Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/nmvw5bWIi1oZlR595dhxiK83LVo.roa
File: nmvw5bWIi1oZlR595dhxiK83LVo.roa (raw, json)
Hash identifier: 6i6AlqZjdecP77aW9/z93M4lDAcDWuNi8d0hwYlB348=
Subject key identifier: 9E:6B:F0:E5:B5:88:8B:5A:19:95:1E:7D:E5:D8:71:88:AF:37:2D:5A
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 0198ADE245E937A0F8697842D9D11B094CEF
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/nmvw5bWIi1oZlR595dhxiK83LVo.roa
Signing time: Fri 15 Aug 2025 13:19:04 +0000
ROA not before: Fri 15 Aug 2025 13:19:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210756
IP address blocks: 5.8.42.0/24 maxlen: 24
5.8.43.0/24 maxlen: 24
5.101.68.0/24 maxlen: 24
5.101.69.0/24 maxlen: 24
5.101.70.0/24 maxlen: 24
5.101.218.0/24 maxlen: 24
5.188.2.0/24 maxlen: 24
5.188.3.0/24 maxlen: 24
5.188.7.0/24 maxlen: 24
5.188.35.0/24 maxlen: 24
5.188.37.0/24 maxlen: 24
5.188.38.0/24 maxlen: 24
5.188.39.0/24 maxlen: 24
5.188.121.0/24 maxlen: 24
5.188.149.0/24 maxlen: 24
5.188.150.0/24 maxlen: 24
5.188.170.0/24 maxlen: 24
5.188.171.0/24 maxlen: 24
5.188.176.0/24 maxlen: 24
5.188.177.0/24 maxlen: 24
5.188.178.0/24 maxlen: 24
5.188.179.0/24 maxlen: 24
5.188.212.0/24 maxlen: 24
5.188.224.0/24 maxlen: 24
5.188.229.0/24 maxlen: 24
5.189.201.0/24 maxlen: 24
5.189.205.0/24 maxlen: 24
5.189.223.0/24 maxlen: 24
31.184.204.0/24 maxlen: 24
31.184.205.0/24 maxlen: 24
37.9.36.0/24 maxlen: 24
37.9.37.0/24 maxlen: 24
37.9.38.0/24 maxlen: 24
37.9.39.0/24 maxlen: 24
37.9.52.0/24 maxlen: 24
37.9.53.0/24 maxlen: 24
37.9.54.0/24 maxlen: 24
37.9.55.0/24 maxlen: 24
37.128.164.0/24 maxlen: 24
37.128.165.0/24 maxlen: 24
37.128.166.0/24 maxlen: 24
37.128.167.0/24 maxlen: 24
45.147.162.0/24 maxlen: 24
45.147.163.0/24 maxlen: 24
79.133.127.0/24 maxlen: 24
82.97.207.0/24 maxlen: 24
83.229.14.0/24 maxlen: 24
83.229.25.0/24 maxlen: 24
91.243.80.0/24 maxlen: 24
91.243.82.0/24 maxlen: 24
91.243.83.0/24 maxlen: 24
91.243.84.0/24 maxlen: 24
91.243.86.0/24 maxlen: 24
92.38.128.0/24 maxlen: 24
92.38.129.0/24 maxlen: 24
92.38.130.0/24 maxlen: 24
92.38.131.0/24 maxlen: 24
92.38.136.0/24 maxlen: 24
92.38.137.0/24 maxlen: 24
92.38.138.0/24 maxlen: 24
92.38.139.0/24 maxlen: 24
92.38.152.0/24 maxlen: 24
92.38.153.0/24 maxlen: 24
92.38.156.0/24 maxlen: 24
92.38.188.0/24 maxlen: 24
92.38.189.0/24 maxlen: 24
92.38.190.0/24 maxlen: 24
92.38.191.0/24 maxlen: 24
92.223.4.0/24 maxlen: 24
92.223.5.0/24 maxlen: 24
92.223.6.0/24 maxlen: 24
92.223.8.0/24 maxlen: 24
92.223.9.0/24 maxlen: 24
