Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/CspYMbhfGFpbF6Pkg6ctQR8K4iQ.roa
File: CspYMbhfGFpbF6Pkg6ctQR8K4iQ.roa (raw, json)
Hash identifier: 0FcBJfCuXOGiWgVPB5eCGffcUI8H49onLQWNPyf+flY=
Subject key identifier: 0A:CA:58:31:B8:5F:18:5A:5B:17:A3:E4:83:A7:2D:41:1F:0A:E2:24
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 019F002C60F752E28BA905A41D7E9A6F3CF1
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/CspYMbhfGFpbF6Pkg6ctQR8K4iQ.roa
Signing time: Thu 25 Jun 2026 19:05:36 +0000
ROA not before: Thu 25 Jun 2026 19:05:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54253
IP address blocks: 51.170.4.0/22 maxlen: 24
79.72.22.0/23 maxlen: 24
79.72.36.0/23 maxlen: 24
79.72.39.0/24 maxlen: 24
79.72.96.0/22 maxlen: 24
79.72.96.0/23 maxlen: 24
79.72.98.0/23 maxlen: 24
79.72.100.0/23 maxlen: 24
79.72.104.0/21 maxlen: 24
79.72.112.0/21 maxlen: 24
79.72.128.0/22 maxlen: 24
79.72.128.0/23 maxlen: 24
79.72.130.0/23 maxlen: 24
79.72.132.0/23 maxlen: 24
79.72.136.0/21 maxlen: 24
79.72.144.0/21 maxlen: 24
79.76.21.0/24 maxlen: 24
79.76.22.0/23 maxlen: 24
79.76.64.0/22 maxlen: 24
79.76.64.0/23 maxlen: 24
79.76.66.0/23 maxlen: 24
79.76.68.0/23 maxlen: 24
79.76.72.0/21 maxlen: 24
79.76.80.0/21 maxlen: 24
80.225.0.0/22 maxlen: 24
80.225.0.0/23 maxlen: 24
80.225.2.0/23 maxlen: 24
80.225.4.0/23 maxlen: 24
80.225.8.0/21 maxlen: 24
80.225.16.0/21 maxlen: 24
80.225.32.0/22 maxlen: 24
80.225.32.0/23 maxlen: 24
80.225.34.0/23 maxlen: 24
80.225.36.0/23 maxlen: 24
80.225.40.0/21 maxlen: 24
80.225.48.0/21 maxlen: 24
80.225.96.0/22 maxlen: 24
80.225.96.0/23 maxlen: 24
80.225.98.0/23 maxlen: 24
80.225.100.0/23 maxlen: 24
80.225.104.0/21 maxlen: 24
80.225.112.0/21 maxlen: 24
84.8.0.0/22 maxlen: 24
84.8.0.0/23 maxlen: 24
84.8.2.0/23 maxlen: 24
84.8.4.0/23 maxlen: 24
84.8.8.0/21 maxlen: 24
84.8.16.0/21 maxlen: 24
84.8.32.0/22 maxlen: 24
84.8.32.0/23 maxlen: 24
84.8.34.0/23 maxlen: 24
84.8.36.0/23 maxlen: 24
84.8.40.0/21 maxlen: 24
84.8.48.0/21 maxlen: 24
84.8.160.0/22 maxlen: 24
84.8.160.0/23 maxlen: 24
84.8.162.0/23 maxlen: 24
84.8.164.0/23 maxlen: 24
84.8.168.0/21 maxlen: 24
84.8.176.0/21 maxlen: 24
84.235.128.0/22 maxlen: 24
84.235.128.0/23 maxlen: 24
84.235.130.0/23 maxlen: 24
84.235.132.0/23 maxlen: 24
84.235.136.0/21 maxlen: 24
84.235.144.0/21 maxlen: 24
84.235.194.0/23 maxlen: 24
92.4.0.0/22 maxlen: 24
92.4.0.0/23 maxlen: 24
92.4.2.0/23 maxlen: 24
92.4.4.0/23 maxlen: 24
92.4.8.0/21 maxlen: 24
92.4.16.0/21 maxlen: 24
92.4.32.0/22 maxlen: 24
92.4.36.0/23 maxlen: 24
92.4.38.0/24 maxlen: 24
92.4.40.0/21 maxlen: 24
92.4.48.0/21 maxlen: 24
92.4.96.0/22 maxlen: 24
92.4.96.0/23 maxlen: 24
92.4.98.0/23 maxlen: 24
92.4.100.0/23 maxlen: 24
92.4.104.0/21 maxlen: 24
92.4.112.0/21 maxlen: 24
141.253.128.0/22 maxlen: 22
141.253.128.0/23 maxlen: 23
141.253.130.0/23 maxlen: 23
141.253.132.0/23 maxlen: 23
141.253.136.0/21 maxlen: 21
141.253.144.0/21 maxlen: 21
141.253.224.0/22 maxlen: 22
141.253.224.0/23 maxlen: 23
141.253.226.0/23 maxlen: 23
141.253.228.0/23 maxlen: 23
141.253.232.0/21 maxlen: 21
141.253.240.0/21 maxlen: 21
145.241.64.0/22 maxlen: 24
145.241.68.0/23 maxlen: 24
145.241.70.0/24 maxlen: 24
145.241.72.0/21 maxlen: 24
145.241.80.0/21 maxlen: 24
145.241.136.0/22 maxlen: 24
213.35.64.0/22 maxlen: 22
213.35.64.0/23 maxlen: 23
213.35.66.0/23 maxlen: 23
213.35.68.0/23 maxlen: 23
213.35.72.0/21 maxlen: 21
213.35.80.0/21 maxlen: 21
