Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/C2FtOetxCP-wETJ5panR-wXgQys.roa
File: C2FtOetxCP-wETJ5panR-wXgQys.roa (raw, json)
Hash identifier: FFn6uKUZnh2znsqBkcfR7bw8nRU3SWtJh3/1emRjmd8=
Subject key identifier: 0B:61:6D:39:EB:71:08:FF:B0:11:32:79:A5:A9:D1:FB:05:E0:43:2B
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 019CE2A41B4ABB90BADD9F890DC21DF92BB1
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/C2FtOetxCP-wETJ5panR-wXgQys.roa
Signing time: Thu 12 Mar 2026 15:22:11 +0000
ROA not before: Thu 12 Mar 2026 15:22:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58272
IP address blocks: 37.18.0.0/24 maxlen: 24
37.18.23.0/24 maxlen: 24
37.18.60.0/24 maxlen: 24
37.18.63.0/24 maxlen: 24
37.18.78.0/24 maxlen: 24
37.18.82.0/24 maxlen: 24
37.18.103.0/24 maxlen: 24
37.18.106.0/24 maxlen: 24
37.18.125.0/24 maxlen: 24
37.18.126.0/24 maxlen: 24
37.230.130.0/24 maxlen: 24
37.230.132.0/24 maxlen: 24
37.230.134.0/24 maxlen: 24
37.230.135.0/24 maxlen: 24
37.230.145.0/24 maxlen: 24
37.230.151.0/24 maxlen: 24
37.230.163.0/24 maxlen: 24
37.230.176.0/24 maxlen: 24
37.230.177.0/24 maxlen: 24
37.230.178.0/24 maxlen: 24
37.230.182.0/24 maxlen: 24
37.230.183.0/24 maxlen: 24
37.230.187.0/24 maxlen: 24
37.230.200.0/24 maxlen: 24
37.230.208.0/24 maxlen: 24
37.230.226.0/24 maxlen: 24
37.230.227.0/24 maxlen: 24
37.230.231.0/24 maxlen: 24
37.230.238.0/24 maxlen: 24
37.230.253.0/24 maxlen: 24
37.230.254.0/24 maxlen: 24
37.230.255.0/24 maxlen: 24
46.243.138.0/24 maxlen: 24
46.243.139.0/24 maxlen: 24
46.243.140.0/24 maxlen: 24
46.243.148.0/24 maxlen: 24
46.243.149.0/24 maxlen: 24
46.243.163.0/24 maxlen: 24
46.243.214.0/24 maxlen: 24
46.243.215.0/24 maxlen: 24
46.243.217.0/24 maxlen: 24
46.243.220.0/24 maxlen: 24
46.243.221.0/24 maxlen: 24
46.243.222.0/24 maxlen: 24
46.243.223.0/24 maxlen: 24
46.243.224.0/24 maxlen: 24
46.243.225.0/24 maxlen: 24
46.243.236.0/24 maxlen: 24
46.243.237.0/24 maxlen: 24
46.243.238.0/24 maxlen: 24
46.243.239.0/24 maxlen: 24
46.243.240.0/24 maxlen: 24
46.243.241.0/24 maxlen: 24
46.243.242.0/24 maxlen: 24
46.243.243.0/24 maxlen: 24
46.243.246.0/23 maxlen: 23
46.243.246.0/24 maxlen: 24
46.243.247.0/24 maxlen: 24
46.243.248.0/24 maxlen: 24
46.243.249.0/24 maxlen: 24
46.243.250.0/24 maxlen: 24
46.243.251.0/24 maxlen: 24
128.0.71.0/24 maxlen: 24
141.101.132.0/24 maxlen: 24
141.101.133.0/24 maxlen: 24
141.101.134.0/24 maxlen: 24
141.101.135.0/24 maxlen: 24
141.101.136.0/24 maxlen: 24
141.101.143.0/24 maxlen: 24
141.101.144.0/24 maxlen: 24
141.101.145.0/24 maxlen: 24
141.101.146.0/24 maxlen: 24
141.101.147.0/24 maxlen: 24
141.101.148.0/24 maxlen: 24
141.101.149.0/24 maxlen: 24
