Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/XFUoCzclFOQeYVXYks0tU7yCsG8.roa
File: XFUoCzclFOQeYVXYks0tU7yCsG8.roa (raw, json)
Hash identifier: qqNP4+XF6zY9ECqQp6jJ72gWY0yVXYKUvf4SGxqbqrE=
Subject key identifier: 5C:55:28:0B:37:25:14:E4:1E:61:55:D8:92:CD:2D:53:BC:82:B0:6F
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 019C97F2A325A97BB949B0DF5D2DDCF464BE
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/XFUoCzclFOQeYVXYks0tU7yCsG8.roa
Signing time: Thu 26 Feb 2026 03:16:26 +0000
ROA not before: Thu 26 Feb 2026 03:16:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 79.72.0.0/20 maxlen: 20
79.72.16.0/22 maxlen: 22
79.72.20.0/23 maxlen: 23
79.72.24.0/21 maxlen: 21
79.72.32.0/22 maxlen: 24
79.72.40.0/21 maxlen: 21
79.72.48.0/20 maxlen: 20
79.72.64.0/19 maxlen: 19
79.76.0.0/20 maxlen: 20
79.76.16.0/23 maxlen: 23
79.76.18.0/23 maxlen: 23
79.76.20.0/24 maxlen: 24
79.76.24.0/21 maxlen: 21
79.76.32.0/19 maxlen: 19
79.76.96.0/19 maxlen: 19
80.225.64.0/20 maxlen: 20
80.225.80.0/20 maxlen: 20
80.225.160.0/21 maxlen: 21
80.225.168.0/23 maxlen: 23
80.225.170.0/23 maxlen: 23
80.225.172.0/23 maxlen: 23
80.225.174.0/23 maxlen: 23
80.225.176.0/23 maxlen: 23
80.225.178.0/23 maxlen: 23
80.225.184.0/21 maxlen: 21
80.225.192.0/18 maxlen: 18
81.208.160.0/20 maxlen: 20
81.208.188.0/22 maxlen: 22
82.70.32.0/19 maxlen: 24
82.70.224.0/20 maxlen: 20
82.70.248.0/22 maxlen: 22
84.8.64.0/21 maxlen: 21
84.8.72.0/23 maxlen: 23
84.8.74.0/23 maxlen: 23
84.8.76.0/23 maxlen: 23
84.8.78.0/23 maxlen: 23
84.8.80.0/23 maxlen: 23
84.8.88.0/23 maxlen: 23
84.8.96.0/19 maxlen: 19
84.8.128.0/20 maxlen: 20
84.8.144.0/20 maxlen: 20
84.8.192.0/21 maxlen: 24
84.8.200.0/23 maxlen: 24
84.8.202.0/23 maxlen: 24
84.8.206.0/23 maxlen: 24
84.8.208.0/23 maxlen: 24
84.8.210.0/23 maxlen: 24
84.8.216.0/21 maxlen: 24
84.8.224.0/21 maxlen: 21
84.8.232.0/23 maxlen: 23
84.8.234.0/23 maxlen: 23
84.8.238.0/23 maxlen: 23
84.8.240.0/23 maxlen: 23
84.8.242.0/23 maxlen: 23
84.8.248.0/21 maxlen: 21
84.235.160.0/19 maxlen: 19
84.235.192.0/23 maxlen: 23
84.235.198.0/23 maxlen: 23
84.235.200.0/21 maxlen: 21
84.235.208.0/20 maxlen: 20
84.235.224.0/20 maxlen: 20
84.235.240.0/20 maxlen: 20
89.168.0.0/21 maxlen: 21
89.168.16.0/20 maxlen: 20
89.168.32.0/19 maxlen: 19
89.168.64.0/18 maxlen: 18
92.4.64.0/19 maxlen: 19
92.4.128.0/19 maxlen: 19
92.4.160.0/20 maxlen: 20
92.4.176.0/20 maxlen: 20
92.4.192.0/21 maxlen: 21
92.4.202.0/23 maxlen: 24
92.4.208.0/20 maxlen: 24
92.4.228.0/22 maxlen: 24
92.4.232.0/23 maxlen: 23
92.4.235.0/24 maxlen: 24
92.4.236.0/24 maxlen: 24
92.4.237.0/24 maxlen: 24
92.4.238.0/24 maxlen: 24
92.4.239.0/24 maxlen: 24
92.4.240.0/20 maxlen: 20
92.5.0.0/17 maxlen: 17
92.5.128.0/18 maxlen: 18
92.5.192.0/19 maxlen: 19
