Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/l_T5dd2JcZVqJM1VJYNvTyV8LJw.roa
File: l_T5dd2JcZVqJM1VJYNvTyV8LJw.roa (raw, json)
Hash identifier: HR6ptQCMdThZ1PMDVclOOHeHNKKZwAZroNYyVK4P37c=
Subject key identifier: 97:F4:F9:75:DD:89:71:95:6A:24:CD:55:25:83:6F:4F:25:7C:2C:9C
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019DBF968836B76A7AEBE7C18269502190DB
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/l_T5dd2JcZVqJM1VJYNvTyV8LJw.roa
Signing time: Fri 24 Apr 2026 13:03:26 +0000
ROA not before: Fri 24 Apr 2026 13:03:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203061
IP address blocks: 72.63.4.0/23 maxlen: 23
72.63.16.0/23 maxlen: 23
72.63.36.0/23 maxlen: 23
72.63.52.0/23 maxlen: 23
72.63.76.0/23 maxlen: 23
72.63.84.0/23 maxlen: 23
72.63.96.0/23 maxlen: 23
72.63.108.0/23 maxlen: 23
72.63.128.0/23 maxlen: 23
72.63.212.0/23 maxlen: 23
72.63.244.0/23 maxlen: 23
72.63.252.0/23 maxlen: 23
189.81.10.0/23 maxlen: 23
189.81.12.0/23 maxlen: 23
189.81.14.0/23 maxlen: 23
189.81.20.0/23 maxlen: 23
189.81.24.0/23 maxlen: 23
189.81.38.0/23 maxlen: 23
189.81.100.0/23 maxlen: 23
189.81.102.0/23 maxlen: 23
189.81.114.0/23 maxlen: 23
189.81.116.0/23 maxlen: 23
189.81.120.0/23 maxlen: 23
189.81.124.0/23 maxlen: 23
189.81.126.0/23 maxlen: 23
189.81.130.0/23 maxlen: 23
189.81.136.0/23 maxlen: 23
189.81.144.0/23 maxlen: 23
189.81.150.0/23 maxlen: 23
189.81.156.0/23 maxlen: 23
189.81.158.0/23 maxlen: 23
189.81.162.0/23 maxlen: 23
189.81.174.0/23 maxlen: 23
189.81.188.0/23 maxlen: 23
189.81.192.0/23 maxlen: 23
189.81.210.0/23 maxlen: 23
189.81.212.0/23 maxlen: 23
189.81.214.0/23 maxlen: 23
189.81.216.0/23 maxlen: 23
189.81.224.0/23 maxlen: 23
189.81.228.0/23 maxlen: 23
189.81.236.0/23 maxlen: 23
189.81.238.0/23 maxlen: 23
189.81.248.0/23 maxlen: 23
189.104.14.0/23 maxlen: 23
189.104.20.0/23 maxlen: 23
189.104.28.0/23 maxlen: 23
189.104.30.0/23 maxlen: 23
189.104.38.0/23 maxlen: 23
189.104.46.0/23 maxlen: 23
189.104.50.0/23 maxlen: 23
189.104.52.0/23 maxlen: 23
189.104.56.0/23 maxlen: 23
189.104.70.0/23 maxlen: 23
189.104.72.0/23 maxlen: 23
189.104.84.0/23 maxlen: 23
189.104.86.0/23 maxlen: 23
189.104.90.0/23 maxlen: 23
189.104.92.0/23 maxlen: 23
189.104.108.0/23 maxlen: 23
189.104.110.0/23 maxlen: 23
189.104.154.0/23 maxlen: 23
189.104.156.0/23 maxlen: 23
189.104.166.0/23 maxlen: 23
189.104.178.0/23 maxlen: 23
189.104.180.0/23 maxlen: 23
189.104.188.0/23 maxlen: 23
189.104.190.0/23 maxlen: 23
189.104.198.0/23 maxlen: 23
189.104.208.0/23 maxlen: 23
189.104.212.0/23 maxlen: 23
189.104.214.0/23 maxlen: 23
189.104.220.0/23 maxlen: 23
189.104.222.0/23 maxlen: 23
189.104.230.0/23 maxlen: 23
