Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/iBIIUgHlGeyeX-QZJkrXDeDFy6o.roa
File: iBIIUgHlGeyeX-QZJkrXDeDFy6o.roa (raw, json)
Hash identifier: 1/3FPiscuu54vWsVMKUT4/tauB+Elmmv3LH9ZCI9w8g=
Subject key identifier: 88:12:08:52:01:E5:19:EC:9E:5F:E4:19:26:4A:D7:0D:E0:C5:CB:AA
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019CF6E06FDCAF2D796A10FD5D5042BE202D
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/iBIIUgHlGeyeX-QZJkrXDeDFy6o.roa
Signing time: Mon 16 Mar 2026 13:40:29 +0000
ROA not before: Mon 16 Mar 2026 13:40:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 5.226.136.0/21 maxlen: 21
31.14.102.0/24 maxlen: 24
31.14.254.0/24 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
46.102.155.0/24 maxlen: 24
46.231.160.0/21 maxlen: 24
46.247.142.0/23 maxlen: 24
46.247.143.0/24 maxlen: 24
64.239.236.0/22 maxlen: 22
69.5.168.0/21 maxlen: 24
77.81.102.0/24 maxlen: 24
77.81.124.0/22 maxlen: 22
77.81.191.0/24 maxlen: 24
79.139.84.0/22 maxlen: 22
80.240.108.0/23 maxlen: 23
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.211.0/24 maxlen: 24
81.19.215.0/24 maxlen: 24
81.19.216.0/24 maxlen: 24
82.97.192.0/23 maxlen: 23
84.247.0.0/24 maxlen: 24
84.247.40.0/23 maxlen: 24
84.247.42.0/23 maxlen: 24
85.204.70.0/24 maxlen: 24
86.54.136.0/22 maxlen: 22
86.104.20.0/22 maxlen: 22
86.104.20.0/23 maxlen: 24
86.104.22.0/23 maxlen: 24
86.104.248.0/22 maxlen: 22
86.104.248.0/24 maxlen: 24
86.104.249.0/24 maxlen: 24
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
89.21.67.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
89.34.96.0/22 maxlen: 24
89.34.97.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
89.37.64.0/22 maxlen: 22
89.37.172.0/22 maxlen: 22
89.37.173.0/24 maxlen: 24
89.38.68.0/23 maxlen: 24
89.38.68.0/24 maxlen: 24
89.38.69.0/24 maxlen: 24
89.40.212.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
89.46.223.0/24 maxlen: 24
89.46.248.0/22 maxlen: 22
93.113.175.0/24 maxlen: 24
93.114.83.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
93.118.40.0/22 maxlen: 22
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
134.255.243.0/24 maxlen: 24
176.223.172.0/22 maxlen: 22
176.223.172.0/23 maxlen: 24
176.223.174.0/23 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
178.239.170.0/24 maxlen: 24
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 24
185.16.204.0/22 maxlen: 22
185.28.252.0/22 maxlen: 24
185.38.148.0/22 maxlen: 22
185.44.76.0/22 maxlen: 22
185.61.156.0/22 maxlen: 22
185.61.156.0/24 maxlen: 24
185.61.157.0/24 maxlen: 24
185.114.224.0/24 maxlen: 24
185.121.136.0/22 maxlen: 22
185.125.204.0/22 maxlen: 22
185.134.20.0/22 maxlen: 22
185.137.36.0/22 maxlen: 24
185.158.240.0/22 maxlen: 24
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
185.200.204.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
185.242.80.0/22 maxlen: 22
188.212.154.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.60.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/23 maxlen: 23
188.241.157.0/24 maxlen: 24
188.241.246.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
193.32.208.0/24 maxlen: 24
193.124.20.0/23 maxlen: 24
193.176.28.0/22 maxlen: 22
193.176.31.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
194.88.96.0/21 maxlen: 24
194.88.98.0/23 maxlen: 24