141.101.150.0/24 maxlen: 24
141.101.153.0/24 maxlen: 24
141.101.154.0/24 maxlen: 24
141.101.155.0/24 maxlen: 24
141.101.156.0/24 maxlen: 24
141.101.157.0/24 maxlen: 24
141.101.158.0/24 maxlen: 24
141.101.159.0/24 maxlen: 24
141.101.160.0/24 maxlen: 24
141.101.161.0/24 maxlen: 24
141.101.162.0/24 maxlen: 24
141.101.163.0/24 maxlen: 24
141.101.164.0/24 maxlen: 24
141.101.165.0/24 maxlen: 24
141.101.166.0/24 maxlen: 24
141.101.167.0/24 maxlen: 24
141.101.168.0/24 maxlen: 24
141.101.169.0/24 maxlen: 24
141.101.170.0/24 maxlen: 24
141.101.171.0/24 maxlen: 24
141.101.172.0/24 maxlen: 24
141.101.173.0/24 maxlen: 24
141.101.174.0/24 maxlen: 24
141.101.179.0/24 maxlen: 24
141.101.189.0/24 maxlen: 24
141.101.190.0/24 maxlen: 24
141.101.191.0/24 maxlen: 24
141.101.198.0/24 maxlen: 24
141.101.209.0/24 maxlen: 24
141.101.216.0/24 maxlen: 24
141.101.217.0/24 maxlen: 24
141.101.218.0/24 maxlen: 24
141.101.219.0/24 maxlen: 24
141.101.230.0/24 maxlen: 24
141.101.233.0/24 maxlen: 24
141.101.235.0/24 maxlen: 24
141.101.237.0/24 maxlen: 24
141.101.238.0/24 maxlen: 24
141.101.242.0/24 maxlen: 24
141.101.245.0/24 maxlen: 24
141.101.252.0/24 maxlen: 24
141.101.253.0/24 maxlen: 24
141.101.254.0/24 maxlen: 24
141.101.255.0/24 maxlen: 24
178.170.136.0/24 maxlen: 24
178.170.137.0/24 maxlen: 24
178.170.138.0/24 maxlen: 24
178.170.139.0/24 maxlen: 24
178.170.140.0/24 maxlen: 24
178.170.141.0/24 maxlen: 24
178.170.142.0/24 maxlen: 24
178.170.144.0/24 maxlen: 24
178.170.145.0/24 maxlen: 24
178.170.146.0/24 maxlen: 24
178.170.172.0/24 maxlen: 24
178.170.187.0/24 maxlen: 24
178.170.188.0/24 maxlen: 24
178.170.189.0/24 maxlen: 24
178.170.243.0/24 maxlen: 24
178.170.244.0/24 maxlen: 24
185.4.148.0/24 maxlen: 24
185.4.149.0/24 maxlen: 24
185.4.150.0/24 maxlen: 24
185.4.151.0/24 maxlen: 24
188.72.80.0/24 maxlen: 24
188.72.81.0/24 maxlen: 24
188.72.82.0/24 maxlen: 24
188.72.83.0/24 maxlen: 24
188.72.84.0/24 maxlen: 24
188.72.85.0/24 maxlen: 24
188.72.86.0/24 maxlen: 24
188.72.87.0/24 maxlen: 24
188.72.89.0/24 maxlen: 24
188.72.95.0/24 maxlen: 24
188.72.97.0/24 maxlen: 24
188.72.98.0/24 maxlen: 24
188.72.101.0/24 maxlen: 24
188.72.102.0/24 maxlen: 24
188.72.114.0/24 maxlen: 24
188.72.115.0/24 maxlen: 24
188.72.116.0/24 maxlen: 24
188.72.119.0/24 maxlen: 24
188.72.124.0/24 maxlen: 24
188.72.125.0/24 maxlen: 24
217.150.88.0/24 maxlen: 24
217.150.89.0/24 maxlen: 24
217.150.90.0/24 maxlen: 24
217.150.91.0/24 maxlen: 24
217.150.92.0/24 maxlen: 24
217.150.93.0/24 maxlen: 24
217.150.94.0/24 maxlen: 24
