Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/k9s4R_RCGnHtZOrjWKzCzH64VJE.roa
File: k9s4R_RCGnHtZOrjWKzCzH64VJE.roa (raw, json)
Hash identifier: SxnRh57fnfNIfp40e+jDqO9RBa+XdPWJgmj+azEX9xQ=
Subject key identifier: 93:DB:38:47:F4:42:1A:71:ED:64:EA:E3:58:AC:C2:CC:7E:B8:54:91
Certificate issuer: /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Certificate serial: 019C4CD76F4F9ED835EE038637A4D72C616D
Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/k9s4R_RCGnHtZOrjWKzCzH64VJE.roa
Signing time: Wed 11 Feb 2026 13:15:12 +0000
ROA not before: Wed 11 Feb 2026 13:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202196
IP address blocks: 5.57.20.0/23 maxlen: 23
5.57.20.0/24 maxlen: 24
5.57.21.0/24 maxlen: 24
37.10.1.0/24 maxlen: 24
37.10.3.0/24 maxlen: 24
37.10.10.0/24 maxlen: 24
37.10.12.0/24 maxlen: 24
37.10.24.0/23 maxlen: 23
37.10.24.0/24 maxlen: 24
37.10.25.0/24 maxlen: 24
37.10.26.0/24 maxlen: 24
37.10.27.0/24 maxlen: 24
37.10.28.0/24 maxlen: 24
37.10.29.0/24 maxlen: 24
37.10.30.0/23 maxlen: 23
37.10.30.0/24 maxlen: 24
37.10.31.0/24 maxlen: 24
37.10.40.0/24 maxlen: 24
37.10.41.0/24 maxlen: 24
37.10.42.0/24 maxlen: 24
37.10.43.0/24 maxlen: 24
37.10.44.0/22 maxlen: 22
37.10.44.0/23 maxlen: 23
37.10.44.0/24 maxlen: 24
37.10.45.0/24 maxlen: 24
37.10.46.0/24 maxlen: 24
91.195.236.0/24 maxlen: 24
2a01:5041::/32 maxlen: 48
2a01:5041::/48 maxlen: 48
2a01:5041:1::/48 maxlen: 48
2a01:5041:2::/48 maxlen: 48
2a01:5041:3::/48 maxlen: 48
2a01:5041:4::/48 maxlen: 48
2a01:5041:6::/48 maxlen: 48
2a01:5041:7::/48 maxlen: 48
2a01:5041:8::/48 maxlen: 48
2a01:5041:b::/48 maxlen: 48
2a01:5041:e::/48 maxlen: 48
2a01:5041:f::/48 maxlen: 48
2a01:5041:12::/48 maxlen: 48
2a01:5041:efd::/48 maxlen: 48
2a01:5041:efe::/48 maxlen: 48
2a01:5041:eff::/48 maxlen: 48
2a01:5041:1000::/48 maxlen: 48
2a01:5041:1003::/48 maxlen: 48
2a01:5041:1014::/48 maxlen: 48
2a01:5041:2000::/48 maxlen: 48
2a01:5041:2001::/48 maxlen: 48
2a01:5041:2002::/48 maxlen: 48
2a01:5041:2003::/48 maxlen: 48
2a01:5041:2004::/48 maxlen: 48
2a01:5041:2006::/48 maxlen: 48
2a01:5041:2007::/48 maxlen: 48
2a01:5041:2008::/48 maxlen: 48
2a01:5041:200b::/48 maxlen: 48
2a01:5041:200c::/48 maxlen: 48
2a01:5041:200e::/48 maxlen: 48
2a01:5041:200f::/48 maxlen: 48
2a01:5041:2010::/48 maxlen: 48
2a01:5041:2efd::/48 maxlen: 48
