Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/zyYbPpCv6fYHUvwJ_yjPU40JWq4.roa
File: zyYbPpCv6fYHUvwJ_yjPU40JWq4.roa (raw, json)
Hash identifier: RxHHr8Sv1kgmmwFX4lTu8k6aMKiCQO+QkcIcn7oPh3k=
Subject key identifier: CF:26:1B:3E:90:AF:E9:F6:07:52:FC:09:FF:28:CF:53:8D:09:5A:AE
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 019FD30BCEC658EA7B773C5DF358EF84820D
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/zyYbPpCv6fYHUvwJ_yjPU40JWq4.roa
Signing time: Wed 05 Aug 2026 17:49:54 +0000
ROA not before: Wed 05 Aug 2026 17:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49063
IP address blocks: 5.180.101.0/24 maxlen: 24
31.40.200.0/24 maxlen: 24
45.144.1.0/24 maxlen: 24
77.83.0.0/24 maxlen: 24
84.23.56.0/24 maxlen: 24
84.23.57.0/24 maxlen: 24
84.23.58.0/24 maxlen: 24
84.23.59.0/24 maxlen: 24
84.23.60.0/24 maxlen: 24
84.23.61.0/24 maxlen: 24
84.23.63.0/24 maxlen: 24
85.193.72.0/24 maxlen: 24
85.193.73.0/24 maxlen: 24
85.193.74.0/24 maxlen: 24
85.193.75.0/24 maxlen: 24
87.251.90.0/23 maxlen: 23
87.251.90.0/24 maxlen: 24
87.251.91.0/24 maxlen: 24
91.107.64.0/21 maxlen: 21
91.107.64.0/24 maxlen: 24
91.107.65.0/24 maxlen: 24
91.107.66.0/24 maxlen: 24
91.107.67.0/24 maxlen: 24
91.107.68.0/24 maxlen: 24
91.107.69.0/24 maxlen: 24
91.107.70.0/24 maxlen: 24
91.107.71.0/24 maxlen: 24
92.242.32.0/21 maxlen: 21
92.242.32.0/24 maxlen: 24
92.242.33.0/24 maxlen: 24
92.242.34.0/24 maxlen: 24
92.242.35.0/24 maxlen: 24
92.242.36.0/24 maxlen: 24
92.242.37.0/24 maxlen: 24
92.242.38.0/24 maxlen: 24
92.242.39.0/24 maxlen: 24
92.242.41.0/24 maxlen: 24
92.242.42.0/24 maxlen: 24
92.242.43.0/24 maxlen: 24
92.242.46.0/24 maxlen: 24
92.242.47.0/24 maxlen: 24
95.131.24.0/21 maxlen: 24
95.131.24.0/24 maxlen: 24
95.131.25.0/24 maxlen: 24
95.131.26.0/24 maxlen: 24
95.131.28.0/24 maxlen: 24
95.131.29.0/24 maxlen: 24
95.131.30.0/24 maxlen: 24
95.131.31.0/24 maxlen: 24
95.181.192.0/22 maxlen: 24
95.181.193.0/24 maxlen: 24
95.181.194.0/24 maxlen: 24
95.181.195.0/24 maxlen: 24
95.181.196.0/23 maxlen: 23
95.181.196.0/24 maxlen: 24
95.181.197.0/24 maxlen: 24
95.181.199.0/24 maxlen: 24
95.181.200.0/21 maxlen: 24
95.181.200.0/24 maxlen: 24
95.181.201.0/24 maxlen: 24
95.181.202.0/24 maxlen: 24
95.181.203.0/24 maxlen: 24
95.181.204.0/24 maxlen: 24
95.181.205.0/24 maxlen: 24
95.181.206.0/24 maxlen: 24
95.181.207.0/24 maxlen: 24
130.193.64.0/21 maxlen: 24
130.193.64.0/24 maxlen: 24
130.193.65.0/24 maxlen: 24
130.193.66.0/24 maxlen: 24
