Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/c2Yu4gx5LPJ3HF69pXhK7_25yXI.roa
File: c2Yu4gx5LPJ3HF69pXhK7_25yXI.roa (raw, json)
Hash identifier: Q4DNvIlUJ8XVj3rmssf9V95x20ibWTrUMeHs2DCLCj8=
Subject key identifier: 73:66:2E:E2:0C:79:2C:F2:77:1C:5E:BD:A5:78:4A:EF:FD:B9:C9:72
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019CD201230A850BDFC5FFAAE9199CA3F13E
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/c2Yu4gx5LPJ3HF69pXhK7_25yXI.roa
Signing time: Mon 09 Mar 2026 09:50:15 +0000
ROA not before: Mon 09 Mar 2026 09:50:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 5.187.33.0/24 maxlen: 24
37.235.48.0/24 maxlen: 24
37.235.51.0/24 maxlen: 24
45.151.73.0/24 maxlen: 24
45.151.74.0/24 maxlen: 24
45.153.127.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
83.172.134.0/24 maxlen: 24
83.172.135.0/24 maxlen: 24
83.172.136.0/24 maxlen: 24
83.172.138.0/24 maxlen: 24
83.172.150.0/24 maxlen: 24
83.172.159.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.121.0/24 maxlen: 24
89.31.120.0/24 maxlen: 24
89.31.121.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.40.105.0/24 maxlen: 24
89.46.232.0/24 maxlen: 24
89.46.233.0/24 maxlen: 24
89.46.234.0/24 maxlen: 24
89.46.235.0/24 maxlen: 24
89.46.236.0/24 maxlen: 24
91.132.92.0/24 maxlen: 24
91.132.93.0/24 maxlen: 24
91.132.95.0/24 maxlen: 24
92.243.64.0/24 maxlen: 24
93.113.99.0/24 maxlen: 24
93.113.215.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.207.0/24 maxlen: 24
103.57.248.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.251.0/24 maxlen: 24
134.255.211.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
149.154.158.0/24 maxlen: 24
149.154.159.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.11.0/24 maxlen: 24
151.236.15.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.17.0/24 maxlen: 24
151.236.18.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.21.0/24 maxlen: 24
151.236.22.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
158.255.208.0/24 maxlen: 24
158.255.213.0/24 maxlen: 24
158.255.214.0/24 maxlen: 24
158.255.215.0/24 maxlen: 24
176.126.99.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.26.239.0/24 maxlen: 24
185.76.78.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
185.122.187.0/24 maxlen: 24
185.193.48.0/24 maxlen: 24
185.195.64.0/24 maxlen: 24
185.195.66.0/24 maxlen: 24
188.190.0.0/24 maxlen: 24
188.190.1.0/24 maxlen: 24
188.190.2.0/24 maxlen: 24
188.190.4.0/24 maxlen: 24
188.190.9.0/24 maxlen: 24
188.190.16.0/24 maxlen: 24
188.190.17.0/24 maxlen: 24
188.214.32.0/24 maxlen: 24
193.3.55.0/24 maxlen: 24
213.111.176.0/24 maxlen: 24
213.111.178.0/24 maxlen: 24
213.111.182.0/24 maxlen: 24
213.111.183.0/24 maxlen: 24
213.111.184.0/24 maxlen: 24
213.111.185.0/24 maxlen: 24
213.111.191.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
2a03:f80:32::/48 maxlen: 48
2a03:f80:33::/48 maxlen: 48
2a03:f80:39::/48 maxlen: 48
2a03:f80:40::/48 maxlen: 48
2a03:f80:41::/48 maxlen: 48
2a03:f80:44::/48 maxlen: 48
2a03:f80:45::/48 maxlen: 48
2a03:f80:46::/48 maxlen: 48
2a03:f80:47::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:49::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:65::/48 maxlen: 48
2a03:f80:81::/48 maxlen: 48
2a03:f80:358::/48 maxlen: 48
2a03:f80:381::/48 maxlen: 48
2a03:f80:852::/48 maxlen: 48
2a03:f80:971::/48 maxlen: 48
