Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/ZyA6A8hV0zM49VV7xyYtthPMkaA.roa
File: ZyA6A8hV0zM49VV7xyYtthPMkaA.roa (raw, json)
Hash identifier: 4hnr85KkktbCdiv0+nrobzAzkgTUeLCigCfWsa4QZNA=
Subject key identifier: 67:20:3A:03:C8:55:D3:33:38:F5:55:7B:C7:26:2D:B6:13:CC:91:A0
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019D690AAB739AE88531D39010692BAEDC23
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/ZyA6A8hV0zM49VV7xyYtthPMkaA.roa
Signing time: Tue 07 Apr 2026 17:43:20 +0000
ROA not before: Tue 07 Apr 2026 17:43:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 5.226.136.0/21 maxlen: 21
31.14.102.0/24 maxlen: 24
31.14.254.0/24 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
46.102.155.0/24 maxlen: 24
46.231.160.0/21 maxlen: 24
46.247.142.0/23 maxlen: 24
46.247.143.0/24 maxlen: 24
64.239.236.0/22 maxlen: 22
69.5.168.0/21 maxlen: 24
77.81.102.0/24 maxlen: 24
77.81.124.0/22 maxlen: 22
77.81.191.0/24 maxlen: 24
79.139.84.0/22 maxlen: 22
80.240.108.0/23 maxlen: 23
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.211.0/24 maxlen: 24
81.19.215.0/24 maxlen: 24
81.19.216.0/24 maxlen: 24
82.97.192.0/23 maxlen: 23
84.247.0.0/24 maxlen: 24
84.247.40.0/23 maxlen: 24
84.247.42.0/23 maxlen: 24
85.204.70.0/24 maxlen: 24
86.54.136.0/22 maxlen: 22
86.104.20.0/22 maxlen: 22
86.104.20.0/23 maxlen: 24
86.104.22.0/23 maxlen: 24
86.104.248.0/22 maxlen: 22
86.104.248.0/24 maxlen: 24
86.104.249.0/24 maxlen: 24
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
89.21.67.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
89.34.96.0/22 maxlen: 24
89.34.97.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
89.37.64.0/22 maxlen: 22
89.37.172.0/22 maxlen: 22
89.37.173.0/24 maxlen: 24
89.38.68.0/23 maxlen: 24
89.38.68.0/24 maxlen: 24
89.38.69.0/24 maxlen: 24
89.40.212.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
89.46.223.0/24 maxlen: 24
89.46.248.0/22 maxlen: 22
93.113.175.0/24 maxlen: 24
93.114.83.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
93.118.40.0/22 maxlen: 22
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
134.255.243.0/24 maxlen: 24
176.223.172.0/22 maxlen: 22
176.223.172.0/23 maxlen: 24
176.223.174.0/23 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
178.239.170.0/24 maxlen: 24
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 24
185.16.204.0/22 maxlen: 22
185.28.252.0/22 maxlen: 24
185.38.148.0/22 maxlen: 22
185.44.76.0/22 maxlen: 22
185.61.156.0/22 maxlen: 22
185.61.156.0/24 maxlen: 24
185.61.157.0/24 maxlen: 24
185.114.224.0/24 maxlen: 24
185.121.136.0/22 maxlen: 22
185.125.204.0/22 maxlen: 22
185.134.20.0/22 maxlen: 22
185.137.36.0/22 maxlen: 24
185.158.240.0/22 maxlen: 24
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
185.200.204.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
185.242.80.0/22 maxlen: 22
