Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/VqflXfUXT1r0F0vbFqX9njzAbjI.roa
File: VqflXfUXT1r0F0vbFqX9njzAbjI.roa (raw, json)
Hash identifier: orkUX8LGXJNzs24vjBzkiZQ785fRhIrV2ujjICNJPbM=
Subject key identifier: 56:A7:E5:5D:F5:17:4F:5A:F4:17:4B:DB:16:A5:FD:9E:3C:C0:6E:32
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 019D1C3C2C7D11CCC3435F278FE61F0631C3
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/VqflXfUXT1r0F0vbFqX9njzAbjI.roa
Signing time: Mon 23 Mar 2026 19:46:38 +0000
ROA not before: Mon 23 Mar 2026 19:46:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 51.170.0.0/24 maxlen: 24
51.170.1.0/24 maxlen: 24
51.170.32.0/19 maxlen: 24
79.72.0.0/20 maxlen: 20
79.72.16.0/22 maxlen: 22
79.72.20.0/23 maxlen: 23
79.72.24.0/21 maxlen: 21
79.72.32.0/22 maxlen: 24
79.72.40.0/21 maxlen: 21
79.72.48.0/20 maxlen: 20
79.72.64.0/19 maxlen: 19
79.76.0.0/20 maxlen: 20
79.76.16.0/23 maxlen: 23
79.76.18.0/23 maxlen: 23
79.76.20.0/24 maxlen: 24
79.76.24.0/21 maxlen: 21
79.76.32.0/19 maxlen: 19
79.76.96.0/19 maxlen: 19
80.225.64.0/20 maxlen: 20
80.225.80.0/20 maxlen: 20
80.225.160.0/21 maxlen: 21
80.225.168.0/23 maxlen: 23
80.225.170.0/23 maxlen: 23
80.225.172.0/23 maxlen: 23
80.225.174.0/23 maxlen: 23
80.225.176.0/23 maxlen: 23
80.225.178.0/23 maxlen: 23
80.225.184.0/21 maxlen: 21
80.225.192.0/18 maxlen: 18
81.208.160.0/20 maxlen: 20
81.208.188.0/22 maxlen: 22
82.70.32.0/19 maxlen: 24
82.70.64.0/19 maxlen: 24
82.70.224.0/20 maxlen: 20
82.70.248.0/22 maxlen: 22
84.8.64.0/21 maxlen: 21
84.8.72.0/23 maxlen: 23
84.8.74.0/23 maxlen: 23
84.8.76.0/23 maxlen: 23
84.8.78.0/23 maxlen: 23
84.8.80.0/23 maxlen: 23
84.8.88.0/23 maxlen: 23
84.8.96.0/19 maxlen: 19
84.8.128.0/20 maxlen: 20
84.8.144.0/20 maxlen: 20
84.8.192.0/21 maxlen: 24
84.8.200.0/23 maxlen: 24
84.8.202.0/23 maxlen: 24
84.8.206.0/23 maxlen: 24
84.8.208.0/23 maxlen: 24
84.8.210.0/23 maxlen: 24
84.8.216.0/21 maxlen: 24
84.8.224.0/21 maxlen: 21
84.8.232.0/23 maxlen: 23
84.8.234.0/23 maxlen: 23
84.8.238.0/23 maxlen: 23
84.8.240.0/23 maxlen: 23
84.8.242.0/23 maxlen: 23
84.8.248.0/21 maxlen: 21
84.235.160.0/19 maxlen: 19
84.235.192.0/23 maxlen: 23
84.235.198.0/23 maxlen: 23
84.235.200.0/21 maxlen: 21
84.235.208.0/20 maxlen: 20
