Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/p_vuW19MT_pOoS_uhZlFlQcB3PM.roa
File: p_vuW19MT_pOoS_uhZlFlQcB3PM.roa (raw, json)
Hash identifier: XksudWJQvxHlarktOcrWkaKumMYDC3pnq1BMdKx75bE=
Subject key identifier: A7:FB:EE:5B:5F:4C:4F:FA:4E:A1:2F:EE:85:99:45:95:07:01:DC:F3
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01A1B662771BEFB184D9B4F93B9AC940AAC9
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/p_vuW19MT_pOoS_uhZlFlQcB3PM.roa
Signing time: Sat 07 Nov 2026 14:21:08 +0000
ROA not before: Sat 07 Nov 2026 14:21:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206065
IP address blocks: 31.25.104.0/21 maxlen: 24
31.217.208.0/21 maxlen: 24
37.19.80.0/20 maxlen: 24
37.114.192.0/18 maxlen: 24
37.114.204.0/23 maxlen: 23
37.114.225.0/24 maxlen: 24
37.114.246.0/23 maxlen: 23
37.114.252.0/24 maxlen: 24
37.191.75.0/24 maxlen: 24
37.191.80.0/21 maxlen: 24
37.191.88.0/22 maxlen: 24
37.221.0.0/18 maxlen: 24
37.221.0.0/20 maxlen: 20
37.235.16.0/20 maxlen: 24
37.235.17.0/24 maxlen: 24
45.128.140.0/22 maxlen: 24
45.144.124.0/22 maxlen: 24
46.32.5.0/24 maxlen: 24
46.32.9.0/24 maxlen: 24
46.32.14.0/24 maxlen: 24
46.34.164.0/22 maxlen: 24
46.34.168.0/21 maxlen: 24
46.34.178.0/23 maxlen: 24
46.34.180.0/22 maxlen: 24
46.34.184.0/21 maxlen: 24
78.154.32.0/19 maxlen: 24
78.158.182.0/23 maxlen: 24
78.158.186.0/23 maxlen: 24
78.158.188.0/23 maxlen: 24
78.158.190.0/24 maxlen: 24
79.132.200.0/22 maxlen: 24
79.132.213.0/24 maxlen: 24
79.132.217.0/24 maxlen: 24
79.132.218.0/23 maxlen: 24
80.71.113.0/24 maxlen: 24
80.71.122.0/23 maxlen: 24
80.71.124.0/23 maxlen: 24
80.71.127.0/24 maxlen: 24
81.29.243.0/24 maxlen: 24
81.29.248.0/21 maxlen: 24
81.29.248.0/23 maxlen: 23
81.29.250.0/23 maxlen: 24
81.29.250.0/24 maxlen: 24
81.29.251.0/24 maxlen: 24
81.29.254.0/24 maxlen: 24
81.29.255.0/24 maxlen: 24
81.91.144.0/20 maxlen: 24
81.91.144.0/22 maxlen: 24
81.91.148.0/23 maxlen: 24
81.91.150.0/23 maxlen: 24
81.91.152.0/21 maxlen: 24
86.109.32.0/23 maxlen: 24
86.109.41.0/24 maxlen: 24
86.109.46.0/23 maxlen: 24
86.109.53.0/24 maxlen: 24
86.109.56.0/22 maxlen: 24
86.109.58.0/23 maxlen: 24
86.109.62.0/23 maxlen: 24
87.247.180.0/23 maxlen: 24
91.184.64.0/20 maxlen: 24
92.61.184.0/21 maxlen: 24
92.119.68.0/22 maxlen: 24
94.139.160.0/20 maxlen: 24
109.230.64.0/21 maxlen: 24
109.230.80.0/20 maxlen: 24
109.230.80.0/22 maxlen: 24
109.230.81.0/24 maxlen: 24
109.230.82.0/24 maxlen: 24
109.230.88.0/21 maxlen: 24
109.230.88.0/23 maxlen: 24
109.230.90.0/24 maxlen: 24
109.230.93.0/24 maxlen: 24
176.221.65.0/24 maxlen: 24
185.12.62.0/24 maxlen: 24
185.21.76.0/22 maxlen: 24
185.30.76.0/22 maxlen: 24
185.40.240.0/22 maxlen: 24
