Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/iahQbW1iBfEY46yiqbkn59Z1NKE.roa
File: iahQbW1iBfEY46yiqbkn59Z1NKE.roa (raw, json)
Hash identifier: yJG/O2diEJVVBoUaMPlh2OydqeIUx1X535CinLs/Ess=
Subject key identifier: 89:A8:50:6D:6D:62:05:F1:18:E3:AC:A2:A9:B9:27:E7:D6:75:34:A1
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 019E847DD21E4E4E2B0F77055A41539C1FB3
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/iahQbW1iBfEY46yiqbkn59Z1NKE.roa
Signing time: Mon 01 Jun 2026 18:41:38 +0000
ROA not before: Mon 01 Jun 2026 18:41:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206065
IP address blocks: 31.25.104.0/21 maxlen: 24
31.217.208.0/21 maxlen: 24
37.19.80.0/20 maxlen: 24
37.114.192.0/18 maxlen: 24
37.114.204.0/23 maxlen: 23
37.114.225.0/24 maxlen: 24
37.114.246.0/23 maxlen: 23
37.114.252.0/24 maxlen: 24
37.191.75.0/24 maxlen: 24
37.191.80.0/21 maxlen: 24
37.191.88.0/22 maxlen: 24
37.221.0.0/18 maxlen: 24
37.221.0.0/20 maxlen: 20
37.235.16.0/20 maxlen: 24
37.235.17.0/24 maxlen: 24
45.128.140.0/22 maxlen: 24
45.144.124.0/22 maxlen: 24
46.32.5.0/24 maxlen: 24
46.32.9.0/24 maxlen: 24
46.32.14.0/24 maxlen: 24
46.34.164.0/22 maxlen: 24
46.34.168.0/21 maxlen: 24
46.34.178.0/23 maxlen: 24
46.34.180.0/22 maxlen: 24
46.34.184.0/21 maxlen: 24
46.34.184.0/22 maxlen: 22
46.34.188.0/22 maxlen: 22
78.154.32.0/19 maxlen: 24
78.158.182.0/23 maxlen: 24
78.158.186.0/23 maxlen: 24
78.158.188.0/23 maxlen: 24
78.158.190.0/24 maxlen: 24
79.132.200.0/22 maxlen: 24
79.132.213.0/24 maxlen: 24
79.132.217.0/24 maxlen: 24
79.132.218.0/23 maxlen: 24
79.132.220.0/23 maxlen: 24
80.71.113.0/24 maxlen: 24
80.71.122.0/23 maxlen: 24
80.71.124.0/23 maxlen: 24
80.71.127.0/24 maxlen: 24
81.29.243.0/24 maxlen: 24
81.29.248.0/21 maxlen: 24
81.29.248.0/23 maxlen: 23
81.29.250.0/23 maxlen: 24
81.29.250.0/24 maxlen: 24
81.29.251.0/24 maxlen: 24
81.29.254.0/24 maxlen: 24
81.29.255.0/24 maxlen: 24
81.91.144.0/20 maxlen: 24
81.91.144.0/22 maxlen: 24
81.91.148.0/23 maxlen: 24
81.91.150.0/23 maxlen: 24
81.91.152.0/21 maxlen: 24
86.109.32.0/23 maxlen: 24
86.109.36.0/22 maxlen: 24
86.109.41.0/24 maxlen: 24
86.109.46.0/23 maxlen: 24
86.109.53.0/24 maxlen: 24
86.109.56.0/22 maxlen: 24
86.109.58.0/23 maxlen: 24
86.109.62.0/23 maxlen: 24
87.247.180.0/23 maxlen: 24
91.184.64.0/20 maxlen: 24
92.61.184.0/21 maxlen: 24
92.119.68.0/22 maxlen: 24
94.139.160.0/20 maxlen: 24
109.230.64.0/21 maxlen: 24
109.230.80.0/20 maxlen: 24
109.230.80.0/22 maxlen: 24
109.230.81.0/24 maxlen: 24
109.230.82.0/24 maxlen: 24
109.230.88.0/21 maxlen: 24
109.230.88.0/23 maxlen: 24
109.230.90.0/24 maxlen: 24
109.230.93.0/24 maxlen: 24
176.221.65.0/24 maxlen: 24
185.12.62.0/24 maxlen: 24
