
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/rU_QoTqJF9XgZ3vTYq0OTybZfSI.roa
File: rU_QoTqJF9XgZ3vTYq0OTybZfSI.roa (raw, json)
Hash identifier: kAqEU3AZtb+qAVPxKeiCoJPu2fI++dhercqPaQVS1jY=
Subject key identifier: AD:4F:D0:A1:3A:89:17:D5:E0:67:7B:D3:62:AD:0E:4F:26:D9:7D:22
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 0199C63AFB69F959FF01C534817F43F8FD2D
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/rU_QoTqJF9XgZ3vTYq0OTybZfSI.roa
Signing time: Wed 08 Oct 2025 23:49:38 +0000
ROA not before: Wed 08 Oct 2025 23:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 79.72.0.0/20 maxlen: 20
79.72.16.0/22 maxlen: 22
79.72.20.0/23 maxlen: 23
79.72.24.0/21 maxlen: 21
79.72.32.0/22 maxlen: 24
79.72.40.0/21 maxlen: 21
79.72.48.0/20 maxlen: 20
79.72.64.0/19 maxlen: 19
79.76.0.0/20 maxlen: 20
79.76.16.0/23 maxlen: 23
79.76.18.0/23 maxlen: 23
79.76.20.0/24 maxlen: 24
79.76.24.0/21 maxlen: 21
79.76.32.0/19 maxlen: 19
79.76.96.0/19 maxlen: 19
80.225.64.0/20 maxlen: 20
80.225.80.0/20 maxlen: 20
80.225.160.0/21 maxlen: 21
80.225.168.0/23 maxlen: 23
80.225.170.0/23 maxlen: 23
80.225.172.0/23 maxlen: 23
80.225.174.0/23 maxlen: 23
80.225.176.0/23 maxlen: 23
80.225.178.0/23 maxlen: 23
80.225.184.0/21 maxlen: 21
80.225.192.0/18 maxlen: 18
81.208.160.0/20 maxlen: 20
81.208.188.0/22 maxlen: 22
84.8.64.0/21 maxlen: 21
84.8.72.0/23 maxlen: 23
84.8.74.0/23 maxlen: 23
84.8.76.0/23 maxlen: 23
84.8.78.0/23 maxlen: 23
84.8.88.0/23 maxlen: 23
84.8.96.0/19 maxlen: 19
84.8.128.0/20 maxlen: 20
84.8.144.0/20 maxlen: 20
84.8.224.0/21 maxlen: 21
84.8.232.0/23 maxlen: 23
84.8.234.0/23 maxlen: 23
84.8.238.0/23 maxlen: 23
84.8.240.0/23 maxlen: 23
84.8.242.0/23 maxlen: 23
84.8.248.0/21 maxlen: 21
84.235.160.0/19 maxlen: 19
84.235.192.0/23 maxlen: 23
84.235.198.0/23 maxlen: 23
84.235.200.0/21 maxlen: 21
84.235.208.0/20 maxlen: 20
84.235.224.0/20 maxlen: 20
84.235.240.0/20 maxlen: 20
89.168.0.0/21 maxlen: 21
89.168.16.0/20 maxlen: 20
89.168.32.0/19 maxlen: 19
89.168.64.0/18 maxlen: 18
92.5.0.0/17 maxlen: 17
92.5.128.0/18 maxlen: 18
92.5.192.0/19 maxlen: 19
92.5.224.0/20 maxlen: 20
92.5.240.0/21 maxlen: 21
92.5.248.0/22 maxlen: 22
92.5.254.0/24 maxlen: 24
92.5.255.0/24 maxlen: 24
130.110.0.0/20 maxlen: 20
130.110.16.0/21 maxlen: 21