185.70.60.0/22 maxlen: 24
185.82.164.0/23 maxlen: 24
185.85.68.0/22 maxlen: 24
185.104.228.0/24 maxlen: 24
185.133.152.0/22 maxlen: 24
185.142.233.0/24 maxlen: 24
185.142.234.0/23 maxlen: 24
185.172.0.0/22 maxlen: 24
185.190.20.0/22 maxlen: 24
185.197.68.0/22 maxlen: 24
185.208.150.0/23 maxlen: 24
188.75.90.0/24 maxlen: 24
188.75.92.0/24 maxlen: 24
188.75.94.0/24 maxlen: 24
188.75.102.0/23 maxlen: 24
188.75.105.0/24 maxlen: 24
188.75.107.0/24 maxlen: 24
188.75.110.0/23 maxlen: 24
188.75.113.0/24 maxlen: 24
188.75.114.0/23 maxlen: 24
188.75.119.0/24 maxlen: 24
188.75.122.0/23 maxlen: 24
188.75.124.0/23 maxlen: 24
188.121.128.0/19 maxlen: 24
188.121.128.0/23 maxlen: 24
188.121.128.0/24 maxlen: 24
188.121.129.0/24 maxlen: 24
188.121.136.0/21 maxlen: 24
188.121.144.0/20 maxlen: 24
188.121.144.0/22 maxlen: 24
188.121.146.0/24 maxlen: 24
188.121.148.0/23 maxlen: 24
188.121.152.0/22 maxlen: 24
188.121.156.0/24 maxlen: 24
188.121.157.0/24 maxlen: 24
188.121.158.0/23 maxlen: 24
188.136.132.0/24 maxlen: 24
188.136.134.0/24 maxlen: 24
188.136.140.0/24 maxlen: 24
188.136.141.0/24 maxlen: 24
188.136.145.0/24 maxlen: 24
188.136.146.0/23 maxlen: 24
188.136.148.0/24 maxlen: 24
188.136.151.0/24 maxlen: 24
188.136.157.0/24 maxlen: 24
188.136.158.0/23 maxlen: 24
188.136.174.0/24 maxlen: 24
188.136.175.0/24 maxlen: 24
188.136.176.0/21 maxlen: 24
188.136.184.0/24 maxlen: 24
188.136.185.0/24 maxlen: 24
188.136.186.0/23 maxlen: 24
188.136.188.0/23 maxlen: 24
188.136.192.0/22 maxlen: 24
188.136.192.0/23 maxlen: 24
188.136.194.0/24 maxlen: 24
188.136.195.0/24 maxlen: 24
188.136.197.0/24 maxlen: 24
188.136.198.0/23 maxlen: 24
188.136.200.0/24 maxlen: 24
188.136.201.0/24 maxlen: 24
188.136.202.0/23 maxlen: 24
188.136.204.0/22 maxlen: 24
188.136.208.0/24 maxlen: 24
188.136.209.0/24 maxlen: 24
188.136.212.0/22 maxlen: 24
188.136.216.0/22 maxlen: 24
188.136.218.0/23 maxlen: 24
188.136.220.0/23 maxlen: 24
188.136.222.0/23 maxlen: 24
213.195.12.0/22 maxlen: 24
213.195.16.0/22 maxlen: 24
213.195.20.0/24 maxlen: 24
213.207.192.0/20 maxlen: 24
217.66.196.0/23 maxlen: 24
217.66.208.0/24 maxlen: 24
217.66.211.0/24 maxlen: 24
2a0c:100::/29 maxlen: 48
2a0c:104::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b6:62:77:1b:ef:b1:84:d9:b4:f9:3b:9a:c9:40:aa:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Nov 7 14:21:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7fbee5b5f4c4ffa4ea12fee859945950701dcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5b:7e:05:2e:71:b0:8e:55:9b:8f:48:0a:5a:
c1:bc:1a:d9:4b:6a:3e:73:85:ab:b2:04:01:e1:71:
74:92:74:02:f9:5f:35:e9:1c:f5:23:15:c1:1a:54:
00:9c:0c:0d:5a:cb:48:b7:ba:14:a0:eb:0d:6f:b2:
83:87:fb:fd:09:63:65:82:dd:e4:cd:d0:27:de:3e:
55:2f:91:65:95:ca:c9:01:22:7a:ef:a5:29:cd:4b:
55:de:93:f7:2a:d5:4b:74:64:69:04:17:c7:d4:84:
32:5b:f7:ed:25:9f:c7:5a:da:fc:43:7c:03:2a:60:
c5:f8:1d:b6:9d:0c:10:c5:65:05:3d:48:6f:8a:73:
3b:41:c1:84:36:07:d4:ed:36:08:61:ff:0c:c6:54:
7b:63:b2:ac:c5:c7:f7:db:a7:20:f8:d2:54:9b:6f:
de:d4:e7:a1:47:2c:a7:e6:90:3c:99:03:a9:96:7d:
44:b1:21:32:bf:01:c6:94:f5:c6:ee:fa:74:d4:0d:
c4:3e:88:44:4d:2d:67:1b:00:11:fb:7a:81:e7:31:
87:c0:3a:2e:c4:25:df:19:7f:5f:c4:42:9f:db:70:
8d:62:57:71:b2:36:2b:fd:ab:6d:2b:32:a4:a4:29:
da:37:38:97:43:c4:9e:fb:d7:7b:a3:ed:61:73:57:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FB:EE:5B:5F:4C:4F:FA:4E:A1:2F:EE:85:99:45:95:07:01:DC:F3
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/p_vuW19MT_pOoS_uhZlFlQcB3PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.104.0/21
31.217.208.0/21
37.19.80.0/20
37.114.192.0/18
37.191.75.0/24
37.191.80.0-37.191.91.255
37.221.0.0/18
37.235.16.0/20
45.128.140.0/22
45.144.124.0/22
46.32.5.0/24
46.32.9.0/24
46.32.14.0/24
46.34.164.0-46.34.175.255
46.34.178.0-46.34.191.255
78.154.32.0/19
78.158.182.0/23
78.158.186.0-78.158.190.255
79.132.200.0/22
79.132.213.0/24
79.132.217.0-79.132.219.255
80.71.113.0/24
80.71.122.0-80.71.125.255
80.71.127.0/24
81.29.243.0/24
81.29.248.0/21
81.91.144.0/20
86.109.32.0/23
86.109.41.0/24
86.109.46.0/23
86.109.53.0/24
86.109.56.0/22
86.109.62.0/23
87.247.180.0/23
91.184.64.0/20
92.61.184.0/21
92.119.68.0/22
94.139.160.0/20
109.230.64.0/21
109.230.80.0/20
176.221.65.0/24
185.12.62.0/24
185.21.76.0/22
185.30.76.0/22
185.40.240.0/22
185.70.60.0/22
185.82.164.0/23
185.85.68.0/22
185.104.228.0/24
185.133.152.0/22
185.142.233.0-185.142.235.255
185.172.0.0/22
185.190.20.0/22
185.197.68.0/22
185.208.150.0/23
188.75.90.0/24
188.75.92.0/24
188.75.94.0/24
188.75.102.0/23
188.75.105.0/24
188.75.107.0/24
188.75.110.0/23
188.75.113.0-188.75.115.255
188.75.119.0/24
188.75.122.0-188.75.125.255
188.121.128.0/19
188.136.132.0/24
188.136.134.0/24
188.136.140.0/23
188.136.145.0-188.136.148.255
188.136.151.0/24
188.136.157.0-188.136.159.255
188.136.174.0-188.136.189.255
188.136.192.0/22
188.136.197.0-188.136.209.255
188.136.212.0-188.136.223.255
213.195.12.0-213.195.20.255
213.207.192.0/20
217.66.196.0/23
217.66.208.0/24
217.66.211.0/24
IPv6:
2a0c:100::/29
Signature Algorithm: sha256WithRSAEncryption
0d:77:7c:7f:eb:65:7e:48:60:18:55:1f:3a:7d:3b:c6:9b:13:
ed:ca:27:bc:39:38:d0:0e:8e:c2:bd:9b:d8:e0:91:b7:fd:21:
74:d0:29:d4:bd:ea:1c:80:a4:5a:bc:8f:15:0f:55:d4:b0:23:
8e:06:a7:51:cf:67:fc:b6:fa:e4:bb:8f:95:3f:fa:b1:51:39:
e9:6f:a2:5f:d5:8b:61:a9:73:24:54:a3:08:65:1f:8e:51:73:
b0:fe:2c:c6:f4:55:d0:54:f7:94:0a:94:3f:34:4a:6f:52:c2:
9d:f8:a1:f8:9a:12:03:c6:12:85:56:23:74:d8:5a:5f:ea:5f:
0b:65:53:b0:d8:a5:21:b1:4a:97:6c:c2:98:c4:4f:8a:50:f8:
0e:5d:80:e5:12:3d:57:80:b2:4c:07:a8:63:e7:cc:5f:f8:74:
c3:d6:a6:e8:fc:10:a6:d1:52:f6:f1:c0:85:eb:37:d2:45:ca:
3b:1c:c1:de:71:44:f0:e8:8a:e2:1f:87:52:f1:f4:db:46:ef:
2b:23:5b:5f:81:5b:a8:84:cb:18:32:11:06:ad:df:80:fc:c3:
0b:3b:89:8d:16:38:63:ad:b5:76:9b:16:0c:3f:78:01:96:a4:
f0:6e:1e:b0:c3:f4:93:5b:a5:b3:a2:aa:1a:5b:73:9d:47:65:
af:30:35:c7
-----BEGIN CERTIFICATE-----
MIIHbjCCBlagAwIBAgISAaG2Yncb77GE2bT5O5rJQKrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjYxMTA3MTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2ZiZWU1YjVmNGM0ZmZhNGVhMTJmZWU4NTk5NDU5NTA3MDFkY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lt+BS5xsI5Vm49IClrBvBrZS2o+
c4WrsgQB4XF0knQC+V816Rz1IxXBGlQAnAwNWstIt7oUoOsNb7KDh/v9CWNlgt3k
zdAn3j5VL5FllcrJASJ676UpzUtV3pP3KtVLdGRpBBfH1IQyW/ftJZ/HWtr8Q3wD
KmDF+B22nQwQxWUFPUhvinM7QcGENgfU7TYIYf8MxlR7Y7Ksxcf326cg+NJUm2/e
1OehRyyn5pA8mQOpln1EsSEyvwHGlPXG7vp01A3EPohETS1nGwAR+3qB5zGHwDou
xCXfGX9fxEKf23CNYldxsjYr/attKzKkpCnaNziXQ8Se+9d7o+1hc1fhyQIDAQAB
o4IEejCCBHYwHQYDVR0OBBYEFKf77ltfTE/6TqEv7oWZRZUHAdzzMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvcF92dVcxOU1UX3BPb1NfdWhabEZsUWNCM1BNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICjgYIKwYBBQUHAQcBAf8EggJ9MIICeTCCAmYEAgABMIIC
XgMEAx8ZaAMEAx/Z0AMEBCUTUAMEBiVywAMEACW/SzAMAwQEJb9QAwQCJb9YAwQG
Jd0AAwQEJesQAwQCLYCMAwQCLZB8AwQALiAFAwQALiAJAwQALiAOMAwDBAIuIqQD
BAQuIqAwDAMEAS4isgMEBi4igAMEBU6aIAMEAU6etjAMAwQBTp66AwQATp6+AwQC
T4TIAwQAT4TVMAwDBABPhNkDBAJPhNgDBABQR3EwDAMEAVBHegMEAVBHfAMEAFBH
fwMEAFEd8wMEA1Ed+AMEBFFbkAMEAVZtIAMEAFZtKQMEAVZtLgMEAFZtNQMEAlZt
OAMEAVZtPgMEAVf3tAMEBFu4QAMEA1w9uAMEAlx3RAMEBF6LoAMEA23mQAMEBG3m
UAMEALDdQQMEALkMPgMEArkVTAMEArkeTAMEArko8AMEArlGPAMEAblSpAMEArlV
RAMEALlo5AMEArmFmDAMAwQAuY7pAwQCuY7oAwQCuawAAwQCub4UAwQCucVEAwQB
udCWAwQAvEtaAwQAvEtcAwQAvEteAwQBvEtmAwQAvEtpAwQAvEtrAwQBvEtuMAwD
BAC8S3EDBAK8S3ADBAC8S3cwDAMEAbxLegMEAbxLfAMEBbx5gAMEALyIhAMEALyI
hgMEAbyIjDAMAwQAvIiRAwQAvIiUAwQAvIiXMAwDBAC8iJ0DBAW8iIAwDAMEAbyI
rgMEAbyIvAMEAryIwDAMAwQAvIjFAwQBvIjQMAwDBAK8iNQDBAW8iMAwDAMEAtXD
DAMEANXDFAMEBNXPwAMEAdlCxAMEANlC0AMEANlC0zANBAIAAjAHAwUDKgwBADAN
BgkqhkiG9w0BAQsFAAOCAQEADXd8f+tlfkhgGFUfOn07xpsT7convDk40A6Owr2b
2OCRt/0hdNAp1L3qHICkWryPFQ9V1LAjjganUc9n/Lb65LuPlT/6sVE56W+iX9WL
YalzJFSjCGUfjlFzsP4sxvRV0FT3lAqUPzRKb1LCnfih+JoSA8YShVYjdNhaX+pf
C2VTsNilIbFKl2zCmMRPilD4Dl2A5RI9V4CyTAeoY+fMX/h0w9am6PwQptFS9vHA
hes30kXKOxzB3nFE8OiK4h+HUvH020bvKyNbX4FbqITLGDIRBq3fgPzDCzuJjRY4
Y621dpsWDD94AZak8G4esMP0k1uls6KqGltznUdlrzA1xw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:29:25 2026 by rpki-client