Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/quUFSSqLC17PWuHw4n9doB2Ldgw.roa
File: quUFSSqLC17PWuHw4n9doB2Ldgw.roa (raw, json)
Hash identifier: c+mlnrjBfuvxfpOQWD6Qk8yh8Z9jsfAhLNTYgM4TAic=
Subject key identifier: AA:E5:05:49:2A:8B:0B:5E:CF:5A:E1:F0:E2:7F:5D:A0:1D:8B:76:0C
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 01A0392FA95F9FEDEED32A5C8C68CDB77756
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/quUFSSqLC17PWuHw4n9doB2Ldgw.roa
Signing time: Tue 25 Aug 2026 13:50:19 +0000
ROA not before: Tue 25 Aug 2026 13:50:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201341
IP address blocks: 189.81.16.0/23 maxlen: 23
189.81.18.0/23 maxlen: 23
189.81.30.0/23 maxlen: 23
189.81.42.0/23 maxlen: 23
189.81.50.0/23 maxlen: 23
189.81.52.0/23 maxlen: 23
189.81.110.0/23 maxlen: 23
189.81.120.0/23 maxlen: 23
189.81.128.0/23 maxlen: 23
189.81.130.0/23 maxlen: 23
189.81.136.0/23 maxlen: 23
189.81.138.0/23 maxlen: 23
189.81.146.0/23 maxlen: 23
189.81.154.0/23 maxlen: 23
189.81.158.0/23 maxlen: 23
189.81.172.0/23 maxlen: 23
189.81.176.0/23 maxlen: 23
189.81.190.0/23 maxlen: 23
189.81.198.0/23 maxlen: 23
189.81.200.0/23 maxlen: 23
189.81.208.0/23 maxlen: 23
189.81.228.0/23 maxlen: 23
189.81.240.0/23 maxlen: 23
189.81.244.0/23 maxlen: 23
189.81.252.0/23 maxlen: 23
189.104.8.0/23 maxlen: 23
189.104.14.0/23 maxlen: 23
189.104.24.0/23 maxlen: 23
189.104.26.0/23 maxlen: 23
189.104.30.0/23 maxlen: 23
189.104.40.0/23 maxlen: 23
189.104.56.0/23 maxlen: 23
189.104.58.0/23 maxlen: 23
189.104.62.0/23 maxlen: 23
189.104.74.0/23 maxlen: 23
189.104.76.0/23 maxlen: 23
189.104.82.0/23 maxlen: 23
189.104.88.0/23 maxlen: 23
189.104.154.0/23 maxlen: 23
189.104.176.0/23 maxlen: 23
189.104.190.0/23 maxlen: 23
189.104.194.0/23 maxlen: 23
189.104.206.0/23 maxlen: 23
189.104.216.0/23 maxlen: 23
189.104.228.0/23 maxlen: 23
189.104.232.0/23 maxlen: 23
189.104.236.0/23 maxlen: 23
189.104.240.0/23 maxlen: 23
189.104.250.0/23 maxlen: 23
205.188.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:2f:a9:5f:9f:ed:ee:d3:2a:5c:8c:68:cd:b7:77:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Aug 25 13:50:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aae505492a8b0b5ecf5ae1f0e27f5da01d8b760c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:b3:2c:c0:f0:55:07:37:51:73:d6:4d:ce:
17:56:91:08:5b:d9:fc:1d:73:a4:5b:69:08:44:26:
0f:fa:cb:41:af:bd:ce:db:36:7e:bf:04:98:33:5b:
0f:75:4f:9e:54:24:56:f3:54:7c:10:04:c9:e3:da:
12:91:73:34:fb:a8:26:6b:36:ef:b8:dc:10:fe:92:
f5:cd:8b:f5:57:c9:6a:08:a7:38:c2:34:f2:7e:c0:
5f:21:71:51:88:79:3b:27:5a:e5:8c:bd:03:a0:cf:
d9:4e:32:81:50:99:d1:03:96:7a:40:b6:ae:86:88:
d4:4b:69:23:d0:2c:13:27:f4:bd:49:d3:97:2d:2b:
19:f0:15:c2:62:ef:ac:cf:a7:59:b4:de:d0:04:f6:
bb:b7:e0:8b:5c:2e:aa:d6:c4:f9:b1:0c:ac:7d:8c:
ce:e4:1f:e7:62:e3:b7:80:a1:24:0e:8f:72:e7:c9:
a6:2b:d0:a4:b4:84:ce:34:cc:a1:ae:57:33:4b:29:
a8:00:4e:a4:a6:0a:70:83:c1:37:b5:c3:cf:cc:b8:
e9:00:31:63:7a:0a:c8:f2:3b:79:bb:72:27:be:aa:
ed:f3:6b:90:3a:0f:9c:c9:77:94:75:3b:51:db:a0:
9b:59:ae:3e:81:47:0e:23:f7:b2:c2:23:04:54:c7:
80:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E5:05:49:2A:8B:0B:5E:CF:5A:E1:F0:E2:7F:5D:A0:1D:8B:76:0C
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/quUFSSqLC17PWuHw4n9doB2Ldgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.81.16.0/22
189.81.30.0/23
189.81.42.0/23
