0/24 maxlen: 24
188.72.115.0/24 maxlen: 24
188.72.116.0/24 maxlen: 24
188.72.119.0/24 maxlen: 24
188.72.124.0/24 maxlen: 24
188.72.125.0/24 maxlen: 24
217.150.88.0/24 maxlen: 24
217.150.89.0/24 maxlen: 24
217.150.90.0/24 maxlen: 24
217.150.91.0/24 maxlen: 24
217.150.92.0/24 maxlen: 24
217.150.93.0/24 maxlen: 24
217.150.94.0/24 maxlen: 24
217.150.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:89:ef:1a:35:4a:04:08:97:1f:fa:46:f6:b7:88:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Apr 17 13:03:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=928ded6ee9697202ac29bd54607bbe4de99e03bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:a0:a1:a9:97:93:41:75:97:69:d8:7e:3a:
c5:0b:c1:1a:3d:b3:d0:25:c7:b4:d1:fd:8f:da:6c:
1f:06:88:c6:95:87:8d:ad:6d:5d:13:e0:1b:f7:55:
fd:49:7d:cf:03:97:31:cd:e9:79:68:05:e5:09:65:
7b:26:19:73:c6:ef:6d:d4:b8:0d:a0:d1:68:06:c5:
41:6c:79:2d:9a:3d:3d:7a:49:e9:e8:98:fc:78:90:
2f:f9:aa:69:54:cf:97:27:2a:1a:86:3c:93:80:01:
b2:f5:9e:3e:04:6c:8d:41:3b:08:7a:83:d7:ae:b1:
2b:5f:ed:9f:d1:9a:7e:2c:65:4e:94:a0:c2:1a:4f:
5b:a2:20:49:14:0e:62:f8:ed:8d:7f:df:6a:ea:a5:
b4:db:31:dc:5c:be:77:41:a6:13:de:83:d6:33:fc:
69:40:38:0a:41:1a:8d:bf:7d:08:7a:79:ee:3c:56:
8a:71:c3:3f:17:df:2d:8f:9a:11:09:df:68:2b:42:
db:bb:52:44:ed:b0:7d:fd:0d:25:37:da:54:9e:8c:
ca:13:c9:60:ab:e0:5a:37:4f:9a:96:59:68:e4:e4:
5f:29:05:29:16:c1:41:7a:3f:18:91:d6:5d:89:e5:
ad:f1:9c:00:66:3f:06:51:24:3a:67:a0:15:eb:a2:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8D:ED:6E:E9:69:72:02:AC:29:BD:54:60:7B:BE:4D:E9:9E:03:BB
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ko3tbulpcgKsKb1UYHu-TemeA7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.0.0/24
37.18.23.0/24
37.18.60.0/24
37.18.63.0/24
37.18.78.0/24
37.18.82.0/24
37.18.103.0/24
37.18.106.0/24
37.18.125.0-37.18.126.255
37.230.130.0/24
37.230.132.0/24
37.230.134.0/23
37.230.145.0/24
37.230.151.0/24
37.230.163.0/24
37.230.176.0-37.230.178.255
37.230.182.0/23
37.230.187.0/24
37.230.200.0/24
37.230.208.0/24
37.230.226.0/23
37.230.231.0/24
37.230.238.0/24
37.230.253.0-37.230.255.255
46.243.140.0/24
46.243.148.0/23
46.243.163.0/24
46.243.214.0/23
46.243.217.0/24
46.243.220.0-46.243.225.255
46.243.236.0-46.243.243.255
46.243.246.0-46.243.251.255
128.0.71.0/24
141.101.132.0-141.101.136.255
141.101.143.0-141.101.150.255
141.101.153.0-141.101.174.255
141.101.179.0/24
141.101.189.0-141.101.191.255
141.101.198.0/24
141.101.209.0/24
141.101.216.0/22
141.101.230.0/24
141.101.233.0/24
141.101.235.0/24
141.101.237.0-141.101.238.255
141.101.242.0/24
141.101.245.0/24
141.101.252.0/22
178.170.136.0-178.170.142.255
178.170.144.0-178.170.146.255
178.170.172.0/24
178.170.187.0-178.170.189.255
178.170.244.0/24
185.4.148.0/22
188.72.80.0/21
188.72.89.0/24
188.72.95.0/24
188.72.97.0-188.72.98.255
188.72.101.0-188.72.102.255
188.72.114.0-188.72.116.255
188.72.119.0/24
188.72.124.0/23
217.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:98:b6:56:04:f7:f2:56:c3:b8:1b:52:94:d9:3d:d2:5c:4c:
87:5c:bb:81:1a:16:3a:ca:d6:31:8b:d9:2e:fc:12:53:e2:2c:
3a:bf:5e:5f:31:66:3b:56:2e:e1:54:71:a2:90:b9:47:e0:35:
f5:10:b3:59:49:0b:14:b4:c4:c4:d5:23:2e:f0:a3:59:f3:5d:
3a:b8:4f:41:3d:a2:41:86:17:35:18:d7:37:dd:8d:06:0d:88:
6e:e8:c9:f3:53:87:14:ae:11:59:ef:b6:dd:4b:0c:f0:37:d6:
db:ee:ca:c4:f6:c9:36:7b:27:21:fc:e9:77:49:1c:d3:7f:8a:
10:83:35:d1:f9:cd:fe:8d:98:fb:d4:e7:df:99:3d:b4:75:fe:
0b:8c:42:57:a9:75:7f:ec:3b:ac:59:10:7f:34:d9:49:7e:68:
38:f2:c8:63:31:98:6e:45:c8:44:a6:de:b1:5c:4f:dd:59:9e:
6a:a8:af:8e:d1:c5:ac:a4:6a:93:f2:30:02:cb:cf:ea:3c:bf:
d2:c9:3b:69:8a:53:8b:d4:f0:72:5e:dc:4d:5b:3f:23:cf:36:
d8:10:cf:24:b1:c9:ca:39:de:f6:22:1f:4f:d5:d0:0a:79:cb:
47:c5:f6:1b:19:0c:33:79:21:68:6d:49:82:24:de:fb:4a:c6:
29:21:7a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:36 2026 by rpki-client