Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/5P1wGtB85HxirMIBYnTtfNp_BtI.roa
File: 5P1wGtB85HxirMIBYnTtfNp_BtI.roa (raw, json)
Hash identifier: t+c+B7cr2MGabIHzLXA82hUcSDP2mV2mZWJBmkVbzNA=
Subject key identifier: E4:FD:70:1A:D0:7C:E4:7C:62:AC:C2:01:62:74:ED:7C:DA:7F:06:D2
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 019CE7701A9F379F44CE48A5A8BC3A15DC46
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/5P1wGtB85HxirMIBYnTtfNp_BtI.roa
Signing time: Fri 13 Mar 2026 13:43:29 +0000
ROA not before: Fri 13 Mar 2026 13:43:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64445
IP address blocks: 31.193.188.0/24 maxlen: 24
37.156.174.0/24 maxlen: 24
45.83.56.0/22 maxlen: 24
45.83.57.0/24 maxlen: 24
45.83.58.0/24 maxlen: 24
45.83.59.0/24 maxlen: 24
45.86.144.0/22 maxlen: 22
45.86.144.0/24 maxlen: 24
45.86.146.0/24 maxlen: 24
45.86.147.0/24 maxlen: 24
77.81.103.0/24 maxlen: 24
85.204.255.0/24 maxlen: 24
86.104.67.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
89.34.236.0/23 maxlen: 23
89.34.236.0/24 maxlen: 24
89.34.237.0/24 maxlen: 24
89.34.239.0/24 maxlen: 24
89.39.201.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
89.40.142.0/24 maxlen: 24
89.40.143.0/24 maxlen: 24
89.40.227.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.43.34.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
89.43.52.0/24 maxlen: 24
89.44.237.0/24 maxlen: 24
91.212.52.0/24 maxlen: 24
91.229.186.0/24 maxlen: 24
92.114.86.0/24 maxlen: 24
92.114.87.0/24 maxlen: 24
93.113.144.0/24 maxlen: 24
93.113.145.0/24 maxlen: 24
93.113.146.0/24 maxlen: 24
93.113.147.0/24 maxlen: 24
93.113.148.0/22 maxlen: 22
93.113.148.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
93.115.56.0/24 maxlen: 24
93.115.57.0/24 maxlen: 24
94.176.108.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
94.177.10.0/24 maxlen: 24
94.177.11.0/24 maxlen: 24
94.177.21.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
94.177.48.0/24 maxlen: 24
94.177.49.0/24 maxlen: 24
94.177.96.0/24 maxlen: 24
94.177.97.0/24 maxlen: 24
94.177.98.0/24 maxlen: 24
94.177.99.0/24 maxlen: 24
176.223.64.0/24 maxlen: 24
185.184.240.0/22 maxlen: 22
185.184.240.0/24 maxlen: 24
185.184.241.0/24 maxlen: 24
185.184.242.0/24 maxlen: 24
185.184.243.0/24 maxlen: 24
185.198.244.0/24 maxlen: 24
185.198.245.0/24 maxlen: 24
185.198.246.0/24 maxlen: 24
185.198.247.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
188.208.16.0/24 maxlen: 24
188.208.17.0/24 maxlen: 24
188.211.248.0/24 maxlen: 24
188.214.199.0/24 maxlen: 24
188.215.6.0/23 maxlen: 23
188.215.6.0/24 maxlen: 24
188.215.7.0/24 maxlen: 24