195.20.108.0/23 maxlen: 23
195.20.108.0/24 maxlen: 24
195.140.212.0/22 maxlen: 24
195.206.165.0/24 maxlen: 24
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
212.237.224.0/22 maxlen: 22
213.166.84.0/22 maxlen: 24
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
217.146.92.0/24 maxlen: 24
2a00:1a30::/32 maxlen: 32
2a01:4020::/32 maxlen: 32
2a01:4020:2::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:34::/48 maxlen: 48
2a01:4020:35::/48 maxlen: 48
2a01:4020:100::/40 maxlen: 40
2a01:4020:200::/40 maxlen: 40
2a01:4020:300::/40 maxlen: 48
2a0b:b840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:e0:6f:dc:af:2d:79:6a:10:fd:5d:50:42:be:20:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Mar 16 13:40:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8812085201e519ec9e5fe419264ad70de0c5cbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:d7:08:21:a0:2a:3f:6b:37:46:fd:7c:55:
b2:91:2f:ec:ba:42:e1:69:46:d3:37:3f:0d:d0:bd:
22:7a:4a:b3:4b:91:66:c0:2d:76:09:6f:d5:ff:07:
91:f6:09:a1:c6:ad:35:6c:3b:24:2c:13:44:cb:67:
e7:5f:cc:c6:23:91:d3:ec:8b:7e:01:6d:65:53:d0:
64:b7:01:1f:88:0d:c8:5d:0d:7c:d2:53:e3:29:70:
cb:ee:5f:35:a9:67:29:3f:f4:af:c4:8f:23:20:6e:
5c:6b:91:74:a9:de:bc:1f:77:1d:d1:df:31:18:5f:
d4:4e:0c:be:5a:67:5b:41:37:82:43:1e:85:17:44:
07:ff:8f:5a:65:ec:75:33:c7:74:63:df:31:43:5a:
fd:95:36:1d:61:27:73:5b:11:19:32:e3:75:9e:69:
94:5e:18:c4:c1:c2:10:f1:73:eb:91:3b:2a:5d:28:
02:17:c7:98:cd:87:e6:42:bc:ec:f2:2e:8c:74:78:
05:53:b0:9d:ff:12:39:c2:c0:87:a8:87:9b:22:37:
19:03:c3:75:a0:d0:82:3a:74:df:36:f7:4c:72:0c:
fc:9b:41:c3:06:e7:28:fe:50:0a:94:dc:cc:2e:bd:
24:e9:40:3d:d7:0e:c6:34:89:8c:53:06:5f:62:7d:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:12:08:52:01:E5:19:EC:9E:5F:E4:19:26:4A:D7:0D:E0:C5:CB:AA
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/iBIIUgHlGeyeX-QZJkrXDeDFy6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.231.160.0/21
46.247.142.0/23
64.239.236.0/22
69.5.168.0/21
77.81.102.0/24
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
80.240.108.0/23
81.19.208.0/20
82.97.192.0/23
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.54.136.0/22
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.28.252.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
185.242.80.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.124.20.0/23
193.176.28.0/22
194.50.234.0/23
194.88.96.0/21
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
6d:b1:8a:51:09:d7:91:93:6f:ef:10:4a:65:18:32:28:d3:8d:
2d:6e:67:88:ef:54:50:f5:3f:18:64:3c:b2:97:a5:3c:eb:f3:
58:40:45:fc:64:fb:85:6b:a0:da:a6:54:87:fa:32:d9:e9:98:
bf:63:72:f2:20:5c:8d:06:14:22:30:cc:49:34:ca:52:25:2a:
40:73:27:2f:80:dd:af:35:03:e0:0b:7d:07:7b:0c:5d:b1:14:
13:70:d1:de:77:0e:5e:f2:13:ba:d8:f9:d9:7d:a6:3f:d7:dc:
bf:e6:ed:2c:6e:88:36:34:11:cc:46:26:1d:c8:06:49:be:94:
10:e9:35:49:2c:e6:58:09:8c:cf:4f:b7:09:38:ad:1b:ab:03:
5a:a4:07:c7:8f:1e:e5:89:61:1d:d2:57:d2:7a:e1:58:d8:d5:
a1:28:a1:e5:cb:7b:96:3d:85:1e:84:cc:e0:d9:a6:8a:c3:50:
a3:5b:91:12:7a:c1:dc:91:32:62:97:9a:4a:60:a4:b7:26:8e:
4c:f7:70:27:03:51:c4:d0:96:ef:10:ea:87:f9:e8:59:02:43:
8b:cf:3a:fe:fe:20:f6:87:81:25:36:69:c4:c6:bb:c3:0c:90:
75:c3:c9:aa:20:ce:26:c9:a0:be:cc:f8:e7:7e:cb:f0:9c:ea:
72:3a:51:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:52 2026 by rpki-client