84.235.224.0/20 maxlen: 20
84.235.240.0/20 maxlen: 20
89.168.0.0/21 maxlen: 21
89.168.16.0/20 maxlen: 20
89.168.32.0/19 maxlen: 19
89.168.64.0/18 maxlen: 18
92.4.64.0/19 maxlen: 19
92.4.128.0/19 maxlen: 19
92.4.160.0/20 maxlen: 20
92.4.176.0/20 maxlen: 20
92.4.192.0/21 maxlen: 21
92.4.200.0/24 maxlen: 24
92.4.202.0/23 maxlen: 24
92.4.204.0/24 maxlen: 24
92.4.206.0/24 maxlen: 24
92.4.208.0/20 maxlen: 24
92.4.228.0/22 maxlen: 24
92.4.232.0/23 maxlen: 23
92.4.235.0/24 maxlen: 24
92.4.236.0/24 maxlen: 24
92.4.237.0/24 maxlen: 24
92.4.238.0/24 maxlen: 24
92.4.239.0/24 maxlen: 24
92.4.240.0/20 maxlen: 20
92.5.0.0/17 maxlen: 17
92.5.128.0/18 maxlen: 18
92.5.192.0/19 maxlen: 19
92.5.224.0/20 maxlen: 20
92.5.240.0/21 maxlen: 21
92.5.248.0/22 maxlen: 22
92.5.254.0/24 maxlen: 24
92.5.255.0/24 maxlen: 24
130.110.0.0/20 maxlen: 20
130.110.16.0/21 maxlen: 21
130.110.24.0/22 maxlen: 22
130.110.28.0/23 maxlen: 23
130.110.32.0/19 maxlen: 19
130.110.64.0/19 maxlen: 19
130.110.96.0/19 maxlen: 19
130.110.192.0/24 maxlen: 24
130.110.206.0/24 maxlen: 24
130.110.207.0/24 maxlen: 24
130.110.208.0/24 maxlen: 24
130.110.209.0/24 maxlen: 24
130.110.210.0/24 maxlen: 24
130.110.211.0/24 maxlen: 24
130.110.212.0/24 maxlen: 24
130.110.213.0/24 maxlen: 24
130.110.214.0/24 maxlen: 24
130.110.215.0/24 maxlen: 24
130.110.216.0/24 maxlen: 24
130.110.218.0/24 maxlen: 24
130.110.219.0/24 maxlen: 24
130.110.220.0/24 maxlen: 24
130.110.221.0/24 maxlen: 24
130.110.222.0/24 maxlen: 24
130.110.223.0/24 maxlen: 24
130.110.224.0/21 maxlen: 21
130.110.232.0/22 maxlen: 22
130.110.236.0/23 maxlen: 23
130.110.238.0/24 maxlen: 24
130.110.239.0/24 maxlen: 24
130.110.240.0/20 maxlen: 20
134.98.64.0/23 maxlen: 23
134.98.128.0/19 maxlen: 24
134.98.192.0/19 maxlen: 19
134.98.224.0/23 maxlen: 23
134.98.248.0/21 maxlen: 21
140.84.160.0/19 maxlen: 24
140.86.0.0/20 maxlen: 24
140.86.32.0/20 maxlen: 24
140.86.48.0/21 maxlen: 24
140.86.62.0/23 maxlen: 24
140.86.64.0/20 maxlen: 24
140.86.96.0/23 maxlen: 24
140.86.156.0/23 maxlen: 24
140.86.192.0/20 maxlen: 24
140.86.208.0/21 maxlen: 24
140.86.216.0/22 maxlen: 24
140.86.220.0/22 maxlen: 24
140.86.230.0/24 maxlen: 24
140.86.231.0/24 maxlen: 24
140.86.232.0/24 maxlen: 24
140.86.236.0/24 maxlen: 24
140.86.237.0/24 maxlen: 24
