Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JwoNu_FClxieyFVG5V5rEf-HrZ4.roa
File: JwoNu_FClxieyFVG5V5rEf-HrZ4.roa (raw, json)
Hash identifier: nd25lvLjhZ5mX80QimBOFv7CvJ0zYeMqhY182wzTGmI=
Subject key identifier: 27:0A:0D:BB:F1:42:97:18:9E:C8:55:46:E5:5E:6B:11:FF:87:AD:9E
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01A15EF3E1984007C9CC7D9DC48F04AF312F
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JwoNu_FClxieyFVG5V5rEf-HrZ4.roa
Signing time: Wed 21 Oct 2026 14:53:23 +0000
ROA not before: Wed 21 Oct 2026 14:53:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58272
IP address blocks: 37.18.0.0/24 maxlen: 24
37.18.23.0/24 maxlen: 24
37.18.60.0/24 maxlen: 24
37.18.63.0/24 maxlen: 24
37.18.78.0/24 maxlen: 24
37.18.82.0/24 maxlen: 24
37.18.103.0/24 maxlen: 24
37.18.106.0/24 maxlen: 24
37.18.126.0/24 maxlen: 24
37.230.130.0/24 maxlen: 24
37.230.132.0/24 maxlen: 24
37.230.134.0/24 maxlen: 24
37.230.135.0/24 maxlen: 24
37.230.145.0/24 maxlen: 24
37.230.151.0/24 maxlen: 24
37.230.163.0/24 maxlen: 24
37.230.176.0/24 maxlen: 24
37.230.177.0/24 maxlen: 24
37.230.178.0/24 maxlen: 24
37.230.182.0/24 maxlen: 24
37.230.183.0/24 maxlen: 24
37.230.187.0/24 maxlen: 24
37.230.200.0/24 maxlen: 24
37.230.208.0/24 maxlen: 24
37.230.226.0/24 maxlen: 24
37.230.227.0/24 maxlen: 24
37.230.231.0/24 maxlen: 24
37.230.238.0/24 maxlen: 24
37.230.254.0/24 maxlen: 24
37.230.255.0/24 maxlen: 24
46.243.140.0/24 maxlen: 24
46.243.148.0/24 maxlen: 24
46.243.149.0/24 maxlen: 24
46.243.163.0/24 maxlen: 24
46.243.214.0/24 maxlen: 24
46.243.215.0/24 maxlen: 24
46.243.217.0/24 maxlen: 24
46.243.220.0/24 maxlen: 24
46.243.221.0/24 maxlen: 24
46.243.222.0/24 maxlen: 24
46.243.223.0/24 maxlen: 24
46.243.224.0/24 maxlen: 24
46.243.225.0/24 maxlen: 24
46.243.236.0/24 maxlen: 24
46.243.237.0/24 maxlen: 24
46.243.238.0/24 maxlen: 24
46.243.239.0/24 maxlen: 24
46.243.240.0/24 maxlen: 24
46.243.241.0/24 maxlen: 24
46.243.242.0/24 maxlen: 24
46.243.243.0/24 maxlen: 24
46.243.246.0/23 maxlen: 23
46.243.246.0/24 maxlen: 24
46.243.247.0/24 maxlen: 24
46.243.248.0/24 maxlen: 24
46.243.249.0/24 maxlen: 24
46.243.250.0/24 maxlen: 24
46.243.251.0/24 maxlen: 24
128.0.71.0/24 maxlen: 24
141.101.132.0/24 maxlen: 24
141.101.133.0/24 maxlen: 24
141.101.134.0/24 maxlen: 24
141.101.135.0/24 maxlen: 24
141.101.136.0/24 maxlen: 24
141.101.143.0/24 maxlen: 24
141.101.144.0/24 maxlen: 24
141.101.145.0/24 maxlen: 24
141.101.146.0/24 maxlen: 24
141.101.147.0/24 maxlen: 24
141.101.148.0/24 maxlen: 24
141.101.149.0/24 maxlen: 24
141.101.150.0/24 maxlen: 24
