Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/67OiFVEvbIFfNzy1WDjYUfSQKxg.roa
File: 67OiFVEvbIFfNzy1WDjYUfSQKxg.roa (raw, json)
Hash identifier: HElN3xLoYKV8LeEgQttQ0NlwlcIsPVvOtRy+CwFBbFc=
Subject key identifier: EB:B3:A2:15:51:2F:6C:81:5F:37:3C:B5:58:38:D8:51:F4:90:2B:18
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 01A1105BAE27CA9A8B1B3299F9E35F731E69
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/67OiFVEvbIFfNzy1WDjYUfSQKxg.roa
Signing time: Tue 06 Oct 2026 08:36:46 +0000
ROA not before: Tue 06 Oct 2026 08:36:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211183
IP address blocks: 5.35.124.0/24 maxlen: 24
5.35.125.0/24 maxlen: 24
5.35.126.0/24 maxlen: 24
5.35.127.0/24 maxlen: 24
5.253.62.0/24 maxlen: 24
37.140.241.0/24 maxlen: 24
45.128.204.0/24 maxlen: 24
79.133.181.0/24 maxlen: 24
79.133.182.0/24 maxlen: 24
79.133.183.0/24 maxlen: 24
89.191.225.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
94.154.11.0/24 maxlen: 24
130.49.128.0/24 maxlen: 24
130.49.129.0/24 maxlen: 24
130.49.140.0/24 maxlen: 24
130.49.143.0/24 maxlen: 24
130.49.146.0/24 maxlen: 24
130.49.153.0/24 maxlen: 24
138.16.152.0/24 maxlen: 24
138.16.153.0/24 maxlen: 24
138.16.154.0/24 maxlen: 24
138.16.155.0/24 maxlen: 24
138.16.224.0/24 maxlen: 24
138.16.225.0/24 maxlen: 24
138.16.226.0/24 maxlen: 24
138.16.227.0/24 maxlen: 24
153.80.184.0/24 maxlen: 24
153.80.185.0/24 maxlen: 24
153.80.245.0/24 maxlen: 24
153.80.246.0/24 maxlen: 24
153.80.247.0/24 maxlen: 24
153.80.250.0/24 maxlen: 24
153.80.251.0/24 maxlen: 24
155.212.245.0/24 maxlen: 24
155.212.246.0/24 maxlen: 24
155.212.247.0/24 maxlen: 24
157.22.172.0/24 maxlen: 24
157.22.173.0/24 maxlen: 24
157.22.174.0/24 maxlen: 24
157.22.175.0/24 maxlen: 24
157.22.230.0/24 maxlen: 24
157.22.231.0/24 maxlen: 24
157.22.252.0/24 maxlen: 24
157.22.253.0/24 maxlen: 24
168.113.156.0/24 maxlen: 24
168.113.157.0/24 maxlen: 24
168.113.158.0/24 maxlen: 24
168.113.159.0/24 maxlen: 24
168.113.208.0/24 maxlen: 24
168.113.209.0/24 maxlen: 24
168.113.210.0/24 maxlen: 24
168.113.211.0/24 maxlen: 24
185.198.152.0/24 maxlen: 24
185.219.41.0/24 maxlen: 24
185.219.43.0/24 maxlen: 24
185.233.185.0/24 maxlen: 24
185.239.50.0/24 maxlen: 24
185.239.51.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
185.244.51.0/24 maxlen: 24
185.250.44.0/24 maxlen: 24
185.250.46.0/24 maxlen: 24
185.250.47.0/24 maxlen: 24
193.187.96.0/24 maxlen: 24
194.5.78.0/24 maxlen: 24
194.5.79.0/24 maxlen: 24
195.93.252.0/24 maxlen: 24
217.171.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:5b:ae:27:ca:9a:8b:1b:32:99:f9:e3:5f:73:1e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Oct 6 08:36:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebb3a215512f6c815f373cb55838d851f4902b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:27:7e:74:b5:69:e5:35:03:d9:d5:06:1f:
d8:b9:bf:01:41:37:9e:e3:99:b6:dd:fd:a3:12:6a:
db:57:1b:a6:0e:75:a8:59:e4:c0:fc:a4:45:ef:f9:
7b:8a:42:fb:f7:09:fb:39:bb:f0:41:67:dc:6d:fd:
f2:95:3d:cf:a1:4e:8b:16:73:78:4e:1f:12:d5:fc:
92:73:c6:27:ea:9c:1e:8e:ca:16:88:5f:01:69:67:
ac:65:e1:7f:8c:fa:b3:4c:a4:75:a8:6a:0f:dc:a3:
b3:4e:eb:3f:5f:f3:69:f5:2d:b7:b1:84:b4:01:3b:
dc:65:ee:f7:e1:11:8e:13:4a:5b:41:5c:dd:8f:46:
7a:7e:4b:6a:eb:b3:e2:fe:f3:ce:5b:b2:73:b0:c1:
0c:b3:13:4e:3f:77:39:a3:1b:f3:ad:72:bb:07:00:
34:f2:93:22:fa:8f:0f:97:5e:d3:1e:cb:83:89:e6:
d9:93:7d:d5:96:55:9c:1c:76:92:36:d5:a1:a4:f1:
10:75:cf:49:8b:9f:69:b6:66:06:5a:0f:4e:9c:3d:
d2:9c:d2:15:d4:89:3b:5b:a9:c7:6a:42:17:8c:cc:
22:22:37:03:3e:eb:ec:ec:13:3a:44:ac:dd:c1:ae:
6a:93:60:f0:76:f3:5e:b3:fb:1e:9d:8b:89:79:61:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B3:A2:15:51:2F:6C:81:5F:37:3C:B5:58:38:D8:51:F4:90:2B:18
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/67OiFVEvbIFfNzy1WDjYUfSQKxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.124.0/22
5.253.62.0/24
37.140.241.0/24
45.128.204.0/24
79.133.181.0-79.133.183.255
89.191.225.0/24
91.200.84.0/24
94.154.11.0/24
130.49.128.0/23
130.49.140.0/24
130.49.143.0/24
130.49.146.0/24
130.49.153.0/24
138.16.152.0/22
138.16.224.0/22
153.80.184.0/23
153.80.245.0-153.80.247.255
153.80.250.0/23
155.212.245.0-155.212.247.255
157.22.172.0/22
157.22.230.0/23
157.22.252.0/23
168.113.156.0/22
168.113.208.0/22
185.198.152.0/24
185.219.41.0/24
185.219.43.0/24
185.233.185.0/24
185.239.50.0/23
185.240.103.0/24
185.244.51.0/24
185.250.44.0/24
185.250.46.0/23
193.187.96.0/24
194.5.78.0/23
195.93.252.0/24
217.171.146.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:1f:ea:30:9a:10:98:14:48:b3:8b:33:af:34:45:e3:94:53:
74:ec:cc:d6:a6:dc:7d:8a:d3:1e:2a:34:52:3d:00:f8:9e:73:
d9:5b:7c:82:06:a9:19:f4:a2:0f:4a:60:a8:2d:19:54:99:4b:
35:35:4c:72:bd:5f:43:9b:d4:fa:ac:4e:fd:19:2f:ea:94:2a:
8a:9f:01:92:a3:e7:c2:0e:d5:40:59:56:c9:04:01:d3:7a:d1:
1d:12:b1:47:2b:43:54:f1:60:59:cb:08:9c:4c:4e:7c:6d:20:
a1:75:15:22:44:1b:5e:04:0a:07:54:8b:c8:bb:18:43:86:a7:
27:fd:a9:a0:f7:41:cc:ce:48:c6:9a:68:8f:af:d3:a0:20:9a:
a0:47:0e:86:27:0f:a8:58:f0:41:ae:38:5f:5b:bf:86:47:08:
ca:e0:a9:35:0e:41:85:c4:17:a9:10:7d:83:62:d9:5f:c9:80:
31:b4:d6:4c:81:f7:f4:0c:dd:23:e2:09:55:49:ee:fe:f3:29:
f1:ce:5e:c0:10:3a:37:95:a6:fd:c0:df:5e:3b:ad:30:05:aa:
ed:6f:7a:f4:10:49:82:79:9d:7c:de:25:20:b6:5d:c3:83:9e:
8c:6f:c4:ae:28:1e:3d:e0:0a:df:da:07:f9:3d:e8:65:df:d3:
12:d2:b3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:08:54 2026 by rpki-client