92.5.224.0/20 maxlen: 20
92.5.240.0/21 maxlen: 21
92.5.248.0/22 maxlen: 22
92.5.254.0/24 maxlen: 24
92.5.255.0/24 maxlen: 24
130.110.0.0/20 maxlen: 20
130.110.16.0/21 maxlen: 21
130.110.24.0/22 maxlen: 22
130.110.28.0/23 maxlen: 23
130.110.32.0/19 maxlen: 19
130.110.64.0/19 maxlen: 19
130.110.96.0/19 maxlen: 19
130.110.192.0/24 maxlen: 24
130.110.206.0/24 maxlen: 24
130.110.207.0/24 maxlen: 24
130.110.208.0/24 maxlen: 24
130.110.209.0/24 maxlen: 24
130.110.210.0/24 maxlen: 24
130.110.211.0/24 maxlen: 24
130.110.212.0/24 maxlen: 24
130.110.213.0/24 maxlen: 24
130.110.214.0/24 maxlen: 24
130.110.215.0/24 maxlen: 24
130.110.216.0/24 maxlen: 24
130.110.218.0/24 maxlen: 24
130.110.219.0/24 maxlen: 24
130.110.220.0/24 maxlen: 24
130.110.221.0/24 maxlen: 24
130.110.222.0/24 maxlen: 24
130.110.223.0/24 maxlen: 24
130.110.224.0/21 maxlen: 21
130.110.232.0/22 maxlen: 22
130.110.236.0/23 maxlen: 23
130.110.238.0/24 maxlen: 24
130.110.239.0/24 maxlen: 24
130.110.240.0/20 maxlen: 20
134.98.64.0/23 maxlen: 23
134.98.128.0/19 maxlen: 24
134.98.192.0/19 maxlen: 19
134.98.224.0/23 maxlen: 23
134.98.248.0/21 maxlen: 21
140.84.160.0/19 maxlen: 24
140.86.0.0/20 maxlen: 24
140.86.32.0/20 maxlen: 24
140.86.48.0/21 maxlen: 24
140.86.62.0/23 maxlen: 24
140.86.64.0/20 maxlen: 24
140.86.96.0/23 maxlen: 24
140.86.156.0/23 maxlen: 24
140.86.192.0/20 maxlen: 24
140.86.208.0/21 maxlen: 24
140.86.216.0/22 maxlen: 24
140.86.220.0/22 maxlen: 24
140.86.230.0/24 maxlen: 24
140.86.231.0/24 maxlen: 24
140.86.232.0/24 maxlen: 24
140.86.236.0/24 maxlen: 24
140.86.237.0/24 maxlen: 24
140.86.238.0/24 maxlen: 24
141.253.96.0/19 maxlen: 19
141.253.192.0/20 maxlen: 20
141.253.208.0/22 maxlen: 22
141.253.212.0/23 maxlen: 23
141.253.214.0/24 maxlen: 24
141.253.215.0/24 maxlen: 24
141.253.216.0/21 maxlen: 21
145.241.96.0/21 maxlen: 21
145.241.104.0/21 maxlen: 24
145.241.112.0/20 maxlen: 20
145.241.144.0/21 maxlen: 21
145.241.152.0/21 maxlen: 21
145.241.160.0/20 maxlen: 20
145.241.176.0/24 maxlen: 24
145.241.177.0/24 maxlen: 24
145.241.178.0/23 maxlen: 23
145.241.180.0/23 maxlen: 23
145.241.182.0/24 maxlen: 24
145.241.183.0/24 maxlen: 24
145.241.184.0/21 maxlen: 21
145.241.192.0/18 maxlen: 18
213.35.96.0/19 maxlen: 19
217.142.128.0/19 maxlen: 19
217.142.160.0/21 maxlen: 21
217.142.168.0/23 maxlen: 23
217.142.170.0/23 maxlen: 23
217.142.172.0/23 maxlen: 23
217.142.174.0/23 maxlen: 23
217.142.176.0/23 maxlen: 23
217.142.178.0/23 maxlen: 23
217.142.184.0/21 maxlen: 21
217.142.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:97:f2:a3:25:a9:7b:b9:49:b0:df:5d:2d:dc:f4:64:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Feb 26 03:16:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c55280b372514e41e6155d892cd2d53bc82b06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:80:fc:bd:60:ef:c6:d0:79:41:27:c7:0e:
16:26:8a:96:c6:82:2c:a0:09:d9:7d:64:5d:8f:13:
e4:da:e9:57:df:2e:68:5a:e7:a4:d8:a2:49:b5:56:
1e:12:2d:4e:3d:93:8f:51:bc:8a:4d:02:6d:f6:cd:
3f:fd:7b:9f:56:4f:a4:82:6e:21:9a:09:49:f0:7b:
00:a9:5d:6d:6c:01:11:cf:24:2b:ad:02:db:79:cc:
da:34:40:28:0d:36:01:07:63:c6:09:a8:e4:37:ed:
6f:f5:e8:1d:21:74:98:a8:f2:3d:ba:c5:d2:6a:70:
6c:99:6f:ac:ad:1c:02:65:22:f5:2f:25:74:77:97:
2d:b8:e2:56:86:69:14:f7:70:3b:62:e5:d0:84:2a:
ec:ba:69:97:97:5f:26:70:cb:f8:fe:3c:84:fb:e5:
02:5b:6c:b9:c6:52:74:8e:a3:c1:40:f5:ec:3c:ea:
fb:6c:ba:5b:19:99:1c:66:7e:52:29:e6:45:76:97:
46:03:43:c5:53:72:b0:29:e2:6d:39:f4:bc:d2:aa:
48:1a:13:ef:57:ef:84:02:b7:a9:58:55:2d:b8:9a:
47:3c:1b:9b:08:37:c9:6d:4d:a1:22:ab:b0:64:54:
32:12:e8:72:b7:b8:ab:67:57:47:91:71:2d:42:92:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:55:28:0B:37:25:14:E4:1E:61:55:D8:92:CD:2D:53:BC:82:B0:6F
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/XFUoCzclFOQeYVXYks0tU7yCsG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.72.0.0-79.72.21.255
79.72.24.0-79.72.35.255
79.72.40.0-79.72.95.255
79.76.0.0-79.76.20.255
79.76.24.0-79.76.63.255
79.76.96.0/19
80.225.64.0/19
80.225.160.0-80.225.179.255
80.225.184.0-80.225.255.255
81.208.160.0/20
81.208.188.0/22
82.70.32.0/19
82.70.224.0/20
82.70.248.0/22
84.8.64.0-84.8.81.255
84.8.88.0/23
84.8.96.0-84.8.159.255
84.8.192.0-84.8.203.255
84.8.206.0-84.8.211.255
84.8.216.0-84.8.235.255
84.8.238.0-84.8.243.255
84.8.248.0/21
84.235.160.0-84.235.193.255
84.235.198.0-84.235.255.255
89.168.0.0/21
89.168.16.0-89.168.127.255
92.4.64.0/19
92.4.128.0-92.4.199.255
92.4.202.0/23
92.4.208.0/20
92.4.228.0-92.4.233.255
92.4.235.0-92.5.251.255
92.5.254.0/23
130.110.0.0-130.110.29.255
130.110.32.0-130.110.127.255
130.110.192.0/24
130.110.206.0-130.110.216.255
130.110.218.0-130.110.255.255
134.98.64.0/23
134.98.128.0/19
134.98.192.0-134.98.225.255
134.98.248.0/21
140.84.160.0/19
140.86.0.0/20
140.86.32.0-140.86.55.255
140.86.62.0-140.86.79.255
140.86.96.0/23
140.86.156.0/23
140.86.192.0/19
140.86.230.0-140.86.232.255
140.86.236.0-140.86.238.255
141.253.96.0/19
141.253.192.0/19
145.241.96.0/19
145.241.144.0-145.241.255.255
213.35.96.0/19
217.142.128.0-217.142.179.255
217.142.184.0/21
217.142.224.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:30:e4:cf:7e:59:0a:56:57:a2:52:f9:29:23:0a:91:95:d7:
15:e6:ac:87:5d:b5:fd:5d:0f:56:52:e4:c5:e6:dc:ae:a6:bc:
6c:5d:cd:e0:96:02:01:91:c2:fd:a6:d7:67:0f:63:a1:6d:a0:
55:cd:a4:ca:ea:ac:b5:6f:41:2c:3a:6f:e5:4d:d5:d8:d7:3e:
ba:f5:4f:d5:27:9a:c0:93:fe:74:bf:eb:4c:44:61:cc:ae:ae:
80:aa:ff:9d:b4:ad:a2:f2:10:c5:20:47:fe:f7:6d:83:c6:c3:
f5:bf:8f:bc:62:b0:05:68:bb:9d:8f:7a:70:b2:db:01:76:1f:
95:3c:a9:76:b2:dd:2c:21:6c:fd:04:34:e7:ce:c6:3b:52:fa:
26:9f:56:ee:78:7c:46:37:e7:99:af:19:0b:a0:ac:06:34:fc:
80:a1:ac:c4:23:3b:0c:1a:70:1c:a6:f0:92:b6:51:4c:f4:97:
a3:46:ec:ab:5b:53:87:a5:77:ce:30:53:9f:b8:4d:35:7d:cf:
05:8c:a6:ea:a3:a7:60:1a:6d:e7:f1:9c:05:67:3c:9b:ec:17:
df:cb:3c:15:b5:2a:e2:d6:b7:4f:4e:6f:49:4a:2d:d6:5e:f7:
8b:94:8a:52:18:d1:d1:9a:76:40:56:7c:bd:8b:53:a5:8c:6f:
f7:d3:f6:e5
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgISAZyX8qMlqXu5SbDfXS3c9GS+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2M4MzQ0N2QxNzE4MzM4MGY0ODliYzk0NmM4YjllMzAw
ZmZiMWQwHhcNMjYwMjI2MDMxNjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzU1MjgwYjM3MjUxNGU0MWU2MTU1ZDg5MmNkMmQ1M2JjODJiMDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuaA/L1g78bQeUEnxw4WJoqWxoIs
oAnZfWRdjxPk2ulX3y5oWuek2KJJtVYeEi1OPZOPUbyKTQJt9s0//XufVk+kgm4h
mglJ8HsAqV1tbAERzyQrrQLbeczaNEAoDTYBB2PGCajkN+1v9egdIXSYqPI9usXS
anBsmW+srRwCZSL1LyV0d5ctuOJWhmkU93A7YuXQhCrsummXl18mcMv4/jyE++UC
W2y5xlJ0jqPBQPXsPOr7bLpbGZkcZn5SKeZFdpdGA0PFU3KwKeJtOfS80qpIGhPv
V++EArepWFUtuJpHPBubCDfJbU2hIquwZFQyEuhyt7irZ1dHkXEtQpJKhQIDAQAB
o4IEWDCCBFQwHQYDVR0OBBYEFFxVKAs3JRTkHmFV2JLNLVO8grBvMB8GA1UdIwQY
MBaAFCN8g0R9FxgzgPSJvJRsi54wD/sdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEt
OGIzMzcyMjM0ZGMwLzEvWEZVb0N6Y2xGT1FlWVZYWWtzMHRVN3lDc0c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEtOGIzMzcyMjM0ZGMw
LzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICbAYIKwYBBQUHAQcBAf8EggJbMIICVzCCAlMEAgABMIIC
SzALAwMDT0gDBAFPSBQwDAMEA09IGAMEAk9IIDAMAwQDT0goAwQFT0hAMAsDAwJP
TAMEAE9MFDAMAwQDT0wYAwQGT0wAAwQFT0xgAwQFUOFAMAwDBAVQ4aADBAJQ4bAw
CwMEA1DhuAMDAVDgAwQEUdCgAwQCUdC8AwQFUkYgAwQEUkbgAwQCUkb4MAwDBAZU
CEADBAFUCFADBAFUCFgwDAMEBVQIYAMEBVQIgDAMAwQGVAjAAwQCVAjIMAwDBAFU
CM4DBAJUCNAwDAMEA1QI2AMEAlQI6DAMAwQBVAjuAwQCVAjwAwQDVAj4MAwDBAVU
66ADBAFU68AwCwMEAVTrxgMDAlToAwQDWagAMAwDBARZqBADBAdZqAADBAVcBEAw
DAMEB1wEgAMEA1wEwAMEAVwEygMEBFwE0DAMAwQCXATkAwQBXAToMAwDBABcBOsD
BAJcBfgDBAFcBf4wCwMDAYJuAwQBgm4cMAwDBAWCbiADBAeCbgADBACCbsAwDAME
AYJuzgMEAIJu2DALAwQBgm7aAwMAgm4DBAGGYkADBAWGYoAwDAMEBoZiwAMEAYZi
4AMEA4Zi+AMEBYxUoAMEBIxWADAMAwQFjFYgAwQDjFYwMAwDBAGMVj4DBASMVkAD
BAGMVmADBAGMVpwDBAWMVsAwDAMEAYxW5gMEAIxW6DAMAwQCjFbsAwQAjFbuAwQF
jf1gAwQFjf3AAwQFkfFgMAsDBASR8ZADAwGR8AMEBdUjYDAMAwQH2Y6AAwQC2Y6w
AwQD2Y64AwQF2Y7gMA0GCSqGSIb3DQEBCwUAA4IBAQBsMOTPflkKVleiUvkpIwqR
ldcV5qyHXbX9XQ9WUuTF5tyuprxsXc3glgIBkcL9ptdnD2OhbaBVzaTK6qy1b0Es
Om/lTdXY1z669U/VJ5rAk/50v+tMRGHMrq6Aqv+dtK2i8hDFIEf+922DxsP1v4+8
YrAFaLudj3pwstsBdh+VPKl2st0sIWz9BDTnzsY7Uvomn1bueHxGN+eZrxkLoKwG
NPyAoazEIzsMGnAcpvCStlFM9JejRuyrW1OHpXfOMFOfuE01fc8FjKbqo6dgGm3n
8ZwFZzyb7BffyzwVtSri1rdPTm9JSi3WXveLlIpSGNHRmnZAVny9i1OljG/30/bl
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:37 2026 by rpki-client