Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/_E4_m-HFkvTKsuUPQLEbaFRvBOo.roa
File: _E4_m-HFkvTKsuUPQLEbaFRvBOo.roa (raw, json)
Hash identifier: 0FI1Okv/locA744BW57ziC4MPXqOTDrNmX3nMB/HK3A=
Subject key identifier: FC:4E:3F:9B:E1:C5:92:F4:CA:B2:E5:0F:40:B1:1B:68:54:6F:04:EA
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019D2A0AB3C24CE87C28C2A5F5B6F8124C71
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/_E4_m-HFkvTKsuUPQLEbaFRvBOo.roa
Signing time: Thu 26 Mar 2026 12:07:17 +0000
ROA not before: Thu 26 Mar 2026 12:07:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 5.154.174.0/24 maxlen: 24
31.209.96.0/24 maxlen: 24
31.209.97.0/24 maxlen: 32
31.209.100.0/23 maxlen: 32
31.209.102.0/23 maxlen: 32
31.209.104.0/23 maxlen: 32
31.223.187.0/24 maxlen: 24
45.10.192.0/24 maxlen: 32
45.10.193.0/24 maxlen: 32
45.95.24.0/22 maxlen: 32
45.144.88.0/22 maxlen: 24
45.149.28.0/22 maxlen: 24
45.150.252.0/23 maxlen: 23
45.150.254.0/23 maxlen: 23
45.153.157.0/24 maxlen: 24
45.153.158.0/23 maxlen: 32
45.156.224.0/22 maxlen: 32
46.16.32.0/24 maxlen: 32
80.73.243.0/24 maxlen: 24
80.246.30.0/24 maxlen: 32
81.21.232.0/22 maxlen: 32
86.105.183.0/24 maxlen: 32
87.239.255.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
103.21.52.0/24 maxlen: 32
103.24.232.0/22 maxlen: 32
103.71.60.0/24 maxlen: 32
103.76.255.0/24 maxlen: 32
103.81.230.0/23 maxlen: 23
103.113.208.0/22 maxlen: 22
103.145.75.0/24 maxlen: 32
103.198.254.0/23 maxlen: 23
103.204.222.0/23 maxlen: 32
103.221.52.0/22 maxlen: 32
103.228.200.0/22 maxlen: 32
103.251.26.0/23 maxlen: 23
104.36.50.0/24 maxlen: 32
109.104.142.0/23 maxlen: 32
116.206.96.0/22 maxlen: 32
137.59.60.0/22 maxlen: 32
167.160.96.0/24 maxlen: 32
167.160.97.0/24 maxlen: 32
167.160.98.0/24 maxlen: 32
178.251.234.0/23 maxlen: 32
185.36.254.0/24 maxlen: 32
185.96.162.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
185.147.140.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
185.152.248.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.166.84.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.201.188.0/24 maxlen: 24
185.217.64.0/22 maxlen: 22
185.242.217.0/24 maxlen: 24
188.119.154.0/24 maxlen: 32
193.36.89.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
195.225.81.0/24 maxlen: 24
199.249.223.0/24 maxlen: 32
2a01:4740::/32 maxlen: 48
2a05:28c0::/29 maxlen: 48
2a05:6700::/29 maxlen: 48
2a05:f4c0::/29 maxlen: 48
2a06:3040::/29 maxlen: 48
2a06:46c0::/29 maxlen: 32
2a06:4a00::/29 maxlen: 48
2a06:5000::/29 maxlen: 48
2a06:5700::/29 maxlen: 48
2a06:5740::/29 maxlen: 48
2a06:5800::/29 maxlen: 48
2a06:6580::/29 maxlen: 48
2a06:7340::/29 maxlen: 48
2a06:8100::/29 maxlen: 48
2a06:8140::/29 maxlen: 48