189.81.50.0-189.81.53.255
189.81.110.0/23
189.81.120.0/23
189.81.128.0/22
189.81.136.0/22
189.81.146.0/23
189.81.154.0/23
189.81.158.0/23
189.81.172.0/23
189.81.176.0/23
189.81.190.0/23
189.81.198.0-189.81.201.255
189.81.208.0/23
189.81.228.0/23
189.81.240.0/23
189.81.244.0/23
189.81.252.0/23
189.104.8.0/23
189.104.14.0/23
189.104.24.0/22
189.104.30.0/23
189.104.40.0/23
189.104.56.0/22
189.104.62.0/23
189.104.74.0-189.104.77.255
189.104.82.0/23
189.104.88.0/23
189.104.154.0/23
189.104.176.0/23
189.104.190.0/23
189.104.194.0/23
189.104.206.0/23
189.104.216.0/23
189.104.228.0/23
189.104.232.0/23
189.104.236.0/23
189.104.240.0/23
189.104.250.0/23
205.188.108.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:6f:ec:40:30:f2:04:c4:2f:c1:0c:43:f9:9c:50:45:f6:a7:
81:fe:93:77:6b:4b:31:f9:cb:4c:00:a6:93:54:67:4a:f5:ba:
71:9c:2e:b4:84:18:35:e9:84:ea:dc:19:27:c1:34:92:90:26:
f0:3e:92:a5:24:40:ab:fd:5f:e2:45:2f:77:d2:13:f9:e1:9c:
dd:cc:1a:ed:b8:cd:03:52:c3:17:30:5d:b6:5a:fe:1e:6b:60:
e5:07:ca:17:94:bf:3e:8c:5b:ea:b1:30:44:74:5b:9b:1c:78:
7b:4f:b4:4c:aa:a6:54:85:1e:cc:ca:66:f1:2d:26:31:5b:01:
9a:9d:9e:f0:77:64:35:2a:5b:5c:4e:de:88:58:3d:fd:a3:1a:
68:24:44:80:44:08:77:65:0e:3a:5f:b4:92:9e:d7:7b:63:05:
4a:24:fc:ee:4b:a3:c4:2f:c9:8b:2f:84:d6:88:61:e1:04:45:
54:72:08:97:bf:3a:32:fb:00:70:d6:df:66:09:51:ab:f3:f4:
be:fe:72:28:58:43:7d:c1:85:e2:9e:d2:79:32:76:4b:0b:e5:
b5:09:de:52:8b:4f:5d:af:ed:22:98:d7:07:6e:7d:86:66:73:
14:eb:96:c8:54:ba:de:06:7c:6b:6b:df:ff:e9:2b:af:2c:83:
27:4a:17:58
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgISAaA5L6lfn+3u0ypcjGjNt3dWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw
Njc5NTQwHhcNMjYwODI1MTM1MDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWU1MDU0OTJhOGIwYjVlY2Y1YWUxZjBlMjdmNWRhMDFkOGI3NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueqzLMDwVQc3UXPWTc4XVpEIW9n8
HXOkW2kIRCYP+stBr73O2zZ+vwSYM1sPdU+eVCRW81R8EATJ49oSkXM0+6gmazbv
uNwQ/pL1zYv1V8lqCKc4wjTyfsBfIXFRiHk7J1rljL0DoM/ZTjKBUJnRA5Z6QLau
hojUS2kj0CwTJ/S9SdOXLSsZ8BXCYu+sz6dZtN7QBPa7t+CLXC6q1sT5sQysfYzO
5B/nYuO3gKEkDo9y58mmK9CktITONMyhrlczSymoAE6kpgpwg8E3tcPPzLjpADFj
egrI8jt5u3Invqrt82uQOg+cyXeUdTtR26CbWa4+gUcOI/eywiMEVMeAHQIDAQAB
o4IDITCCAx0wHQYDVR0OBBYEFKrlBUkqiwtez1rh8OJ/XaAdi3YMMB8GA1UdIwQY
MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt
NmVhYzYyZTYwZGY3LzEvcXVVRlNTcUxDMTdQV3VIdzRuOWRvQjJMZGd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3
LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNQYIKwYBBQUHAQcBAf8EggEkMIIBIDCCARwEAgABMIIB
FAMEAr1REAMEAb1RHgMEAb1RKjAMAwQBvVEyAwQBvVE0AwQBvVFuAwQBvVF4AwQC
vVGAAwQCvVGIAwQBvVGSAwQBvVGaAwQBvVGeAwQBvVGsAwQBvVGwAwQBvVG+MAwD
BAG9UcYDBAG9UcgDBAG9UdADBAG9UeQDBAG9UfADBAG9UfQDBAG9UfwDBAG9aAgD
BAG9aA4DBAK9aBgDBAG9aB4DBAG9aCgDBAK9aDgDBAG9aD4wDAMEAb1oSgMEAb1o
TAMEAb1oUgMEAb1oWAMEAb1omgMEAb1osAMEAb1ovgMEAb1owgMEAb1ozgMEAb1o
2AMEAb1o5AMEAb1o6AMEAb1o7AMEAb1o8AMEAb1o+gMEAc28bDANBgkqhkiG9w0B
AQsFAAOCAQEAHm/sQDDyBMQvwQxD+ZxQRfangf6Td2tLMfnLTACmk1RnSvW6cZwu
tIQYNemE6twZJ8E0kpAm8D6SpSRAq/1f4kUvd9IT+eGc3cwa7bjNA1LDFzBdtlr+
Hmtg5QfKF5S/Poxb6rEwRHRbmxx4e0+0TKqmVIUezMpm8S0mMVsBmp2e8HdkNSpb
XE7eiFg9/aMaaCREgEQId2UOOl+0kp7Xe2MFSiT87kujxC/Jiy+E1ohh4QRFVHII
l786MvsAcNbfZglRq/P0vv5yKFhDfcGF4p7SeTJ2SwvltQneUotPXa/tIpjXB259
hmZzFOuWyFS63gZ8a2vf/+krryyDJ0oXWA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:22:41 2026 by rpki-client