Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/LsL5ITQmnvA5Vv4JZjzs-cK4_hk.roa
File: LsL5ITQmnvA5Vv4JZjzs-cK4_hk.roa (raw, json)
Hash identifier: 0wJV0MFAjjYDi3kIZfaPL/FX7WSad8Txgg87+JeUbNE=
Subject key identifier: 2E:C2:F9:21:34:26:9E:F0:39:56:FE:09:66:3C:EC:F9:C2:B8:FE:19
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A1CACC78F32DED6494ED03B776DE5A201D
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/LsL5ITQmnvA5Vv4JZjzs-cK4_hk.roa
Signing time: Wed 11 Nov 2026 13:29:20 +0000
ROA not before: Wed 11 Nov 2026 13:29:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8315
IP address blocks: 5.100.224.0/22 maxlen: 24
5.100.228.0/23 maxlen: 24
79.99.184.0/21 maxlen: 24
83.98.129.0/24 maxlen: 24
83.98.133.0/24 maxlen: 24
83.98.134.0/24 maxlen: 24
83.98.138.0/24 maxlen: 24
83.98.140.0/23 maxlen: 23
83.98.142.0/24 maxlen: 24
83.98.143.0/24 maxlen: 24
83.98.144.0/24 maxlen: 24
83.98.147.0/24 maxlen: 24
83.98.151.0/24 maxlen: 24
83.98.158.0/24 maxlen: 24
83.98.167.0/24 maxlen: 24
83.98.168.0/24 maxlen: 24
83.98.170.0/24 maxlen: 24
83.98.173.0/24 maxlen: 24
83.98.175.0/24 maxlen: 24
83.98.182.0/23 maxlen: 23
83.98.185.0/24 maxlen: 24
83.98.186.0/24 maxlen: 24
83.98.191.0/24 maxlen: 24
83.98.200.0/23 maxlen: 23
83.98.201.0/24 maxlen: 24
83.98.209.0/24 maxlen: 24
83.98.215.0/24 maxlen: 24
83.98.216.0/22 maxlen: 22
83.98.220.0/23 maxlen: 23
85.92.128.0/22 maxlen: 22
85.92.132.0/24 maxlen: 24
85.92.134.0/24 maxlen: 24
85.92.138.0/23 maxlen: 24
85.92.145.0/24 maxlen: 24
85.92.146.0/23 maxlen: 23
85.158.160.0/21 maxlen: 24
85.222.192.0/21 maxlen: 21
85.222.192.0/22 maxlen: 24
85.222.196.0/23 maxlen: 24
89.18.161.0/24 maxlen: 24
89.18.162.0/24 maxlen: 24
89.18.168.0/23 maxlen: 23
89.18.171.0/24 maxlen: 24
89.18.172.0/22 maxlen: 22
89.18.181.0/24 maxlen: 24
89.18.183.0/24 maxlen: 24
89.18.189.0/24 maxlen: 24
89.18.190.0/24 maxlen: 24
89.30.132.0/24 maxlen: 24
89.30.144.0/23 maxlen: 23
89.30.147.0/24 maxlen: 24
89.30.148.0/24 maxlen: 24
89.30.150.0/23 maxlen: 23
89.30.154.0/23 maxlen: 23
89.30.156.0/23 maxlen: 24
89.30.169.0/24 maxlen: 24
89.30.170.0/23 maxlen: 23
89.30.192.0/23 maxlen: 23
89.30.196.0/24 maxlen: 24
89.30.208.0/23 maxlen: 23
89.30.212.0/23 maxlen: 23
89.30.216.0/22 maxlen: 22
89.30.223.0/24 maxlen: 24
89.30.224.0/21 maxlen: 24
91.200.48.0/23 maxlen: 24
91.200.51.0/24 maxlen: 24
91.216.113.0/24 maxlen: 24
91.216.141.0/24 maxlen: 24
93.175.176.0/20 maxlen: 24
94.198.24.0/22 maxlen: 22
94.198.26.0/23 maxlen: 23
94.198.28.0/23 maxlen: 23
94.198.30.0/24 maxlen: 24
134.0.88.0/22 maxlen: 22
134.0.88.0/24 maxlen: 24
134.0.90.0/23 maxlen: 23
134.0.92.0/23 maxlen: 23
134.0.92.0/24 maxlen: 24
134.0.93.0/24 maxlen: 24
162.248.196.0/23 maxlen: 23