140.86.238.0/24 maxlen: 24
141.253.96.0/19 maxlen: 19
141.253.192.0/20 maxlen: 20
141.253.208.0/22 maxlen: 22
141.253.212.0/23 maxlen: 23
141.253.214.0/24 maxlen: 24
141.253.215.0/24 maxlen: 24
141.253.216.0/21 maxlen: 21
145.241.96.0/21 maxlen: 21
145.241.104.0/21 maxlen: 24
145.241.112.0/20 maxlen: 20
145.241.144.0/21 maxlen: 21
145.241.152.0/21 maxlen: 21
145.241.160.0/20 maxlen: 20
145.241.176.0/24 maxlen: 24
145.241.177.0/24 maxlen: 24
145.241.178.0/23 maxlen: 23
145.241.180.0/23 maxlen: 23
145.241.182.0/24 maxlen: 24
145.241.183.0/24 maxlen: 24
145.241.184.0/21 maxlen: 21
145.241.192.0/18 maxlen: 18
213.35.96.0/19 maxlen: 19
217.142.128.0/19 maxlen: 19
217.142.160.0/21 maxlen: 21
217.142.168.0/23 maxlen: 23
217.142.170.0/23 maxlen: 23
217.142.172.0/23 maxlen: 23
217.142.174.0/23 maxlen: 23
217.142.176.0/23 maxlen: 23
217.142.178.0/23 maxlen: 23
217.142.184.0/21 maxlen: 21
217.142.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:3c:2c:7d:11:cc:c3:43:5f:27:8f:e6:1f:06:31:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Mar 23 19:46:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56a7e55df5174f5af4174bdb16a5fd9e3cc06e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:aa:4c:ad:20:64:38:82:4f:e1:74:85:88:f8:
c1:08:a3:3f:2f:6d:52:c1:da:43:39:87:13:67:aa:
ae:4c:ff:6f:24:bf:95:c4:db:0d:26:a3:39:b6:ab:
23:34:94:fe:df:e1:a5:bb:be:2f:48:8b:81:23:56:
60:88:c7:7c:8c:f7:23:21:61:f0:3f:d2:cf:97:ad:
2d:2c:2a:b5:2c:5c:9b:b7:b1:94:f9:33:db:b0:d0:
7c:76:47:74:75:a9:43:b6:48:53:14:f4:8e:8b:31:
46:9e:76:7f:d5:43:5e:10:2a:8f:b5:12:38:6c:e9:
31:20:e5:59:22:f7:13:06:29:aa:99:a5:96:b3:25:
11:74:72:1a:a9:69:98:25:dc:81:d3:39:ff:7d:5f:
01:75:00:de:19:17:f3:70:30:11:93:55:a1:3f:26:
19:ed:82:82:23:a1:ba:42:fb:99:be:88:c8:61:9f:
23:60:4e:c3:8e:e2:c5:4a:b6:18:d6:17:31:53:8f:
fa:b2:49:0a:82:97:b8:2e:7b:54:4f:55:a9:fd:d6:
a3:23:ca:b4:19:40:d2:85:a4:2e:66:32:dd:0b:99:
8a:74:0a:3c:48:cd:12:91:08:ab:7a:95:a0:bc:98:
c6:60:bf:d3:99:e7:6b:93:8c:8e:7e:35:93:ba:c7:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A7:E5:5D:F5:17:4F:5A:F4:17:4B:DB:16:A5:FD:9E:3C:C0:6E:32
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/VqflXfUXT1r0F0vbFqX9njzAbjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.170.0.0/23
