Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/sE_-Zfk_DwyvOa_qt-EocnU4lFc.roa
File: sE_-Zfk_DwyvOa_qt-EocnU4lFc.roa (raw, json)
Hash identifier: euipXRTMWnefQBmfrbhq1BmgDtDdCzDjxCD9mCNPfqU=
Subject key identifier: B0:4F:FE:65:F9:3F:0F:0C:AF:39:AF:EA:B7:E1:28:72:75:38:94:57
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 019D97562DA3E3A242427BCFD7C8C396A7E0
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/sE_-Zfk_DwyvOa_qt-EocnU4lFc.roa
Signing time: Thu 16 Apr 2026 17:28:20 +0000
ROA not before: Thu 16 Apr 2026 17:28:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54253
IP address blocks: 51.170.4.0/22 maxlen: 24
79.72.22.0/23 maxlen: 24
79.72.36.0/23 maxlen: 24
79.72.39.0/24 maxlen: 24
79.72.96.0/22 maxlen: 24
79.72.96.0/23 maxlen: 24
79.72.98.0/23 maxlen: 24
79.72.100.0/23 maxlen: 24
79.72.104.0/21 maxlen: 24
79.72.112.0/21 maxlen: 24
79.72.128.0/22 maxlen: 24
79.72.128.0/23 maxlen: 24
79.72.130.0/23 maxlen: 24
79.72.132.0/23 maxlen: 24
79.72.136.0/21 maxlen: 24
79.72.144.0/21 maxlen: 24
79.76.21.0/24 maxlen: 24
79.76.22.0/23 maxlen: 24
79.76.64.0/22 maxlen: 24
79.76.64.0/23 maxlen: 24
79.76.66.0/23 maxlen: 24
79.76.68.0/23 maxlen: 24
79.76.72.0/21 maxlen: 24
79.76.80.0/21 maxlen: 24
80.225.0.0/22 maxlen: 24
80.225.0.0/23 maxlen: 24
80.225.2.0/23 maxlen: 24
80.225.4.0/23 maxlen: 24
80.225.8.0/21 maxlen: 24
80.225.16.0/21 maxlen: 24
80.225.32.0/22 maxlen: 24
80.225.32.0/23 maxlen: 24
80.225.34.0/23 maxlen: 24
80.225.36.0/23 maxlen: 24
80.225.40.0/21 maxlen: 24
80.225.48.0/21 maxlen: 24
80.225.96.0/22 maxlen: 24
80.225.96.0/23 maxlen: 24
80.225.98.0/23 maxlen: 24
80.225.100.0/23 maxlen: 24
80.225.104.0/21 maxlen: 24
80.225.112.0/21 maxlen: 24
84.8.0.0/22 maxlen: 24
84.8.0.0/23 maxlen: 24
84.8.2.0/23 maxlen: 24
84.8.4.0/23 maxlen: 24
84.8.8.0/21 maxlen: 24
84.8.16.0/21 maxlen: 24
84.8.32.0/22 maxlen: 24
84.8.32.0/23 maxlen: 24
84.8.34.0/23 maxlen: 24
84.8.36.0/23 maxlen: 24
84.8.40.0/21 maxlen: 24
84.8.48.0/21 maxlen: 24
84.8.160.0/22 maxlen: 24
84.8.160.0/23 maxlen: 24
84.8.162.0/23 maxlen: 24
84.8.164.0/23 maxlen: 24
84.8.168.0/21 maxlen: 24
84.8.176.0/21 maxlen: 24
84.235.128.0/22 maxlen: 24
84.235.128.0/23 maxlen: 24