189.104.236.0/23 maxlen: 23
189.104.238.0/23 maxlen: 23
189.104.244.0/23 maxlen: 23
189.104.246.0/23 maxlen: 23
189.104.250.0/23 maxlen: 23
193.84.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:96:88:36:b7:6a:7a:eb:e7:c1:82:69:50:21:90:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Apr 24 13:03:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97f4f975dd8971956a24cd5525836f4f257c2c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:71:db:f1:c3:15:ea:e6:81:1b:87:56:e6:
2f:b6:44:56:1a:0c:1d:ea:e0:48:0a:0c:65:b8:f5:
05:66:7e:76:cd:e5:7e:ba:98:59:51:85:02:32:a4:
13:85:b0:a9:0d:d9:0f:78:02:f0:b8:8b:f8:fb:d9:
18:dc:67:40:b6:b5:56:16:24:88:43:8b:f2:28:b8:
b2:8d:f7:dc:8a:f2:5f:ce:52:f7:7d:5d:2d:34:a8:
83:97:f4:72:67:7d:36:85:90:32:e8:4b:00:3d:e6:
3c:40:e8:b4:00:19:90:83:14:48:30:d0:ed:02:81:
99:f2:e5:7a:00:58:c4:7f:a7:dd:c0:1a:c9:90:88:
74:26:aa:46:ad:f6:84:44:fc:1a:19:78:ff:19:9e:
7e:d8:aa:ac:c2:2e:b2:06:4f:81:ac:f8:dd:da:0a:
15:0a:60:9d:e4:be:b3:2b:aa:c0:73:c4:0e:46:22:
e7:82:5e:3c:c7:ad:d0:3a:47:5f:ab:41:bf:1b:34:
4c:ff:c1:86:c4:86:6d:3d:8a:0a:9b:45:27:19:2b:
aa:58:29:6a:c4:fe:95:05:cb:fb:0a:05:f0:17:1c:
6b:32:f3:d2:55:10:93:4d:eb:4e:14:26:92:b9:fd:
25:d2:56:b3:d1:cc:69:f4:28:bd:72:30:a5:c4:f0:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F4:F9:75:DD:89:71:95:6A:24:CD:55:25:83:6F:4F:25:7C:2C:9C
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/l_T5dd2JcZVqJM1VJYNvTyV8LJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.63.4.0/23
72.63.16.0/23
72.63.36.0/23
72.63.52.0/23
72.63.76.0/23
72.63.84.0/23
72.63.96.0/23
72.63.108.0/23
72.63.128.0/23
72.63.212.0/23
72.63.244.0/23
72.63.252.0/23
189.81.10.0-189.81.15.255
189.81.20.0/23
189.81.24.0/23
189.81.38.0/23
189.81.100.0/22
189.81.114.0-189.81.117.255
189.81.120.0/23
189.81.124.0/22
189.81.130.0/23
189.81.136.0/23
189.81.144.0/23
189.81.150.0/23
189.81.156.0/22
189.81.162.0/23
189.81.174.0/23
189.81.188.0/23
189.81.192.0/23
189.81.210.0-189.81.217.255
189.81.224.0/23
189.81.228.0/23
189.81.236.0/22
189.81.248.0/23
189.104.14.0/23
189.104.20.0/23
189.104.28.0/22
189.104.38.0/23
189.104.46.0/23
189.104.50.0-189.104.53.255
189.104.56.0/23
189.104.70.0-189.104.73.255
189.104.84.0/22
189.104.90.0-189.104.93.255
189.104.108.0/22
189.104.154.0-189.104.157.255
189.104.166.0/23
189.104.178.0-189.104.181.255
189.104.188.0/22
189.104.198.0/23
189.104.208.0/23
189.104.212.0/22
189.104.220.0/22
189.104.230.0/23
189.104.236.0/22
189.104.244.0/22
189.104.250.0/23
193.84.183.0/24
Signature Algorithm: sha256WithRSAEncryption
70:cb:3e:4f:70:f3:e2:0f:55:b9:f6:9f:65:52:67:16:49:22:
f4:fd:83:b8:3e:69:17:8d:a7:8e:ed:1d:dd:dd:58:bf:1d:39:
9a:8f:44:6f:01:2e:29:c9:4e:b1:d3:07:b2:73:ab:01:a5:78:
56:58:ef:dd:e2:9a:58:40:6b:15:1f:14:1f:8c:ae:8f:f9:11:
15:05:e7:72:76:f3:81:ff:d4:c7:87:bc:fd:2d:23:76:48:68:
7e:ae:9b:2b:2a:74:7f:a8:a1:84:b3:0b:0f:54:30:e8:00:7f:
d3:2c:f9:c9:b3:3a:18:b4:b1:cd:54:0a:45:ec:8e:5f:53:c2:
06:ab:19:cb:ec:43:ba:6f:45:ba:a4:f6:af:fa:a1:cd:84:88:
4e:a9:c0:bf:69:c9:7c:15:a5:88:39:d6:c0:6f:4b:4c:97:64:
d8:87:5e:7f:56:69:3f:fc:e5:1d:e5:ed:14:a2:08:4a:0c:56:
6e:ef:be:1a:c3:58:22:b8:e9:94:a9:65:4d:df:75:c6:21:38:
67:11:87:a7:39:98:5f:b7:e6:f1:bc:64:00:68:99:82:9b:a7:
47:fd:ac:36:37:94:ee:60:29:51:f9:f8:d6:bb:93:24:70:ae:
3f:62:4f:5f:8f:cc:fd:a9:88:69:47:01:5d:62:96:22:99:27:
59:dd:fe:dd
-----BEGIN CERTIFICATE-----
MIIGnTCCBYWgAwIBAgISAZ2/log2t2p66+fBgmlQIZDbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw
Njc5NTQwHhcNMjYwNDI0MTMwMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2Y0Zjk3NWRkODk3MTk1NmEyNGNkNTUyNTgzNmY0ZjI1N2MyYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshBx2/HDFermgRuHVuYvtkRWGgwd
6uBICgxluPUFZn52zeV+uphZUYUCMqQThbCpDdkPeALwuIv4+9kY3GdAtrVWFiSI
Q4vyKLiyjffcivJfzlL3fV0tNKiDl/RyZ302hZAy6EsAPeY8QOi0ABmQgxRIMNDt
AoGZ8uV6AFjEf6fdwBrJkIh0JqpGrfaERPwaGXj/GZ5+2Kqswi6yBk+BrPjd2goV
CmCd5L6zK6rAc8QORiLngl48x63QOkdfq0G/GzRM/8GGxIZtPYoKm0UnGSuqWClq
xP6VBcv7CgXwFxxrMvPSVRCTTetOFCaSuf0l0laz0cxp9Ci9cjClxPAbtwIDAQAB
o4IDqTCCA6UwHQYDVR0OBBYEFJf0+XXdiXGVaiTNVSWDb08lfCycMB8GA1UdIwQY
MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt
NmVhYzYyZTYwZGY3LzEvbF9UNWRkMkpjWlZxSk0xVkpZTnZUeVY4TEp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3
LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBvQYIKwYBBQUHAQcBAf8EggGsMIIBqDCCAaQEAgABMIIB
nAMEAUg/BAMEAUg/EAMEAUg/JAMEAUg/NAMEAUg/TAMEAUg/VAMEAUg/YAMEAUg/
bAMEAUg/gAMEAUg/1AMEAUg/9AMEAUg//DAMAwQBvVEKAwQEvVEAAwQBvVEUAwQB
vVEYAwQBvVEmAwQCvVFkMAwDBAG9UXIDBAG9UXQDBAG9UXgDBAK9UXwDBAG9UYID
BAG9UYgDBAG9UZADBAG9UZYDBAK9UZwDBAG9UaIDBAG9Ua4DBAG9UbwDBAG9UcAw
DAMEAb1R0gMEAb1R2AMEAb1R4AMEAb1R5AMEAr1R7AMEAb1R+AMEAb1oDgMEAb1o
FAMEAr1oHAMEAb1oJgMEAb1oLjAMAwQBvWgyAwQBvWg0AwQBvWg4MAwDBAG9aEYD
BAG9aEgDBAK9aFQwDAMEAb1oWgMEAb1oXAMEAr1obDAMAwQBvWiaAwQBvWicAwQB
vWimMAwDBAG9aLIDBAG9aLQDBAK9aLwDBAG9aMYDBAG9aNADBAK9aNQDBAK9aNwD
BAG9aOYDBAK9aOwDBAK9aPQDBAG9aPoDBADBVLcwDQYJKoZIhvcNAQELBQADggEB
AHDLPk9w8+IPVbn2n2VSZxZJIvT9g7g+aReNp47tHd3dWL8dOZqPRG8BLinJTrHT
B7JzqwGleFZY793imlhAaxUfFB+Mro/5ERUF53J284H/1MeHvP0tI3ZIaH6umysq
dH+ooYSzCw9UMOgAf9Ms+cmzOhi0sc1UCkXsjl9TwgarGcvsQ7pvRbqk9q/6oc2E
iE6pwL9pyXwVpYg51sBvS0yXZNiHXn9WaT/85R3l7RSiCEoMVm7vvhrDWCK46ZSp
ZU3fdcYhOGcRh6c5mF+35vG8ZABomYKbp0f9rDY3lO5gKVH5+Na7kyRwrj9iT1+P
zP2piGlHAV1iliKZJ1nd/t0=
-----END CERTIFICATE-----
Generated at Mon Apr 27 07:55:12 2026 by rpki-client