Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/ypxpQcDVejgOHVUiSfJBVFpm9iM.roa
File: ypxpQcDVejgOHVUiSfJBVFpm9iM.roa (raw, json)
Hash identifier: dKQInXlVmjNa4R5SxjIWRRhpiTXom8fBkSmF8sjsasU=
Subject key identifier: CA:9C:69:41:C0:D5:7A:38:0E:1D:55:22:49:F2:41:54:5A:66:F6:23
Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89
Certificate serial: 019C6C299F0EDF7837CE84969BCDDF84BD2C
Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/ypxpQcDVejgOHVUiSfJBVFpm9iM.roa
Signing time: Tue 17 Feb 2026 15:13:12 +0000
ROA not before: Tue 17 Feb 2026 15:13:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9050
IP address blocks: 84.243.64.0/18 maxlen: 18
86.34.0.0/15 maxlen: 15
86.34.0.0/16 maxlen: 16
86.35.0.0/16 maxlen: 16
86.35.0.0/21 maxlen: 21
86.35.9.0/24 maxlen: 24
86.35.10.0/24 maxlen: 24
86.35.12.0/24 maxlen: 24
86.35.13.0/24 maxlen: 24
86.35.14.0/24 maxlen: 24
86.35.15.0/24 maxlen: 24
86.35.16.0/20 maxlen: 20
86.35.32.0/19 maxlen: 19
86.35.64.0/18 maxlen: 18
86.35.128.0/17 maxlen: 17
89.120.0.0/16 maxlen: 16
89.121.0.0/16 maxlen: 16
89.121.0.0/18 maxlen: 18
89.121.64.0/18 maxlen: 18
89.121.128.0/17 maxlen: 17
89.122.0.0/16 maxlen: 16
89.123.0.0/16 maxlen: 16
89.123.0.0/17 maxlen: 17
89.123.128.0/17 maxlen: 17
92.80.0.0/16 maxlen: 16
92.81.0.0/16 maxlen: 16
92.81.128.0/17 maxlen: 17
92.82.0.0/16 maxlen: 16
92.82.0.0/18 maxlen: 18
92.83.0.0/16 maxlen: 16
92.83.0.0/19 maxlen: 19
92.84.0.0/16 maxlen: 16
92.85.0.0/16 maxlen: 16
92.86.0.0/16 maxlen: 16
92.86.36.0/24 maxlen: 24
92.86.38.0/24 maxlen: 24
92.86.48.0/24 maxlen: 24
92.86.50.0/24 maxlen: 24
92.86.90.0/24 maxlen: 24
92.87.0.0/16 maxlen: 16
92.87.11.0/24 maxlen: 24
92.87.13.0/24 maxlen: 24
92.87.17.0/24 maxlen: 24
92.87.20.0/24 maxlen: 24
92.87.52.0/24 maxlen: 24
92.87.53.0/24 maxlen: 24
92.87.54.0/24 maxlen: 24
92.87.118.0/24 maxlen: 24
92.87.128.0/23 maxlen: 23
92.87.133.0/24 maxlen: 24
92.87.142.0/24 maxlen: 24
92.87.170.0/24 maxlen: 24
92.87.173.0/24 maxlen: 24
92.87.174.0/24 maxlen: 24
92.87.175.0/24 maxlen: 24
92.87.214.0/24 maxlen: 24
92.87.232.0/24 maxlen: 24
92.87.244.0/24 maxlen: 24
92.87.245.0/24 maxlen: 24
109.96.0.0/16 maxlen: 16
109.97.0.0/16 maxlen: 16
109.98.0.0/16 maxlen: 16
109.98.113.0/24 maxlen: 24
109.98.115.0/24 maxlen: 24
109.98.117.0/24 maxlen: 24
109.98.119.0/24 maxlen: 24
109.98.121.0/24 maxlen: 24
109.98.123.0/24 maxlen: 24
109.98.126.0/24 maxlen: 24
109.98.192.0/23 maxlen: 23
109.98.192.0/24 maxlen: 24
109.98.193.0/24 maxlen: 24
109.99.0.0/16 maxlen: 16
109.99.158.0/24 maxlen: 24
109.99.184.0/24 maxlen: 24
109.99.185.0/24 maxlen: 24
109.99.189.0/24 maxlen: 24
109.99.192.0/24 maxlen: 24
109.99.214.0/24 maxlen: 24
109.99.216.0/24 maxlen: 24
109.100.0.0/16 maxlen: 16
109.101.0.0/16 maxlen: 16
109.102.0.0/16 maxlen: 16
109.102.161.0/24 maxlen: 24
109.102.163.0/24 maxlen: 24
109.103.0.0/16 maxlen: 16
185.133.64.0/22 maxlen: 22
185.133.64.0/24 maxlen: 24
217.115.208.0/20 maxlen: 20
2a02:d10::/32 maxlen: 32
2a02:d10:800:1::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:29:9f:0e:df:78:37:ce:84:96:9b:cd:df:84:bd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89
Validity
Not Before: Feb 17 15:13:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca9c6941c0d57a380e1d552249f241545a66f623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cd:25:7a:42:c2:47:6e:54:b1:bf:bb:32:7e:
f5:8f:31:99:26:90:58:d4:37:e7:6a:41:f4:c2:75:
97:2c:65:59:e3:8d:91:3e:2c:67:56:1b:13:8d:dd:
37:6d:56:f9:9a:e3:8f:ce:94:a9:14:dd:ed:be:7e:
3a:26:50:d3:e4:a9:4f:15:56:10:d0:80:b0:e9:0f:
6c:c2:42:7f:d5:35:9d:0f:a6:3f:6f:f7:a9:02:cc:
a4:17:46:60:4d:31:25:c8:e8:45:67:ae:2c:00:49:
ea:6a:3e:3f:fe:e2:23:18:45:6d:ed:7f:67:89:82:
72:b3:47:22:ce:aa:f0:c6:f1:bb:7f:93:45:41:db:
9a:68:71:da:83:fe:91:3d:56:cc:f8:b7:f4:1d:f3:
30:56:b6:32:92:3a:a0:87:44:60:97:12:d5:fd:80:
f5:c7:27:20:35:09:ee:29:aa:44:95:fc:ab:38:34:
00:25:4e:83:d0:5a:07:1f:d2:62:79:84:9c:31:24:
03:f0:71:eb:0c:be:f6:28:d6:86:64:49:27:d7:d6:
9d:eb:52:47:b7:48:43:8b:6c:a4:f6:28:5d:d5:d2:
7f:c7:5f:01:6b:1f:2d:8b:39:8c:b8:27:8a:92:76:
48:ff:3a:cc:06:a1:3f:c3:24:f8:ef:1a:82:21:02:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9C:69:41:C0:D5:7A:38:0E:1D:55:22:49:F2:41:54:5A:66:F6:23
X509v3 Authority Key Identifier:
keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/ypxpQcDVejgOHVUiSfJBVFpm9iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.243.64.0/18
86.34.0.0/15
89.120.0.0/14
92.80.0.0/13
109.96.0.0/13
185.133.64.0/22
217.115.208.0/20
IPv6:
2a02:d10::/32
Signature Algorithm: sha256WithRSAEncryption
41:16:98:9c:b0:21:f6:d6:7f:03:4f:e2:6b:fc:06:46:63:d5:
2c:c7:3c:45:f9:26:b3:d5:3f:fd:ee:13:50:6e:b3:de:48:23:
d4:2e:c8:78:22:9b:90:ed:28:76:18:0f:2d:f9:d7:8b:0c:fb:
5e:c2:15:d6:9c:d6:81:70:8a:ac:2a:ca:2a:ba:1d:94:42:0d:
52:3c:ea:aa:61:6c:22:d9:d9:43:35:ed:5b:79:8b:38:85:fe:
09:60:df:01:0d:b1:82:39:16:3f:bd:3e:43:8e:6e:7d:e4:f3:
42:58:0d:65:3d:7a:33:23:97:3e:9f:9c:18:15:7e:c1:5e:0c:
08:0f:8c:83:52:43:3f:78:1d:4f:6b:06:5a:a9:36:01:7c:13:
e4:bb:4c:4d:9d:6e:1c:3f:97:b4:cb:ee:99:af:5f:f8:9f:79:
f5:87:a9:a6:06:64:b4:12:a8:e8:90:4b:3c:7c:75:ac:42:31:
a9:65:77:00:af:3a:4b:e9:65:94:57:ce:52:fb:9c:44:99:4d:
6f:f1:66:a4:96:b5:b9:10:e3:04:99:9f:df:68:69:ac:54:2d:
f8:74:fa:b5:df:37:24:98:a7:d7:6f:91:d8:17:d0:88:6f:1d:
77:ed:6b:78:7b:09:1e:14:48:de:a7:ee:33:8b:cc:bd:51:03:
aa:7b:8e:3e
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAZxsKZ8O33g3zoSWm83fhL0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2
MTFkODkwHhcNMjYwMjE3MTUxMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTljNjk0MWMwZDU3YTM4MGUxZDU1MjI0OWYyNDE1NDVhNjZmNjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA480lekLCR25Usb+7Mn71jzGZJpBY
1DfnakH0wnWXLGVZ442RPixnVhsTjd03bVb5muOPzpSpFN3tvn46JlDT5KlPFVYQ
0ICw6Q9swkJ/1TWdD6Y/b/epAsykF0ZgTTElyOhFZ64sAEnqaj4//uIjGEVt7X9n
iYJys0cizqrwxvG7f5NFQduaaHHag/6RPVbM+Lf0HfMwVrYykjqgh0RglxLV/YD1
xycgNQnuKapElfyrODQAJU6D0FoHH9JieYScMSQD8HHrDL72KNaGZEkn19ad61JH
t0hDi2yk9ihd1dJ/x18Bax8tizmMuCeKknZI/zrMBqE/wyT47xqCIQJsfQIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFMqcaUHA1Xo4Dh1VIknyQVRaZvYjMB8GA1UdIwQY
MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt
OTQyNDgyZjhkMmVhLzEveXB4cFFjRFZlamdPSFZVaVNmSkJWRnBtOWlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh
LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQGVPNAAwMB
ViIDAwJZeAMDA1xQAwMDbWADBAK5hUADBATZc9AwDQQCAAIwBwMFACoCDRAwDQYJ
KoZIhvcNAQELBQADggEBAEEWmJywIfbWfwNP4mv8BkZj1SzHPEX5JrPVP/3uE1Bu
s95II9QuyHgim5DtKHYYDy3514sM+17CFdac1oFwiqwqyiq6HZRCDVI86qphbCLZ
2UM17Vt5iziF/glg3wENsYI5Fj+9PkOObn3k80JYDWU9ejMjlz6fnBgVfsFeDAgP
jINSQz94HU9rBlqpNgF8E+S7TE2dbhw/l7TL7pmvX/ifefWHqaYGZLQSqOiQSzx8
daxCMalldwCvOkvpZZRXzlL7nESZTW/xZqSWtbkQ4wSZn99oaaxULfh0+rXfNySY
p9dvkdgX0IhvHXfta3h7CR4USN6n7jOLzL1RA6p7jj4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:09 2026 by rpki-client