Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/Lzw_xKxC3BOEX_GyAK3M7os7d00.roa
File: Lzw_xKxC3BOEX_GyAK3M7os7d00.roa (raw, json)
Hash identifier: B2gs3iBOLuhwIkmQhoan7QBJkm/HZgFTXNqJZkVZlEQ=
Subject key identifier: 2F:3C:3F:C4:AC:42:DC:13:84:5F:F1:B2:00:AD:CC:EE:8B:3B:77:4D
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 019D204364647C72E3B8E09F2AE138CF0944
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/Lzw_xKxC3BOEX_GyAK3M7os7d00.roa
Signing time: Tue 24 Mar 2026 14:33:00 +0000
ROA not before: Tue 24 Mar 2026 14:33:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47583
IP address blocks: 2.24.0.0/21 maxlen: 24
2.24.16.0/20 maxlen: 24
2.24.32.0/19 maxlen: 24
31.97.0.0/23 maxlen: 24
31.97.2.0/24 maxlen: 24
31.97.3.0/24 maxlen: 24
31.97.4.0/22 maxlen: 24
31.97.8.0/21 maxlen: 24
31.97.16.0/20 maxlen: 24
31.97.32.0/21 maxlen: 24
31.97.40.0/22 maxlen: 24
31.97.44.0/22 maxlen: 24
31.97.48.0/22 maxlen: 24
31.97.52.0/22 maxlen: 24
31.97.56.0/22 maxlen: 24
31.97.60.0/22 maxlen: 24
31.97.64.0/24 maxlen: 24
31.97.65.0/24 maxlen: 24
31.97.66.0/23 maxlen: 24
31.97.68.0/23 maxlen: 24
31.97.70.0/23 maxlen: 24
31.97.72.0/22 maxlen: 24
31.97.76.0/22 maxlen: 24
31.97.80.0/20 maxlen: 24
31.97.96.0/21 maxlen: 24
31.97.104.0/21 maxlen: 24
31.97.112.0/21 maxlen: 24
31.97.120.0/21 maxlen: 24
31.97.128.0/20 maxlen: 24
31.97.144.0/22 maxlen: 24
31.97.148.0/23 maxlen: 24
31.97.150.0/24 maxlen: 24
31.97.151.0/24 maxlen: 24
31.97.152.0/21 maxlen: 24
31.97.160.0/20 maxlen: 24
31.97.176.0/23 maxlen: 24
31.97.178.0/24 maxlen: 24
31.97.179.0/24 maxlen: 24
31.97.180.0/22 maxlen: 24
31.97.184.0/23 maxlen: 24
31.97.186.0/24 maxlen: 24
31.97.187.0/24 maxlen: 24
31.97.188.0/22 maxlen: 24
31.97.192.0/21 maxlen: 24
31.97.200.0/21 maxlen: 24
31.97.208.0/21 maxlen: 24
31.97.216.0/23 maxlen: 24
31.97.218.0/23 maxlen: 24
31.97.220.0/22 maxlen: 24
31.97.224.0/20 maxlen: 24
31.97.240.0/20 maxlen: 24
69.62.64.0/23 maxlen: 24
69.62.66.0/23 maxlen: 24
69.62.68.0/22 maxlen: 24
69.62.72.0/21 maxlen: 24
69.62.80.0/22 maxlen: 24
69.62.84.0/23 maxlen: 24
69.62.86.0/23 maxlen: 24
69.62.88.0/21 maxlen: 24
69.62.96.0/21 maxlen: 24
69.62.104.0/24 maxlen: 24
69.62.105.0/24 maxlen: 24
69.62.106.0/23 maxlen: 24
69.62.108.0/22 maxlen: 24
69.62.112.0/22 maxlen: 24
69.62.116.0/22 maxlen: 24
69.62.120.0/23 maxlen: 24
69.62.122.0/24 maxlen: 24