162.248.197.0/24 maxlen: 24
162.248.199.0/24 maxlen: 24
162.251.32.0/21 maxlen: 24
176.62.192.0/21 maxlen: 24
178.251.192.0/21 maxlen: 24
185.12.132.0/22 maxlen: 24
185.30.236.0/22 maxlen: 24
185.38.156.0/22 maxlen: 24
185.74.76.0/24 maxlen: 24
185.74.77.0/24 maxlen: 24
185.77.120.0/24 maxlen: 24
185.113.52.0/23 maxlen: 23
185.113.52.0/24 maxlen: 24
185.113.196.0/22 maxlen: 24
185.113.224.0/24 maxlen: 24
185.113.227.0/24 maxlen: 24
185.116.72.0/22 maxlen: 24
193.34.150.0/23 maxlen: 24
194.105.128.0/23 maxlen: 24
194.165.34.0/24 maxlen: 24
195.234.173.0/24 maxlen: 24
213.171.128.0/19 maxlen: 24
213.171.144.0/20 maxlen: 24
213.189.0.0/21 maxlen: 24
213.189.16.0/20 maxlen: 20
213.189.20.0/24 maxlen: 24
213.189.28.0/22 maxlen: 24
213.214.96.0/24 maxlen: 24
213.214.101.0/24 maxlen: 24
213.214.103.0/24 maxlen: 24
213.214.107.0/24 maxlen: 24
213.214.112.0/20 maxlen: 24
213.247.32.0/24 maxlen: 24
213.247.36.0/23 maxlen: 23
213.247.40.0/24 maxlen: 24
213.247.42.0/23 maxlen: 23
213.247.43.0/24 maxlen: 24
213.247.49.0/24 maxlen: 24
213.247.52.0/24 maxlen: 24
213.247.56.0/21 maxlen: 21
213.247.58.0/24 maxlen: 24
213.247.59.0/24 maxlen: 24
217.195.112.0/20 maxlen: 24
2001:16f8::/32 maxlen: 48
2a00:1bd8::/32 maxlen: 48
2a01:40e0::/32 maxlen: 48
2a02:20b0::/32 maxlen: 32
2a02:20b1::/32 maxlen: 32
2a02:2858::/29 maxlen: 48
2a02:2858:200::/40 maxlen: 40
2a02:2858:300::/40 maxlen: 40
2a02:2858:400::/40 maxlen: 40
2a02:2858:500::/40 maxlen: 40
2a03:5500::/31 maxlen: 48
2a0d:5040::/29 maxlen: 29
2a0d:5040::/32 maxlen: 32
2a0d:5041::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:cc:78:f3:2d:ed:64:94:ed:03:b7:76:de:5a:20:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Nov 11 13:29:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ec2f92134269ef03956fe09663cecf9c2b8fe19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:5d:64:ad:55:e0:e0:48:7a:06:94:09:d3:
8f:00:0b:f8:56:c6:ae:ed:7d:96:b1:e2:bd:3a:e7:
2f:91:78:ae:35:1d:7e:47:b4:9d:da:dc:35:b6:48:
a0:6d:57:83:26:af:a4:f8:db:56:ff:2d:2e:3f:de:
96:31:c2:ad:fb:bb:5e:a6:74:b1:e3:a6:47:d7:d5:
fe:06:9b:7a:68:54:83:eb:16:d3:f6:54:fc:43:f5:
0d:38:0e:b8:f0:b8:8d:f6:d1:d5:36:99:ca:42:49:
3d:99:80:52:94:70:b0:b4:56:75:bb:38:11:cd:10:
fc:22:8d:6d:fc:5e:c9:25:09:35:c5:c6:16:c5:96:
e3:e1:98:b7:84:53:2a:58:da:bb:d2:16:f2:68:5e:
56:34:01:83:5c:30:65:98:ba:ed:5c:4d:fb:12:cc:
34:25:9f:12:a6:ac:98:ff:e1:97:94:95:68:04:05:
f4:d2:68:e8:be:75:16:6e:6d:ef:02:6e:cc:44:4f:
64:8e:cf:51:7a:8b:ac:68:e9:e8:69:bc:35:ec:9e:
7a:c7:5e:72:3d:80:bb:4d:bb:15:0d:19:3e:c3:2f:
d3:7d:0f:87:97:60:5a:61:eb:77:62:f5:3d:b7:45:
a9:fa:3a:2b:80:5c:5d:45:86:9c:50:7f:34:23:0f:
85:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C2:F9:21:34:26:9E:F0:39:56:FE:09:66:3C:EC:F9:C2:B8:FE:19
