Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/UMI9bz4yVWNtQXt_abYDeul6O-k.roa
File: UMI9bz4yVWNtQXt_abYDeul6O-k.roa (raw, json)
Hash identifier: YvgoY5gg4BL8DFfCYGFRQge1iqAETkhUZ/t1PGqPMzU=
Subject key identifier: 50:C2:3D:6F:3E:32:55:63:6D:41:7B:7F:69:B6:03:7A:E9:7A:3B:E9
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A13178713CA9A8F7227E43C1DB350C1808
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/UMI9bz4yVWNtQXt_abYDeul6O-k.roa
Signing time: Mon 12 Oct 2026 18:55:39 +0000
ROA not before: Mon 12 Oct 2026 18:55:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 2.56.173.0/24 maxlen: 24
5.180.22.0/24 maxlen: 24
5.180.24.0/24 maxlen: 24
5.180.29.0/24 maxlen: 24
5.180.30.0/24 maxlen: 24
5.180.45.0/24 maxlen: 24
5.180.55.0/24 maxlen: 24
5.253.40.0/24 maxlen: 24
5.253.41.0/24 maxlen: 24
5.253.43.0/24 maxlen: 24
45.12.108.0/22 maxlen: 24
45.12.129.0/24 maxlen: 24
45.12.130.0/24 maxlen: 24
45.12.131.0/24 maxlen: 24
45.12.132.0/22 maxlen: 24
45.12.136.0/22 maxlen: 24
45.12.140.0/22 maxlen: 24
45.12.144.0/22 maxlen: 24
45.12.149.0/24 maxlen: 24
45.12.150.0/23 maxlen: 24
45.15.126.0/23 maxlen: 24
45.15.131.0/24 maxlen: 24
45.15.140.0/24 maxlen: 24
45.15.141.0/24 maxlen: 24
45.15.142.0/24 maxlen: 24
45.15.144.0/24 maxlen: 24
45.15.152.0/24 maxlen: 24
45.15.153.0/24 maxlen: 24
45.15.160.0/22 maxlen: 24
45.15.165.0/24 maxlen: 24
45.15.166.0/24 maxlen: 24
45.15.167.0/24 maxlen: 24
45.15.168.0/22 maxlen: 24
45.15.176.0/24 maxlen: 24
45.15.178.0/24 maxlen: 24
45.15.184.0/24 maxlen: 24
45.15.185.0/24 maxlen: 24
45.15.187.0/24 maxlen: 24
45.82.245.0/24 maxlen: 24
45.82.246.0/24 maxlen: 24
45.82.247.0/24 maxlen: 24
45.82.249.0/24 maxlen: 24
45.82.250.0/24 maxlen: 24
45.82.251.0/24 maxlen: 24
45.82.252.0/24 maxlen: 24
45.82.254.0/24 maxlen: 24
45.82.255.0/24 maxlen: 24
45.83.20.0/24 maxlen: 24
45.83.21.0/24 maxlen: 24
45.83.22.0/24 maxlen: 24
45.83.26.0/24 maxlen: 24
45.83.129.0/24 maxlen: 24
45.83.130.0/24 maxlen: 24
45.83.131.0/24 maxlen: 24
45.83.140.0/22 maxlen: 24
45.83.148.0/24 maxlen: 24
45.86.70.0/24 maxlen: 24
45.86.72.0/24 maxlen: 24
45.86.74.0/24 maxlen: 24
45.89.107.0/24 maxlen: 24
45.89.108.0/22 maxlen: 24
45.89.196.0/24 maxlen: 24
45.92.162.0/24 maxlen: 24
45.128.48.0/24 maxlen: 24
45.128.50.0/24 maxlen: 24
45.128.52.0/24 maxlen: 24
45.128.54.0/24 maxlen: 24
45.128.72.0/24 maxlen: 24
45.128.75.0/24 maxlen: 24
45.136.128.0/23 maxlen: 24
45.136.149.0/24 maxlen: 24
85.208.109.0/24 maxlen: 24
85.208.110.0/24 maxlen: 24
85.209.153.0/24 maxlen: 24
85.209.154.0/24 maxlen: 24
85.209.195.0/24 maxlen: 24
171.22.110.0/24 maxlen: 24
171.22.112.0/24 maxlen: 24
171.22.113.0/24 maxlen: 24
171.22.116.0/23 maxlen: 24
171.22.118.0/24 maxlen: 24
171.22.120.0/24 maxlen: 24
171.22.122.0/24 maxlen: 24