2a06:df80::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a07:9c80::/29 maxlen: 29
2a07:f2c0::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:0a:b3:c2:4c:e8:7c:28:c2:a5:f5:b6:f8:12:4c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Mar 26 12:07:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc4e3f9be1c592f4cab2e50f40b11b68546f04ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:97:4c:e9:ac:b8:1d:9a:5f:8f:68:de:f3:
98:7a:c6:e9:b6:a1:6d:60:bb:a5:1e:f7:40:28:5b:
a6:1a:bf:6e:49:33:e2:02:b7:dd:50:25:93:e4:23:
94:09:b4:04:1f:83:9c:74:16:47:2d:9c:f1:2d:c6:
d0:5b:fb:20:ca:1b:0f:e9:dd:b4:0e:3a:ed:52:f6:
29:cd:04:22:88:fb:e5:cb:48:99:70:9d:99:61:89:
f2:66:2e:e2:4f:6a:d9:4f:e9:ab:21:ba:cf:37:d3:
fb:8a:ce:25:e5:bd:f1:26:16:29:4c:0d:4b:6d:4e:
f0:a9:06:44:14:fd:98:e9:23:2e:bf:68:24:c8:35:
80:48:3c:49:5b:04:39:75:44:3e:07:38:3b:c3:c8:
fc:71:c4:d6:2f:0f:28:dd:cc:48:1f:0f:3b:aa:c7:
8f:ec:dd:7d:12:75:32:03:60:17:1b:1f:e4:af:98:
1f:6f:ef:1d:04:47:5e:7f:3e:fe:90:87:7d:ec:ef:
aa:77:01:99:35:e2:9c:3c:3d:f4:88:37:bf:79:57:
ea:d3:3f:9c:d0:e9:b9:e5:3c:76:3d:8a:f8:3a:34:
c5:ca:6e:35:2a:8e:80:06:e2:e3:1c:84:1a:25:2a:
bf:6e:e5:94:35:31:86:f6:17:51:9c:cd:13:49:32:
11:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4E:3F:9B:E1:C5:92:F4:CA:B2:E5:0F:40:B1:1B:68:54:6F:04:EA
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/_E4_m-HFkvTKsuUPQLEbaFRvBOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
31.209.96.0/23
31.209.100.0-31.209.105.255
31.223.187.0/24
45.10.192.0/23
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.150.252.0/22
45.153.157.0-45.153.159.255
45.156.224.0/22
46.16.32.0/24
80.73.243.0/24
80.246.30.0/24
81.21.232.0/22
86.105.183.0/24
87.239.255.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
103.21.52.0/24
103.24.232.0/22
103.71.60.0/24
103.76.255.0/24
103.81.230.0/23
103.113.208.0/22
103.145.75.0/24
103.198.254.0/23
103.204.222.0/23
103.221.52.0/22
103.228.200.0/22
103.251.26.0/23
104.36.50.0/24
109.104.142.0/23
116.206.96.0/22
137.59.60.0/22
167.160.96.0-167.160.98.255
178.251.234.0/23
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.147.140.0/22
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.242.217.0/24
188.119.154.0/24
193.36.89.0/24
195.47.194.0/24
195.225.81.0/24
199.249.223.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:6700::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:5740::/29
2a06:5800::/29
2a06:6580::/29
2a06:7340::/29
2a06:8100::/29
2a06:8140::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
3e:5c:03:bb:56:5d:16:fd:41:20:1c:37:dc:27:9f:e0:3f:a0:
bd:a2:fd:df:07:c1:36:28:23:1f:5c:76:f6:b2:56:18:de:eb:
b5:4b:b5:aa:f7:ce:86:df:f2:10:db:46:b7:88:e4:f3:25:a9:
ad:49:5d:be:57:87:fb:ae:c8:d2:14:40:35:c2:d1:5b:c0:18:
30:62:23:c5:8b:f9:00:07:85:0a:4d:47:9a:65:45:0e:03:60:
85:02:ce:42:dd:da:07:ad:f6:d7:f8:da:6d:5e:21:70:e1:e2:
9c:13:bc:48:aa:e3:83:fa:f1:90:ca:80:06:16:e9:a8:e6:d7:
14:99:93:1f:f5:4a:c4:5b:83:e2:89:c6:54:4b:12:f6:e8:b3:
59:87:16:ee:a5:6d:ee:a0:7f:17:6d:ae:bf:d9:9d:b6:dc:9a:
3e:80:b9:cf:11:f9:10:b5:ca:00:de:57:f0:eb:68:e3:26:7b:
9c:fb:41:4c:d4:26:ca:b4:92:34:09:34:13:8c:a5:c2:40:5c:
67:5c:e2:5e:28:a3:9e:15:32:10:4e:0a:cf:6e:1a:d8:28:3c:
17:9e:4f:63:75:90:09:ce:17:cd:7c:6a:35:40:ea:94:a0:c0:
70:60:ed:aa:e6:f7:fd:6f:d2:2b:58:8d:1b:23:23:ec:cc:cc:
13:a7:5e:4e
-----BEGIN CERTIFICATE-----
MIIHLTCCBhWgAwIBAgISAZ0qCrPCTOh8KMKl9bb4EkxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx
OWE3NGUwHhcNMjYwMzI2MTIwNzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzRlM2Y5YmUxYzU5MmY0Y2FiMmU1MGY0MGIxMWI2ODU0NmYwNGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOaXTOmsuB2aX49o3vOYesbptqFt
YLulHvdAKFumGr9uSTPiArfdUCWT5COUCbQEH4OcdBZHLZzxLcbQW/sgyhsP6d20
DjrtUvYpzQQiiPvly0iZcJ2ZYYnyZi7iT2rZT+mrIbrPN9P7is4l5b3xJhYpTA1L
bU7wqQZEFP2Y6SMuv2gkyDWASDxJWwQ5dUQ+Bzg7w8j8ccTWLw8o3cxIHw87qseP
7N19EnUyA2AXGx/kr5gfb+8dBEdefz7+kId97O+qdwGZNeKcPD30iDe/eVfq0z+c
0Om55Tx2PYr4OjTFym41Ko6ABuLjHIQaJSq/buWUNTGG9hdRnM0TSTIR3QIDAQAB
o4IEOTCCBDUwHQYDVR0OBBYEFPxOP5vhxZL0yrLlD0CxG2hUbwTqMB8GA1UdIwQY
MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct
OTViMDhlMzY2MGNmLzEvX0U0X20tSEZrdlRLc3VVUFFMRWJhRlJ2Qk9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm
LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICTQYIKwYBBQUHAQcBAf8EggI8MIICODCCAYIEAgABMIIB
egMEAAWargMEAR/RYDAMAwQCH9FkAwQBH9FoAwQAH9+7AwQBLQrAAwQCLV8YAwQC
LZBYAwQCLZUcAwQCLZb8MAwDBAAtmZ0DBAUtmYADBAItnOADBAAuECADBABQSfMD
BABQ9h4DBAJRFegDBABWabcDBABX7/8DBABZI/kDBABZKBgDBABZLM0DBABb5NgD
BABeLs4DBABnFTQDBAJnGOgDBABnRzwDBABnTP8DBAFnUeYDBAJncdADBABnkUsD
BAFnxv4DBAFnzN4DBAJn3TQDBAJn5MgDBAFn+xoDBABoJDIDBAFtaI4DBAJ0zmAD
BAKJOzwwDAMEBaegYAMEAKegYgMEAbL76gMEALkk/gMEALlgogMEAblsaAMEArmT
jAMEArmYJAMEArmY+AMEALmZlwMEArmgLAMEALmmVAMEALm45AMEALm8PQMEALnJ
vAMEArnZQAMEALny2QMEALx3mgMEAMEkWQMEAMMvwgMEAMPhUQMEAMf53zCBrwQC
AAIwgagDBQAqAUdAAwUDKgUowAMFAyoFZwADBQMqBfTAAwUDKgYwQAMFAyoGRsAD
BQMqBkoAAwUDKgZQAAMFAyoGVwADBQMqBldAAwUDKgZYAAMFAyoGZYADBQMqBnNA
AwUDKgaBAAMFAyoGgUADBQMqBt+AAwUDKgbkgAMFAyoHR4ADBQMqB5yAAwUDKgfy
wAMFAyoKMIADBQMqCz9AAwUDKgzYwAMFAyoM7EAwDQYJKoZIhvcNAQELBQADggEB
AD5cA7tWXRb9QSAcN9wnn+A/oL2i/d8HwTYoIx9cdvayVhje67VLtar3zobf8hDb
RreI5PMlqa1JXb5Xh/uuyNIUQDXC0VvAGDBiI8WL+QAHhQpNR5plRQ4DYIUCzkLd
2get9tf42m1eIXDh4pwTvEiq44P68ZDKgAYW6ajm1xSZkx/1SsRbg+KJxlRLEvbo
s1mHFu6lbe6gfxdtrr/Znbbcmj6Auc8R+RC1ygDeV/DraOMme5z7QUzUJsq0kjQJ
NBOMpcJAXGdc4l4oo54VMhBOCs9uGtgoPBeeT2N1kAnOF818ajVA6pSgwHBg7arm
9/1v0itYjRsjI+zMzBOnXk4=
-----END CERTIFICATE-----
Generated at Sun Mar 29 22:01:29 2026 by rpki-client