Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/vHrQ-eqq2rjzbDhFpOZxG-28_bU.roa
File: vHrQ-eqq2rjzbDhFpOZxG-28_bU.roa (raw, json)
Hash identifier: tYPc/VwlFUJ5finqxJ46rmSjC7kiOibwttP1LU4hb50=
Subject key identifier: BC:7A:D0:F9:EA:AA:DA:B8:F3:6C:38:45:A4:E6:71:1B:ED:BC:FD:B5
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01A1115AC2529D6B1440761AEB39FFDC3349
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/vHrQ-eqq2rjzbDhFpOZxG-28_bU.roa
Signing time: Tue 06 Oct 2026 13:15:22 +0000
ROA not before: Tue 06 Oct 2026 13:15:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 5.154.174.0/24 maxlen: 24
31.209.96.0/24 maxlen: 24
31.209.97.0/24 maxlen: 32
31.209.100.0/23 maxlen: 32
31.209.102.0/23 maxlen: 32
31.209.104.0/23 maxlen: 32
31.209.106.0/24 maxlen: 32
31.209.107.0/24 maxlen: 32
31.209.108.0/22 maxlen: 32
31.223.187.0/24 maxlen: 24
45.10.192.0/24 maxlen: 32
45.10.193.0/24 maxlen: 32
45.95.24.0/22 maxlen: 32
45.144.88.0/22 maxlen: 24
45.149.28.0/22 maxlen: 24
45.150.252.0/23 maxlen: 23
45.150.254.0/23 maxlen: 23
45.153.157.0/24 maxlen: 24
45.153.158.0/23 maxlen: 32
45.156.224.0/22 maxlen: 32
46.16.32.0/24 maxlen: 32
80.73.243.0/24 maxlen: 24
80.246.30.0/24 maxlen: 32
81.21.232.0/22 maxlen: 32
86.105.183.0/24 maxlen: 32
87.239.255.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
95.214.20.0/22 maxlen: 32
103.21.52.0/24 maxlen: 32
103.24.232.0/22 maxlen: 32
103.71.60.0/24 maxlen: 32
103.76.255.0/24 maxlen: 32
103.81.230.0/23 maxlen: 23
103.113.208.0/22 maxlen: 22
103.145.75.0/24 maxlen: 32
103.198.254.0/23 maxlen: 23
103.204.222.0/23 maxlen: 32
103.221.52.0/22 maxlen: 32
103.228.200.0/22 maxlen: 32
103.251.26.0/23 maxlen: 23
104.36.50.0/24 maxlen: 32
109.104.142.0/23 maxlen: 32
116.206.96.0/22 maxlen: 32
137.59.60.0/22 maxlen: 32
167.160.96.0/24 maxlen: 32
167.160.97.0/24 maxlen: 32
167.160.98.0/24 maxlen: 32
178.251.234.0/23 maxlen: 32
185.36.254.0/24 maxlen: 32
185.96.162.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
185.152.36.0/22 maxlen: 32
185.152.248.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.166.84.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.201.188.0/24 maxlen: 24
185.217.64.0/22 maxlen: 22
185.222.213.0/24 maxlen: 24
185.242.217.0/24 maxlen: 24
188.119.154.0/24 maxlen: 32
193.36.89.0/24 maxlen: 32
194.126.179.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
195.225.81.0/24 maxlen: 24
199.249.223.0/24 maxlen: 32
2a01:4740::/32 maxlen: 48
2a05:28c0::/29 maxlen: 48
2a05:6700::/29 maxlen: 48
2a05:f4c0::/29 maxlen: 48
2a06:3040::/29 maxlen: 48
2a06:46c0::/29 maxlen: 32
2a06:4a00::/29 maxlen: 48
2a06:5000::/29 maxlen: 48
2a06:5700::/29 maxlen: 48
2a06:5740::/29 maxlen: 48
2a06:5800::/29 maxlen: 48
2a06:6580::/29 maxlen: 48
2a06:7340::/29 maxlen: 48
2a06:8100::/29 maxlen: 48
2a06:8140::/29 maxlen: 48
2a06:df80::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a07:9c80::/29 maxlen: 29
2a07:f2c0::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:5a:c2:52:9d:6b:14:40:76:1a:eb:39:ff:dc:33:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Oct 6 13:15:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc7ad0f9eaaadab8f36c3845a4e6711bedbcfdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:9f:42:1b:e0:f6:18:37:2c:90:db:71:6c:
90:87:c0:50:71:eb:dd:62:39:9c:fe:8a:ff:2a:d5:
43:78:f2:c8:59:26:a0:b4:f5:62:da:ec:d8:b5:8b:
67:12:fb:68:fb:8e:20:df:a7:30:d0:9e:9e:13:c4:
25:95:d8:e3:62:37:39:31:75:06:72:e6:04:af:d9:
80:dc:73:78:2f:6b:4e:cc:a7:31:2d:2a:59:45:7a:
2c:d6:30:5f:1e:35:fb:53:3c:91:5f:4e:63:ef:6f:
9c:d9:2f:82:50:28:34:18:40:1c:81:31:44:0e:c6:
b2:3d:ec:b6:a3:b7:72:c4:d6:37:4a:38:4a:4a:b1:
00:85:6c:e2:b1:d9:56:c7:88:e4:af:e9:17:a4:a9:
36:18:26:a0:1d:55:b6:c4:8b:9f:c1:2e:2c:68:32:
80:84:43:6c:67:42:03:b8:af:d0:2d:0a:6f:8b:17:
a7:03:b4:bc:18:a6:58:ba:27:3a:a1:43:04:f7:bf:
c9:af:aa:ce:9f:fd:21:be:7c:d3:10:bd:79:9b:81:
2d:c2:9e:1b:14:f6:7a:16:48:62:44:68:19:7f:40:
68:95:11:84:45:20:d8:d8:cf:57:5b:9c:e7:5f:e6:
be:4f:ae:02:14:67:8f:db:39:11:1d:16:c7:c5:2e:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7A:D0:F9:EA:AA:DA:B8:F3:6C:38:45:A4:E6:71:1B:ED:BC:FD:B5
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/vHrQ-eqq2rjzbDhFpOZxG-28_bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
31.209.96.0/23
31.209.100.0-31.209.111.255
31.223.187.0/24
45.10.192.0/23
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.150.252.0/22
45.153.157.0-45.153.159.255
45.156.224.0/22
46.16.32.0/24
80.73.243.0/24
80.246.30.0/24
81.21.232.0/22
86.105.183.0/24
87.239.255.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
95.214.20.0/22
103.21.52.0/24
103.24.232.0/22
103.71.60.0/24
103.76.255.0/24
103.81.230.0/23
103.113.208.0/22
103.145.75.0/24
103.198.254.0/23
103.204.222.0/23
103.221.52.0/22
103.228.200.0/22
103.251.26.0/23
104.36.50.0/24
109.104.142.0/23
116.206.96.0/22
137.59.60.0/22
167.160.96.0-167.160.98.255
178.251.234.0/23
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.222.213.0/24
185.242.217.0/24
188.119.154.0/24
193.36.89.0/24
194.126.179.0/24
195.47.194.0/24
195.225.81.0/24
199.249.223.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:6700::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:5740::/29
2a06:5800::/29
2a06:6580::/29
2a06:7340::/29
2a06:8100::/29
2a06:8140::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
07:9d:9c:37:5d:3f:59:e1:ec:b5:dc:31:00:80:18:ca:40:a3:
a2:20:70:a8:d1:79:4f:15:61:a7:ca:9b:ae:0c:35:2e:f9:18:
27:df:b6:cf:f3:83:f8:73:8e:8a:e8:8d:eb:4c:af:d2:e6:c6:
ea:f5:03:9f:b4:b2:0d:5e:a4:dd:ff:3e:b8:5c:f8:bc:36:bc:
eb:90:81:70:12:02:19:e5:f4:17:4d:36:be:5f:d8:25:12:50:
ff:06:d1:52:66:0e:44:4f:9b:0b:64:99:e8:47:c0:88:05:8e:
40:b7:72:9b:f0:c7:bd:e9:86:3d:d2:4d:0c:87:cd:bf:39:1c:
77:b2:0f:0e:54:e1:22:f7:6c:0e:3d:97:e9:dc:90:31:13:6b:
46:1e:ad:af:9c:43:a1:eb:7b:e1:2f:5b:1e:67:19:fc:e9:b4:
11:12:ad:f1:dc:4e:55:b1:12:fe:f6:be:2a:25:ca:5d:05:1d:
eb:b4:96:80:24:e2:53:49:ea:63:7d:c0:76:27:52:fc:65:54:
00:5e:41:a4:7c:0a:24:21:a9:3b:58:53:27:fa:32:19:ba:34:
dc:08:03:4b:8b:fc:92:bc:47:b8:91:72:0b:7e:81:df:e7:1f:
19:85:18:a8:78:b0:f4:63:29:e3:ec:ba:3f:84:b0:a3:26:98:
f8:d2:d4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 00:48:05 2026 by rpki-client