51.170.32.0/19
79.72.0.0-79.72.21.255
79.72.24.0-79.72.35.255
79.72.40.0-79.72.95.255
79.76.0.0-79.76.20.255
79.76.24.0-79.76.63.255
79.76.96.0/19
80.225.64.0/19
80.225.160.0-80.225.179.255
80.225.184.0-80.225.255.255
81.208.160.0/20
81.208.188.0/22
82.70.32.0-82.70.95.255
82.70.224.0/20
82.70.248.0/22
84.8.64.0-84.8.81.255
84.8.88.0/23
84.8.96.0-84.8.159.255
84.8.192.0-84.8.203.255
84.8.206.0-84.8.211.255
84.8.216.0-84.8.235.255
84.8.238.0-84.8.243.255
84.8.248.0/21
84.235.160.0-84.235.193.255
84.235.198.0-84.235.255.255
89.168.0.0/21
89.168.16.0-89.168.127.255
92.4.64.0/19
92.4.128.0-92.4.200.255
92.4.202.0-92.4.204.255
92.4.206.0/24
92.4.208.0/20
92.4.228.0-92.4.233.255
92.4.235.0-92.5.251.255
92.5.254.0/23
130.110.0.0-130.110.29.255
130.110.32.0-130.110.127.255
130.110.192.0/24
130.110.206.0-130.110.216.255
130.110.218.0-130.110.255.255
134.98.64.0/23
134.98.128.0/19
134.98.192.0-134.98.225.255
134.98.248.0/21
140.84.160.0/19
140.86.0.0/20
140.86.32.0-140.86.55.255
140.86.62.0-140.86.79.255
140.86.96.0/23
140.86.156.0/23
140.86.192.0/19
140.86.230.0-140.86.232.255
140.86.236.0-140.86.238.255
141.253.96.0/19
141.253.192.0/19
145.241.96.0/19
145.241.144.0-145.241.255.255
213.35.96.0/19
217.142.128.0-217.142.179.255
217.142.184.0/21
217.142.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:89:07:c5:1f:0e:ca:c2:ea:b4:3e:ab:66:f2:e0:6a:5c:3e:
41:e8:2d:5f:2f:c2:1e:f9:a6:28:03:e2:37:39:df:ca:c6:01:
64:ff:61:b9:f6:ee:16:14:bb:3e:c1:e8:a9:a7:c8:62:68:1c:
44:45:70:f3:e4:35:b0:8c:6f:b7:94:10:ac:21:42:55:80:2c:
3d:f8:24:4a:01:1a:20:93:18:1b:db:c3:8f:22:14:85:87:6a:
d9:6e:4e:91:7a:4b:3f:1d:cc:8b:39:ce:a3:a1:d0:04:51:d9:
a6:5b:7d:e5:01:97:ff:70:83:57:18:51:8d:7e:6b:7c:97:94:
89:64:a3:b5:b6:c9:cb:b8:b0:46:54:88:5b:ca:1c:7d:29:c3:
19:ff:fd:a8:26:af:ae:74:18:32:8a:53:7c:5b:9d:53:c7:f9:
76:83:10:5c:9f:81:7e:20:73:e0:1e:53:29:2d:83:7e:0a:fd:
bd:90:30:8e:3d:c9:80:1b:49:69:ef:44:7b:04:46:c1:31:fd:
38:82:6e:34:0e:84:f3:81:99:d0:59:bd:0c:d3:7e:da:e3:f5:
e1:49:67:72:b9:6a:9e:e0:53:87:22:9d:b5:2a:ed:43:d7:42:
f7:41:9c:2f:6f:8d:3d:0f:6c:6a:7a:81:1b:a1:0f:53:06:bf:
49:8a:de:fb
-----BEGIN CERTIFICATE-----
MIIHbjCCBlagAwIBAgISAZ0cPCx9EczDQ18nj+YfBjHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2M4MzQ0N2QxNzE4MzM4MGY0ODliYzk0NmM4YjllMzAw