130.193.67.0/24 maxlen: 24
130.193.68.0/24 maxlen: 24
130.193.70.0/24 maxlen: 24
130.193.71.0/24 maxlen: 24
176.53.132.0/24 maxlen: 24
176.107.160.0/24 maxlen: 24
176.107.161.0/24 maxlen: 24
176.107.162.0/24 maxlen: 24
176.107.163.0/24 maxlen: 24
176.107.164.0/24 maxlen: 24
176.107.165.0/24 maxlen: 24
176.107.166.0/24 maxlen: 24
176.107.167.0/24 maxlen: 24
178.20.232.0/21 maxlen: 21
178.20.232.0/24 maxlen: 24
178.20.233.0/24 maxlen: 24
178.20.234.0/24 maxlen: 24
178.20.235.0/24 maxlen: 24
178.20.236.0/24 maxlen: 24
178.20.237.0/24 maxlen: 24
178.20.238.0/24 maxlen: 24
178.20.239.0/24 maxlen: 24
178.57.72.0/21 maxlen: 21
178.57.72.0/24 maxlen: 24
178.57.73.0/24 maxlen: 24
178.57.74.0/24 maxlen: 24
178.57.75.0/24 maxlen: 24
178.57.76.0/24 maxlen: 24
178.57.77.0/24 maxlen: 24
178.57.78.0/24 maxlen: 24
178.57.79.0/24 maxlen: 24
185.3.140.0/22 maxlen: 22
185.3.140.0/24 maxlen: 24
185.3.141.0/24 maxlen: 24
185.3.142.0/24 maxlen: 24
185.3.143.0/24 maxlen: 24
185.71.52.0/24 maxlen: 24
185.71.53.0/24 maxlen: 24
185.71.54.0/24 maxlen: 24
185.71.55.0/24 maxlen: 24
185.74.104.0/22 maxlen: 24
185.74.104.0/24 maxlen: 24
185.74.105.0/24 maxlen: 24
185.98.80.0/22 maxlen: 22
185.98.80.0/24 maxlen: 24
185.98.81.0/24 maxlen: 24
185.98.82.0/24 maxlen: 24
185.98.83.0/24 maxlen: 24
185.98.84.0/23 maxlen: 23
185.98.84.0/24 maxlen: 24
185.98.85.0/24 maxlen: 24
185.99.8.0/21 maxlen: 24
185.99.8.0/22 maxlen: 22
185.99.8.0/24 maxlen: 24
185.99.9.0/24 maxlen: 24
185.99.10.0/24 maxlen: 24
185.99.11.0/24 maxlen: 24
185.99.13.0/24 maxlen: 24
185.99.14.0/24 maxlen: 24
185.99.15.0/24 maxlen: 24
185.99.140.0/23 maxlen: 23
185.99.140.0/24 maxlen: 24
185.127.148.0/22 maxlen: 22
185.127.148.0/24 maxlen: 24
185.127.149.0/24 maxlen: 24
185.127.150.0/24 maxlen: 24
185.127.151.0/24 maxlen: 24
185.148.80.0/24 maxlen: 24
185.148.81.0/24 maxlen: 24
185.148.82.0/24 maxlen: 24
185.148.83.0/24 maxlen: 24
185.195.169.0/24 maxlen: 24
185.232.104.0/22 maxlen: 22
185.232.104.0/24 maxlen: 24
185.232.105.0/24 maxlen: 24
185.232.106.0/24 maxlen: 24
185.232.107.0/24 maxlen: 24
185.242.120.0/24 maxlen: 24
185.242.121.0/24 maxlen: 24
185.242.122.0/24 maxlen: 24
185.242.123.0/24 maxlen: 24
185.247.186.0/24 maxlen: 24
193.23.144.0/22 maxlen: 24
193.23.144.0/24 maxlen: 24
193.23.145.0/24 maxlen: 24
193.23.146.0/24 maxlen: 24
193.23.147.0/24 maxlen: 24
193.58.179.0/24 maxlen: 24
193.148.62.0/24 maxlen: 24
193.243.174.0/23 maxlen: 24
193.243.174.0/24 maxlen: 24
