Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YLplsAeYF9n0X8A1XwspWyL9Toc.roa
File: YLplsAeYF9n0X8A1XwspWyL9Toc.roa (raw, json)
Hash identifier: BSN5P6ciC+PAirpOmhP7PGesWT6mQJtuR8wAWpz2ZhE=
Subject key identifier: 60:BA:65:B0:07:98:17:D9:F4:5F:C0:35:5F:0B:29:5B:22:FD:4E:87
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0199D2BE69B52E8ABF8A6E5105680ECC0F6B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YLplsAeYF9n0X8A1XwspWyL9Toc.roa
Signing time: Sat 11 Oct 2025 10:08:38 +0000
ROA not before: Sat 11 Oct 2025 10:08:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 5.10.194.0/24 maxlen: 24
5.10.196.0/24 maxlen: 24
5.10.198.0/24 maxlen: 24
5.181.112.0/23 maxlen: 24
5.181.114.0/24 maxlen: 24
5.181.115.0/24 maxlen: 24
5.183.224.0/23 maxlen: 24
5.183.226.0/24 maxlen: 24
5.183.227.0/24 maxlen: 24
37.46.148.0/24 maxlen: 24
37.156.66.0/24 maxlen: 24
37.156.247.0/24 maxlen: 24
45.9.92.0/24 maxlen: 24
45.9.93.0/24 maxlen: 24
45.9.94.0/23 maxlen: 24
45.9.184.0/24 maxlen: 24
45.9.185.0/24 maxlen: 24
45.9.186.0/23 maxlen: 24
45.10.184.0/23 maxlen: 24
45.10.186.0/24 maxlen: 24
45.10.187.0/24 maxlen: 24
45.11.8.0/23 maxlen: 24
45.11.10.0/24 maxlen: 24
45.11.11.0/24 maxlen: 24
45.12.180.0/24 maxlen: 24
45.12.181.0/24 maxlen: 24
45.12.182.0/23 maxlen: 24
45.13.180.0/24 maxlen: 24
45.13.181.0/24 maxlen: 24
45.13.182.0/23 maxlen: 24
45.91.150.0/24 maxlen: 24
45.92.76.0/24 maxlen: 24
45.134.128.0/24 maxlen: 24
45.134.130.0/24 maxlen: 24
45.134.136.0/23 maxlen: 24
45.134.139.0/24 maxlen: 24
45.143.52.0/24 maxlen: 24
45.143.55.0/24 maxlen: 24
46.102.154.0/24 maxlen: 24
46.102.172.0/24 maxlen: 24
46.102.176.0/24 maxlen: 24
46.102.181.0/24 maxlen: 24
46.229.254.0/24 maxlen: 24
62.197.130.0/23 maxlen: 24
77.81.3.0/24 maxlen: 24
81.21.236.0/22 maxlen: 24
84.247.24.0/24 maxlen: 24
84.247.27.0/24 maxlen: 24
84.247.52.0/24 maxlen: 24
84.247.53.0/24 maxlen: 24
85.204.117.0/24 maxlen: 24
86.104.134.0/24 maxlen: 24
86.105.148.0/24 maxlen: 24
86.105.149.0/24 maxlen: 24
86.105.150.0/24 maxlen: 24
86.105.168.0/24 maxlen: 24
86.105.221.0/24 maxlen: 24
86.106.92.0/24 maxlen: 24
86.107.107.0/24 maxlen: 24
86.107.196.0/24 maxlen: 24
89.31.217.0/24 maxlen: 24
89.32.188.0/24 maxlen: 24
89.32.190.0/24 maxlen: 24
89.33.0.0/24 maxlen: 24
89.33.1.0/24 maxlen: 24
89.33.2.0/24 maxlen: 24
89.33.3.0/24 maxlen: 24
89.34.77.0/24 maxlen: 24
89.34.179.0/24 maxlen: 24
89.34.216.0/24 maxlen: 24
89.34.217.0/24 maxlen: 24
89.35.114.0/24 maxlen: 24
89.36.172.0/24 maxlen: 24
89.37.105.0/24 maxlen: 24
89.37.137.0/24 maxlen: 24
89.37.138.0/24 maxlen: 24
89.38.39.0/24 maxlen: 24
89.39.162.0/24 maxlen: 24
89.39.165.0/24 maxlen: 24
89.40.180.0/24 maxlen: 24
89.44.114.0/24 maxlen: 24
89.44.126.0/24 maxlen: 24