84.235.130.0/23 maxlen: 24
84.235.132.0/23 maxlen: 24
84.235.136.0/21 maxlen: 24
84.235.144.0/21 maxlen: 24
84.235.194.0/23 maxlen: 24
92.4.0.0/22 maxlen: 24
92.4.0.0/23 maxlen: 24
92.4.2.0/23 maxlen: 24
92.4.4.0/23 maxlen: 24
92.4.8.0/21 maxlen: 24
92.4.16.0/21 maxlen: 24
92.4.32.0/22 maxlen: 24
92.4.36.0/23 maxlen: 24
92.4.38.0/24 maxlen: 24
92.4.40.0/21 maxlen: 24
92.4.48.0/21 maxlen: 24
92.4.96.0/22 maxlen: 24
92.4.96.0/23 maxlen: 24
92.4.98.0/23 maxlen: 24
92.4.100.0/23 maxlen: 24
92.4.104.0/21 maxlen: 24
92.4.112.0/21 maxlen: 24
141.253.128.0/22 maxlen: 22
141.253.128.0/23 maxlen: 23
141.253.130.0/23 maxlen: 23
141.253.132.0/23 maxlen: 23
141.253.136.0/21 maxlen: 21
141.253.144.0/21 maxlen: 21
141.253.224.0/22 maxlen: 22
141.253.224.0/23 maxlen: 23
141.253.226.0/23 maxlen: 23
141.253.228.0/23 maxlen: 23
141.253.232.0/21 maxlen: 21
141.253.240.0/21 maxlen: 21
145.241.136.0/22 maxlen: 24
213.35.64.0/22 maxlen: 22
213.35.64.0/23 maxlen: 23
213.35.66.0/23 maxlen: 23
213.35.68.0/23 maxlen: 23
213.35.72.0/21 maxlen: 21
213.35.80.0/21 maxlen: 21
217.142.192.0/22 maxlen: 22
217.142.192.0/23 maxlen: 23
217.142.194.0/23 maxlen: 23
217.142.196.0/23 maxlen: 23
217.142.200.0/21 maxlen: 21
217.142.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:56:2d:a3:e3:a2:42:42:7b:cf:d7:c8:c3:96:a7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Apr 16 17:28:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b04ffe65f93f0f0caf39afeab7e1287275389457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:b7:c3:e6:55:d8:73:00:6e:7b:e3:ea:87:
ff:2b:52:37:f6:cf:be:cf:80:d5:3c:db:d3:07:64:
31:2c:34:89:be:69:d0:09:c0:ed:33:25:7c:14:4a:
bb:6c:8e:6e:a8:f1:ed:d5:c6:eb:2f:55:8a:ac:94:
5b:95:17:b9:99:fe:de:5a:63:64:88:eb:55:0c:f2:
06:18:1e:f9:36:1b:8f:a7:55:5f:ed:c6:05:fc:27:
c7:b0:87:db:dd:ae:ea:c1:73:a8:76:84:5a:d3:b2:
75:85:66:77:88:5e:bb:8e:c4:97:91:cd:e9:34:22:
e2:08:72:ad:26:b4:24:b9:ad:f4:3a:94:4a:ca:dc:
ad:fe:06:3c:50:8b:53:ce:4e:5a:b2:72:dd:01:4e:
bf:4a:70:9d:12:22:50:18:fb:91:26:a3:97:3d:44:
64:9c:59:a8:04:9d:c4:e2:ca:c6:b0:98:33:91:bc:
c6:8d:f8:f8:41:d8:a6:28:35:9e:2e:00:e5:c3:ae:
63:ac:60:a6:39:44:f4:8b:75:30:ef:56:a2:3e:51:
3b:f8:3e:26:52:26:4e:a9:0f:68:27:ed:f3:6d:ea:
5f:52:47:dd:b5:1c:22:dc:91:6e:ac:43:9d:b0:b7:
30:91:ad:07:b0:30:0d:e4:ac:88:f5:fe:66:aa:f0:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4F:FE:65:F9:3F:0F:0C:AF:39:AF:EA:B7:E1:28:72:75:38:94:57
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/sE_-Zfk_DwyvOa_qt-EocnU4lFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.170.4.0/22
79.72.22.0/23
79.72.36.0/23
79.72.39.0/24
79.72.96.0-79.72.101.255
79.72.104.0-79.72.119.255
79.72.128.0-79.72.133.255
79.72.136.0-79.72.151.255
79.76.21.0-79.76.23.255
79.76.64.0-79.76.69.255
79.76.72.0-79.76.87.255
80.225.0.0-80.225.5.255
80.225.8.0-80.225.23.255
80.225.32.0-80.225.37.255
80.225.40.0-80.225.55.255
80.225.96.0-80.225.101.255
80.225.104.0-80.225.119.255
84.8.0.0-84.8.5.255
84.8.8.0-84.8.23.255
84.8.32.0-84.8.37.255
84.8.40.0-84.8.55.255
84.8.160.0-84.8.165.255
84.8.168.0-84.8.183.255
84.235.128.0-84.235.133.255
84.235.136.0-84.235.151.255
84.235.194.0/23
92.4.0.0-92.4.5.255
92.4.8.0-92.4.23.255
92.4.32.0-92.4.38.255
92.4.40.0-92.4.55.255
92.4.96.0-92.4.101.255
92.4.104.0-92.4.119.255
141.253.128.0-141.253.133.255
141.253.136.0-141.253.151.255
141.253.224.0-141.253.229.255
141.253.232.0-141.253.247.255
145.241.136.0/22
213.35.64.0-213.35.69.255
213.35.72.0-213.35.87.255
217.142.192.0-217.142.197.255
217.142.200.0-217.142.215.255
Signature Algorithm: sha256WithRSAEncryption
66:22:c5:40:6b:e6:4d:1e:3f:a1:d8:b5:79:2a:7a:0e:d3:2e:
41:10:d0:a1:43:d1:28:72:95:81:b1:d0:d8:ad:ac:d3:d4:ab:
f5:c8:a3:6c:b6:f5:7f:b1:3e:f8:30:37:ce:6c:de:e1:90:f2:
fc:4f:a3:87:a2:09:88:26:c9:78:39:c8:64:5e:8a:e0:66:61:
c0:86:45:1d:a5:c9:51:83:fd:85:5a:12:7e:f3:97:bc:a3:87:
31:df:55:2f:6a:e1:52:86:1d:c1:b9:75:e1:81:4f:6a:bd:5d:
ba:c7:10:20:55:46:1d:b0:d5:25:2e:f0:68:59:61:f5:fc:7d:
4e:3f:0d:91:7b:9f:02:89:b0:7c:5b:52:3a:95:e7:f7:4b:df:
1e:24:e8:f2:0a:00:04:5b:95:de:10:af:c8:f7:f3:bc:c3:d1:
42:ed:f8:33:87:f7:6a:e1:81:7d:dd:ec:0b:e4:3f:54:70:a0:
f7:9c:d2:a9:49:ec:6c:b3:63:49:5a:09:87:1a:a2:0c:e8:25:
14:d6:82:fb:1c:c5:7c:bd:76:aa:35:cc:a5:60:0c:eb:9d:26:
cd:59:c8:ba:1e:d4:da:20:ef:05:25:3d:19:7a:0a:40:31:32:
57:9b:d1:69:da:26:53:3a:18:52:62:99:2e:f4:b0:6b:70:1a:
f1:fe:90:a1