130.110.24.0/22 maxlen: 22
130.110.28.0/23 maxlen: 23
130.110.32.0/19 maxlen: 19
130.110.64.0/19 maxlen: 19
130.110.96.0/19 maxlen: 19
130.110.206.0/24 maxlen: 24
130.110.207.0/24 maxlen: 24
130.110.208.0/24 maxlen: 24
130.110.209.0/24 maxlen: 24
130.110.210.0/24 maxlen: 24
130.110.211.0/24 maxlen: 24
130.110.212.0/24 maxlen: 24
130.110.213.0/24 maxlen: 24
130.110.214.0/24 maxlen: 24
130.110.216.0/24 maxlen: 24
130.110.218.0/24 maxlen: 24
130.110.219.0/24 maxlen: 24
130.110.220.0/24 maxlen: 24
130.110.221.0/24 maxlen: 24
130.110.222.0/24 maxlen: 24
130.110.223.0/24 maxlen: 24
130.110.224.0/21 maxlen: 21
130.110.232.0/22 maxlen: 22
130.110.236.0/23 maxlen: 23
130.110.238.0/24 maxlen: 24
130.110.239.0/24 maxlen: 24
130.110.240.0/20 maxlen: 20
134.98.64.0/23 maxlen: 23
134.98.128.0/19 maxlen: 19
134.98.192.0/19 maxlen: 19
134.98.224.0/23 maxlen: 23
134.98.248.0/21 maxlen: 21
141.253.96.0/19 maxlen: 19
141.253.192.0/20 maxlen: 20
141.253.208.0/22 maxlen: 22
141.253.212.0/23 maxlen: 23
141.253.214.0/24 maxlen: 24
141.253.215.0/24 maxlen: 24
141.253.216.0/21 maxlen: 21
145.241.112.0/20 maxlen: 20
145.241.144.0/21 maxlen: 21
145.241.152.0/21 maxlen: 21
145.241.160.0/20 maxlen: 20
145.241.178.0/23 maxlen: 23
145.241.180.0/23 maxlen: 23
145.241.182.0/24 maxlen: 24
145.241.183.0/24 maxlen: 24
145.241.184.0/21 maxlen: 21
145.241.192.0/18 maxlen: 18
213.35.96.0/19 maxlen: 19
217.142.128.0/19 maxlen: 19
217.142.160.0/21 maxlen: 21
217.142.168.0/23 maxlen: 23
217.142.170.0/23 maxlen: 23
217.142.172.0/23 maxlen: 23
217.142.174.0/23 maxlen: 23
217.142.176.0/23 maxlen: 23
217.142.178.0/23 maxlen: 23
217.142.184.0/21 maxlen: 21
217.142.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:3a:fb:69:f9:59:ff:01:c5:34:81:7f:43:f8:fd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Oct 8 23:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad4fd0a13a8917d5e0677bd362ad0e4f26d97d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:5f:ab:4e:bc:c3:69:08:9a:fd:f2:27:fe:
ff:01:1a:69:9a:cb:03:e7:93:73:6f:80:8a:62:ad:
fd:65:0c:fa:7f:cb:f6:28:ba:24:98:85:ec:a3:46:
75:ba:ff:2a:d7:67:a1:e1:20:13:ea:71:94:ed:8f:
1c:aa:b7:81:ac:66:cc:1b:b4:d2:67:fb:56:33:d0:
03:05:29:2e:fc:16:f9:da:db:07:90:b7:40:d3:fb:
6c:b3:d1:cc:4b:13:be:15:2b:25:05:24:53:4c:a3:
0d:31:5e:ca:89:1c:d9:26:63:d0:c3:17:de:5f:c4:
9b:5d:69:ae:30:10:ea:88:9b:f6:b3:08:b2:f2:ae:
74:a8:1e:54:c6:48:3e:20:55:82:9f:5a:25:dc:13:
a3:4e:70:f0:15:ee:f7:41:c8:78:d7:89:6e:ab:e1:
ab:75:c0:f0:44:7a:78:0b:d7:c2:8b:52:31:ec:f8:
78:16:0b:b3:28:51:ed:a2:bf:76:52:f9:e8:ad:21:
b9:99:87:ad:25:06:6a:a1:da:84:0b:b4:bc:6c:c7:
c0:ab:87:0f:72:23:b6:c4:28:d7:26:25:d7:15:bc:
ef:3e:78:7f:d6:7f:d9:c8:03:23:75:5b:8c:7e:0f:
e9:e7:1e:10:9a:66:64:59:9b:77:62:7f:a9:ad:e0:
d0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4F:D0:A1:3A:89:17:D5:E0:67:7B:D3:62:AD:0E:4F:26:D9:7D:22
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/rU_QoTqJF9XgZ3vTYq0OTybZfSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.72.0.0-79.72.21.255
79.72.24.0-79.72.35.255
79.72.40.0-79.72.95.255
79.76.0.0-79.76.20.255
79.76.24.0-79.76.63.255
79.76.96.0/19
80.225.64.0/19
80.225.160.0-80.225.179.255
80.225.184.0-80.225.255.255
81.208.160.0/20
81.208.188.0/22
84.8.64.0/20
84.8.88.0/23
84.8.96.0-84.8.159.255
84.8.224.0-84.8.235.255
84.8.238.0-84.8.243.255
84.8.248.0/21
84.235.160.0-84.235.193.255
84.235.198.0-84.235.255.255
89.168.0.0/21
89.168.16.0-89.168.127.255
92.5.0.0-92.5.251.255
92.5.254.0/23
130.110.0.0-130.110.29.255
130.110.32.0-130.110.127.255
130.110.206.0-130.110.214.255
130.110.216.0/24
130.110.218.0-130.110.255.255
134.98.64.0/23
134.98.128.0/19
134.98.192.0-134.98.225.255
134.98.248.0/21
141.253.96.0/19
141.253.192.0/19
145.241.112.0/20
145.241.144.0-145.241.175.255
145.241.178.0-145.241.255.255
213.35.96.0/19
217.142.128.0-217.142.179.255
217.142.184.0/21
217.142.224.0/19
Signature Algorithm: sha256WithRSAEncryption
22:b6:7f:c7:c2:e9:f9:1a:56:96:9a:6a:1f:49:6b:5b:86:cd:
8f:41:f7:26:4d:5a:1a:89:5b:cd:4e:dd:80:01:f8:7f:35:82:
1b:9d:de:44:cf:cd:d9:dc:bc:4c:f7:46:3f:34:16:49:d5:0f:
22:e6:e6:6c:b5:d5:43:4f:ba:5b:23:c2:5c:15:77:89:8e:d2:
a9:d3:41:2b:26:28:de:b0:e5:f3:f0:be:b1:90:e7:af:6f:49:
77:bc:05:c5:d7:f7:be:66:3f:20:24:26:de:fb:d0:a7:e7:2c:
d7:74:d0:2e:42:58:13:de:b3:26:ea:50:59:49:72:87:51:c3:
03:31:1f:19:8c:af:cf:6a:ce:8f:a4:e2:fe:34:0d:c8:11:33:
e2:f2:b7:1c:21:92:4d:82:6a:a1:75:fa:49:e5:b8:3c:1e:c5:
4f:f1:bc:df:d4:2e:a8:c8:72:8a:6d:69:42:3c:6d:11:0e:33:
9b:53:28:d3:ce:9e:7e:6f:74:f3:63:f0:21:c5:cb:9d:a8:a8:
d8:f1:08:7a:88:b9:d5:73:9a:ce:01:fb:26:8a:4c:e3:d6:3f:
5b:f4:52:b1:36:b9:5f:97:15:28:50:83:e4:bd:7c:25:35:9a:
25:06:02:c9:dc:0c:0a:2a:d7:d7:19:67:68:00:94:a0:ed:d9:
56:e2:12:22
-----BEGIN CERTIFICATE-----
MIIGnzCCBYegAwIBAgISAZnGOvtp+Vn/AcU0gX9D+P0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2M4MzQ0N2QxNzE4MzM4MGY0ODliYzk0NmM4YjllMzAw
ZmZiMWQwHhcNMjUxMDA4MjM0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDRmZDBhMTNhODkxN2Q1ZTA2NzdiZDM2MmFkMGU0ZjI2ZDk3ZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaZfq068w2kImv3yJ/7/ARppmssD
55Nzb4CKYq39ZQz6f8v2KLokmIXso0Z1uv8q12eh4SAT6nGU7Y8cqreBrGbMG7TS
Z/tWM9ADBSku/Bb52tsHkLdA0/tss9HMSxO+FSslBSRTTKMNMV7KiRzZJmPQwxfe
X8SbXWmuMBDqiJv2swiy8q50qB5Uxkg+IFWCn1ol3BOjTnDwFe73Qch414luq+Gr
dcDwRHp4C9fCi1Ix7Ph4FguzKFHtor92UvnorSG5mYetJQZqodqEC7S8bMfAq4cP
ciO2xCjXJiXXFbzvPnh/1n/ZyAMjdVuMfg/p5x4QmmZkWZt3Yn+preDQSwIDAQAB
o4IDqzCCA6cwHQYDVR0OBBYEFK1P0KE6iRfV4Gd702KtDk8m2X0iMB8GA1UdIwQY
MBaAFCN8g0R9FxgzgPSJvJRsi54wD/sdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEt
OGIzMzcyMjM0ZGMwLzEvclVfUW9UcUpGOVhnWjN2VFlxME9UeWJaZlNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEtOGIzMzcyMjM0ZGMw
LzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBvwYIKwYBBQUHAQcBAf8EggGuMIIBqjCCAaYEAgABMIIB
njALAwMDT0gDBAFPSBQwDAMEA09IGAMEAk9IIDAMAwQDT0goAwQFT0hAMAsDAwJP
TAMEAE9MFDAMAwQDT0wYAwQGT0wAAwQFT0xgAwQFUOFAMAwDBAVQ4aADBAJQ4bAw
CwMEA1DhuAMDAVDgAwQEUdCgAwQCUdC8AwQEVAhAAwQBVAhYMAwDBAVUCGADBAVU
CIAwDAMEBVQI4AMEAlQI6DAMAwQBVAjuAwQCVAjwAwQDVAj4MAwDBAVU66ADBAFU
68AwCwMEAVTrxgMDAlToAwQDWagAMAwDBARZqBADBAdZqAAwCwMDAFwFAwQCXAX4
AwQBXAX+MAsDAwGCbgMEAYJuHDAMAwQFgm4gAwQHgm4AMAwDBAGCbs4DBACCbtYD
BACCbtgwCwMEAYJu2gMDAIJuAwQBhmJAAwQFhmKAMAwDBAaGYsADBAGGYuADBAOG
YvgDBAWN/WADBAWN/cADBASR8XAwDAMEBJHxkAMEBJHxoDALAwQBkfGyAwMBkfAD
BAXVI2AwDAMEB9mOgAMEAtmOsAMEA9mOuAMEBdmO4DANBgkqhkiG9w0BAQsFAAOC
AQEAIrZ/x8Lp+RpWlppqH0lrW4bNj0H3Jk1aGolbzU7dgAH4fzWCG53eRM/N2dy8
TPdGPzQWSdUPIubmbLXVQ0+6WyPCXBV3iY7SqdNBKyYo3rDl8/C+sZDnr29Jd7wF
xdf3vmY/ICQm3vvQp+cs13TQLkJYE96zJupQWUlyh1HDAzEfGYyvz2rOj6Ti/jQN
yBEz4vK3HCGSTYJqoXX6SeW4PB7FT/G839QuqMhyim1pQjxtEQ4zm1Mo086efm90
82PwIcXLnaio2PEIeoi51XOazgH7JopM49Y/W/RSsTa5X5cVKFCD5L18JTWaJQYC
ydwMCirX1xlnaACUoO3ZVuISIg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:03 2025 by rpki-client