185.21.76.0/22 maxlen: 24
185.30.76.0/22 maxlen: 24
185.40.240.0/22 maxlen: 24
185.45.188.0/22 maxlen: 24
185.70.60.0/22 maxlen: 24
185.82.164.0/23 maxlen: 24
185.85.68.0/22 maxlen: 24
185.104.228.0/24 maxlen: 24
185.133.152.0/22 maxlen: 24
185.142.233.0/24 maxlen: 24
185.142.234.0/23 maxlen: 24
185.172.0.0/22 maxlen: 24
185.190.20.0/22 maxlen: 24
185.197.68.0/22 maxlen: 24
185.208.150.0/23 maxlen: 24
188.75.90.0/24 maxlen: 24
188.75.92.0/24 maxlen: 24
188.75.94.0/24 maxlen: 24
188.75.102.0/23 maxlen: 24
188.75.105.0/24 maxlen: 24
188.75.107.0/24 maxlen: 24
188.75.110.0/23 maxlen: 24
188.75.113.0/24 maxlen: 24
188.75.114.0/23 maxlen: 24
188.75.116.0/23 maxlen: 24
188.75.119.0/24 maxlen: 24
188.75.122.0/23 maxlen: 24
188.75.124.0/23 maxlen: 24
188.121.128.0/19 maxlen: 24
188.121.128.0/23 maxlen: 24
188.121.128.0/24 maxlen: 24
188.121.129.0/24 maxlen: 24
188.121.136.0/21 maxlen: 24
188.121.144.0/20 maxlen: 24
188.121.144.0/22 maxlen: 24
188.121.146.0/24 maxlen: 24
188.121.148.0/23 maxlen: 24
188.121.152.0/22 maxlen: 24
188.121.156.0/24 maxlen: 24
188.121.157.0/24 maxlen: 24
188.121.158.0/23 maxlen: 24
188.136.134.0/24 maxlen: 24
188.136.141.0/24 maxlen: 24
188.136.145.0/24 maxlen: 24
188.136.148.0/24 maxlen: 24
188.136.151.0/24 maxlen: 24
188.136.157.0/24 maxlen: 24
188.136.158.0/23 maxlen: 24
188.136.174.0/24 maxlen: 24
188.136.175.0/24 maxlen: 24
188.136.176.0/21 maxlen: 24
188.136.184.0/24 maxlen: 24
188.136.185.0/24 maxlen: 24
188.136.186.0/23 maxlen: 24
188.136.188.0/23 maxlen: 24
188.136.192.0/22 maxlen: 24
188.136.192.0/23 maxlen: 24
188.136.194.0/24 maxlen: 24
188.136.195.0/24 maxlen: 24
188.136.197.0/24 maxlen: 24
188.136.198.0/23 maxlen: 24
188.136.200.0/24 maxlen: 24
188.136.201.0/24 maxlen: 24
188.136.202.0/23 maxlen: 24
188.136.204.0/22 maxlen: 24
188.136.208.0/24 maxlen: 24
188.136.209.0/24 maxlen: 24
188.136.212.0/22 maxlen: 24
188.136.216.0/22 maxlen: 24
188.136.218.0/23 maxlen: 24
188.136.220.0/23 maxlen: 24
188.136.222.0/23 maxlen: 24
213.195.12.0/22 maxlen: 24
213.195.16.0/22 maxlen: 24
213.195.20.0/24 maxlen: 24
213.207.192.0/20 maxlen: 24
217.66.196.0/23 maxlen: 24
217.66.208.0/24 maxlen: 24
217.66.211.0/24 maxlen: 24
2a0c:100::/29 maxlen: 48
2a0c:104::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:84:7d:d2:1e:4e:4e:2b:0f:77:05:5a:41:53:9c:1f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jun 1 18:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89a8506d6d6205f118e3aca2a9b927e7d67534a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:64:e1:aa:31:80:1d:74:51:97:81:8e:3e:28:
c7:86:0f:15:0c:52:c3:76:da:28:45:05:f3:1b:3d:
c5:f6:fa:bb:ea:c9:b9:7b:07:1c:7b:98:db:02:6c:
be:6b:56:c1:dc:a5:47:cd:df:a0:4f:61:8a:52:f9:
a7:e7:c4:b0:8b:ed:4e:8f:b4:4a:d0:42:73:4b:da:
23:9c:b2:0b:c1:cc:7c:24:89:c0:c3:bd:a7:2a:c2:
8e:e6:49:89:71:50:c4:9c:43:3d:e4:87:2c:ad:80:
10:d4:0e:39:c4:ab:28:93:65:1f:a6:2e:81:96:ce:
c1:80:e0:d5:4b:ed:94:a2:b6:1f:bc:ab:6f:06:95:
82:13:23:0c:d1:e9:4b:40:f1:80:ae:1f:25:ac:1a:
6e:6a:06:1e:56:38:c2:23:98:69:de:00:d3:c7:d9:
51:5a:a5:4d:de:72:eb:84:c3:1f:1e:a1:54:53:29:
f9:bf:bf:3c:28:1a:6c:c4:d9:dc:96:86:30:14:df:
fa:e3:54:32:ca:9f:7d:ff:3e:fa:eb:f6:a0:64:f2:
dc:85:6e:16:f5:ed:94:d8:e5:13:81:9e:e5:2e:33:
36:1e:2f:c4:27:17:39:e0:33:b3:0e:ce:ad:df:18:
f4:a1:2c:5f:1a:41:da:ed:bf:35:20:9b:ee:26:55:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A8:50:6D:6D:62:05:F1:18:E3:AC:A2:A9:B9:27:E7:D6:75:34:A1
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/iahQbW1iBfEY46yiqbkn59Z1NKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.104.0/21
31.217.208.0/21
37.19.80.0/20
37.114.192.0/18
37.191.75.0/24
37.191.80.0-37.191.91.255
37.221.0.0/18
37.235.16.0/20
45.128.140.0/22
45.144.124.0/22
46.32.5.0/24
46.32.9.0/24
46.32.14.0/24
46.34.164.0-46.34.175.255
46.34.178.0-46.34.191.255
78.154.32.0/19
78.158.182.0/23
78.158.186.0-78.158.190.255
79.132.200.0/22
79.132.213.0/24
79.132.217.0-79.132.221.255
80.71.113.0/24
80.71.122.0-80.71.125.255
80.71.127.0/24
81.29.243.0/24
81.29.248.0/21
81.91.144.0/20
86.109.32.0/23
86.109.36.0/22
86.109.41.0/24
86.109.46.0/23
86.109.53.0/24
86.109.56.0/22
86.109.62.0/23
87.247.180.0/23
91.184.64.0/20
92.61.184.0/21
92.119.68.0/22
94.139.160.0/20
109.230.64.0/21
109.230.80.0/20
176.221.65.0/24
185.12.62.0/24
185.21.76.0/22
185.30.76.0/22
185.40.240.0/22
185.45.188.0/22
185.70.60.0/22
185.82.164.0/23
185.85.68.0/22
185.104.228.0/24
185.133.152.0/22
185.142.233.0-185.142.235.255
185.172.0.0/22
185.190.20.0/22
185.197.68.0/22
185.208.150.0/23
188.75.90.0/24
188.75.92.0/24
188.75.94.0/24
188.75.102.0/23
188.75.105.0/24
188.75.107.0/24
188.75.110.0/23
188.75.113.0-188.75.117.255
188.75.119.0/24
188.75.122.0-188.75.125.255
188.121.128.0/19
188.136.134.0/24
188.136.141.0/24
188.136.145.0/24
188.136.148.0/24
188.136.151.0/24
188.136.157.0-188.136.159.255
188.136.174.0-188.136.189.255
188.136.192.0/22
188.136.197.0-188.136.209.255
188.136.212.0-188.136.223.255
213.195.12.0-213.195.20.255
213.207.192.0/20
217.66.196.0/23
217.66.208.0/24
217.66.211.0/24
IPv6:
2a0c:100::/29
Signature Algorithm: sha256WithRSAEncryption
a6:f9:0e:02:a3:79:6d:d3:4e:2d:0a:d7:6f:ec:87:80:09:87:
64:32:f1:d6:d9:a1:f6:2a:91:0a:f2:ff:26:1e:16:b9:d6:de:
d5:e6:d3:50:22:0d:b7:a6:75:03:83:be:b6:f5:e4:f1:f4:04:
15:2c:49:bc:80:ed:a3:74:d9:71:d6:47:d1:56:fd:a2:8c:aa:
49:65:89:2c:e8:6f:68:77:ad:e0:37:8a:7e:1e:f0:89:b6:f0:
2e:af:41:34:c7:75:78:f3:17:d8:df:5a:b2:48:78:9d:55:cc:
73:ec:1c:ac:c4:c6:7a:2e:da:76:82:66:d4:78:9f:3f:44:84:
12:d1:97:2b:f4:e3:b0:22:16:69:8d:a9:6f:6b:9b:9c:6f:d3:
5d:87:5a:2e:da:1d:a5:63:e5:bb:fa:c0:c3:f1:a7:a1:c5:ba:
98:ea:f9:43:83:a3:85:2a:1b:16:85:08:49:da:4f:27:f9:f1:
83:c6:67:04:f0:3b:e8:6a:4f:df:9d:44:8d:d6:de:44:e1:af:
5a:b1:0a:cf:29:ce:64:4e:51:75:f3:30:47:64:c6:38:8f:ad:
2d:63:d0:b1:82:5e:0f:b9:7f:da:a1:49:73:8a:66:2c:e8:3a:
b9:44:6b:00:09:56:be:e9:91:e5:f6:01:96:3a:6a:3a:55:56:
d1:80:fd:59
-----BEGIN CERTIFICATE-----
MIIHcjCCBlqgAwIBAgISAZ6EfdIeTk4rD3cFWkFTnB+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjYwNjAxMTg0MTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWE4NTA2ZDZkNjIwNWYxMThlM2FjYTJhOWI5MjdlN2Q2NzUzNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmThqjGAHXRRl4GOPijHhg8VDFLD
dtooRQXzGz3F9vq76sm5ewcce5jbAmy+a1bB3KVHzd+gT2GKUvmn58Swi+1Oj7RK
0EJzS9ojnLILwcx8JInAw72nKsKO5kmJcVDEnEM95IcsrYAQ1A45xKsok2Ufpi6B
ls7BgODVS+2UorYfvKtvBpWCEyMM0elLQPGArh8lrBpuagYeVjjCI5hp3gDTx9lR
WqVN3nLrhMMfHqFUUyn5v788KBpsxNncloYwFN/641Qyyp99/z766/agZPLchW4W
9e2U2OUTgZ7lLjM2Hi/EJxc54DOzDs6t3xj0oSxfGkHa7b81IJvuJlVGcQIDAQAB
o4IEfjCCBHowHQYDVR0OBBYEFImoUG1tYgXxGOOsoqm5J+fWdTShMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvaWFoUWJXMWlCZkVZNDZ5aXFia241OVoxTktFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICkgYIKwYBBQUHAQcBAf8EggKBMIICfTCCAmoEAgABMIIC
YgMEAx8ZaAMEAx/Z0AMEBCUTUAMEBiVywAMEACW/SzAMAwQEJb9QAwQCJb9YAwQG
Jd0AAwQEJesQAwQCLYCMAwQCLZB8AwQALiAFAwQALiAJAwQALiAOMAwDBAIuIqQD
BAQuIqAwDAMEAS4isgMEBi4igAMEBU6aIAMEAU6etjAMAwQBTp66AwQATp6+AwQC
T4TIAwQAT4TVMAwDBABPhNkDBAFPhNwDBABQR3EwDAMEAVBHegMEAVBHfAMEAFBH
fwMEAFEd8wMEA1Ed+AMEBFFbkAMEAVZtIAMEAlZtJAMEAFZtKQMEAVZtLgMEAFZt
NQMEAlZtOAMEAVZtPgMEAVf3tAMEBFu4QAMEA1w9uAMEAlx3RAMEBF6LoAMEA23m
QAMEBG3mUAMEALDdQQMEALkMPgMEArkVTAMEArkeTAMEArko8AMEArktvAMEArlG
PAMEAblSpAMEArlVRAMEALlo5AMEArmFmDAMAwQAuY7pAwQCuY7oAwQCuawAAwQC
ub4UAwQCucVEAwQBudCWAwQAvEtaAwQAvEtcAwQAvEteAwQBvEtmAwQAvEtpAwQA
vEtrAwQBvEtuMAwDBAC8S3EDBAG8S3QDBAC8S3cwDAMEAbxLegMEAbxLfAMEBbx5
gAMEALyIhgMEALyIjQMEALyIkQMEALyIlAMEALyIlzAMAwQAvIidAwQFvIiAMAwD
BAG8iK4DBAG8iLwDBAK8iMAwDAMEALyIxQMEAbyI0DAMAwQCvIjUAwQFvIjAMAwD
BALVwwwDBADVwxQDBATVz8ADBAHZQsQDBADZQtADBADZQtMwDQQCAAIwBwMFAyoM
AQAwDQYJKoZIhvcNAQELBQADggEBAKb5DgKjeW3TTi0K12/sh4AJh2Qy8dbZofYq
kQry/yYeFrnW3tXm01AiDbemdQODvrb15PH0BBUsSbyA7aN02XHWR9FW/aKMqkll
iSzob2h3reA3in4e8Im28C6vQTTHdXjzF9jfWrJIeJ1VzHPsHKzExnou2naCZtR4
nz9EhBLRlyv047AiFmmNqW9rm5xv012HWi7aHaVj5bv6wMPxp6HFupjq+UODo4Uq
GxaFCEnaTyf58YPGZwTwO+hqT9+dRI3W3kThr1qxCs8pzmROUXXzMEdkxjiPrS1j
0LGCXg+5f9qhSXOKZizoOrlEawAJVr7pkeX2AZY6ajpVVtGA/Vk=
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:21:52 2026 by rpki-client