Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/SzF5verHf3hk2p85GCVI0yu0wqQ.roa
File: SzF5verHf3hk2p85GCVI0yu0wqQ.roa (raw, json)
Hash identifier: UQ2kFsVEkqOZdT/DYOyKyl0eSCV0D3RbZXSh3pbXXtQ=
Subject key identifier: 4B:31:79:BD:EA:C7:7F:78:64:DA:9F:39:18:25:48:D3:2B:B4:C2:A4
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 019DD93E152211DCD8F8F761BDE9A19BE740
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/SzF5verHf3hk2p85GCVI0yu0wqQ.roa
Signing time: Wed 29 Apr 2026 12:36:57 +0000
ROA not before: Wed 29 Apr 2026 12:36:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15557
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
62.8.0.0/19 maxlen: 19
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.128.0.0/13 maxlen: 24
77.136.0.0/16 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.140.0.0/15 maxlen: 24
77.142.0.0/16 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.174.192.0/18 maxlen: 24
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.118.4.0/24 maxlen: 24
80.124.0.0/15 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.65.0.0/16 maxlen: 16
81.185.0.0/16 maxlen: 24
81.220.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
84.205.144.0/20 maxlen: 20
85.68.0.0/15 maxlen: 24
85.168.0.0/14 maxlen: 24
86.64.0.0/12 maxlen: 24
86.66.127.0/24 maxlen: 24
87.231.0.0/16 maxlen: 24
88.136.0.0/13 maxlen: 24
88.136.0.0/14 maxlen: 24
88.140.0.0/15 maxlen: 24
88.142.0.0/16 maxlen: 24
88.143.251.0/24 maxlen: 24
88.143.252.0/24 maxlen: 24
88.143.253.0/24 maxlen: 24
88.143.254.0/24 maxlen: 24
88.143.255.0/24 maxlen: 24
88.219.0.0/16 maxlen: 16
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
91.68.0.0/14 maxlen: 24
91.68.0.0/22 maxlen: 22
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
93.191.80.0/21 maxlen: 21
95.157.192.0/18 maxlen: 18
109.0.0.0/11 maxlen: 24
141.170.216.0/21 maxlen: 24
185.147.204.0/22 maxlen: 24
194.6.128.0/19 maxlen: 19
194.183.192.0/19 maxlen: 19
194.242.176.0/20 maxlen: 20
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:6200::/29 maxlen: 48
2a00:8d80::/32 maxlen: 32
2a00:9380::/32 maxlen: 32
2a00:b280::/32 maxlen: 32
2a00:cc80::/32 maxlen: 32
2a00:d780::/32 maxlen: 32
2a00:ec80::/32 maxlen: 32
2a02:8400::/25 maxlen: 48
2a02:8400::/48 maxlen: 48
2a02:8400:11::/48 maxlen: 48
2a02:8400:12::/48 maxlen: 48
2a02:8400:13::/48 maxlen: 48
2a02:8400:14::/48 maxlen: 48
2a02:8440:5000::/36 maxlen: 36
2a04:800::/29 maxlen: 29
2a04:800::/30 maxlen: 30
2a04:807::/48 maxlen: 48