69.62.123.0/24 maxlen: 24
69.62.124.0/24 maxlen: 24
69.62.125.0/24 maxlen: 24
69.62.126.0/23 maxlen: 24
72.60.0.0/20 maxlen: 24
72.60.16.0/22 maxlen: 24
72.60.20.0/22 maxlen: 24
72.60.24.0/21 maxlen: 24
72.60.32.0/21 maxlen: 24
72.60.40.0/22 maxlen: 24
72.60.44.0/22 maxlen: 24
72.60.48.0/20 maxlen: 24
72.60.64.0/21 maxlen: 24
72.60.72.0/21 maxlen: 24
72.60.80.0/21 maxlen: 24
72.60.88.0/21 maxlen: 24
72.60.96.0/21 maxlen: 24
72.60.104.0/21 maxlen: 24
72.60.112.0/20 maxlen: 24
72.60.128.0/24 maxlen: 24
72.60.129.0/24 maxlen: 24
72.60.130.0/23 maxlen: 24
72.60.132.0/23 maxlen: 24
72.60.134.0/23 maxlen: 24
72.60.136.0/21 maxlen: 24
72.60.144.0/20 maxlen: 24
72.60.160.0/20 maxlen: 24
72.60.176.0/21 maxlen: 24
72.60.184.0/21 maxlen: 24
72.60.192.0/21 maxlen: 24
72.60.200.0/21 maxlen: 24
72.60.208.0/22 maxlen: 24
72.60.212.0/22 maxlen: 24
72.60.216.0/21 maxlen: 24
72.60.224.0/21 maxlen: 24
72.60.232.0/21 maxlen: 24
72.60.240.0/20 maxlen: 24
72.61.0.0/20 maxlen: 24
72.61.16.0/22 maxlen: 24
72.61.20.0/22 maxlen: 24
72.61.24.0/21 maxlen: 24
72.61.32.0/19 maxlen: 24
72.61.64.0/20 maxlen: 24
72.61.80.0/20 maxlen: 24
72.61.96.0/20 maxlen: 24
72.61.112.0/20 maxlen: 24
72.61.128.0/21 maxlen: 24
72.61.136.0/22 maxlen: 24
72.61.140.0/22 maxlen: 24
72.61.144.0/22 maxlen: 24
72.61.148.0/22 maxlen: 24
72.61.152.0/21 maxlen: 24
72.61.160.0/21 maxlen: 24
72.61.168.0/21 maxlen: 24
72.61.176.0/20 maxlen: 24
72.61.192.0/21 maxlen: 24
72.61.200.0/21 maxlen: 24
72.61.208.0/21 maxlen: 24
72.61.216.0/21 maxlen: 24
72.61.224.0/19 maxlen: 24
72.62.0.0/22 maxlen: 24
72.62.4.0/22 maxlen: 24
72.62.4.0/23 maxlen: 24
72.62.8.0/21 maxlen: 24
72.62.16.0/20 maxlen: 24
72.62.32.0/19 maxlen: 24
72.62.64.0/20 maxlen: 24
72.62.80.0/21 maxlen: 24
72.62.88.0/21 maxlen: 24
72.62.96.0/21 maxlen: 24
72.62.104.0/21 maxlen: 24
72.62.112.0/21 maxlen: 24
72.62.120.0/21 maxlen: 24
72.62.128.0/22 maxlen: 24
72.62.132.0/22 maxlen: 24
72.62.136.0/21 maxlen: 24
72.62.144.0/20 maxlen: 24
72.62.160.0/20 maxlen: 24
72.62.176.0/20 maxlen: 24
72.62.192.0/21 maxlen: 24
72.62.200.0/21 maxlen: 24
72.62.208.0/23 maxlen: 24
72.62.210.0/23 maxlen: 24
72.62.212.0/22 maxlen: 24
72.62.216.0/21 maxlen: 24
72.62.224.0/21 maxlen: 24
72.62.232.0/21 maxlen: 24
72.62.240.0/20 maxlen: 24
76.13.0.0/20 maxlen: 24
76.13.16.0/21 maxlen: 24
76.13.24.0/21 maxlen: 24
76.13.32.0/19 maxlen: 24
76.13.64.0/21 maxlen: 24