188.215.94.0/24 maxlen: 24
188.240.80.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
188.240.228.0/24 maxlen: 24
188.240.229.0/24 maxlen: 24
188.241.66.0/24 maxlen: 24
188.241.67.0/24 maxlen: 24
188.241.126.0/24 maxlen: 24
188.241.138.0/24 maxlen: 24
188.241.139.0/24 maxlen: 24
188.241.143.0/24 maxlen: 24
188.241.213.0/24 maxlen: 24
193.239.140.0/23 maxlen: 24
193.239.141.0/24 maxlen: 24
217.198.177.0/24 maxlen: 24
2a04:68c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:70:1a:9f:37:9f:44:ce:48:a5:a8:bc:3a:15:dc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Mar 13 13:43:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4fd701ad07ce47c62acc2016274ed7cda7f06d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:9a:58:ba:47:47:51:ba:11:cd:79:26:b8:
21:1c:65:59:bc:19:df:86:21:1a:47:c3:0c:2c:6f:
21:a3:23:a1:ac:15:0b:80:8c:98:5d:6a:34:2a:3b:
97:44:ff:59:ad:b6:77:5a:bf:c4:87:58:16:42:85:
d5:f0:3a:7c:55:94:d8:d2:38:d4:65:66:e3:fe:40:
0c:e7:02:67:fa:3b:de:69:be:6b:51:d3:f6:71:ce:
55:0e:fe:5e:75:24:c8:ed:10:28:4b:f6:70:81:0b:
92:c8:67:6b:d8:9b:53:70:ce:a2:6a:32:d1:78:57:
a2:9b:f2:a5:db:f0:3e:c2:8f:28:56:1c:1f:75:20:
3c:62:51:73:44:35:89:8d:a2:b7:bc:01:88:0c:9d:
e4:e9:72:58:a7:1d:0e:a4:47:cb:96:ae:9a:4c:34:
f0:e4:43:2a:05:8b:53:ae:21:a5:39:eb:fb:3e:23:
b4:4c:0f:98:e3:bc:22:ef:85:9d:a3:ff:07:03:ed:
1d:a6:a3:b5:69:42:dd:a3:1e:ba:40:f2:e2:43:7e:
64:a3:b4:d4:74:44:ec:e0:32:35:4f:85:69:49:3c:
e5:9a:b0:79:d6:ec:2f:99:9a:b4:a7:b7:ac:ce:59:
c5:f0:5b:ea:c1:15:d5:9c:09:38:ba:e0:c7:f4:c1:
3f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FD:70:1A:D0:7C:E4:7C:62:AC:C2:01:62:74:ED:7C:DA:7F:06:D2
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/5P1wGtB85HxirMIBYnTtfNp_BtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.188.0/24
37.156.174.0/24
45.83.56.0/22
45.86.144.0/22
77.81.103.0/24
85.204.255.0/24
86.104.67.0/24
86.107.110.0/24
89.34.236.0/23
89.34.239.0/24
89.39.201.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.34.0/23
89.43.52.0/24
89.44.237.0/24
91.212.52.0/24
91.229.186.0/24
92.114.86.0/23
93.113.144.0/21
93.115.56.0/23
94.176.108.0/24
94.176.212.0/24
94.177.10.0/23
94.177.21.0/24
94.177.48.0/23
94.177.96.0/22
176.223.64.0/24
185.184.240.0/22
185.198.244.0/22
188.208.16.0/23
188.211.248.0/24
188.214.199.0/24
188.215.6.0/23
188.215.94.0/24
188.240.80.0/24
188.240.228.0/23
188.241.66.0/23
188.241.126.0/24
188.241.138.0/23
188.241.143.0/24
188.241.213.0/24
193.239.140.0/23
217.198.177.0/24
IPv6:
2a04:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
db:85:59:5a:04:69:59:c9:ab:e8:d5:b4:d9:89:af:85:ec:62:
46:cf:b1:11:c9:30:bd:c9:bc:a9:04:c6:ba:f0:ab:c4:23:72:
82:51:c7:75:3a:fc:44:1d:e4:24:21:ad:62:72:4b:36:e4:77:
cd:92:7c:ed:81:f0:8f:f7:e6:ce:31:ff:d5:de:e1:33:80:c7:
d3:dd:ee:53:68:88:2b:d4:b8:e2:d7:ab:f9:de:c4:dc:29:97:
23:15:59:19:af:d6:f8:75:e4:bf:79:6f:be:8d:95:69:0b:51:
27:97:e6:1f:06:1c:ef:7d:40:c1:6a:c2:5a:90:84:04:69:dd:
16:08:a3:2d:20:a3:63:44:1c:f9:af:5d:e5:f1:65:6b:61:6a:
b0:9d:73:a6:81:20:c7:6c:26:c3:80:b5:82:4c:2f:f6:97:9e:
d3:fd:fd:98:9c:2b:00:64:11:99:e4:b3:8b:6e:c2:3b:c0:79:
a2:60:8c:90:11:06:5a:99:19:60:f2:11:3e:bc:35:5f:26:e3:
38:d6:a6:bd:e4:33:89:b3:8f:18:cf:5d:61:37:07:4a:43:9e:
78:ea:d3:e0:f7:6e:e3:c1:82:1e:1f:35:b5:94:4e:0a:71:06:
ed:4a:50:bb:63:34:2d:25:06:1e:6b:b3:1a:36:69:d1:8b:14:
0a:30:25:8e
-----BEGIN CERTIFICATE-----
MIIGJDCCBQygAwIBAgISAZzncBqfN59EzkilqLw6FdxGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3
NjA1MTkwHhcNMjYwMzEzMTM0MzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGZkNzAxYWQwN2NlNDdjNjJhY2MyMDE2Mjc0ZWQ3Y2RhN2YwNmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5WaWLpHR1G6Ec15JrghHGVZvBnf
hiEaR8MMLG8hoyOhrBULgIyYXWo0KjuXRP9ZrbZ3Wr/Eh1gWQoXV8Dp8VZTY0jjU
ZWbj/kAM5wJn+jveab5rUdP2cc5VDv5edSTI7RAoS/ZwgQuSyGdr2JtTcM6iajLR
eFeim/Kl2/A+wo8oVhwfdSA8YlFzRDWJjaK3vAGIDJ3k6XJYpx0OpEfLlq6aTDTw
5EMqBYtTriGlOev7PiO0TA+Y47wi74Wdo/8HA+0dpqO1aULdox66QPLiQ35ko7TU
dETs4DI1T4VpSTzlmrB51uwvmZq0p7eszlnF8FvqwRXVnAk4uuDH9ME/LwIDAQAB
o4IDMDCCAywwHQYDVR0OBBYEFOT9cBrQfOR8YqzCAWJ07XzafwbSMB8GA1UdIwQY
MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt
NzQwOGViOGJjNTg2LzEvNVAxd0d0Qjg1SHhpck1JQlluVHRmTnBfQnRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2
LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBRAYIKwYBBQUHAQcBAf8EggEzMIIBLzCCARwEAgABMIIB
FAMEAB/BvAMEACWcrgMEAi1TOAMEAi1WkAMEAE1RZwMEAFXM/wMEAFZoQwMEAFZr
bgMEAVki7AMEAFki7wMEAFknyQMEAFkn/gMEAVkojgMEAFko4wMEAFkqhgMEAVkr
IgMEAFkrNAMEAFks7QMEAFvUNAMEAFvlugMEAVxyVgMEA11xkAMEAV1zOAMEAF6w
bAMEAF6w1AMEAV6xCgMEAF6xFQMEAV6xMAMEAl6xYAMEALDfQAMEArm48AMEArnG
9AMEAbzQEAMEALzT+AMEALzWxwMEAbzXBgMEALzXXgMEALzwUAMEAbzw5AMEAbzx
QgMEALzxfgMEAbzxigMEALzxjwMEALzx1QMEAcHvjAMEANnGsTANBAIAAjAHAwUA
KgRowDANBgkqhkiG9w0BAQsFAAOCAQEA24VZWgRpWcmr6NW02YmvhexiRs+xEckw
vcm8qQTGuvCrxCNyglHHdTr8RB3kJCGtYnJLNuR3zZJ87YHwj/fmzjH/1d7hM4DH
093uU2iIK9S44ter+d7E3CmXIxVZGa/W+HXkv3lvvo2VaQtRJ5fmHwYc731AwWrC
WpCEBGndFgijLSCjY0Qc+a9d5fFla2FqsJ1zpoEgx2wmw4C1gkwv9pee0/39mJwr
AGQRmeSzi27CO8B5omCMkBEGWpkZYPIRPrw1XybjONamveQzibOPGM9dYTcHSkOe
eOrT4Pdu48GCHh81tZROCnEG7UpQu2M0LSUGHmuzGjZp0YsUCjAljg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:55 2026 by rpki-client