217.142.192.0/22 maxlen: 22
217.142.192.0/23 maxlen: 23
217.142.194.0/23 maxlen: 23
217.142.196.0/23 maxlen: 23
217.142.200.0/21 maxlen: 21
217.142.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:00:2c:60:f7:52:e2:8b:a9:05:a4:1d:7e:9a:6f:3c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Jun 25 19:05:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0aca5831b85f185a5b17a3e483a72d411f0ae224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:53:94:9d:52:3b:14:4c:30:62:3a:1b:61:
25:41:e1:9f:be:a8:58:79:e3:11:b0:87:15:e7:f0:
13:3e:3e:09:ac:80:06:9b:e1:19:1b:a5:92:b5:87:
12:90:30:14:d6:1f:4c:36:db:ec:c6:2e:ba:47:49:
11:86:40:8f:96:d0:13:59:03:ce:83:51:a7:e0:a9:
30:20:e5:30:74:d1:4c:31:90:00:b6:4d:b6:8d:02:
e6:cd:48:6c:b3:3f:4e:7c:6f:36:ad:59:8b:9d:9d:
72:b8:f9:e5:36:25:32:3a:42:f1:19:07:3c:0f:8b:
ae:15:26:28:b7:8c:80:60:f9:cc:f6:49:52:b9:47:
98:84:dc:a5:e6:89:b5:66:1c:0c:f0:e0:f1:09:6d:
26:fa:f6:ae:81:ee:83:f6:c1:a4:94:78:ca:5e:62:
21:ab:66:5a:96:ef:fa:d1:d6:10:d5:46:37:de:ad:
36:7c:75:be:ac:55:e9:86:68:35:7b:fd:6e:1c:60:
b2:06:83:4f:05:fd:50:4a:06:fd:96:53:b4:12:41:
fa:6b:cb:da:8c:b2:32:2d:6b:76:2a:c0:c6:ef:86:
c7:f9:e4:a6:11:9d:ee:0d:63:8d:60:9e:d3:68:f9:
06:50:01:98:5b:85:ce:4c:6f:d6:35:d8:16:d0:f4:
fb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CA:58:31:B8:5F:18:5A:5B:17:A3:E4:83:A7:2D:41:1F:0A:E2:24
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/CspYMbhfGFpbF6Pkg6ctQR8K4iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.170.4.0/22
79.72.22.0/23
79.72.36.0/23
79.72.39.0/24
79.72.96.0-79.72.101.255
79.72.104.0-79.72.119.255
79.72.128.0-79.72.133.255
79.72.136.0-79.72.151.255
79.76.21.0-79.76.23.255
79.76.64.0-79.76.69.255
79.76.72.0-79.76.87.255
80.225.0.0-80.225.5.255
80.225.8.0-80.225.23.255
80.225.32.0-80.225.37.255
80.225.40.0-80.225.55.255
80.225.96.0-80.225.101.255
80.225.104.0-80.225.119.255
84.8.0.0-84.8.5.255
84.8.8.0-84.8.23.255
84.8.32.0-84.8.37.255
84.8.40.0-84.8.55.255
84.8.160.0-84.8.165.255
84.8.168.0-84.8.183.255
84.235.128.0-84.235.133.255
84.235.136.0-84.235.151.255
84.235.194.0/23
92.4.0.0-92.4.5.255
92.4.8.0-92.4.23.255
92.4.32.0-92.4.38.255
92.4.40.0-92.4.55.255
92.4.96.0-92.4.101.255
92.4.104.0-92.4.119.255
141.253.128.0-141.253.133.255
141.253.136.0-141.253.151.255
141.253.224.0-141.253.229.255
141.253.232.0-141.253.247.255
145.241.64.0-145.241.70.255
145.241.72.0-145.241.87.255
145.241.136.0/22
213.35.64.0-213.35.69.255
213.35.72.0-213.35.87.255
217.142.192.0-217.142.197.255
217.142.200.0-217.142.215.255
Signature Algorithm: sha256WithRSAEncryption
80:b9:cf:aa:b5:a0:a4:a3:b5:f8:46:d9:22:b6:02:50:0f:1e:
2b:51:32:cd:17:cf:33:fc:74:53:4e:87:30:80:ef:90:68:16:
6f:7b:54:29:2a:a9:5f:df:15:9d:17:e2:32:3c:bc:21:28:50:
ae:0a:c4:99:1c:55:cd:5e:12:ec:b2:47:84:3c:1b:5b:e6:4a:
b6:51:c3:bb:b0:ea:19:3d:3c:37:fe:0a:67:e1:27:7b:e9:d1:
5e:e1:17:7b:c0:db:be:46:a1:d0:98:9f:87:35:44:d5:4e:76:
fc:2b:45:11:1f:44:17:d6:3d:d2:40:d6:3f:5f:91:e5:dd:f6:
65:9c:4a:3d:49:80:ba:a5:0d:99:94:c7:9f:89:46:5d:35:7c:
24:04:aa:69:77:78:c9:ae:0b:5e:33:c5:08:ec:2a:26:d6:f7:
6e:b0:95:70:ee:54:32:0e:cd:69:7e:3f:81:9a:06:73:a5:c9:
49:00:1e:ea:ce:3f:45:35:61:b8:58:f0:10:06:af:5d:87:73:
9f:54:56:0b:17:bc:36:f7:db:a8:ed:ef:a3:3f:4d:8d:29:48:
b4:ce:4c:dc:12:06:33:e1:ff:9c:46:d8:96:81:00:80:8a:5e:
d8:a1:90:46:ed:45:1f:74:ea:3f:0f:b8:51:29:e6:be:89:05:
97:28:e5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:39:20 2026 by rpki-client