188.212.154.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.60.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
188.241.246.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
193.32.208.0/24 maxlen: 24
193.124.20.0/23 maxlen: 24
193.176.28.0/22 maxlen: 22
193.176.31.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
194.88.96.0/21 maxlen: 24
194.88.98.0/23 maxlen: 24
195.20.108.0/23 maxlen: 23
195.20.108.0/24 maxlen: 24
195.140.212.0/22 maxlen: 24
195.206.165.0/24 maxlen: 24
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
212.237.224.0/22 maxlen: 22
213.166.84.0/22 maxlen: 24
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
217.146.92.0/24 maxlen: 24
2a00:1a30::/32 maxlen: 32
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a01:4020:31::/48 maxlen: 48
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:34::/48 maxlen: 48
2a01:4020:35::/48 maxlen: 48
2a01:4020:100::/40 maxlen: 40
2a01:4020:200::/40 maxlen: 40
2a01:4020:300::/40 maxlen: 48
2a0b:b840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:0a:ab:73:9a:e8:85:31:d3:90:10:69:2b:ae:dc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Apr 7 17:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67203a03c855d33338f5557bc7262db613cc91a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:96:c0:3c:08:c5:7a:f8:8d:7f:11:e9:e0:
09:0d:bf:25:81:ce:f7:3c:56:89:ef:87:28:73:fa:
92:fc:5c:f1:a1:18:62:4f:f8:c4:3f:a3:c3:05:a4:
4f:e3:60:b5:fa:f7:5c:9e:0d:ce:ba:b1:77:f9:f6:
4e:82:7f:38:95:46:bc:85:c4:88:40:99:a5:a1:f4:
b5:0e:11:8e:6f:4e:50:86:29:e3:d0:14:35:eb:2c:
43:6a:4e:5f:6f:00:a4:67:93:ec:1c:f8:d7:99:76:
5c:bc:8d:bd:48:f1:c4:ec:fb:00:d9:37:13:28:27:
c4:40:a4:ff:05:a7:78:17:f6:06:d4:5f:6f:a0:2d:
c5:8d:ee:ee:3d:c1:b7:62:f4:7f:ef:67:e6:dd:6e:
46:b8:da:27:99:e8:19:36:5c:be:ed:12:b9:fd:2a:
18:4e:93:bb:ae:08:d5:96:35:75:bf:a8:d7:e2:df:
70:81:b3:29:b9:e9:5c:65:52:b2:4c:cf:ad:bb:d5:
28:7b:3f:19:9c:f2:45:f8:a3:95:88:eb:7a:cb:8c:
d6:3c:ea:4e:80:7f:ad:f0:21:e9:92:76:7a:04:a2:
59:86:bb:7b:41:29:fd:70:69:e4:3e:b4:fa:16:27:
b0:7e:cc:ce:2f:15:64:e0:3e:57:aa:8f:ac:7c:4d:
f1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:20:3A:03:C8:55:D3:33:38:F5:55:7B:C7:26:2D:B6:13:CC:91:A0
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/ZyA6A8hV0zM49VV7xyYtthPMkaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.231.160.0/21
46.247.142.0/23
64.239.236.0/22
69.5.168.0/21
77.81.102.0/24
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
80.240.108.0/23
81.19.208.0/20
82.97.192.0/23
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.54.136.0/22
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.28.252.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
185.242.80.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.124.20.0/23
193.176.28.0/22
194.50.234.0/23
194.88.96.0/21
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
1d:34:1e:79:31:c5:6a:8e:fc:53:39:3e:c3:ed:a3:77:5f:2c:
a8:fb:08:01:be:e8:c1:b7:97:f3:4b:29:52:25:bc:31:2a:71:
74:3c:2f:46:ef:c4:66:6b:83:df:16:d4:a1:ae:1d:62:42:a9:
87:2f:06:b6:45:82:d5:39:62:ee:61:fc:a2:61:37:6f:f3:9e:
07:11:10:f9:34:49:b4:b9:be:7e:df:1c:2a:6c:95:75:10:ad:
c6:b8:7f:c9:16:58:f7:dc:0b:8f:39:b4:6e:b7:7e:18:40:55:
b0:49:41:8e:93:c0:34:d6:ac:1d:79:3f:d6:fc:91:9a:bf:f8:
a0:18:5b:9a:0b:b4:80:4b:cf:bf:6a:d3:8c:21:7d:85:97:9c:
c2:26:80:b0:00:a8:5a:c8:32:49:e0:35:5e:b8:15:25:b5:ba:
00:9a:8b:23:25:18:73:0f:6d:03:1f:a3:f1:ba:dc:d6:2b:da:
c5:9b:6f:bd:a2:6a:a4:f0:32:a9:b9:e5:e3:7f:26:da:78:ec:
c7:b0:16:df:09:ac:17:6d:9d:a6:2a:8a:8c:fa:9a:eb:d5:07:
a6:02:a8:14:f0:22:0b:64:4f:39:fd:4f:fb:db:9f:08:c2:c7:
4e:8c:a3:07:75:51:b1:87:2a:44:7e:61:3b:78:5a:e3:41:e4:
a8:3a:38:ec
-----BEGIN CERTIFICATE-----
MIIHYDCCBkigAwIBAgISAZ1pCqtzmuiFMdOQEGkrrtwjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjYwNDA3MTc0MzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzIwM2EwM2M4NTVkMzMzMzhmNTU1N2JjNzI2MmRiNjEzY2M5MWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbqWwDwIxXr4jX8R6eAJDb8lgc73
PFaJ74coc/qS/FzxoRhiT/jEP6PDBaRP42C1+vdcng3OurF3+fZOgn84lUa8hcSI
QJmlofS1DhGOb05Qhinj0BQ16yxDak5fbwCkZ5PsHPjXmXZcvI29SPHE7PsA2TcT
KCfEQKT/Bad4F/YG1F9voC3Fje7uPcG3YvR/72fm3W5GuNonmegZNly+7RK5/SoY
TpO7rgjVljV1v6jX4t9wgbMpuelcZVKyTM+tu9Uoez8ZnPJF+KOViOt6y4zWPOpO
gH+t8CHpknZ6BKJZhrt7QSn9cGnkPrT6FiewfszOLxVk4D5Xqo+sfE3xvQIDAQAB
o4IEbDCCBGgwHQYDVR0OBBYEFGcgOgPIVdMzOPVVe8cmLbYTzJGgMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvWnlBNkE4aFYwek00OVZWN3h5WXR0aFBNa2FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICgAYIKwYBBQUHAQcBAf8EggJvMIICazCCAkoEAgABMIIC
QgMEAwXiiAMEAB8OZgMEAB8O/jAMAwQAJQpxAwQAJQpyAwQALmabAwQDLuegAwQB
LveOAwQCQO/sAwQDRQWoAwQATVFmAwQCTVF8AwQATVG/AwQCT4tUAwQBUPBsAwQE
URPQAwQBUmHAAwQAVPcAAwQCVPcoAwQAVcxGAwQCVjaIAwQCVmgUAwQCVmj4AwQA
VmpZAwQAVmpwAwQAVmqHMAwDBABWap0DBABWap4DBABWa/EDBAJZFUADBABZIH8D
BAJZImADBABZIxkDBAJZIxwDBAJZJUADBAJZJawDBAFZJkQDBABZKNQDBAFZLt4D
BAJZLvgDBABdca8DBABdclMDBABdcoEDBAJddigDBANtRWgDBANtRpADBABt5ssD
BABt5tEDBABt5tcDBABt5toDBABt5twDBAKAf5QDBACG//MDBAKw36wDBASy76AD
BAK5A+wDBAK5EMwDBAK5HPwDBAK5JpQDBAK5LEwDBAK5PZwDBAC5cuADBAK5eYgD
BAK5fcwDBAK5hhQDBAK5iSQDBAK5nvADBAK5yMwDBAK52JADBAK53+gDBAK58lAD
BAC81JoDBAO88DgDBAC88EcDBAC88XgDBAC88ZADBAG88ZwDBAC88fYDBALBINAD
BAHBfBQDBALBsBwDBAHCMuoDBAPCWGADBAHDFGwDBALDjNQwDAMEAMPOpQMEA8PO
oDAMAwQAw86pAwQCw86oAwQCw860AwQBw+p8AwQAw+p/AwQC1O3gAwQC1aZUAwQE
2ZJQMBsEAgACMBUDBQAqABowAwUAKgFAIAMFAyoLuEAwDQYJKoZIhvcNAQELBQAD
ggEBAB00HnkxxWqO/FM5PsPto3dfLKj7CAG+6MG3l/NLKVIlvDEqcXQ8L0bvxGZr
g98W1KGuHWJCqYcvBrZFgtU5Yu5h/KJhN2/zngcREPk0SbS5vn7fHCpslXUQrca4
f8kWWPfcC485tG63fhhAVbBJQY6TwDTWrB15P9b8kZq/+KAYW5oLtIBLz79q04wh
fYWXnMImgLAAqFrIMkngNV64FSW1ugCaiyMlGHMPbQMfo/G63NYr2sWbb72iaqTw
Mqm55eN/Jtp47MewFt8JrBdtnaYqioz6muvVB6YCqBTwIgtkTzn9T/vbnwjCx06M
owd1UbGHKkR+YTt4WuNB5Kg6OOw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:54 2026 by rpki-client