Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/DjXoCaobtcffNMD9OzGH6IFSLLo.roa
File: DjXoCaobtcffNMD9OzGH6IFSLLo.roa (raw, json)
Hash identifier: WrZXnB+nUBqth3CtzYGmbFTxT4B0+NVW12W64XpI3Qo=
Subject key identifier: 0E:35:E8:09:AA:1B:B5:C7:DF:34:C0:FD:3B:31:87:E8:81:52:2C:BA
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 019E0095919F4D92E0AD0294AD3DFE1F802B
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/DjXoCaobtcffNMD9OzGH6IFSLLo.roa
Signing time: Thu 07 May 2026 03:57:42 +0000
ROA not before: Thu 07 May 2026 03:57:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 51.170.0.0/24 maxlen: 24
51.170.1.0/24 maxlen: 24
51.170.14.0/24 maxlen: 24
51.170.32.0/19 maxlen: 24
79.72.0.0/20 maxlen: 20
79.72.16.0/22 maxlen: 22
79.72.20.0/23 maxlen: 23
79.72.24.0/21 maxlen: 21
79.72.32.0/22 maxlen: 24
79.72.40.0/21 maxlen: 21
79.72.48.0/20 maxlen: 20
79.72.64.0/19 maxlen: 19
79.76.0.0/20 maxlen: 20
79.76.16.0/23 maxlen: 23
79.76.18.0/23 maxlen: 23
79.76.20.0/24 maxlen: 24
79.76.24.0/21 maxlen: 21
79.76.32.0/19 maxlen: 19
79.76.96.0/19 maxlen: 19
80.225.64.0/20 maxlen: 20
80.225.80.0/20 maxlen: 20
80.225.160.0/21 maxlen: 21
80.225.168.0/23 maxlen: 23
80.225.170.0/23 maxlen: 23
80.225.172.0/23 maxlen: 23
80.225.174.0/23 maxlen: 23
80.225.176.0/23 maxlen: 23
80.225.178.0/23 maxlen: 23
80.225.184.0/21 maxlen: 21
80.225.192.0/18 maxlen: 18
81.208.160.0/20 maxlen: 20
81.208.188.0/22 maxlen: 22
82.70.32.0/19 maxlen: 24
82.70.64.0/19 maxlen: 24
82.70.224.0/20 maxlen: 20
82.70.248.0/22 maxlen: 22
84.8.64.0/21 maxlen: 21
84.8.72.0/23 maxlen: 23
84.8.74.0/23 maxlen: 23
84.8.76.0/23 maxlen: 23
84.8.78.0/23 maxlen: 23
84.8.80.0/23 maxlen: 23
84.8.88.0/23 maxlen: 23
84.8.96.0/19 maxlen: 19
84.8.128.0/20 maxlen: 20
84.8.144.0/20 maxlen: 20
84.8.192.0/21 maxlen: 24
84.8.200.0/23 maxlen: 24
84.8.202.0/23 maxlen: 24
84.8.206.0/23 maxlen: 24
84.8.208.0/23 maxlen: 24
84.8.210.0/23 maxlen: 24
84.8.216.0/21 maxlen: 24
84.8.224.0/21 maxlen: 21
84.8.232.0/23 maxlen: 23
84.8.234.0/23 maxlen: 23
84.8.238.0/23 maxlen: 23
84.8.240.0/23 maxlen: 23
84.8.242.0/23 maxlen: 23
84.8.248.0/21 maxlen: 21
84.235.160.0/19 maxlen: 19
84.235.192.0/23 maxlen: 23
84.235.198.0/23 maxlen: 23
84.235.200.0/21 maxlen: 21
84.235.208.0/20 maxlen: 20
84.235.224.0/20 maxlen: 20
84.235.240.0/20 maxlen: 20
89.168.0.0/21 maxlen: 21
89.168.16.0/20 maxlen: 20
89.168.32.0/19 maxlen: 19
89.168.64.0/18 maxlen: 18
92.4.64.0/19 maxlen: 19
92.4.128.0/19 maxlen: 19
92.4.160.0/20 maxlen: 20
92.4.176.0/20 maxlen: 20
92.4.192.0/21 maxlen: 21
92.4.200.0/24 maxlen: 24
92.4.202.0/23 maxlen: 24
92.4.204.0/24 maxlen: 24
92.4.206.0/24 maxlen: 24
92.4.208.0/20 maxlen: 24
92.4.228.0/22 maxlen: 24
92.4.232.0/23 maxlen: 23
92.4.235.0/24 maxlen: 24
92.4.236.0/24 maxlen: 24
92.4.237.0/24 maxlen: 24
92.4.238.0/24 maxlen: 24
92.4.239.0/24 maxlen: 24
92.4.240.0/20 maxlen: 20
92.5.0.0/17 maxlen: 17
92.5.128.0/18 maxlen: 18
92.5.192.0/19 maxlen: 19
92.5.224.0/20 maxlen: 20
92.5.240.0/21 maxlen: 21