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgISAZ2XVi2j46JCQnvP18jDlqfgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2M4MzQ0N2QxNzE4MzM4MGY0ODliYzk0NmM4YjllMzAw
ZmZiMWQwHhcNMjYwNDE2MTcyODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDRmZmU2NWY5M2YwZjBjYWYzOWFmZWFiN2UxMjg3Mjc1Mzg5NDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKi3w+ZV2HMAbnvj6of/K1I39s++
z4DVPNvTB2QxLDSJvmnQCcDtMyV8FEq7bI5uqPHt1cbrL1WKrJRblRe5mf7eWmNk
iOtVDPIGGB75NhuPp1Vf7cYF/CfHsIfb3a7qwXOodoRa07J1hWZ3iF67jsSXkc3p
NCLiCHKtJrQkua30OpRKytyt/gY8UItTzk5asnLdAU6/SnCdEiJQGPuRJqOXPURk
nFmoBJ3E4srGsJgzkbzGjfj4QdimKDWeLgDlw65jrGCmOUT0i3Uw71aiPlE7+D4m
UiZOqQ9oJ+3zbepfUkfdtRwi3JFurEOdsLcwka0HsDAN5KyI9f5mqvCIMQIDAQAB
o4IEGDCCBBQwHQYDVR0OBBYEFLBP/mX5Pw8Mrzmv6rfhKHJ1OJRXMB8GA1UdIwQY
MBaAFCN8g0R9FxgzgPSJvJRsi54wD/sdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEt
OGIzMzcyMjM0ZGMwLzEvc0VfLVpma19Ed3l2T2FfcXQtRW9jblU0bEZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEtOGIzMzcyMjM0ZGMw
LzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICLAYIKwYBBQUHAQcBAf8EggIbMIICFzCCAhMEAgABMIIC
CwMEAjOqBAMEAU9IFgMEAU9IJAMEAE9IJzAMAwQFT0hgAwQBT0hkMAwDBANPSGgD
BANPSHAwDAMEB09IgAMEAU9IhDAMAwQDT0iIAwQDT0iQMAwDBABPTBUDBANPTBAw
DAMEBk9MQAMEAU9MRDAMAwQDT0xIAwQDT0xQMAsDAwBQ4QMEAVDhBDAMAwQDUOEI
AwQDUOEQMAwDBAVQ4SADBAFQ4SQwDAMEA1DhKAMEA1DhMDAMAwQFUOFgAwQBUOFk
MAwDBANQ4WgDBANQ4XAwCwMDA1QIAwQBVAgEMAwDBANUCAgDBANUCBAwDAMEBVQI
IAMEAVQIJDAMAwQDVAgoAwQDVAgwMAwDBAVUCKADBAFUCKQwDAMEA1QIqAMEA1QI
sDAMAwQHVOuAAwQBVOuEMAwDBANU64gDBANU65ADBAFU68IwCwMDAlwEAwQBXAQE
MAwDBANcBAgDBANcBBAwDAMEBVwEIAMEAFwEJjAMAwQDXAQoAwQDXAQwMAwDBAVc
BGADBAFcBGQwDAMEA1wEaAMEA1wEcDAMAwQHjf2AAwQBjf2EMAwDBAON/YgDBAON
/ZAwDAMEBY394AMEAY395DAMAwQDjf3oAwQDjf3wAwQCkfGIMAwDBAbVI0ADBAHV
I0QwDAMEA9UjSAMEA9UjUDAMAwQG2Y7AAwQB2Y7EMAwDBAPZjsgDBAPZjtAwDQYJ
KoZIhvcNAQELBQADggEBAGYixUBr5k0eP6HYtXkqeg7TLkEQ0KFD0ShylYGx0Nit
rNPUq/XIo2y29X+xPvgwN85s3uGQ8vxPo4eiCYgmyXg5yGReiuBmYcCGRR2lyVGD
/YVaEn7zl7yjhzHfVS9q4VKGHcG5deGBT2q9XbrHECBVRh2w1SUu8GhZYfX8fU4/
DZF7nwKJsHxbUjqV5/dL3x4k6PIKAARbld4Qr8j387zD0ULt+DOH92rhgX3d7Avk
P1RwoPec0qlJ7GyzY0laCYcaogzoJRTWgvscxXy9dqo1zKVgDOudJs1ZyLoe1Nog
7wUlPRl6CkAxMleb0WnaJlM6GFJimS70sGtwGvH+kKE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:30 2026 by rpki-client