141.101.153.0/24 maxlen: 24
141.101.154.0/24 maxlen: 24
141.101.155.0/24 maxlen: 24
141.101.156.0/24 maxlen: 24
141.101.157.0/24 maxlen: 24
141.101.158.0/24 maxlen: 24
141.101.159.0/24 maxlen: 24
141.101.160.0/24 maxlen: 24
141.101.161.0/24 maxlen: 24
141.101.162.0/24 maxlen: 24
141.101.163.0/24 maxlen: 24
141.101.164.0/24 maxlen: 24
141.101.165.0/24 maxlen: 24
141.101.166.0/24 maxlen: 24
141.101.167.0/24 maxlen: 24
141.101.168.0/24 maxlen: 24
141.101.169.0/24 maxlen: 24
141.101.170.0/24 maxlen: 24
141.101.171.0/24 maxlen: 24
141.101.172.0/24 maxlen: 24
141.101.173.0/24 maxlen: 24
141.101.174.0/24 maxlen: 24
141.101.179.0/24 maxlen: 24
141.101.189.0/24 maxlen: 24
141.101.191.0/24 maxlen: 24
141.101.198.0/24 maxlen: 24
141.101.209.0/24 maxlen: 24
141.101.216.0/24 maxlen: 24
141.101.217.0/24 maxlen: 24
141.101.218.0/24 maxlen: 24
141.101.219.0/24 maxlen: 24
141.101.230.0/24 maxlen: 24
141.101.235.0/24 maxlen: 24
141.101.237.0/24 maxlen: 24
141.101.238.0/24 maxlen: 24
141.101.242.0/24 maxlen: 24
141.101.245.0/24 maxlen: 24
141.101.252.0/24 maxlen: 24
141.101.253.0/24 maxlen: 24
141.101.254.0/24 maxlen: 24
141.101.255.0/24 maxlen: 24
178.170.136.0/24 maxlen: 24
178.170.137.0/24 maxlen: 24
178.170.138.0/24 maxlen: 24
178.170.139.0/24 maxlen: 24
178.170.140.0/24 maxlen: 24
178.170.141.0/24 maxlen: 24
178.170.142.0/24 maxlen: 24
178.170.144.0/24 maxlen: 24
178.170.145.0/24 maxlen: 24
178.170.146.0/24 maxlen: 24
178.170.172.0/24 maxlen: 24
178.170.187.0/24 maxlen: 24
178.170.188.0/24 maxlen: 24
178.170.189.0/24 maxlen: 24
178.170.244.0/24 maxlen: 24
185.4.148.0/24 maxlen: 24
185.4.149.0/24 maxlen: 24
185.4.150.0/24 maxlen: 24
185.4.151.0/24 maxlen: 24
188.72.80.0/24 maxlen: 24
188.72.81.0/24 maxlen: 24
188.72.82.0/24 maxlen: 24
188.72.83.0/24 maxlen: 24
188.72.84.0/24 maxlen: 24
188.72.85.0/24 maxlen: 24
188.72.86.0/24 maxlen: 24
188.72.87.0/24 maxlen: 24
188.72.89.0/24 maxlen: 24
188.72.95.0/24 maxlen: 24
188.72.97.0/24 maxlen: 24
188.72.98.0/24 maxlen: 24
188.72.101.0/24 maxlen: 24
188.72.102.0/24 maxlen: 24
188.72.114.0/24 maxlen: 24
188.72.115.0/24 maxlen: 24
188.72.116.0/24 maxlen: 24
188.72.119.0/24 maxlen: 24
188.72.124.0/24 maxlen: 24
188.72.125.0/24 maxlen: 24
217.150.88.0/24 maxlen: 24
217.150.89.0/24 maxlen: 24
217.150.90.0/24 maxlen: 24
217.150.91.0/24 maxlen: 24
217.150.92.0/24 maxlen: 24
217.150.93.0/24 maxlen: 24
217.150.94.0/24 maxlen: 24
217.150.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:f3:e1:98:40:07:c9:cc:7d:9d:c4:8f:04:af:31:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Oct 21 14:53:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=270a0dbbf14297189ec85546e55e6b11ff87ad9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:3f:a2:6d:fb:09:36:f9:a5:22:54:d9:c0:
21:e6:5b:81:a1:20:79:f5:c1:f1:c5:17:7a:2a:23:
cb:e1:ea:8f:49:03:a7:90:26:9f:42:c6:7d:92:90:
95:3e:96:e5:c9:96:51:ee:88:fd:22:f8:39:f6:c9:
cb:a6:21:13:ee:7f:53:09:b6:c0:4a:6a:1b:1d:d8:
62:ab:8f:2d:f2:a7:13:eb:72:ae:3a:fd:fc:c3:0e:
76:b8:52:20:3d:ed:fe:76:65:71:a3:98:b4:b7:49:
95:32:df:6f:4b:cb:8a:86:f0:4f:17:5c:96:33:e2:
44:08:a0:88:0e:d4:09:5a:69:01:84:f5:5c:bc:8e:
97:49:f4:15:b0:f1:57:b2:3f:bf:15:de:be:9d:4e:
cd:c6:07:f7:81:df:df:9a:85:50:32:78:68:82:38:
f7:81:c5:db:bb:9b:8e:a0:b1:6f:f2:72:51:47:07:
ff:7e:7a:64:99:4a:45:d0:29:22:67:e7:2e:37:a3:
f4:20:9c:3d:da:24:19:ce:b4:8c:8b:9f:24:da:72:
a5:f5:eb:5a:05:c2:bf:c1:f4:33:ea:19:e3:36:eb:
7f:74:51:6a:47:50:01:d4:a5:f9:70:b0:42:77:38:
31:cb:85:b4:22:25:cd:dc:ac:ae:4c:a6:ca:4e:1d:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0A:0D:BB:F1:42:97:18:9E:C8:55:46:E5:5E:6B:11:FF:87:AD:9E
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JwoNu_FClxieyFVG5V5rEf-HrZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.0.0/24
37.18.23.0/24
37.18.60.0/24
37.18.63.0/24
37.18.78.0/24
37.18.82.0/24
37.18.103.0/24
37.18.106.0/24
37.18.126.0/24
37.230.130.0/24
37.230.132.0/24
37.230.134.0/23
37.230.145.0/24
37.230.151.0/24
37.230.163.0/24
37.230.176.0-37.230.178.255
37.230.182.0/23
37.230.187.0/24
37.230.200.0/24
37.230.208.0/24
37.230.226.0/23
37.230.231.0/24
37.230.238.0/24
37.230.254.0/23
46.243.140.0/24
46.243.148.0/23
46.243.163.0/24
46.243.214.0/23
46.243.217.0/24
46.243.220.0-46.243.225.255
46.243.236.0-46.243.243.255
46.243.246.0-46.243.251.255
128.0.71.0/24
141.101.132.0-141.101.136.255
141.101.143.0-141.101.150.255
141.101.153.0-141.101.174.255
141.101.179.0/24
141.101.189.0/24
141.101.191.0/24
141.101.198.0/24
141.101.209.0/24
141.101.216.0/22
141.101.230.0/24
141.101.235.0/24
141.101.237.0-141.101.238.255
141.101.242.0/24
141.101.245.0/24
141.101.252.0/22
178.170.136.0-178.170.142.255
178.170.144.0-178.170.146.255
178.170.172.0/24
178.170.187.0-178.170.189.255
178.170.244.0/24
185.4.148.0/22
188.72.80.0/21
188.72.89.0/24
188.72.95.0/24
188.72.97.0-188.72.98.255
188.72.101.0-188.72.102.255
188.72.114.0-188.72.116.255
188.72.119.0/24
188.72.124.0/23
217.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
17:94:54:06:09:db:da:a4:4d:45:8e:d8:1f:07:ba:ef:35:80:
de:c4:f1:92:f6:d2:53:5a:de:0b:29:61:79:d6:2a:4f:88:47:
a7:32:1f:c2:ee:04:9e:36:3b:fc:64:81:8d:7c:8b:4a:bf:3d:
3a:c9:03:81:8d:d7:1d:89:c8:4c:dc:27:d8:88:0e:5e:f1:63:
9a:51:af:71:d8:90:67:ca:9e:1d:85:d0:7c:cd:64:2c:78:c1:
4a:e3:22:ba:20:40:75:8f:4d:1b:6f:7b:b1:c6:cb:29:27:c2:
41:c8:90:38:cd:76:61:cf:dd:78:3d:c4:52:f5:b4:61:1b:66:
39:58:4c:3c:16:76:23:f7:81:12:7f:47:95:a4:3e:66:b8:51:
05:4f:94:f9:d0:34:99:b9:11:d9:09:2e:11:43:4d:dd:05:88:
4a:7d:d2:86:35:25:dd:e7:02:fd:4f:9a:96:50:84:a5:03:c9:
a5:2b:87:0f:0c:e1:db:19:c4:29:6f:ea:f5:ab:91:02:fc:ff:
cd:e1:6a:47:92:9b:48:a2:f5:d7:da:35:d6:e5:95:a6:05:f9:
da:14:98:6f:22:31:ab:89:57:c5:24:1a:6e:7d:6d:81:a1:53:
c7:e2:f6:b6:b9:39:20:96:4b:e7:92:91:78:c6:c2:a3:eb:0e:
8e:1a:3e:19
-----BEGIN CERTIFICATE-----
MIIG6zCCBdOgAwIBAgISAaFe8+GYQAfJzH2dxI8ErzEvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjYxMDIxMTQ1MzIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzBhMGRiYmYxNDI5NzE4OWVjODU1NDZlNTVlNmIxMWZmODdhZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG8/om37CTb5pSJU2cAh5luBoSB5
9cHxxRd6KiPL4eqPSQOnkCafQsZ9kpCVPpblyZZR7oj9Ivg59snLpiET7n9TCbbA
SmobHdhiq48t8qcT63KuOv38ww52uFIgPe3+dmVxo5i0t0mVMt9vS8uKhvBPF1yW
M+JECKCIDtQJWmkBhPVcvI6XSfQVsPFXsj+/Fd6+nU7Nxgf3gd/fmoVQMnhogjj3
gcXbu5uOoLFv8nJRRwf/fnpkmUpF0CkiZ+cuN6P0IJw92iQZzrSMi58k2nKl9eta
BcK/wfQz6hnjNut/dFFqR1AB1KX5cLBCdzgxy4W0IiXN3KyuTKbKTh17sQIDAQAB
o4ID9zCCA/MwHQYDVR0OBBYEFCcKDbvxQpcYnshVRuVeaxH/h62eMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvSndvTnVfRkNseGlleUZWRzVWNXJFZi1Iclo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICCwYIKwYBBQUHAQcBAf8EggH6MIIB9jCCAfIEAgABMIIB
6gMEACUSAAMEACUSFwMEACUSPAMEACUSPwMEACUSTgMEACUSUgMEACUSZwMEACUS
agMEACUSfgMEACXmggMEACXmhAMEASXmhgMEACXmkQMEACXmlwMEACXmozAMAwQE
JeawAwQAJeayAwQBJea2AwQAJea7AwQAJebIAwQAJebQAwQBJebiAwQAJebnAwQA
JebuAwQBJeb+AwQALvOMAwQBLvOUAwQALvOjAwQBLvPWAwQALvPZMAwDBAIu89wD
BAEu8+AwDAMEAi7z7AMEAi7z8DAMAwQBLvP2AwQCLvP4AwQAgABHMAwDBAKNZYQD
BACNZYgwDAMEAI1ljwMEAI1lljAMAwQAjWWZAwQAjWWuAwQAjWWzAwQAjWW9AwQA
jWW/AwQAjWXGAwQAjWXRAwQCjWXYAwQAjWXmAwQAjWXrMAwDBACNZe0DBACNZe4D
BACNZfIDBACNZfUDBAKNZfwwDAMEA7KqiAMEALKqjjAMAwQEsqqQAwQAsqqSAwQA
sqqsMAwDBACyqrsDBAGyqrwDBACyqvQDBAK5BJQDBAO8SFADBAC8SFkDBAC8SF8w
DAMEALxIYQMEALxIYjAMAwQAvEhlAwQAvEhmMAwDBAG8SHIDBAC8SHQDBAC8SHcD
BAG8SHwDBAPZllgwDQYJKoZIhvcNAQELBQADggEBABeUVAYJ29qkTUWO2B8Huu81
gN7E8ZL20lNa3gspYXnWKk+IR6cyH8LuBJ42O/xkgY18i0q/PTrJA4GN1x2JyEzc
J9iIDl7xY5pRr3HYkGfKnh2F0HzNZCx4wUrjIrogQHWPTRtve7HGyyknwkHIkDjN
dmHP3Xg9xFL1tGEbZjlYTDwWdiP3gRJ/R5WkPma4UQVPlPnQNJm5EdkJLhFDTd0F
iEp90oY1Jd3nAv1PmpZQhKUDyaUrhw8M4dsZxClv6vWrkQL8/83hakeSm0ii9dfa
NdbllaYF+doUmG8iMauJV8UkGm59bYGhU8fi9ra5OSCWS+eSkXjGwqPrDo4aPhk=
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:45 2026 by rpki-client