217.150.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:a4:1b:4a:bb:90:ba:dd:9f:89:0d:c2:1d:f9:2b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Mar 12 15:22:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b616d39eb7108ffb0113279a5a9d1fb05e0432b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:0a:6d:a1:bc:e6:a4:ef:46:cd:03:ce:32:
aa:4c:ce:13:45:d3:d6:99:29:74:a7:35:82:fc:eb:
20:a3:ef:7a:20:6a:d7:6c:1f:49:e0:d1:f2:f9:b8:
fc:47:c1:0a:d7:c1:a2:e5:26:0d:fc:4d:33:77:3b:
f2:62:73:06:c1:35:17:0a:73:25:04:eb:07:43:b6:
cd:0b:07:b1:d2:e2:99:5b:5b:4c:f9:b8:57:9a:18:
bb:12:ab:8c:33:3f:4c:02:91:a8:28:c5:8c:66:79:
de:f9:e1:60:38:ab:79:58:b5:95:c5:66:bc:2a:ba:
85:b1:b0:0b:ac:50:b0:17:6f:62:3c:ad:5c:c4:15:
3b:8e:44:d7:32:49:89:e5:d6:b5:c2:fc:59:fa:4d:
b0:c4:a0:b5:ac:f9:23:75:ff:9d:b2:30:49:58:9d:
5d:6b:ed:f7:c1:62:a0:e8:ed:06:81:13:f4:c6:a1:
0e:85:df:7f:49:83:cf:43:09:61:5b:74:19:f7:28:
e6:a2:40:3c:56:29:f3:75:72:52:61:b6:66:fc:88:
e1:44:27:e4:61:c3:07:64:46:cf:7b:c4:95:45:e1:
cb:f5:bb:98:87:53:5c:6a:5e:7e:3d:4e:59:58:7c:
01:e9:79:d7:d1:9b:63:73:b2:29:98:25:8c:75:f3:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:61:6D:39:EB:71:08:FF:B0:11:32:79:A5:A9:D1:FB:05:E0:43:2B
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/C2FtOetxCP-wETJ5panR-wXgQys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.0.0/24
37.18.23.0/24
37.18.60.0/24
37.18.63.0/24
37.18.78.0/24
37.18.82.0/24
37.18.103.0/24
37.18.106.0/24
37.18.125.0-37.18.126.255
37.230.130.0/24
37.230.132.0/24
37.230.134.0/23
37.230.145.0/24
37.230.151.0/24
37.230.163.0/24
37.230.176.0-37.230.178.255
37.230.182.0/23
37.230.187.0/24
37.230.200.0/24
37.230.208.0/24
37.230.226.0/23
37.230.231.0/24
37.230.238.0/24
37.230.253.0-37.230.255.255
46.243.138.0-46.243.140.255
46.243.148.0/23
46.243.163.0/24
46.243.214.0/23
46.243.217.0/24
46.243.220.0-46.243.225.255
46.243.236.0-46.243.243.255
46.243.246.0-46.243.251.255
128.0.71.0/24
141.101.132.0-141.101.136.255
141.101.143.0-141.101.150.255
141.101.153.0-141.101.174.255
141.101.179.0/24
141.101.189.0-141.101.191.255
141.101.198.0/24
141.101.209.0/24
141.101.216.0/22
141.101.230.0/24
141.101.233.0/24
141.101.235.0/24
141.101.237.0-141.101.238.255
141.101.242.0/24
141.101.245.0/24
141.101.252.0/22
178.170.136.0-178.170.142.255
178.170.144.0-178.170.146.255
178.170.172.0/24
178.170.187.0-178.170.189.255
178.170.243.0-178.170.244.255
185.4.148.0/22
188.72.80.0/21
188.72.89.0/24
188.72.95.0/24
188.72.97.0-188.72.98.255
188.72.101.0-188.72.102.255
188.72.114.0-188.72.116.255
188.72.119.0/24
188.72.124.0/23
217.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
90:3b:6a:21:fc:b1:cb:dc:51:65:86:a4:da:48:28:0a:1d:45:
24:41:94:e2:f3:6b:2d:c5:9e:50:b5:9d:2f:50:93:52:d6:27:
14:5c:b6:a8:3b:e6:98:87:ce:d6:42:8a:93:73:fa:ab:85:20:
06:78:20:3a:e2:f2:27:14:e5:0c:73:34:ee:8e:56:87:9b:8c:
bb:4b:65:98:b1:5f:af:70:6b:ad:00:5e:54:fd:e6:b0:de:7b:
c2:1d:d5:1d:b2:5f:01:4c:95:f5:ab:be:0a:38:94:3d:35:dc:
d3:2e:3f:f2:48:59:c8:56:df:82:d1:02:c0:77:32:54:e3:0c:
64:a8:2b:10:b4:d2:47:18:73:08:c7:86:aa:7c:0b:85:80:e5:
4e:da:b7:92:ea:41:31:52:0d:b4:47:48:a7:0b:13:95:68:3b:
55:58:9f:a4:b1:25:fb:37:9e:30:3d:e4:1a:1a:23:f4:68:ac:
e5:97:2b:32:f8:21:40:74:92:e1:73:d8:2b:ae:e7:3b:7d:17:
a4:b1:40:d9:45:c8:b4:c3:e7:b8:fa:00:67:61:50:1b:bf:4c:
55:ed:c0:97:da:9c:3d:a4:52:40:4c:e3:10:01:66:46:18:9a:
c0:66:a9:92:6e:b1:02:64:7c:d9:e8:e7:c6:07:89:7e:3f:e2:
b9:39:8e:e7
-----BEGIN CERTIFICATE-----
MIIHEjCCBfqgAwIBAgISAZzipBtKu5C63Z+JDcId+SuxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjYwMzEyMTUyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjYxNmQzOWViNzEwOGZmYjAxMTMyNzlhNWE5ZDFmYjA1ZTA0MzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjAKbaG85qTvRs0DzjKqTM4TRdPW
mSl0pzWC/Osgo+96IGrXbB9J4NHy+bj8R8EK18Gi5SYN/E0zdzvyYnMGwTUXCnMl
BOsHQ7bNCwex0uKZW1tM+bhXmhi7EquMMz9MApGoKMWMZnne+eFgOKt5WLWVxWa8
KrqFsbALrFCwF29iPK1cxBU7jkTXMkmJ5da1wvxZ+k2wxKC1rPkjdf+dsjBJWJ1d
a+33wWKg6O0GgRP0xqEOhd9/SYPPQwlhW3QZ9yjmokA8VinzdXJSYbZm/IjhRCfk
YcMHZEbPe8SVReHL9buYh1Ncal5+PU5ZWHwB6XnX0Ztjc7IpmCWMdfNPrQIDAQAB
o4IEHjCCBBowHQYDVR0OBBYEFAthbTnrcQj/sBEyeaWp0fsF4EMrMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvQzJGdE9ldHhDUC13RVRKNXBhblItd1hnUXlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICMgYIKwYBBQUHAQcBAf8EggIhMIICHTCCAhkEAgABMIIC
EQMEACUSAAMEACUSFwMEACUSPAMEACUSPwMEACUSTgMEACUSUgMEACUSZwMEACUS
ajAMAwQAJRJ9AwQAJRJ+AwQAJeaCAwQAJeaEAwQBJeaGAwQAJeaRAwQAJeaXAwQA
JeajMAwDBAQl5rADBAAl5rIDBAEl5rYDBAAl5rsDBAAl5sgDBAAl5tADBAEl5uID
BAAl5ucDBAAl5u4wCwMEACXm/QMDACXmMAwDBAEu84oDBAAu84wDBAEu85QDBAAu
86MDBAEu89YDBAAu89kwDAMEAi7z3AMEAS7z4DAMAwQCLvPsAwQCLvPwMAwDBAEu
8/YDBAIu8/gDBACAAEcwDAMEAo1lhAMEAI1liDAMAwQAjWWPAwQAjWWWMAwDBACN
ZZkDBACNZa4DBACNZbMwDAMEAI1lvQMEBo1lgAMEAI1lxgMEAI1l0QMEAo1l2AME
AI1l5gMEAI1l6QMEAI1l6zAMAwQAjWXtAwQAjWXuAwQAjWXyAwQAjWX1AwQCjWX8
MAwDBAOyqogDBACyqo4wDAMEBLKqkAMEALKqkgMEALKqrDAMAwQAsqq7AwQBsqq8
MAwDBACyqvMDBACyqvQDBAK5BJQDBAO8SFADBAC8SFkDBAC8SF8wDAMEALxIYQME
ALxIYjAMAwQAvEhlAwQAvEhmMAwDBAG8SHIDBAC8SHQDBAC8SHcDBAG8SHwDBAPZ
llgwDQYJKoZIhvcNAQELBQADggEBAJA7aiH8scvcUWWGpNpIKAodRSRBlOLzay3F
nlC1nS9Qk1LWJxRctqg75piHztZCipNz+quFIAZ4IDri8icU5QxzNO6OVoebjLtL
ZZixX69wa60AXlT95rDee8Id1R2yXwFMlfWrvgo4lD013NMuP/JIWchW34LRAsB3
MlTjDGSoKxC00kcYcwjHhqp8C4WA5U7at5LqQTFSDbRHSKcLE5VoO1VYn6SxJfs3
njA95BoaI/RorOWXKzL4IUB0kuFz2Cuu5zt9F6SxQNlFyLTD57j6AGdhUBu/TFXt
wJfanD2kUkBM4xABZkYYmsBmqZJusQJkfNno58YHiX4/4rk5juc=
-----END CERTIFICATE-----
Generated at Mon Mar 30 08:52:31 2026 by rpki-client