92.5.248.0/22 maxlen: 22
92.5.254.0/24 maxlen: 24
92.5.255.0/24 maxlen: 24
130.110.0.0/20 maxlen: 20
130.110.16.0/21 maxlen: 21
130.110.24.0/22 maxlen: 22
130.110.28.0/23 maxlen: 23
130.110.32.0/19 maxlen: 19
130.110.64.0/19 maxlen: 19
130.110.96.0/19 maxlen: 19
130.110.192.0/24 maxlen: 24
130.110.206.0/24 maxlen: 24
130.110.207.0/24 maxlen: 24
130.110.208.0/24 maxlen: 24
130.110.209.0/24 maxlen: 24
130.110.210.0/24 maxlen: 24
130.110.211.0/24 maxlen: 24
130.110.212.0/24 maxlen: 24
130.110.213.0/24 maxlen: 24
130.110.214.0/24 maxlen: 24
130.110.215.0/24 maxlen: 24
130.110.216.0/24 maxlen: 24
130.110.218.0/24 maxlen: 24
130.110.219.0/24 maxlen: 24
130.110.220.0/24 maxlen: 24
130.110.221.0/24 maxlen: 24
130.110.222.0/24 maxlen: 24
130.110.223.0/24 maxlen: 24
130.110.224.0/21 maxlen: 21
130.110.232.0/22 maxlen: 22
130.110.236.0/23 maxlen: 23
130.110.238.0/24 maxlen: 24
130.110.239.0/24 maxlen: 24
130.110.240.0/20 maxlen: 20
134.98.64.0/23 maxlen: 23
134.98.128.0/19 maxlen: 24
134.98.192.0/19 maxlen: 19
134.98.224.0/23 maxlen: 23
134.98.248.0/21 maxlen: 21
140.84.160.0/19 maxlen: 24
140.86.0.0/20 maxlen: 24
140.86.32.0/20 maxlen: 24
140.86.48.0/21 maxlen: 24
140.86.62.0/23 maxlen: 24
140.86.64.0/20 maxlen: 24
140.86.96.0/23 maxlen: 24
140.86.156.0/23 maxlen: 24
140.86.192.0/20 maxlen: 24
140.86.208.0/21 maxlen: 24
140.86.216.0/22 maxlen: 24
140.86.220.0/22 maxlen: 24
140.86.230.0/24 maxlen: 24
140.86.231.0/24 maxlen: 24
140.86.232.0/24 maxlen: 24
140.86.236.0/24 maxlen: 24
140.86.237.0/24 maxlen: 24
140.86.238.0/24 maxlen: 24
141.253.96.0/19 maxlen: 19
141.253.192.0/20 maxlen: 20
141.253.208.0/22 maxlen: 22
141.253.212.0/23 maxlen: 23
141.253.214.0/24 maxlen: 24
141.253.215.0/24 maxlen: 24
141.253.216.0/21 maxlen: 21
145.241.96.0/21 maxlen: 21
145.241.104.0/21 maxlen: 24
145.241.112.0/20 maxlen: 20
145.241.144.0/21 maxlen: 21
145.241.152.0/21 maxlen: 21
145.241.160.0/20 maxlen: 20
145.241.176.0/24 maxlen: 24
145.241.177.0/24 maxlen: 24
145.241.178.0/23 maxlen: 23
145.241.180.0/23 maxlen: 23
145.241.182.0/24 maxlen: 24
145.241.183.0/24 maxlen: 24
145.241.184.0/21 maxlen: 21
145.241.192.0/18 maxlen: 18
213.35.96.0/19 maxlen: 19
217.142.128.0/19 maxlen: 19
217.142.160.0/21 maxlen: 21
217.142.168.0/23 maxlen: 23
217.142.170.0/23 maxlen: 23
217.142.172.0/23 maxlen: 23
217.142.174.0/23 maxlen: 23
217.142.176.0/23 maxlen: 23
217.142.178.0/23 maxlen: 23
217.142.184.0/21 maxlen: 21
217.142.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:00:95:91:9f:4d:92:e0:ad:02:94:ad:3d:fe:1f:80:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: May 7 03:57:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e35e809aa1bb5c7df34c0fd3b3187e881522cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:0c:6b:92:30:b3:eb:94:0e:64:83:b5:6e:
59:f2:80:f7:9e:97:ea:a2:ce:96:55:04:23:99:ea:
ed:87:d3:99:36:8a:12:36:41:64:a1:eb:ed:0b:3f:
3b:e6:80:b6:9f:5a:47:fc:f5:ae:68:da:bd:b5:c4:
0e:6a:da:20:e8:f7:3f:2f:ca:02:d8:ef:0e:c4:f2:
af:f2:22:c5:78:e1:0f:fd:b4:b9:ac:68:dc:65:00:
cb:6a:02:eb:7c:0e:59:ea:c2:6c:fa:1e:6d:82:23:
61:b1:a8:97:9e:2e:bd:b5:18:4e:13:fb:be:07:7d:
0e:32:f8:6d:b2:6f:52:a5:38:d4:3a:67:80:17:54:
a6:0d:ea:b6:89:a8:53:84:4f:56:f5:77:c8:c8:27:
3c:20:d2:56:0b:e3:cc:73:d5:94:d5:3d:3d:63:71:
d9:dd:5c:ab:f7:79:cb:a1:a3:fb:fa:0c:ab:3e:70:
12:3e:5a:d7:8e:c7:4c:0a:6e:db:4e:cd:27:a1:7f:
12:9e:d8:4b:94:d3:d8:0b:ed:87:5d:b2:70:a7:bc:
26:1b:cb:0f:d2:42:0a:dd:2f:53:99:09:7c:42:78:
50:43:70:34:6c:37:80:61:2b:fa:46:16:19:69:a7:
64:81:95:82:8a:83:8c:0d:ab:62:24:a2:74:bc:ac:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:35:E8:09:AA:1B:B5:C7:DF:34:C0:FD:3B:31:87:E8:81:52:2C:BA
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/DjXoCaobtcffNMD9OzGH6IFSLLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.170.0.0/23
51.170.14.0/24
51.170.32.0/19
79.72.0.0-79.72.21.255
79.72.24.0-79.72.35.255
79.72.40.0-79.72.95.255
79.76.0.0-79.76.20.255
79.76.24.0-79.76.63.255
79.76.96.0/19
80.225.64.0/19
80.225.160.0-80.225.179.255
80.225.184.0-80.225.255.255
81.208.160.0/20
81.208.188.0/22
82.70.32.0-82.70.95.255
82.70.224.0/20
82.70.248.0/22
84.8.64.0-84.8.81.255
84.8.88.0/23
84.8.96.0-84.8.159.255
84.8.192.0-84.8.203.255
84.8.206.0-84.8.211.255
84.8.216.0-84.8.235.255
84.8.238.0-84.8.243.255
84.8.248.0/21
84.235.160.0-84.235.193.255
84.235.198.0-84.235.255.255
89.168.0.0/21
89.168.16.0-89.168.127.255
92.4.64.0/19
92.4.128.0-92.4.200.255
92.4.202.0-92.4.204.255
92.4.206.0/24
92.4.208.0/20
92.4.228.0-92.4.233.255
92.4.235.0-92.5.251.255
92.5.254.0/23
130.110.0.0-130.110.29.255
130.110.32.0-130.110.127.255
130.110.192.0/24
130.110.206.0-130.110.216.255
130.110.218.0-130.110.255.255
134.98.64.0/23
134.98.128.0/19
134.98.192.0-134.98.225.255
134.98.248.0/21
140.84.160.0/19
140.86.0.0/20
140.86.32.0-140.86.55.255
140.86.62.0-140.86.79.255
140.86.96.0/23
140.86.156.0/23
140.86.192.0/19
140.86.230.0-140.86.232.255
140.86.236.0-140.86.238.255
141.253.96.0/19
141.253.192.0/19
145.241.96.0/19
145.241.144.0-145.241.255.255
213.35.96.0/19
217.142.128.0-217.142.179.255
217.142.184.0/21
217.142.224.0/19
Signature Algorithm: sha256WithRSAEncryption
45:89:15:26:4d:66:9e:d9:cd:e4:8e:e5:65:0e:97:8a:01:31:
f0:8e:09:b4:1b:66:26:50:ec:03:a1:e5:3e:28:00:04:72:0f:
28:1a:9e:69:65:c7:1f:83:0c:ed:92:b9:10:56:ad:62:98:e4:
64:f5:3c:e0:30:e6:10:d8:04:74:fb:61:e5:1b:1c:18:a0:c0:
85:a9:37:9c:85:42:bd:f4:73:24:31:cf:52:f8:a8:7f:26:38:
45:b4:69:89:70:5c:c0:d0:40:be:50:9a:c5:dc:3e:fc:20:41:
b1:96:e6:06:f6:87:3b:fb:58:70:ea:94:38:ba:9b:7f:8a:43:
4e:03:98:dd:33:67:44:e6:34:b0:09:3d:99:98:80:b5:38:6a:
6c:12:b1:99:55:0d:fc:a5:ad:5d:0d:14:51:f7:5e:f4:c0:b5:
88:c4:61:63:e9:40:3f:a6:94:06:2e:b3:8d:c0:c3:37:d0:0b:
33:f2:1e:ba:33:c9:88:20:8f:98:0f:e4:7d:05:0e:a2:17:ff:
dd:91:70:74:a9:22:7b:e1:23:71:dd:ef:36:c0:fe:2a:76:f1:
89:40:80:31:ab:99:43:61:8d:4b:1e:5d:6d:55:71:83:dc:22:
57:e4:bc:13:10:10:52:98:bc:7f:ae:64:36:51:42:fb:69:12:
ac:96:92:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:42 2026 by rpki-client