2a04:807:1::/48 maxlen: 48
2a04:807:2::/48 maxlen: 48
2a04:807:3::/48 maxlen: 48
2a04:807:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:3e:15:22:11:dc:d8:f8:f7:61:bd:e9:a1:9b:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Apr 29 12:36:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b3179bdeac77f7864da9f39182548d32bb4c2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:f8:8c:f7:b2:b1:fa:24:71:85:78:5c:36:
46:09:fe:64:8b:98:b5:35:47:63:ea:95:22:96:7a:
7e:a2:b6:f3:49:db:d9:de:9b:c2:3a:00:4d:98:93:
88:a6:3c:a1:e2:1b:b9:da:ef:74:50:1c:5e:35:5e:
e9:c8:a7:3a:2c:cd:04:02:e6:2d:de:4e:b5:82:bb:
e5:e3:a2:d5:dd:07:c5:44:04:8b:d1:78:77:8d:77:
48:eb:9a:b0:48:a2:1d:12:a8:02:27:30:6c:c6:8c:
17:88:84:6f:8a:1f:f5:e0:8a:98:6b:ea:40:b7:df:
5f:b9:6f:55:29:3f:ee:39:2b:d3:98:88:a7:5f:2a:
12:87:9e:e8:27:07:ad:3b:d3:8b:e8:dc:3e:fc:56:
ed:9a:f9:75:b2:fb:ed:bb:3d:a2:75:7e:25:9d:bd:
70:fa:f5:f4:e9:88:d9:1b:30:d7:ae:d7:57:a5:75:
f2:2d:15:c1:81:45:77:08:a2:8b:1e:e9:d1:15:6a:
d3:0f:ec:81:f6:02:f8:0e:85:99:05:d9:ae:bb:54:
c6:92:72:dc:e2:5e:7a:d7:9f:e2:20:82:f3:7d:c9:
cb:52:b4:b4:85:7b:93:30:58:4c:92:b8:7b:57:b4:
60:c5:c1:2a:f4:20:4e:35:87:fa:92:3e:47:32:02:
84:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:31:79:BD:EA:C7:7F:78:64:DA:9F:39:18:25:48:D3:2B:B4:C2:A4
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/SzF5verHf3hk2p85GCVI0yu0wqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.128.0.0-77.136.255.255
77.137.196.0-77.137.223.255
77.140.0.0-77.142.255.255
77.144.0.0/12
77.192.0.0/12
78.112.0.0/12
78.155.128.0/19
79.80.0.0/12
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.168.0.0/14
86.64.0.0/12
87.231.0.0/16
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
91.68.0.0/14
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.191.80.0/21
95.157.192.0/18
109.0.0.0/11
141.170.216.0/21
185.147.204.0/22
194.6.128.0/19
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.203.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:6200::/29
2a00:8d80::/32
2a00:9380::/32
2a00:b280::/32
2a00:cc80::/32
2a00:d780::/32
2a00:ec80::/32
2a02:8400::/25
2a04:800::/29
Signature Algorithm: sha256WithRSAEncryption
a5:2e:8f:42:86:a6:08:10:06:e0:21:95:89:94:44:11:9c:82:
26:c3:04:9b:be:fa:15:be:98:5f:91:49:e9:ed:86:e8:9a:a4:
a9:d7:45:7d:47:cf:a7:6b:6e:a9:74:73:d4:db:96:98:5f:ec:
5f:da:55:8e:2d:20:f5:49:2e:42:15:d0:8a:08:f7:51:a0:88:
3c:10:67:9d:87:a4:85:07:d5:c1:85:13:d0:c4:c0:6f:9a:9b:
1d:30:8d:23:49:0b:ec:3a:34:69:f4:e5:3f:25:75:e7:3a:34:
ad:e9:17:11:0d:72:62:f9:48:03:56:9c:73:64:b6:71:f3:cb:
87:d1:ee:32:c2:ea:6d:50:2b:3f:45:e2:08:12:3d:94:7c:5c:
62:f0:65:81:d3:31:58:3a:c0:32:d7:e4:60:72:27:82:be:fe:
51:cc:6d:f3:0f:7a:d8:d8:64:eb:44:e3:35:2f:64:cc:5a:5e:
5a:48:f3:8b:a9:2c:02:cd:12:b5:98:c5:0d:af:5d:35:e0:f8:
4e:6e:91:a2:00:b1:af:d3:da:06:95:9c:f1:8f:15:bb:58:a5:
9c:a2:48:51:81:80:0b:a9:71:f1:86:2b:65:88:7e:d5:b4:30:
27:f5:3a:1c:47:b4:05:f3:06:79:bc:8f:eb:8c:38:78:72:ce:
75:32:94:54
-----BEGIN CERTIFICATE-----
MIIG4TCCBcmgAwIBAgISAZ3ZPhUiEdzY+Pdhvemhm+dAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjYwNDI5MTIzNjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjMxNzliZGVhYzc3Zjc4NjRkYTlmMzkxODI1NDhkMzJiYjRjMmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkr4jPeysfokcYV4XDZGCf5ki5i1
NUdj6pUilnp+orbzSdvZ3pvCOgBNmJOIpjyh4hu52u90UBxeNV7pyKc6LM0EAuYt
3k61grvl46LV3QfFRASL0Xh3jXdI65qwSKIdEqgCJzBsxowXiIRvih/14IqYa+pA
t99fuW9VKT/uOSvTmIinXyoSh57oJwetO9OL6Nw+/Fbtmvl1svvtuz2idX4lnb1w
+vX06YjZGzDXrtdXpXXyLRXBgUV3CKKLHunRFWrTD+yB9gL4DoWZBdmuu1TGknLc
4l5615/iIILzfcnLUrS0hXuTMFhMkrh7V7RgxcEq9CBONYf6kj5HMgKEJwIDAQAB
o4ID7TCCA+kwHQYDVR0OBBYEFEsxeb3qx394ZNqfORglSNMrtMKkMB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvU3pGNXZlckhmM2hrMnA4NUdDVkkweXUwd3FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICAQYIKwYBBQUHAQcBAf8EggHwMIIB7DCCAaEEAgABMIIB
mQMDAyVAAwQFLiMAAwQFPggAAwMAPicDBAc+PoADBAc+aoADBAU+gaADBAY+8UAw
CgMDB02AAwMATYgwDAMEAk2JxAMEBU2JwDAKAwMCTYwDAwBNjgMDBE2QAwMETcAD
AwROcAMEBU6bgAMDBE9QAwQGT67AAwQEUEYgAwMBUHYDAwFQfAMEB1DsAAMEBlEB
AAMDAlFAAwMAUbkDAwBR3AMDAFLYAwQHU42AAwMCVAQDBAZUN4ADAwNUYAMEBVTN
gAMDAVVEAwMCVagDAwRWQAMDAFfnAwMDWIgDAwBY2wMDAVkCAwMCWZwDAwJbRAME
BFuXcAMDA1xYAwMFXQADBANdv1ADBAZfncADAwVtAAMEA42q2AMEArmTzAMEBcIG
gAMEBcK3wAMEBMLysAMEBsMDAAMEBcMHYAMEBcNiYAMDAMNzAwMAw4QDBAXDksAD
BAXUHmADBAXUJ4ADBAXUXqADAwDUxgMEBdWAIAMEBdWQwAMEBdWpoAMEBtXLQAMD
ANXfAwMA1fUDBATZE8ADBATZRlADBATZcOAwRQQCAAIwPwMFAyoAYgADBQAqAI2A
AwUAKgCTgAMFACoAsoADBQAqAMyAAwUAKgDXgAMFACoA7IADBQcqAoQAAwUDKgQI
ADANBgkqhkiG9w0BAQsFAAOCAQEApS6PQoamCBAG4CGViZREEZyCJsMEm776Fb6Y
X5FJ6e2G6JqkqddFfUfPp2tuqXRz1NuWmF/sX9pVji0g9UkuQhXQigj3UaCIPBBn
nYekhQfVwYUT0MTAb5qbHTCNI0kL7Do0afTlPyV15zo0rekXEQ1yYvlIA1acc2S2
cfPLh9HuMsLqbVArP0XiCBI9lHxcYvBlgdMxWDrAMtfkYHIngr7+Ucxt8w962Nhk
60TjNS9kzFpeWkjzi6ksAs0StZjFDa9dNeD4Tm6RogCxr9PaBpWc8Y8Vu1ilnKJI
UYGAC6lx8YYrZYh+1bQwJ/U6HEe0BfMGebyP64w4eHLOdTKUVA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:08:32 2026 by rpki-client