2a03:f80:4416::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:01:23:0a:85:0b:df:c5:ff:aa:e9:19:9c:a3:f1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Mar 9 09:50:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73662ee20c792cf2771c5ebda5784aeffdb9c972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:a8:d8:a4:1d:b5:a9:41:42:da:17:c4:c9:
c2:a9:8c:fa:c8:68:44:98:2e:1a:37:f7:e9:39:0b:
0a:be:6f:d9:15:47:2a:9f:a5:f6:19:e8:fe:4f:53:
8e:ae:f0:50:f2:22:e8:20:33:2c:73:65:3e:36:4a:
a6:c7:c6:91:05:a7:99:52:8e:a3:1b:6e:07:6d:99:
51:10:ba:ca:11:a4:c6:87:a4:5c:c1:b2:1b:b5:8d:
af:08:c6:04:a6:a3:8f:66:74:e2:3c:f2:2f:5f:a4:
4f:a5:90:a1:96:2d:50:4c:e1:7b:a2:f2:36:63:32:
1e:95:2c:7a:cd:d5:ed:f4:91:61:3a:b0:f3:eb:33:
e8:72:81:f5:a2:26:49:b1:92:f1:ab:86:67:c7:c5:
6e:72:13:e8:d2:20:ee:f5:a0:70:09:2e:3d:05:d8:
f0:95:da:11:a5:eb:9d:77:1c:62:85:df:16:49:1c:
71:e6:64:71:dc:ed:c7:07:a0:ca:65:47:80:bd:4b:
f3:8d:d7:88:37:3d:5d:88:d5:23:88:96:61:c4:ed:
f4:6f:11:11:c4:cd:5a:35:f5:84:a1:36:08:88:42:
35:78:2e:7d:63:39:58:54:2c:c4:69:f3:3b:0c:dc:
84:69:d9:43:dc:3a:64:38:f5:c6:64:5b:47:89:01:
11:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:66:2E:E2:0C:79:2C:F2:77:1C:5E:BD:A5:78:4A:EF:FD:B9:C9:72
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/c2Yu4gx5LPJ3HF69pXhK7_25yXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.33.0/24
37.235.48.0/24
37.235.51.0/24
45.151.73.0-45.151.74.255
45.153.127.0/24
46.183.187.0/24
83.172.134.0-83.172.136.255
83.172.138.0/24
83.172.150.0/24
83.172.159.0/24
83.243.120.0/23
89.31.120.0/23
89.31.123.0/24
89.40.105.0/24
89.46.232.0-89.46.236.255
91.132.92.0/23
91.132.95.0/24
92.243.64.0/24
93.113.99.0/24
93.113.215.0/24
95.156.204.0/24
95.156.207.0/24
103.57.248.0/23
103.57.251.0/24
134.255.211.0/24
149.154.157.0-149.154.159.255
151.236.4.0/24
151.236.11.0/24
151.236.15.0-151.236.18.255
151.236.20.0-151.236.22.255
151.236.25.0/24
158.255.208.0/24
158.255.213.0-158.255.215.255
176.126.99.0/24
185.26.236.0/24
185.26.238.0/23
185.76.78.0/23
185.122.187.0/24
185.193.48.0/24
185.195.64.0/24
185.195.66.0/24
188.190.0.0-188.190.2.255
188.190.4.0/24
188.190.9.0/24
188.190.16.0/23
188.214.32.0/24
193.3.55.0/24
213.111.176.0/24
213.111.178.0/24
213.111.182.0-213.111.185.255
213.111.191.0/24
213.183.55.0/24
IPv6:
2a03:f80:32::/47
2a03:f80:39::/48
2a03:f80:40::/47
2a03:f80:44::-2a03:f80:49:ffff:ffff:ffff:ffff:ffff
2a03:f80:61::/48
2a03:f80:65::/48
2a03:f80:81::/48
2a03:f80:358::/48
2a03:f80:381::/48
2a03:f80:852::/48
2a03:f80:971::/48
2a03:f80:4416::/48
2a03:f80:ed51::/48
Signature Algorithm: sha256WithRSAEncryption
03:f6:52:f8:9a:8a:76:55:ac:d4:d7:73:fc:ad:72:e2:0e:a4:
dc:e1:53:01:9a:ff:88:67:2b:51:7a:e3:f0:7f:a0:89:71:24:
b5:e5:d1:c3:40:7a:e6:8a:7d:b6:c7:18:be:36:c1:4f:1c:b5:
ca:53:d6:00:a7:21:3f:2e:16:5e:9b:82:66:1c:7e:31:ed:23:
2f:39:4a:37:ad:02:ea:70:e1:1e:c8:37:db:a6:85:26:0e:ac:
22:84:bc:64:29:43:72:17:c5:85:26:a2:76:67:ef:52:3f:68:
92:46:17:a9:ae:6e:57:f2:f0:1c:8b:8e:34:ef:75:64:80:2d:
6b:91:03:35:0c:40:4c:5e:4d:f0:78:f5:0f:72:a5:ef:0f:73:
61:de:a1:5f:8a:a6:ca:e5:ef:6f:09:4c:81:6d:eb:ad:e3:c4:
b3:61:89:ab:bf:f3:9e:a3:30:63:eb:6f:3e:e4:6c:15:d1:02:
56:97:70:fc:d5:63:cc:39:58:c6:ab:9c:34:71:ca:87:e0:b3:
e4:4b:26:26:86:ba:dc:9c:91:02:c9:64:89:03:1e:37:1d:ea:
a7:e4:09:88:75:e4:6d:7d:ec:b0:df:99:57:a8:5f:df:40:8b:
f2:27:97:ee:78:49:35:88:c3:e3:6d:e3:81:a4:42:a4:6d:c3:
07:fa:df:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:36:21 2026 by rpki-client