76.13.72.0/22 maxlen: 24
76.13.76.0/22 maxlen: 24
76.13.80.0/20 maxlen: 24
76.13.96.0/19 maxlen: 24
76.13.128.0/19 maxlen: 24
76.13.160.0/20 maxlen: 24
76.13.176.0/20 maxlen: 24
76.13.192.0/21 maxlen: 24
76.13.200.0/21 maxlen: 24
76.13.208.0/20 maxlen: 24
76.13.224.0/20 maxlen: 24
76.13.240.0/21 maxlen: 24
76.13.248.0/22 maxlen: 24
76.13.252.0/22 maxlen: 24
103.199.184.0/22 maxlen: 24
148.222.52.0/24 maxlen: 24
148.222.53.0/24 maxlen: 24
148.222.54.0/24 maxlen: 24
148.222.55.0/24 maxlen: 24
148.230.64.0/22 maxlen: 24
148.230.66.0/23 maxlen: 24
148.230.68.0/23 maxlen: 24
148.230.70.0/23 maxlen: 24
148.230.72.0/21 maxlen: 24
148.230.80.0/20 maxlen: 24
148.230.96.0/22 maxlen: 24
148.230.100.0/22 maxlen: 24
148.230.104.0/21 maxlen: 24
148.230.112.0/21 maxlen: 24
148.230.120.0/22 maxlen: 24
148.230.124.0/22 maxlen: 24
168.231.64.0/21 maxlen: 24
168.231.72.0/22 maxlen: 24
168.231.76.0/23 maxlen: 24
168.231.78.0/23 maxlen: 24
168.231.80.0/21 maxlen: 24
168.231.88.0/21 maxlen: 24
168.231.96.0/22 maxlen: 24
168.231.100.0/24 maxlen: 24
168.231.101.0/24 maxlen: 24
168.231.102.0/23 maxlen: 24
168.231.104.0/21 maxlen: 24
168.231.112.0/22 maxlen: 24
168.231.116.0/24 maxlen: 24
168.231.117.0/24 maxlen: 24
168.231.118.0/23 maxlen: 24
168.231.120.0/22 maxlen: 24
168.231.124.0/22 maxlen: 24
187.77.0.0/19 maxlen: 24
187.77.32.0/19 maxlen: 24
187.77.64.0/19 maxlen: 24
187.77.96.0/21 maxlen: 24
187.77.104.0/22 maxlen: 24
187.77.108.0/22 maxlen: 24
187.77.112.0/20 maxlen: 24
187.77.128.0/19 maxlen: 24
187.77.160.0/20 maxlen: 24
187.77.176.0/21 maxlen: 24
187.77.184.0/21 maxlen: 24
187.77.192.0/19 maxlen: 24
187.77.224.0/19 maxlen: 24
187.124.0.0/19 maxlen: 24
187.124.32.0/19 maxlen: 24
187.124.64.0/19 maxlen: 24
187.124.96.0/20 maxlen: 24
187.124.112.0/21 maxlen: 24
187.124.120.0/23 maxlen: 24
187.124.128.0/21 maxlen: 24
187.124.136.0/21 maxlen: 24
187.124.144.0/20 maxlen: 24
187.124.160.0/19 maxlen: 24
187.124.192.0/20 maxlen: 24
187.124.208.0/21 maxlen: 24
187.124.216.0/21 maxlen: 24
187.124.224.0/19 maxlen: 24
187.127.0.0/18 maxlen: 24
187.127.64.0/19 maxlen: 24
187.127.96.0/19 maxlen: 24
187.127.128.0/18 maxlen: 24
187.127.192.0/19 maxlen: 24
187.127.224.0/20 maxlen: 24
187.127.240.0/21 maxlen: 24