92.223.14.0/24 maxlen: 24
92.223.32.0/24 maxlen: 24
92.223.33.0/24 maxlen: 24
92.223.34.0/24 maxlen: 24
92.223.35.0/24 maxlen: 24
92.223.36.0/24 maxlen: 24
92.223.38.0/24 maxlen: 24
92.223.41.0/24 maxlen: 24
92.223.43.0/24 maxlen: 24
92.223.49.0/24 maxlen: 24
92.223.60.0/24 maxlen: 24
92.223.64.0/24 maxlen: 24
92.223.65.0/24 maxlen: 24
92.223.67.0/24 maxlen: 24
92.223.72.0/24 maxlen: 24
92.223.80.0/24 maxlen: 24
92.223.87.0/24 maxlen: 24
92.223.91.0/24 maxlen: 24
92.223.103.0/24 maxlen: 24
92.223.106.0/24 maxlen: 24
92.223.108.0/24 maxlen: 24
92.223.109.0/24 maxlen: 24
92.223.110.0/24 maxlen: 24
92.223.111.0/24 maxlen: 24
92.223.114.0/24 maxlen: 24
92.223.115.0/24 maxlen: 24
92.223.122.0/24 maxlen: 24
92.223.123.0/24 maxlen: 24
95.85.88.0/24 maxlen: 24
95.181.176.0/24 maxlen: 24
95.181.177.0/24 maxlen: 24
95.181.178.0/24 maxlen: 24
95.181.179.0/24 maxlen: 24
95.181.180.0/24 maxlen: 24
95.181.181.0/24 maxlen: 24
95.181.182.0/24 maxlen: 24
95.181.183.0/24 maxlen: 24
146.185.196.0/24 maxlen: 24
146.185.197.0/24 maxlen: 24
146.185.198.0/24 maxlen: 24
146.185.199.0/24 maxlen: 24
146.185.215.0/24 maxlen: 24
146.185.218.0/24 maxlen: 24
185.14.46.0/24 maxlen: 24
185.101.137.0/24 maxlen: 24
193.17.93.0/24 maxlen: 24
2a11:27c0::/44 maxlen: 44
2a11:27c0:10::/44 maxlen: 44
2a11:27c0:20::/44 maxlen: 44
2a11:27c0:100::/44 maxlen: 44
2a11:27c0:110::/44 maxlen: 44
2a11:27c0:120::/44 maxlen: 44
2a11:27c0:130::/44 maxlen: 44
2a11:27c0:140::/44 maxlen: 44
2a11:27c0:150::/44 maxlen: 44
2a11:27c0:160::/44 maxlen: 44
2a11:27c0:170::/44 maxlen: 44
2a11:27c0:180::/44 maxlen: 44
2a11:27c0:190::/44 maxlen: 44
2a11:27c0:1a0::/44 maxlen: 44
2a11:27c0:1b0::/44 maxlen: 44
2a11:27c0:1c0::/44 maxlen: 44
2a11:27c0:1d0::/44 maxlen: 44
2a11:27c0:1e0::/44 maxlen: 44
2a11:27c0:1f0::/44 maxlen: 44
2a11:27c0:200::/44 maxlen: 44
2a11:27c0:210::/44 maxlen: 44
2a11:27c0:1000::/44 maxlen: 44
2a11:27c0:1010::/44 maxlen: 44
2a11:27c0:1020::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:e2:45:e9:37:a0:f8:69:78:42:d9:d1:1b:09:4c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Aug 15 13:19:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e6bf0e5b5888b5a19951e7de5d87188af372d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:f2:08:5a:99:b6:20:17:1c:b1:c9:c1:3f:
65:5d:71:11:9b:6b:50:20:54:45:82:fe:11:97:27:
a4:3e:91:7c:63:2a:bb:1a:4c:a4:b4:98:25:29:dc:
45:25:8e:25:ea:c1:ac:16:bb:71:f6:98:fe:a9:66:
69:d9:6e:a6:5b:e1:a7:9e:15:2a:db:83:48:b2:53:
0a:37:eb:c4:cf:8d:b7:b8:8f:dd:bb:b1:30:92:56:
33:1b:6e:ea:5a:bd:75:1c:cf:e3:34:da:cc:d7:75:
6b:4a:a6:b3:c2:50:a0:06:f6:41:4c:9e:a0:7e:9a:
bb:9b:e9:3a:ee:eb:01:05:84:df:aa:8e:98:73:b4:
a5:9f:cb:7b:18:56:b4:b4:63:c0:35:2b:a3:81:50:
ef:66:fe:53:cd:9a:aa:84:f0:e1:5c:8c:68:b7:82:
98:83:8e:c3:bf:ab:2c:e8:e1:39:a8:87:62:ef:b0:
86:b2:b7:a9:a4:83:d9:ba:8a:aa:fe:04:85:1e:ac:
56:f9:cf:b3:8d:dd:60:30:91:d0:e1:f5:b8:c7:68:
1c:dd:5b:ea:7c:68:58:71:45:8f:89:c5:46:42:a8:
08:29:2f:eb:a2:ea:a8:66:cc:22:04:a0:8a:4d:ad:
24:8b:a5:20:a1:4a:1f:52:1e:d2:ca:66:2d:a8:52:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6B:F0:E5:B5:88:8B:5A:19:95:1E:7D:E5:D8:71:88:AF:37:2D:5A
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/nmvw5bWIi1oZlR595dhxiK83LVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.42.0/23
5.101.68.0-5.101.70.255
5.101.218.0/24
5.188.2.0/23
5.188.7.0/24
5.188.35.0/24
5.188.37.0-5.188.39.255
5.188.121.0/24
5.188.149.0-5.188.150.255
5.188.170.0/23
5.188.176.0/22
5.188.212.0/24
5.188.224.0/24
5.188.229.0/24
5.189.201.0/24
5.189.205.0/24
5.189.223.0/24
31.184.204.0/23
37.9.36.0/22
37.9.52.0/22
37.128.164.0/22
45.147.162.0/23
79.133.127.0/24
82.97.207.0/24
83.229.14.0/24
83.229.25.0/24
91.243.80.0/24
91.243.82.0-91.243.84.255
91.243.86.0/24
92.38.128.0/22
92.38.136.0/22
92.38.152.0/23
92.38.156.0/24
92.38.188.0/22
92.223.4.0-92.223.6.255
92.223.8.0/23
92.223.14.0/24
92.223.32.0-92.223.36.255
92.223.38.0/24
92.223.41.0/24
92.223.43.0/24
92.223.49.0/24
92.223.60.0/24
92.223.64.0/23
92.223.67.0/24
92.223.72.0/24
92.223.80.0/24
92.223.87.0/24
92.223.91.0/24
92.223.103.0/24
92.223.106.0/24
92.223.108.0/22
92.223.114.0/23
92.223.122.0/23
95.85.88.0/24
95.181.176.0/21
146.185.196.0/22
146.185.215.0/24
146.185.218.0/24
185.14.46.0/24
185.101.137.0/24
193.17.93.0/24
IPv6:
2a11:27c0::-2a11:27c0:2f:ffff:ffff:ffff:ffff:ffff
2a11:27c0:100::-2a11:27c0:21f:ffff:ffff:ffff:ffff:ffff
2a11:27c0:1000::-2a11:27c0:102f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1a:ad:1a:3d:89:b3:6f:79:3e:e0:d4:3f:ed:9a:a7:3a:75:23:
d7:3c:ca:dd:f4:30:94:3e:11:fb:de:54:05:f4:57:10:62:56:
ab:e8:11:91:ff:50:45:6f:e6:1c:a7:0c:78:cb:b7:d2:a7:fd:
f1:7c:8e:1b:da:f6:68:39:21:85:8f:ea:d5:0e:af:cf:04:fa:
d8:6c:e6:6b:b2:de:0b:64:aa:3e:ff:3c:89:69:e8:46:a6:13:
4a:8e:14:7b:44:a5:81:90:60:29:7a:a2:e1:70:75:72:11:f9:
f0:ab:47:eb:33:27:9a:61:d9:46:9e:df:dc:e9:8d:29:29:7b:
28:8a:8a:f4:d7:f5:27:dc:5e:f6:41:74:09:1c:d8:ba:83:95:
76:0f:c6:cb:01:d6:0c:4c:b2:90:76:56:c1:37:b6:82:d7:5c:
2a:08:6e:6e:60:81:30:84:03:d4:c5:c0:21:c3:cf:23:0d:5a:
f1:ae:5c:91:f8:af:90:53:a4:a5:dc:ad:2b:47:b1:74:92:9f:
4d:fa:e8:b2:d7:07:45:41:ba:05:91:a3:d4:9d:20:52:a2:02:
98:6f:cc:30:24:9f:c6:8c:22:65:5a:4b:c0:91:de:c3:5b:ee:
5a:c0:ca:65:cc:a7:93:ce:07:59:34:e5:f0:43:9d:9b:c3:59:
e7:09:95:b2
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgISAZit4kXpN6D4aXhC2dEbCUzvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2U1ODVhNTliNTIzYmI4NmQ2NjBhNzE2OGUxYzFlYmEw
OTRkYTAwHhcNMjUwODE1MTMxOTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTZiZjBlNWI1ODg4YjVhMTk5NTFlN2RlNWQ4NzE4OGFmMzcyZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBnyCFqZtiAXHLHJwT9lXXERm2tQ
IFRFgv4RlyekPpF8Yyq7GkyktJglKdxFJY4l6sGsFrtx9pj+qWZp2W6mW+GnnhUq
24NIslMKN+vEz423uI/du7EwklYzG27qWr11HM/jNNrM13VrSqazwlCgBvZBTJ6g
fpq7m+k67usBBYTfqo6Yc7Sln8t7GFa0tGPANSujgVDvZv5TzZqqhPDhXIxot4KY
g47Dv6ss6OE5qIdi77CGsreppIPZuoqq/gSFHqxW+c+zjd1gMJHQ4fW4x2gc3Vvq
fGhYcUWPicVGQqgIKS/rouqoZswiBKCKTa0ki6UgoUofUh7SymYtqFIv/QIDAQAB
o4ID8TCCA+0wHQYDVR0OBBYEFJ5r8OW1iItaGZUefeXYcYivNy1aMB8GA1UdIwQY
MBaAFHw+WFpZtSO7htZgpxaOHB66CU2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUt
NmRjMWY1NjAzMWViLzEvbm12dzViV0lpMW9abFI1OTVkaHhpSzgzTFZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUtNmRjMWY1NjAzMWVi
LzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICBQYIKwYBBQUHAQcBAf8EggH0MIIB8DCCAawEAgABMIIB
pAMEAQUIKjAMAwQCBWVEAwQABWVGAwQABWXaAwQBBbwCAwQABbwHAwQABbwjMAwD
BAAFvCUDBAMFvCADBAAFvHkwDAMEAAW8lQMEAAW8lgMEAQW8qgMEAgW8sAMEAAW8
1AMEAAW84AMEAAW85QMEAAW9yQMEAAW9zQMEAAW93wMEAR+4zAMEAiUJJAMEAiUJ
NAMEAiWApAMEAS2TogMEAE+FfwMEAFJhzwMEAFPlDgMEAFPlGQMEAFvzUDAMAwQB
W/NSAwQAW/NUAwQAW/NWAwQCXCaAAwQCXCaIAwQBXCaYAwQAXCacAwQCXCa8MAwD
BAJc3wQDBABc3wYDBAFc3wgDBABc3w4wDAMEBVzfIAMEAFzfJAMEAFzfJgMEAFzf
KQMEAFzfKwMEAFzfMQMEAFzfPAMEAVzfQAMEAFzfQwMEAFzfSAMEAFzfUAMEAFzf
VwMEAFzfWwMEAFzfZwMEAFzfagMEAlzfbAMEAVzfcgMEAVzfegMEAF9VWAMEA1+1
sAMEApK5xAMEAJK51wMEAJK52gMEALkOLgMEALlliQMEAMERXTA+BAIAAjA4MBAD
BQYqESfAAwcEKhEnwAAgMBEDBgAqESfAAQMHBSoRJ8ACADARAwYEKhEnwBADBwQq
ESfAECAwDQYJKoZIhvcNAQELBQADggEBABqtGj2Js295PuDUP+2apzp1I9c8yt30
MJQ+EfveVAX0VxBiVqvoEZH/UEVv5hynDHjLt9Kn/fF8jhva9mg5IYWP6tUOr88E
+ths5muy3gtkqj7/PIlp6EamE0qOFHtEpYGQYCl6ouFwdXIR+fCrR+szJ5ph2Uae
39zpjSkpeyiKivTX9SfcXvZBdAkc2LqDlXYPxssB1gxMspB2VsE3toLXXCoIbm5g
gTCEA9TFwCHDzyMNWvGuXJH4r5BTpKXcrStHsXSSn0366LLXB0VBugWRo9SdIFKi
AphvzDAkn8aMImVaS8CR3sNb7lrAymXMp5POB1k05fBDnZvDWecJlbI=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:55:49 2025 by rpki-client