195.14.100.0/24 maxlen: 24
195.14.101.0/24 maxlen: 24
2a01:ba80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:0b:ce:c6:58:ea:7b:77:3c:5d:f3:58:ef:84:82:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Aug 5 17:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf261b3e90afe9f60752fc09ff28cf538d095aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:ce:65:45:8c:94:b6:2c:65:36:d8:92:75:
24:21:22:a6:ca:70:ea:13:9b:57:c7:11:69:84:03:
ea:3f:e7:a8:8e:dc:6e:01:c2:36:05:ad:ce:b8:75:
6d:99:ec:cf:62:da:cc:01:cd:35:5c:6c:0e:81:aa:
72:80:39:77:8d:bd:0e:2a:41:8a:dd:fb:92:34:31:
e3:29:c9:6b:a9:ad:be:26:0c:21:3e:3b:e7:fd:33:
68:10:57:3d:85:35:c8:11:63:f0:52:64:10:3c:b3:
b4:ce:7f:d9:20:77:7b:b8:db:98:d8:6b:4b:72:47:
7a:ef:a5:5b:e1:b2:d1:29:56:dd:0c:b7:86:03:aa:
76:47:8c:05:2b:8b:3c:e1:22:1e:c9:1a:8c:a7:4c:
90:9a:8f:95:c8:9f:d7:5c:b3:bf:8c:41:dd:a0:da:
0f:4c:fa:be:2f:3e:5a:5d:88:3c:9c:de:2d:04:5a:
3e:cd:e1:bc:3d:7d:91:9c:2f:65:58:40:4b:e6:54:
34:35:37:42:75:da:09:d6:e6:01:d9:fc:48:c0:4c:
9a:64:0b:55:a9:c7:2f:bc:84:90:85:38:5a:fd:77:
5f:96:25:ef:cf:b6:74:30:ca:36:b7:88:e2:84:61:
4a:d3:c3:17:59:7c:64:50:41:df:39:b1:1e:92:bf:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:26:1B:3E:90:AF:E9:F6:07:52:FC:09:FF:28:CF:53:8D:09:5A:AE
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/zyYbPpCv6fYHUvwJ_yjPU40JWq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.101.0/24
31.40.200.0/24
45.144.1.0/24
77.83.0.0/24
84.23.56.0-84.23.61.255
84.23.63.0/24
85.193.72.0/22
87.251.90.0/23
91.107.64.0/21
92.242.32.0/21
92.242.41.0-92.242.43.255
92.242.46.0/23
95.131.24.0/21
95.181.192.0-95.181.197.255
95.181.199.0-95.181.207.255
130.193.64.0/21
176.53.132.0/24
176.107.160.0/21
178.20.232.0/21
178.57.72.0/21
185.3.140.0/22
185.71.52.0/22
185.74.104.0/22
185.98.80.0-185.98.85.255
185.99.8.0/21
185.99.140.0/23
185.127.148.0/22
185.148.80.0/22
185.195.169.0/24
185.232.104.0/22
185.242.120.0/22
185.247.186.0/24
193.23.144.0/22
193.58.179.0/24
193.148.62.0/24
193.243.174.0/23
195.14.100.0/23
IPv6:
2a01:ba80::/32
Signature Algorithm: sha256WithRSAEncryption
e2:10:53:d0:53:75:52:51:dd:e6:7f:10:11:5b:fa:c2:0a:16:
14:4a:3e:ae:15:0b:c0:85:0a:51:dd:73:21:33:3d:f5:7d:3e:
34:a4:2f:da:b5:4b:2d:19:e3:06:12:69:ed:dc:9b:53:cb:b9:
0b:0e:9b:3a:ab:ff:1e:f3:db:61:9b:a1:d9:52:52:87:71:c4:
7e:8f:45:85:09:f5:98:46:9d:f0:dd:50:97:f3:1e:52:68:17:
34:65:b8:62:04:99:22:b1:00:97:4c:0c:d4:ca:cb:1d:af:f3:
fc:c1:e6:08:f2:92:d6:20:f5:46:d5:6f:05:e4:e4:67:33:73:
d7:bd:7a:f0:91:55:62:8c:49:2e:83:4e:ff:bf:f5:04:fd:f8:
bc:4d:cb:c2:3e:a3:7f:0a:33:ed:30:bf:52:a7:97:d8:3d:74:
84:c5:12:2c:8b:7d:4b:97:7d:99:f7:55:3f:ae:9e:71:38:0b:
a6:0d:6d:8a:b0:cf:f9:a3:9a:21:8e:60:7f:dd:88:f6:91:8c:
02:76:75:3b:98:24:cb:36:f6:02:bb:19:cc:f7:81:91:bd:33:
d4:68:52:e4:5a:f3:d1:9d:b9:0a:36:c8:da:01:2f:74:60:c8:
8b:2d:ab:7e:4a:52:8c:b5:cf:44:c8:39:0d:0b:17:97:da:04:
dd:f1:94:a4
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgISAZ/TC87GWOp7dzxd81jvhIINMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGM1M2QxZGU3YTJlZjdlYjJiOTBjODA5MTU1NDQxNDAw
NDI0ODgwHhcNMjYwODA1MTc0OTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjI2MWIzZTkwYWZlOWY2MDc1MmZjMDlmZjI4Y2Y1MzhkMDk1YWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr23OZUWMlLYsZTbYknUkISKmynDq
E5tXxxFphAPqP+eojtxuAcI2Ba3OuHVtmezPYtrMAc01XGwOgapygDl3jb0OKkGK
3fuSNDHjKclrqa2+JgwhPjvn/TNoEFc9hTXIEWPwUmQQPLO0zn/ZIHd7uNuY2GtL
ckd676Vb4bLRKVbdDLeGA6p2R4wFK4s84SIeyRqMp0yQmo+VyJ/XXLO/jEHdoNoP
TPq+Lz5aXYg8nN4tBFo+zeG8PX2RnC9lWEBL5lQ0NTdCddoJ1uYB2fxIwEyaZAtV
qccvvISQhTha/XdfliXvz7Z0MMo2t4jihGFK08MXWXxkUEHfObEekr9TiQIDAQAB
o4IDIjCCAx4wHQYDVR0OBBYEFM8mGz6Qr+n2B1L8Cf8oz1ONCVquMB8GA1UdIwQY
MBaAFB3cU9Heei736yuQyAkVVEFABCSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81NTc0MTQtZDk5My00Y2JmLTgxODEt
NDg2NzFmYjdkMzgwLzEvenlZYlBwQ3Y2ZllIVXZ3Sl95alBVNDBKV3E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81NTc0MTQtZDk5My00Y2JmLTgxODEtNDg2NzFmYjdkMzgw
LzEvSGR4VDBkNTZMdmZySzVESUNSVlVRVUFFSklnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNgYIKwYBBQUHAQcBAf8EggElMIIBITCCAQ4EAgABMIIB
BgMEAAW0ZQMEAB8oyAMEAC2QAQMEAE1TADAMAwQDVBc4AwQBVBc8AwQAVBc/AwQC
VcFIAwQBV/taAwQDW2tAAwQDXPIgMAwDBABc8ikDBAJc8igDBAFc8i4DBANfgxgw
DAMEBl+1wAMEAV+1xDAMAwQAX7XHAwQEX7XAAwQDgsFAAwQAsDWEAwQDsGugAwQD
shToAwQDsjlIAwQCuQOMAwQCuUc0AwQCuUpoMAwDBAS5YlADBAG5YlQDBAO5YwgD
BAG5Y4wDBAK5f5QDBAK5lFADBAC5w6kDBAK56GgDBAK58ngDBAC597oDBALBF5AD
BADBOrMDBADBlD4DBAHB864DBAHDDmQwDQQCAAIwBwMFACoBuoAwDQYJKoZIhvcN
AQELBQADggEBAOIQU9BTdVJR3eZ/EBFb+sIKFhRKPq4VC8CFClHdcyEzPfV9PjSk
L9q1Sy0Z4wYSae3cm1PLuQsOmzqr/x7z22GbodlSUodxxH6PRYUJ9ZhGnfDdUJfz
HlJoFzRluGIEmSKxAJdMDNTKyx2v8/zB5gjyktYg9UbVbwXk5Gczc9e9evCRVWKM
SS6DTv+/9QT9+LxNy8I+o38KM+0wv1Knl9g9dITFEiyLfUuXfZn3VT+unnE4C6YN
bYqwz/mjmiGOYH/diPaRjAJ2dTuYJMs29gK7Gcz3gZG9M9RoUuRa89GduQo2yNoB
L3RgyIstq35KUoy1z0TIOQ0LF5faBN3xlKQ=
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:16:36 2026 by rpki-client