2a01:5041:2efe::/48 maxlen: 48
2a01:5041:2eff::/48 maxlen: 48
2a01:5041:3000::/48 maxlen: 48
2a01:5041:3003::/48 maxlen: 48
2a01:5041:3014::/48 maxlen: 48
2a01:5041:4000::/48 maxlen: 48
2a01:5041:4003::/48 maxlen: 48
2a01:5041:4007::/48 maxlen: 48
2a01:5041:400b::/48 maxlen: 48
2a01:5041:400e::/48 maxlen: 48
2a01:5041:4efd::/48 maxlen: 48
2a01:5041:4efe::/48 maxlen: 48
2a01:5041:4eff::/48 maxlen: 48
2a01:5041:5000::/48 maxlen: 48
2a01:5041:5002::/48 maxlen: 48
2a01:5041:5003::/48 maxlen: 48
2a01:5041:500e::/48 maxlen: 48
2a01:5041:6000::/48 maxlen: 48
2a01:5041:6003::/48 maxlen: 48
2a01:5041:6004::/48 maxlen: 48
2a01:5041:6006::/48 maxlen: 48
2a01:5041:6008::/48 maxlen: 48
2a01:5041:600e::/48 maxlen: 48
2a01:5041:7001::/48 maxlen: 48
2a01:5041:ea09::/48 maxlen: 48
2a01:5041:ea14::/48 maxlen: 48
2a01:5041:ea15::/48 maxlen: 48
2a01:5041:ea16::/48 maxlen: 48
2a01:5041:ea20::/48 maxlen: 48
2a01:5042::/48 maxlen: 48
2a01:5042:1::/48 maxlen: 48
2a01:5042:3::/48 maxlen: 48
2a01:5042:7::/48 maxlen: 48
2a01:5042:b::/48 maxlen: 48
2a01:5042:e::/48 maxlen: 48
2a01:5042:efd::/48 maxlen: 48
2a01:5042:eff::/48 maxlen: 48
2a01:5042:2000::/48 maxlen: 48
2a01:5042:2001::/48 maxlen: 48
2a01:5042:2003::/48 maxlen: 48
2a01:5042:2007::/48 maxlen: 48
2a01:5042:200b::/48 maxlen: 48
2a01:5042:200e::/48 maxlen: 48
2a01:5042:2efd::/48 maxlen: 48
2a01:5042:2eff::/48 maxlen: 48
2a01:5043::/48 maxlen: 48
2a01:5043:3::/48 maxlen: 48
2a01:5043:7::/48 maxlen: 48
2a01:5043:b::/48 maxlen: 48
2a01:5043:e::/48 maxlen: 48
2a01:5043:efd::/48 maxlen: 48
2a01:5043:eff::/48 maxlen: 48
2a01:5043:2000::/48 maxlen: 48
2a01:5043:2003::/48 maxlen: 48
2a01:5043:2007::/48 maxlen: 48
2a01:5043:2efd::/48 maxlen: 48
2a01:5043:2eff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:d7:6f:4f:9e:d8:35:ee:03:86:37:a4:d7:2c:61:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Validity
Not Before: Feb 11 13:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93db3847f4421a71ed64eae358acc2cc7eb85491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:1b:87:74:93:71:76:67:c1:32:53:95:6e:
b6:79:ba:eb:86:c2:f7:8d:1b:0f:f6:2e:ee:9c:02:
d7:00:36:39:bd:ab:19:25:5c:48:f5:c6:eb:83:f5:
cc:f7:9d:cf:8e:77:9a:47:59:6b:7a:2d:13:a4:ed:
a3:46:d2:76:73:ab:b9:22:86:6c:7c:2e:20:cd:0b:
de:4e:72:09:36:07:59:45:28:f3:44:0b:24:98:a8:
ee:37:af:d7:40:78:5b:c5:a6:ca:73:41:a4:d2:47:
db:a0:13:fb:cd:28:7b:a8:87:b2:88:5d:fe:48:04:
dc:75:2c:d3:68:66:d9:14:bb:ba:dd:88:0a:7f:9a:
e5:29:51:4c:14:c7:18:da:b4:de:6b:b7:3d:fd:d9:
76:28:1e:1d:e8:cc:1b:5e:02:81:d8:b9:60:60:1e:
c4:86:4c:4c:bc:1e:a3:04:b2:ca:10:85:e9:3b:26:
66:45:55:3d:bb:19:20:3f:ab:ab:6c:c6:1c:42:22:
b8:b3:96:5d:d3:c3:53:de:ea:73:5e:9e:2e:2a:84:
98:f9:e4:f4:f1:9b:3c:3d:9d:1a:dc:67:f1:21:41:
41:b2:7d:e9:7c:75:49:c9:d0:ad:45:57:ef:0e:99:
bc:b4:8a:34:cb:21:a5:b0:10:2b:20:b1:69:cb:c0:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DB:38:47:F4:42:1A:71:ED:64:EA:E3:58:AC:C2:CC:7E:B8:54:91
X509v3 Authority Key Identifier:
keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/k9s4R_RCGnHtZOrjWKzCzH64VJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.20.0/23
37.10.1.0/24
37.10.3.0/24
37.10.10.0/24
37.10.12.0/24
37.10.24.0/21
37.10.40.0/21
91.195.236.0/24
IPv6:
2a01:5041::-2a01:5042:1:ffff:ffff:ffff:ffff:ffff
2a01:5042:3::/48
2a01:5042:7::/48
2a01:5042:b::/48
2a01:5042:e::/48
2a01:5042:efd::/48
2a01:5042:eff::/48
2a01:5042:2000::/47
2a01:5042:2003::/48
2a01:5042:2007::/48
2a01:5042:200b::/48
2a01:5042:200e::/48
2a01:5042:2efd::/48
2a01:5042:2eff::/48
2a01:5043::/48
2a01:5043:3::/48
2a01:5043:7::/48
2a01:5043:b::/48
2a01:5043:e::/48
2a01:5043:efd::/48
2a01:5043:eff::/48
2a01:5043:2000::/48
2a01:5043:2003::/48
2a01:5043:2007::/48
2a01:5043:2efd::/48
2a01:5043:2eff::/48
Signature Algorithm: sha256WithRSAEncryption
2f:72:28:28:a1:c1:63:6c:11:42:0f:19:3c:b0:52:cd:1a:f1:
d5:64:02:c9:9c:c0:47:94:c0:6b:f1:f8:78:0e:b6:74:3b:fc:
3e:7a:f9:06:2c:e4:ab:81:a8:b2:6a:d4:c9:4f:03:ef:aa:a6:
25:ba:a0:32:06:eb:34:fc:c3:7e:cf:91:80:68:99:14:26:60:
94:22:d4:fc:74:55:25:a9:12:e0:92:f7:8d:50:c2:5e:f2:9c:
89:7e:cc:7b:16:43:53:2a:bc:26:a1:db:31:93:a6:f8:0e:7c:
6e:ba:56:a3:80:92:79:b3:79:aa:73:d0:22:09:40:dc:10:8a:
48:95:f8:d8:ad:65:bf:d6:a5:1b:18:97:ef:f9:c8:6a:8f:7d:
77:5f:dc:ff:95:3f:fb:df:f9:75:4c:66:bc:8d:64:71:30:40:
e6:79:16:2b:af:79:81:8b:c3:9c:43:b9:c1:17:b5:6f:23:21:
de:3c:2f:78:c3:e2:6a:bd:78:e8:03:7f:68:b0:7c:f5:8d:8d:
05:ba:a4:51:14:73:db:44:e5:9f:6f:51:4c:d6:d6:48:52:c1:
0d:b5:50:27:ef:0b:d9:16:5e:2e:ec:fc:ba:2a:83:1c:cc:53:
ee:20:61:d0:28:71:e6:89:3d:04:d4:93:4a:b7:3d:9c:56:7c:
fa:86:2c:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:20:25 2026 by rpki-client