Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/zIvUzcF8LAJfD49NX4DYYK5vix0.roa
File: zIvUzcF8LAJfD49NX4DYYK5vix0.roa (raw, json)
Hash identifier: aIpDSiEwa0ERsd3YCkg95P52GrNCpS38VqcltaZclRY=
Subject key identifier: CC:8B:D4:CD:C1:7C:2C:02:5F:0F:8F:4D:5F:80:D8:60:AE:6F:8B:1D
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019C7A00B6A8DFF946CAE8B1D721FF1CB424
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/zIvUzcF8LAJfD49NX4DYYK5vix0.roa
Signing time: Fri 20 Feb 2026 07:43:13 +0000
ROA not before: Fri 20 Feb 2026 07:43:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 5.154.174.0/24 maxlen: 24
31.223.187.0/24 maxlen: 24
45.10.192.0/24 maxlen: 32
45.10.193.0/24 maxlen: 32
45.95.24.0/22 maxlen: 32
45.144.88.0/22 maxlen: 24
45.149.28.0/22 maxlen: 24
45.153.157.0/24 maxlen: 24
45.153.158.0/23 maxlen: 32
45.156.224.0/22 maxlen: 32
46.16.32.0/24 maxlen: 32
80.73.243.0/24 maxlen: 24
80.246.30.0/24 maxlen: 32
81.21.232.0/22 maxlen: 32
86.105.183.0/24 maxlen: 32
87.239.255.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
103.21.52.0/24 maxlen: 32
103.24.232.0/22 maxlen: 32
103.71.60.0/24 maxlen: 32
103.76.255.0/24 maxlen: 32
103.81.230.0/23 maxlen: 23
103.113.208.0/22 maxlen: 22
103.145.75.0/24 maxlen: 32
103.198.254.0/23 maxlen: 23
103.204.222.0/23 maxlen: 32
103.221.52.0/22 maxlen: 32
103.228.200.0/22 maxlen: 32
103.251.26.0/23 maxlen: 23
104.36.50.0/24 maxlen: 32
109.104.142.0/23 maxlen: 32
116.206.96.0/22 maxlen: 32
137.59.60.0/22 maxlen: 32
167.160.96.0/24 maxlen: 32
167.160.97.0/24 maxlen: 32
167.160.98.0/24 maxlen: 32
178.251.234.0/23 maxlen: 32
185.36.254.0/24 maxlen: 32
185.96.162.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
185.147.140.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
185.152.248.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.166.84.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.201.188.0/24 maxlen: 24
185.217.64.0/22 maxlen: 22
185.242.217.0/24 maxlen: 24
188.119.154.0/24 maxlen: 32
193.36.89.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
195.225.81.0/24 maxlen: 24
199.249.223.0/24 maxlen: 32
2a01:4740::/32 maxlen: 48
2a05:28c0::/29 maxlen: 48
2a05:6700::/29 maxlen: 48
2a05:f4c0::/29 maxlen: 48
2a06:3040::/29 maxlen: 48
2a06:46c0::/29 maxlen: 32
2a06:4a00::/29 maxlen: 48
2a06:5000::/29 maxlen: 48
2a06:5700::/29 maxlen: 48
2a06:5740::/29 maxlen: 48
2a06:5800::/29 maxlen: 48
2a06:6580::/29 maxlen: 48
2a06:7340::/29 maxlen: 48
2a06:8100::/29 maxlen: 48
2a06:8140::/29 maxlen: 48
2a06:df80::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a07:9c80::/29 maxlen: 29
2a07:f2c0::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:00:b6:a8:df:f9:46:ca:e8:b1:d7:21:ff:1c:b4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Feb 20 07:43:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc8bd4cdc17c2c025f0f8f4d5f80d860ae6f8b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:4d:cd:78:97:30:e0:39:e1:f9:02:c9:62:
15:4b:c8:de:d4:1f:e1:12:e4:68:eb:eb:26:ba:a4:
4a:9b:e2:e0:a1:29:73:9e:b6:d5:b6:e4:7a:18:2d:
8c:c7:81:6f:61:8f:f8:fc:9b:77:80:ac:66:92:0e:
02:bc:1b:90:e9:3a:db:86:0c:83:3e:41:19:49:15:
0a:e7:47:d2:1d:3c:89:ad:9a:e7:ec:f7:b3:b3:85:
3d:48:5c:e1:99:37:92:32:0b:2a:cc:e1:69:87:82:
b7:f8:e2:e3:46:2c:b3:56:4b:7f:4a:5a:2f:f0:d5:
b9:e7:58:ce:07:3b:55:9f:1b:4b:08:13:ba:7d:27:
34:2a:0b:9e:de:06:1c:04:ac:ab:07:da:8e:63:4a:
3c:b6:53:c4:c8:d8:de:74:11:33:42:3e:03:c7:16:
12:08:e2:9c:30:af:bb:2d:9b:3b:7b:53:05:dc:0a:
34:28:45:fb:92:73:64:ee:dc:85:55:81:fb:96:c9:
11:0c:3a:28:37:24:85:e0:27:ce:09:a2:5b:71:50:
33:14:c0:01:f6:d2:10:53:a2:eb:29:8c:f6:ea:42:
53:ff:45:b7:18:04:aa:55:f6:7a:16:48:4c:02:8c:
92:e3:f0:f2:3d:ba:aa:b6:41:1c:c5:35:c3:97:c4:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8B:D4:CD:C1:7C:2C:02:5F:0F:8F:4D:5F:80:D8:60:AE:6F:8B:1D
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/zIvUzcF8LAJfD49NX4DYYK5vix0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
31.223.187.0/24
45.10.192.0/23
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.153.157.0-45.153.159.255
45.156.224.0/22
46.16.32.0/24
80.73.243.0/24
80.246.30.0/24
81.21.232.0/22
86.105.183.0/24
87.239.255.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
103.21.52.0/24
103.24.232.0/22
103.71.60.0/24
103.76.255.0/24
103.81.230.0/23
103.113.208.0/22
103.145.75.0/24
103.198.254.0/23
103.204.222.0/23
103.221.52.0/22
103.228.200.0/22
103.251.26.0/23
104.36.50.0/24
109.104.142.0/23
116.206.96.0/22
137.59.60.0/22
167.160.96.0-167.160.98.255
178.251.234.0/23
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.147.140.0/22
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.242.217.0/24
188.119.154.0/24
193.36.89.0/24
195.47.194.0/24
195.225.81.0/24
199.249.223.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:6700::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:5740::/29
2a06:5800::/29
2a06:6580::/29
2a06:7340::/29
2a06:8100::/29
2a06:8140::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
35:d4:b0:a9:c1:b7:ff:ca:59:8e:de:90:72:2f:d6:fd:f0:bb:
ff:0d:ad:3f:9b:89:ce:bb:0d:1d:7b:44:1d:d5:6b:bf:a1:32:
dd:8d:43:4a:d9:a1:a5:39:08:a4:36:7a:83:07:dd:cd:c8:45:
40:ec:be:d5:c3:e5:97:3b:fc:b0:81:e3:18:63:38:cd:29:b9:
86:99:81:0a:5d:ea:34:10:11:10:54:93:2f:c1:90:fa:87:12:
1e:61:60:ad:fb:95:3f:d2:8c:c1:27:92:d2:a4:77:a3:1f:65:
2f:86:5d:2b:a3:40:e0:e6:27:a0:d3:e3:ca:53:57:3b:0a:d2:
6c:2e:2f:90:b9:c5:dd:00:db:c1:f8:38:3e:5e:3d:55:66:ce:
1a:1f:ac:ee:ef:53:b7:fe:8d:8d:64:54:53:47:b0:2c:d6:c5:
2f:a5:08:b9:bb:ea:f4:3a:02:0e:9f:5c:f9:f8:bb:f3:9f:2d:
eb:c0:70:43:2c:98:4f:2d:d6:73:9b:6e:25:ee:3b:c6:4e:f0:
f2:74:c5:22:41:0a:bf:d6:8c:66:51:cf:fb:20:f8:64:a6:c0:
c0:63:73:9c:b7:29:d0:ed:d2:ae:ec:00:17:c3:68:61:a8:95:
f5:12:ef:67:7d:a4:f9:11:50:49:a5:74:21:df:26:6d:a2:92:
10:27:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:12 2026 by rpki-client