171.22.123.0/24 maxlen: 24
171.22.124.0/22 maxlen: 24
213.59.115.0/24 maxlen: 24
213.59.116.0/24 maxlen: 24
213.59.117.0/24 maxlen: 24
213.59.118.0/24 maxlen: 24
213.59.121.0/24 maxlen: 24
213.59.122.0/24 maxlen: 24
213.59.123.0/24 maxlen: 24
2a06:e5c0::/29 maxlen: 29
2a0e:300::/29 maxlen: 29
2a0e:4640::/29 maxlen: 29
2a0e:4e00::/29 maxlen: 29
2a0e:6300::/29 maxlen: 29
2a0e:9bc0::/29 maxlen: 29
2a0e:a100::/29 maxlen: 29
2a0e:b3c0::/29 maxlen: 29
2a0e:cf80::/29 maxlen: 29
2a0e:e200::/29 maxlen: 29
2a0f:1c0::/29 maxlen: 29
2a0f:240::/29 maxlen: 29
2a0f:c40::/29 maxlen: 29
2a0f:cc0::/29 maxlen: 29
2a0f:d40::/29 maxlen: 29
2a0f:dc0::/29 maxlen: 29
2a0f:e40::/29 maxlen: 29
2a0f:1040::/29 maxlen: 29
2a0f:1240::/29 maxlen: 29
2a0f:12c0::/29 maxlen: 29
2a0f:2040::/29 maxlen: 29
2a0f:20c0::/29 maxlen: 29
2a0f:2140::/29 maxlen: 29
2a0f:21c0::/29 maxlen: 29
2a0f:2240::/29 maxlen: 29
2a0f:2ac0::/29 maxlen: 29
2a0f:2b40::/29 maxlen: 29
2a0f:2bc0::/29 maxlen: 29
2a0f:5b80::/29 maxlen: 29
2a0f:e480::/29 maxlen: 29
2a0f:f380::/29 maxlen: 29
2a0f:f480::/29 maxlen: 29
2a0f:f580::/29 maxlen: 29
2a0f:f680::/29 maxlen: 29
2a0f:f780::/29 maxlen: 29
2a0f:f980::/29 maxlen: 29
2a0f:fa80::/29 maxlen: 29
2a0f:fb80::/29 maxlen: 29
2a0f:fbc0::/29 maxlen: 29
2a0f:fc40::/29 maxlen: 29
2a0f:fcc0::/29 maxlen: 29
2a0f:fd40::/29 maxlen: 29
2a0f:fe80::/29 maxlen: 29
2a10:16c0::/29 maxlen: 29
2a10:2480::/29 maxlen: 29
2a10:2f80::/29 maxlen: 29
2a10:4200::/29 maxlen: 29
2a10:4300::/29 maxlen: 29
2a10:4400::/29 maxlen: 29
2a10:4500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:78:71:3c:a9:a8:f7:22:7e:43:c1:db:35:0c:18:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 12 18:55:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50c23d6f3e3255636d417b7f69b6037ae97a3be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:5d:02:2c:f5:b7:d3:a2:04:99:b4:a0:0b:
28:21:5f:3b:1a:96:75:a7:b8:7b:ea:31:4c:72:63:
31:06:11:4d:2d:1e:67:41:84:da:d0:39:65:26:f8:
92:9c:97:1d:0d:79:1d:06:12:37:a3:8a:60:25:0c:
40:2c:15:6c:93:08:3c:1b:60:bd:e6:d2:ea:18:e7:
85:50:58:8e:bf:83:01:90:60:b5:bf:c5:f2:07:f7:
1b:99:86:52:d2:29:2b:12:f2:a9:c6:dd:c3:15:12:
ac:e3:72:04:2b:e0:b4:39:74:3b:32:97:b5:b9:a7:
2f:64:ed:c1:aa:92:68:9e:a4:69:38:1e:56:8e:e9:
08:75:f2:16:9f:c5:38:74:c1:09:b0:13:22:7f:54:
14:64:4f:13:e0:ed:7b:9d:31:54:74:0d:4f:90:d0:
9d:b5:20:ce:3a:7a:eb:2a:80:ed:e9:72:e6:af:4d:
06:2a:e2:3f:41:c5:43:08:9c:db:fc:b0:9e:eb:16:
16:3f:e4:8c:97:d1:dc:97:7e:34:89:a3:3c:ab:16:
31:e2:18:9f:b9:a0:1d:bf:f9:77:3b:42:bd:d0:d3:
52:c6:3e:74:e0:a0:3e:da:a4:a2:f0:ba:9f:5a:73:
43:6d:63:7e:c7:49:82:23:0a:71:c9:87:81:b1:de:
4b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C2:3D:6F:3E:32:55:63:6D:41:7B:7F:69:B6:03:7A:E9:7A:3B:E9