187.127.248.0/21 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:43:64:64:7c:72:e3:b8:e0:9f:2a:e1:38:cf:09:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Mar 24 14:33:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f3c3fc4ac42dc13845ff1b200adccee8b3b774d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:9b:78:9e:ef:65:ca:4b:cd:e1:49:bb:fc:
93:48:61:ae:96:69:a8:43:87:8f:5b:12:ed:31:1c:
8a:1e:ba:d1:97:43:83:43:09:93:32:86:94:ad:2a:
18:5c:13:3e:57:3b:40:40:1f:37:95:e4:ec:29:37:
e3:b7:7a:4a:58:04:92:f7:8c:47:cc:35:4f:76:64:
b5:27:24:94:29:bc:77:77:38:bf:82:bf:be:b4:c7:
32:01:48:d0:93:17:e2:09:c0:60:86:73:2f:95:e5:
70:ee:51:6a:03:df:e7:27:59:93:39:da:a5:07:62:
09:65:7b:e5:e6:b3:ce:9c:65:1c:8d:3c:1a:a0:4a:
81:17:18:49:42:3a:ac:23:d5:f0:08:a4:e2:65:04:
a2:cb:f7:df:42:3c:78:fc:23:f9:fa:79:8c:95:54:
9c:57:73:7b:4a:e3:2a:75:fd:9c:24:26:c1:03:7f:
b4:d3:0c:cc:4f:b1:74:d8:8b:94:be:34:e2:07:97:
92:89:db:c3:ec:57:80:00:c3:1a:a7:ab:a1:89:aa:
c0:44:4f:01:4b:7a:f5:d9:c1:24:9d:07:b6:eb:88:
63:9a:13:0c:97:11:81:f6:ed:2b:4f:be:84:e7:32:
c1:ca:50:1e:e4:04:ff:25:f3:3e:ff:4c:ca:36:47:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3C:3F:C4:AC:42:DC:13:84:5F:F1:B2:00:AD:CC:EE:8B:3B:77:4D
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/Lzw_xKxC3BOEX_GyAK3M7os7d00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.24.0.0/21
2.24.16.0-2.24.63.255
31.97.0.0/16
69.62.64.0/18
72.60.0.0-72.62.255.255
76.13.0.0/16
103.199.184.0/22
148.222.52.0/22
148.230.64.0/18
168.231.64.0/18
187.77.0.0/16
187.124.0.0-187.124.121.255
187.124.128.0/17
187.127.0.0/16
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
82:3e:60:4f:f2:7a:62:db:03:39:29:aa:d3:83:83:9f:4e:5f:
46:f4:db:1f:40:f0:e4:ef:82:b8:ea:00:5e:9d:69:9b:99:de:
05:35:0c:56:9c:ba:ad:4b:76:54:e6:75:5e:c7:4f:43:4b:21:
bc:87:22:89:da:6b:be:99:de:57:d3:5f:6b:53:5e:c7:35:2c:
99:7d:97:2a:19:9b:fc:8e:e7:09:9c:bc:3a:9c:a4:63:6b:aa:
05:64:b1:7b:76:b6:cf:3d:53:05:03:b4:97:1c:86:f7:b9:e2:
0c:67:99:08:2b:c0:41:5a:a6:29:44:05:77:86:2e:d5:d8:bd:
79:a5:16:8b:48:e0:6b:aa:16:29:66:6b:fe:07:16:cf:cc:97:
98:43:01:1b:09:3a:83:98:92:9b:40:cf:0f:e7:b9:a1:de:14:
f8:1e:4f:f7:f9:07:3f:3a:96:60:c9:58:d2:7d:7a:50:b3:fd:
7e:07:a8:15:90:61:3e:49:47:2f:2d:fe:e0:44:37:9e:aa:26:
0a:9f:53:29:b3:e4:7c:e8:cf:a2:bb:b7:16:85:f4:77:c2:6f:
b3:5e:bf:34:4d:8f:4e:7a:9a:59:92:bb:1e:b2:b7:1a:02:79:
eb:a4:94:dd:40:85:66:3b:be:a6:6c:8d:58:a5:90:96:5a:80:
09:79:ae:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:48 2026 by rpki-client