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/LsL5ITQmnvA5Vv4JZjzs-cK4_hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.224.0-5.100.229.255
79.99.184.0/21
83.98.129.0/24
83.98.133.0-83.98.134.255
83.98.138.0/24
83.98.140.0-83.98.144.255
83.98.147.0/24
83.98.151.0/24
83.98.158.0/24
83.98.167.0-83.98.168.255
83.98.170.0/24
83.98.173.0/24
83.98.175.0/24
83.98.182.0/23
83.98.185.0-83.98.186.255
83.98.191.0/24
83.98.200.0/23
83.98.209.0/24
83.98.215.0-83.98.221.255
85.92.128.0-85.92.132.255
85.92.134.0/24
85.92.138.0/23
85.92.145.0-85.92.147.255
85.158.160.0/21
85.222.192.0/21
89.18.161.0-89.18.162.255
89.18.168.0/23
89.18.171.0-89.18.175.255
89.18.181.0/24
89.18.183.0/24
89.18.189.0-89.18.190.255
89.30.132.0/24
89.30.144.0/23
89.30.147.0-89.30.148.255
89.30.150.0/23
89.30.154.0-89.30.157.255
89.30.169.0-89.30.171.255
89.30.192.0/23
89.30.196.0/24
89.30.208.0/23
89.30.212.0/23
89.30.216.0/22
89.30.223.0-89.30.231.255
91.200.48.0/23
91.200.51.0/24
91.216.113.0/24
91.216.141.0/24
93.175.176.0/20
94.198.24.0-94.198.30.255
134.0.88.0-134.0.93.255
162.248.196.0/23
162.248.199.0/24
162.251.32.0/21
176.62.192.0/21
178.251.192.0/21
185.12.132.0/22
185.30.236.0/22
185.38.156.0/22
185.74.76.0/23
185.77.120.0/24
185.113.52.0/23
185.113.196.0/22
185.113.224.0/24
185.113.227.0/24
185.116.72.0/22
193.34.150.0/23
194.105.128.0/23
194.165.34.0/24
195.234.173.0/24
213.171.128.0/19
213.189.0.0/21
213.189.16.0/20
213.214.96.0/24
213.214.101.0/24
213.214.103.0/24
213.214.107.0/24
213.214.112.0/20
213.247.32.0/24
213.247.36.0/23
213.247.40.0/24
213.247.42.0/23
213.247.49.0/24
213.247.52.0/24
213.247.56.0/21
217.195.112.0/20
IPv6:
2001:16f8::/32
2a00:1bd8::/32
2a01:40e0::/32
2a02:20b0::/31
2a02:2858::/29
2a03:5500::/31
2a0d:5040::/29
Signature Algorithm: sha256WithRSAEncryption
27:4a:c9:94:6d:81:76:17:07:ff:3e:62:72:74:fb:e8:37:7e:
2f:c7:80:c8:3c:11:9e:2c:01:bd:c0:be:24:d2:b8:32:11:7f:
30:9f:0f:1b:38:5c:a7:23:d5:82:f0:2b:20:74:0a:97:26:bd:
12:4e:a5:12:b8:4c:dc:c9:08:73:49:3a:c5:50:9a:31:03:bd:
7c:4e:c8:8c:24:5b:25:0e:18:ff:6f:6d:1e:41:af:84:1b:d2:
df:b0:7c:3e:49:81:17:93:2d:31:d9:07:d2:5b:79:6c:83:c0:
4a:aa:1f:1c:49:3b:9e:f9:1e:e4:5c:b0:11:62:a8:6e:9a:68:
59:1e:84:60:7c:ab:bf:7c:25:50:97:92:3b:1b:6a:5d:6b:7f:
bd:82:30:1e:e6:13:2a:69:cf:1a:0b:01:c0:e6:f2:fa:71:ae:
a9:36:58:ad:c5:48:c1:64:59:8f:80:77:c3:23:b2:45:a8:43:
44:a0:9f:17:42:b2:e6:49:b8:bf:58:5d:1d:1e:63:81:c7:8b:
f5:f9:40:90:77:4b:b4:35:0d:7a:1c:5a:83:95:e2:81:57:b7:
f1:a8:39:47:12:c2:c6:e3:0b:f2:4d:97:b0:8e:38:94:cd:35:
7c:14:f4:0b:5a:c4:a2:81:96:a1:b9:9d:c8:00:bb:fb:80:6d:
aa:7e:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:20:44 2026 by rpki-client