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/UMI9bz4yVWNtQXt_abYDeul6O-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.173.0/24
5.180.22.0/24
5.180.24.0/24
5.180.29.0-5.180.30.255
5.180.45.0/24
5.180.55.0/24
5.253.40.0/23
5.253.43.0/24
45.12.108.0/22
45.12.129.0-45.12.147.255
45.12.149.0-45.12.151.255
45.15.126.0/23
45.15.131.0/24
45.15.140.0-45.15.142.255
45.15.144.0/24
45.15.152.0/23
45.15.160.0/22
45.15.165.0-45.15.171.255
45.15.176.0/24
45.15.178.0/24
45.15.184.0/23
45.15.187.0/24
45.82.245.0-45.82.247.255
45.82.249.0-45.82.252.255
45.82.254.0/23
45.83.20.0-45.83.22.255
45.83.26.0/24
45.83.129.0-45.83.131.255
45.83.140.0/22
45.83.148.0/24
45.86.70.0/24
45.86.72.0/24
45.86.74.0/24
45.89.107.0-45.89.111.255
45.89.196.0/24
45.92.162.0/24
45.128.48.0/24
45.128.50.0/24
45.128.52.0/24
45.128.54.0/24
45.128.72.0/24
45.128.75.0/24
45.136.128.0/23
45.136.149.0/24
85.208.109.0-85.208.110.255
85.209.153.0-85.209.154.255
85.209.195.0/24
171.22.110.0/24
171.22.112.0/23
171.22.116.0-171.22.118.255
171.22.120.0/24
171.22.122.0-171.22.127.255
213.59.115.0-213.59.118.255
213.59.121.0-213.59.123.255
IPv6:
2a06:e5c0::/29
2a0e:300::/29
2a0e:4640::/29
2a0e:4e00::/29
2a0e:6300::/29
2a0e:9bc0::/29
2a0e:a100::/29
2a0e:b3c0::/29
2a0e:cf80::/29
2a0e:e200::/29
2a0f:1c0::/29
2a0f:240::/29
2a0f:c40::/29
2a0f:cc0::/29
2a0f:d40::/29
2a0f:dc0::/29
2a0f:e40::/29
2a0f:1040::/29
2a0f:1240::/29
2a0f:12c0::/29
2a0f:2040::/29
2a0f:20c0::/29
2a0f:2140::/29
2a0f:21c0::/29
2a0f:2240::/29
2a0f:2ac0::/29
2a0f:2b40::/29
2a0f:2bc0::/29
2a0f:5b80::/29
2a0f:e480::/29
2a0f:f380::/29
2a0f:f480::/29
2a0f:f580::/29
2a0f:f680::/29
2a0f:f780::/29
2a0f:f980::/29
2a0f:fa80::/29
2a0f:fb80::/29
2a0f:fbc0::/29
2a0f:fc40::/29
2a0f:fcc0::/29
2a0f:fd40::/29
2a0f:fe80::/29
2a10:16c0::/29
2a10:2480::/29
2a10:2f80::/29
2a10:4200::/29
2a10:4300::/29
2a10:4400::/29
2a10:4500::/29
Signature Algorithm: sha256WithRSAEncryption
5f:45:a5:c5:17:57:3b:3a:8a:82:e8:f5:a3:11:04:4d:64:6d:
4d:b5:b4:8a:64:48:31:fe:73:70:38:6f:a1:de:05:89:e2:d8:
a6:d2:a8:00:59:16:6b:74:b9:5c:19:ce:27:3c:34:19:84:85:
04:15:f8:33:8d:f2:b8:02:ab:69:cc:04:28:a4:45:5d:d6:02:
47:a0:ce:dd:b0:39:e7:01:8e:0e:a6:a7:cf:21:a6:a9:cb:ae:
e7:47:61:eb:05:71:96:58:c1:d0:e9:05:8f:3d:4e:2c:44:57:
f9:a3:55:22:2d:c8:7a:43:99:5f:e5:23:48:81:90:4e:97:9e:
97:c3:36:52:fa:c6:87:38:9f:e0:50:74:11:8e:b2:46:f4:20:
21:a0:93:e8:7c:49:e4:66:7e:b6:77:e7:97:a4:94:c2:32:ff:
a1:08:88:6c:62:21:03:5e:29:4b:5d:4e:0c:be:2f:0f:75:87:
3a:ce:41:e3:76:50:c1:23:8d:f6:5c:19:a0:e5:53:9b:d4:dd:
ad:6e:1f:fe:09:c7:35:22:fa:f9:0c:53:5c:c9:8d:ec:35:fb:
6f:69:6d:e0:1c:37:67:f4:90:ac:1f:8f:09:76:c7:fd:d2:a0:
34:2f:9f:5a:0c:d0:a7:1b:df:f1:0e:e8:d6:25:10:de:31:6b:
31:d6:90:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:48:34 2026 by rpki-client