ZmZiMWQwHhcNMjYwMzIzMTk0NjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmE3ZTU1ZGY1MTc0ZjVhZjQxNzRiZGIxNmE1ZmQ5ZTNjYzA2ZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86pMrSBkOIJP4XSFiPjBCKM/L21S
wdpDOYcTZ6quTP9vJL+VxNsNJqM5tqsjNJT+3+Glu74vSIuBI1ZgiMd8jPcjIWHw
P9LPl60tLCq1LFybt7GU+TPbsNB8dkd0dalDtkhTFPSOizFGnnZ/1UNeECqPtRI4
bOkxIOVZIvcTBimqmaWWsyURdHIaqWmYJdyB0zn/fV8BdQDeGRfzcDARk1WhPyYZ
7YKCI6G6QvuZvojIYZ8jYE7DjuLFSrYY1hcxU4/6skkKgpe4LntUT1Wp/dajI8q0
GUDShaQuZjLdC5mKdAo8SM0SkQirepWgvJjGYL/Tmedrk4yOfjWTusdD+QIDAQAB
o4IEejCCBHYwHQYDVR0OBBYEFFan5V31F09a9BdL2xal/Z48wG4yMB8GA1UdIwQY
MBaAFCN8g0R9FxgzgPSJvJRsi54wD/sdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEt
OGIzMzcyMjM0ZGMwLzEvVnFmbFhmVVhUMXIwRjB2YkZxWDluanpBYmpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEtOGIzMzcyMjM0ZGMw
LzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICjgYIKwYBBQUHAQcBAf8EggJ9MIICeTCCAnUEAgABMIIC
bQMEATOqAAMEBTOqIDALAwMDT0gDBAFPSBQwDAMEA09IGAMEAk9IIDAMAwQDT0go
AwQFT0hAMAsDAwJPTAMEAE9MFDAMAwQDT0wYAwQGT0wAAwQFT0xgAwQFUOFAMAwD
BAVQ4aADBAJQ4bAwCwMEA1DhuAMDAVDgAwQEUdCgAwQCUdC8MAwDBAVSRiADBAVS
RkADBARSRuADBAJSRvgwDAMEBlQIQAMEAVQIUAMEAVQIWDAMAwQFVAhgAwQFVAiA
MAwDBAZUCMADBAJUCMgwDAMEAVQIzgMEAlQI0DAMAwQDVAjYAwQCVAjoMAwDBAFU
CO4DBAJUCPADBANUCPgwDAMEBVTroAMEAVTrwDALAwQBVOvGAwMCVOgDBANZqAAw
DAMEBFmoEAMEB1moAAMEBVwEQDAMAwQHXASAAwQAXATIMAwDBAFcBMoDBABcBMwD
BABcBM4DBARcBNAwDAMEAlwE5AMEAVwE6DAMAwQAXATrAwQCXAX4AwQBXAX+MAsD
AwGCbgMEAYJuHDAMAwQFgm4gAwQHgm4AAwQAgm7AMAwDBAGCbs4DBACCbtgwCwME
AYJu2gMDAIJuAwQBhmJAAwQFhmKAMAwDBAaGYsADBAGGYuADBAOGYvgDBAWMVKAD
BASMVgAwDAMEBYxWIAMEA4xWMDAMAwQBjFY+AwQEjFZAAwQBjFZgAwQBjFacAwQF
jFbAMAwDBAGMVuYDBACMVugwDAMEAoxW7AMEAIxW7gMEBY39YAMEBY39wAMEBZHx
YDALAwQEkfGQAwMBkfADBAXVI2AwDAMEB9mOgAMEAtmOsAMEA9mOuAMEBdmO4DAN
BgkqhkiG9w0BAQsFAAOCAQEAO4kHxR8OysLqtD6rZvLgalw+QegtXy/CHvmmKAPi
NznfysYBZP9hufbuFhS7PsHoqafIYmgcREVw8+Q1sIxvt5QQrCFCVYAsPfgkSgEa
IJMYG9vDjyIUhYdq2W5OkXpLPx3MiznOo6HQBFHZplt95QGX/3CDVxhRjX5rfJeU
iWSjtbbJy7iwRlSIW8ocfSnDGf/9qCavrnQYMopTfFudU8f5doMQXJ+BfiBz4B5T
KS2Dfgr9vZAwjj3JgBtJae9EewRGwTH9OIJuNA6E84GZ0Fm9DNN+2uP14Ulncrlq
nuBThyKdtSrtQ9dC90GcL2+NPQ9sanqBG6EPUwa/SYre+w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:49 2026 by rpki-client