89.44.127.0/24 maxlen: 24
89.45.8.0/24 maxlen: 24
89.45.14.0/24 maxlen: 24
89.46.115.0/24 maxlen: 24
89.47.90.0/24 maxlen: 24
89.47.95.0/24 maxlen: 24
91.190.108.0/22 maxlen: 24
91.217.239.0/24 maxlen: 24
91.221.81.0/24 maxlen: 24
91.235.113.0/24 maxlen: 24
92.114.0.0/24 maxlen: 24
93.113.38.0/24 maxlen: 24
93.113.39.0/24 maxlen: 24
93.113.220.0/24 maxlen: 24
93.113.221.0/24 maxlen: 24
93.114.67.0/24 maxlen: 24
93.114.85.0/24 maxlen: 24
93.114.132.0/24 maxlen: 24
93.117.136.0/24 maxlen: 24
94.103.248.0/24 maxlen: 24
94.103.251.0/24 maxlen: 24
94.176.4.0/24 maxlen: 24
94.176.41.0/24 maxlen: 24
94.177.60.0/24 maxlen: 24
94.177.61.0/24 maxlen: 24
94.177.62.0/24 maxlen: 24
94.177.63.0/24 maxlen: 24
95.214.156.0/22 maxlen: 24
178.212.141.0/24 maxlen: 24
185.67.136.0/24 maxlen: 24
185.67.138.0/24 maxlen: 24
185.76.149.0/24 maxlen: 24
185.160.80.0/24 maxlen: 24
185.160.81.0/24 maxlen: 24
185.160.82.0/24 maxlen: 24
185.160.83.0/24 maxlen: 24
185.161.78.0/24 maxlen: 24
185.184.132.0/23 maxlen: 24
185.192.18.0/23 maxlen: 24
185.205.188.0/24 maxlen: 24
185.211.116.0/24 maxlen: 24
185.211.117.0/24 maxlen: 24
185.211.118.0/24 maxlen: 24
185.211.119.0/24 maxlen: 24
185.214.8.0/24 maxlen: 24
185.214.9.0/24 maxlen: 24
185.214.11.0/24 maxlen: 24
185.216.0.0/24 maxlen: 24
185.216.2.0/24 maxlen: 24
185.228.224.0/24 maxlen: 24
185.239.240.0/24 maxlen: 24
185.244.136.0/24 maxlen: 24
185.245.4.0/24 maxlen: 24
185.245.6.0/24 maxlen: 24
188.212.4.0/24 maxlen: 24
188.213.241.0/24 maxlen: 24
188.215.66.0/24 maxlen: 24
188.215.67.0/24 maxlen: 24
188.215.249.0/24 maxlen: 24
188.240.15.0/24 maxlen: 24
188.240.72.0/24 maxlen: 24
193.19.107.0/24 maxlen: 24
193.84.133.0/24 maxlen: 24
193.218.33.0/24 maxlen: 24
193.223.72.0/22 maxlen: 24
203.159.84.0/24 maxlen: 24
203.159.86.0/24 maxlen: 24
203.159.88.0/24 maxlen: 24
217.74.18.0/24 maxlen: 24
217.74.21.0/24 maxlen: 24
217.74.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d2:be:69:b5:2e:8a:bf:8a:6e:51:05:68:0e:cc:0f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 11 10:08:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60ba65b0079817d9f45fc0355f0b295b22fd4e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:d2:e8:be:b9:6e:f4:a2:92:c5:de:e1:ba:
2c:93:e7:1e:3a:33:ad:b4:a7:1f:61:ff:6f:15:d3:
d3:70:f2:bd:97:1b:ef:07:d2:d6:32:59:72:9d:f7:
ee:46:0f:a6:95:45:4d:79:a4:fc:ad:5b:e3:74:7c:
c2:7c:40:72:b1:52:0d:92:f8:3d:f8:64:9e:d6:21:
ed:16:57:f9:36:75:f1:3c:c1:03:9a:1c:f9:f9:a0:
65:fe:61:aa:ee:72:00:f3:cd:21:eb:65:7d:ed:83:
e0:59:d3:92:07:27:7d:d2:fb:53:43:8d:6d:f5:cc:
e8:8e:6b:bd:51:b3:67:86:ff:ac:4d:0f:b7:4c:73:
56:29:d9:9a:8a:a7:d9:98:27:cd:23:ca:4f:7d:9b:
cf:a5:5d:0a:ab:44:c5:ab:58:1d:5f:24:3d:06:42:
92:20:a8:0c:d9:aa:11:b4:0e:a0:6e:64:c8:63:b4:
8e:ec:76:cb:45:16:02:d0:e9:9d:11:11:3f:d6:81:
2d:35:a8:4f:4b:57:2d:f8:ba:af:3e:24:b2:2f:1a:
18:24:24:75:dc:ef:af:5d:e1:95:c6:c4:81:a4:e4:
1f:b0:32:80:b5:cd:7e:3e:20:47:8c:8c:f1:7c:64:
d3:ea:28:56:96:41:de:db:71:a9:d9:b4:c9:d9:5f:
86:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BA:65:B0:07:98:17:D9:F4:5F:C0:35:5F:0B:29:5B:22:FD:4E:87
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YLplsAeYF9n0X8A1XwspWyL9Toc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.194.0/24
5.10.196.0/24
5.10.198.0/24
5.181.112.0/22
5.183.224.0/22
37.46.148.0/24
37.156.66.0/24
37.156.247.0/24
45.9.92.0/22
45.9.184.0/22
45.10.184.0/22
45.11.8.0/22
45.12.180.0/22
45.13.180.0/22
45.91.150.0/24
45.92.76.0/24
45.134.128.0/24
45.134.130.0/24
45.134.136.0/23
45.134.139.0/24
45.143.52.0/24
45.143.55.0/24
46.102.154.0/24
46.102.172.0/24
46.102.176.0/24
46.102.181.0/24
46.229.254.0/24
62.197.130.0/23
77.81.3.0/24
81.21.236.0/22
84.247.24.0/24
84.247.27.0/24
84.247.52.0/23
85.204.117.0/24
86.104.134.0/24
86.105.148.0-86.105.150.255
86.105.168.0/24
86.105.221.0/24
86.106.92.0/24
86.107.107.0/24
86.107.196.0/24
89.31.217.0/24
89.32.188.0/24
89.32.190.0/24
89.33.0.0/22
89.34.77.0/24
89.34.179.0/24
89.34.216.0/23
89.35.114.0/24
89.36.172.0/24
89.37.105.0/24
89.37.137.0-89.37.138.255
89.38.39.0/24
89.39.162.0/24
89.39.165.0/24
89.40.180.0/24
89.44.114.0/24
89.44.126.0/23
89.45.8.0/24
89.45.14.0/24
89.46.115.0/24
89.47.90.0/24
89.47.95.0/24
91.190.108.0/22
91.217.239.0/24
91.221.81.0/24
91.235.113.0/24
92.114.0.0/24
93.113.38.0/23
93.113.220.0/23
93.114.67.0/24
93.114.85.0/24
93.114.132.0/24
93.117.136.0/24
94.103.248.0/24
94.103.251.0/24
94.176.4.0/24
94.176.41.0/24
94.177.60.0/22
95.214.156.0/22
178.212.141.0/24
185.67.136.0/24
185.67.138.0/24
185.76.149.0/24
185.160.80.0/22
185.161.78.0/24
185.184.132.0/23
185.192.18.0/23
185.205.188.0/24
185.211.116.0/22
185.214.8.0/23
185.214.11.0/24
185.216.0.0/24
185.216.2.0/24
185.228.224.0/24
185.239.240.0/24
185.244.136.0/24
185.245.4.0/24
185.245.6.0/24
188.212.4.0/24
188.213.241.0/24
188.215.66.0/23
188.215.249.0/24
188.240.15.0/24
188.240.72.0/24
193.19.107.0/24
193.84.133.0/24
193.218.33.0/24
193.223.72.0/22
203.159.84.0/24
203.159.86.0/24
203.159.88.0/24
217.74.18.0/24
217.74.21.0-217.74.23.255
Signature Algorithm: sha256WithRSAEncryption
7d:7d:66:72:4c:31:4d:d0:dd:9c:13:dd:6d:1d:8b:c8:c0:9b:
88:f8:a3:4b:a8:ee:a9:c9:18:47:40:bf:98:03:dc:ea:a3:c7:
0b:b8:01:30:56:70:89:28:bc:8f:f0:22:0e:c3:25:9e:91:dc:
dd:5c:02:65:bb:33:66:99:b5:08:0b:c5:2b:f2:07:d5:a0:b7:
fb:dd:85:8c:56:f6:b3:54:95:ab:e9:32:b8:44:41:eb:fa:a5:
48:9b:6b:4a:47:ce:5b:0e:f4:0a:87:82:d6:8e:04:49:59:94:
05:c9:16:c6:cd:93:85:34:9c:e0:d0:a6:2d:ad:85:f0:cb:75:
28:01:dd:db:1a:10:e2:ba:b5:33:c9:1e:cb:62:4c:13:cf:91:
9c:7d:16:0f:4a:cd:a8:91:ac:a7:29:c9:4d:0e:7c:80:45:d1:
63:13:ba:70:d5:a3:9f:6a:ac:c0:1f:21:de:38:fa:98:06:c1:
21:cc:ab:1f:da:de:83:72:a9:10:83:d1:46:c8:53:ab:6f:de:
ed:02:06:f6:b1:ac:db:cf:ea:4d:00:48:8e:e5:18:1c:43:14:
36:58:e4:55:7b:31:2a:94:07:86:dc:7b:dc:d8:4d:24:d9:74:
2c:3f:c5:de:1d:ab:13:7c:77:09:19:b3:d1:d7:7e:6a:7b:2a:
ab:6a:75:c1
-----BEGIN CERTIFICATE-----
MIIHxTCCBq2gAwIBAgISAZnSvmm1Loq/im5RBWgOzA9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjUxMDExMTAwODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGJhNjViMDA3OTgxN2Q5ZjQ1ZmMwMzU1ZjBiMjk1YjIyZmQ0ZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUTS6L65bvSiksXe4bosk+ceOjOt
tKcfYf9vFdPTcPK9lxvvB9LWMllynffuRg+mlUVNeaT8rVvjdHzCfEBysVINkvg9
+GSe1iHtFlf5NnXxPMEDmhz5+aBl/mGq7nIA880h62V97YPgWdOSByd90vtTQ41t
9czojmu9UbNnhv+sTQ+3THNWKdmaiqfZmCfNI8pPfZvPpV0Kq0TFq1gdXyQ9BkKS
IKgM2aoRtA6gbmTIY7SO7HbLRRYC0OmdERE/1oEtNahPS1ct+LqvPiSyLxoYJCR1
3O+vXeGVxsSBpOQfsDKAtc1+PiBHjIzxfGTT6ihWlkHe23Gp2bTJ2V+GjwIDAQAB
o4IE0TCCBM0wHQYDVR0OBBYEFGC6ZbAHmBfZ9F/ANV8LKVsi/U6HMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvWUxwbHNBZVlGOW4wWDhBMVh3c3BXeUw5VG9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIC5QYIKwYBBQUHAQcBAf8EggLUMIIC0DCCAswEAgABMIIC
xAMEAAUKwgMEAAUKxAMEAAUKxgMEAgW1cAMEAgW34AMEACUulAMEACWcQgMEACWc
9wMEAi0JXAMEAi0JuAMEAi0KuAMEAi0LCAMEAi0MtAMEAi0NtAMEAC1blgMEAC1c
TAMEAC2GgAMEAC2GggMEAS2GiAMEAC2GiwMEAC2PNAMEAC2PNwMEAC5mmgMEAC5m
rAMEAC5msAMEAC5mtQMEAC7l/gMEAT7FggMEAE1RAwMEAlEV7AMEAFT3GAMEAFT3
GwMEAVT3NAMEAFXMdQMEAFZohjAMAwQCVmmUAwQAVmmWAwQAVmmoAwQAVmndAwQA
VmpcAwQAVmtrAwQAVmvEAwQAWR/ZAwQAWSC8AwQAWSC+AwQCWSEAAwQAWSJNAwQA
WSKzAwQBWSLYAwQAWSNyAwQAWSSsAwQAWSVpMAwDBABZJYkDBABZJYoDBABZJicD
BABZJ6IDBABZJ6UDBABZKLQDBABZLHIDBAFZLH4DBABZLQgDBABZLQ4DBABZLnMD
BABZL1oDBABZL18DBAJbvmwDBABb2e8DBABb3VEDBABb63EDBABccgADBAFdcSYD
BAFdcdwDBABdckMDBABdclUDBABdcoQDBABddYgDBABeZ/gDBABeZ/sDBABesAQD
BABesCkDBAJesTwDBAJf1pwDBACy1I0DBAC5Q4gDBAC5Q4oDBAC5TJUDBAK5oFAD
BAC5oU4DBAG5uIQDBAG5wBIDBAC5zbwDBAK503QDBAG51ggDBAC51gsDBAC52AAD
BAC52AIDBAC55OADBAC57/ADBAC59IgDBAC59QQDBAC59QYDBAC81AQDBAC81fED
BAG810IDBAC81/kDBAC88A8DBAC88EgDBADBE2sDBADBVIUDBADB2iEDBALB30gD
BADLn1QDBADLn1YDBADLn1gDBADZShIwDAMEANlKFQMEA9lKEDANBgkqhkiG9w0B
AQsFAAOCAQEAfX1mckwxTdDdnBPdbR2LyMCbiPijS6juqckYR0C/mAPc6qPHC7gB
MFZwiSi8j/AiDsMlnpHc3VwCZbszZpm1CAvFK/IH1aC3+92FjFb2s1SVq+kyuERB
6/qlSJtrSkfOWw70CoeC1o4ESVmUBckWxs2ThTSc4NCmLa2F8Mt1KAHd2xoQ4rq1
M8key2JME8+RnH0WD0rNqJGspynJTQ58gEXRYxO6cNWjn2qswB8h3jj6mAbBIcyr
H9reg3KpEIPRRshTq2/e7QIG9rGs28/qTQBIjuUYHEMUNljkVXsxKpQHhtx73NhN
JNl0LD/F3h2rE3x3CRmz0dd+ansqq2p1wQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:59 2025 by rpki-client