Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/c7CZJUUIHxUz_3r4IC7p3Sp7E9Y.roa
File: c7CZJUUIHxUz_3r4IC7p3Sp7E9Y.roa (raw, json)
Hash identifier: 2ZK0zfQlWM/lIL1ZfJQAjuVuknTQ0MREvpJfMk1t+WQ=
Subject key identifier: 73:B0:99:25:45:08:1F:15:33:FF:7A:F8:20:2E:E9:DD:2A:7B:13:D6
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01A0EAF70DE22E3101CA4B5748993FCD83DD
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/c7CZJUUIHxUz_3r4IC7p3Sp7E9Y.roa
Signing time: Tue 29 Sep 2026 02:20:54 +0000
ROA not before: Tue 29 Sep 2026 02:20:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 5.226.136.0/21 maxlen: 21
31.14.102.0/24 maxlen: 24
31.14.254.0/24 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
46.102.155.0/24 maxlen: 24
46.231.160.0/21 maxlen: 24
46.247.142.0/23 maxlen: 24
46.247.143.0/24 maxlen: 24
64.239.236.0/22 maxlen: 22
69.5.168.0/21 maxlen: 24
69.5.169.0/24 maxlen: 24
77.81.102.0/24 maxlen: 24
77.81.124.0/22 maxlen: 22
77.81.191.0/24 maxlen: 24
79.139.84.0/22 maxlen: 22
80.240.108.0/23 maxlen: 23
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.211.0/24 maxlen: 24
81.19.215.0/24 maxlen: 24
81.19.216.0/24 maxlen: 24
82.97.192.0/23 maxlen: 23
84.247.0.0/24 maxlen: 24
84.247.40.0/23 maxlen: 24
84.247.42.0/23 maxlen: 24
85.204.70.0/24 maxlen: 24
86.54.136.0/22 maxlen: 22
86.104.20.0/22 maxlen: 22
86.104.20.0/23 maxlen: 24
86.104.22.0/23 maxlen: 24
86.104.248.0/22 maxlen: 22
86.104.248.0/24 maxlen: 24
86.104.249.0/24 maxlen: 24
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
89.21.67.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
89.34.96.0/22 maxlen: 24
89.34.97.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
89.37.64.0/22 maxlen: 24
89.37.172.0/22 maxlen: 22
89.37.173.0/24 maxlen: 24
89.38.68.0/23 maxlen: 24
89.38.68.0/24 maxlen: 24
89.38.69.0/24 maxlen: 24
89.40.212.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
89.46.223.0/24 maxlen: 24
89.46.248.0/22 maxlen: 22
93.113.175.0/24 maxlen: 24
93.114.83.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
93.118.40.0/22 maxlen: 22
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
134.255.243.0/24 maxlen: 24
176.223.172.0/22 maxlen: 22
176.223.172.0/23 maxlen: 24
176.223.174.0/23 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
178.239.170.0/24 maxlen: 24
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 24
185.16.204.0/22 maxlen: 22
185.28.252.0/22 maxlen: 24
185.38.148.0/22 maxlen: 22
185.44.76.0/22 maxlen: 22
185.61.156.0/22 maxlen: 22
185.61.156.0/24 maxlen: 24
185.61.157.0/24 maxlen: 24
185.114.224.0/24 maxlen: 24
185.121.136.0/22 maxlen: 22
185.125.204.0/22 maxlen: 22
185.134.20.0/22 maxlen: 22
185.137.36.0/22 maxlen: 24
185.158.240.0/22 maxlen: 24
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
185.200.204.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
185.242.80.0/22 maxlen: 22
188.212.154.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.60.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/24 maxlen: 24
188.241.157.0/24 maxlen: 24
188.241.246.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
193.124.20.0/23 maxlen: 24
193.176.28.0/22 maxlen: 22
193.176.31.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
194.50.250.0/23 maxlen: 24
194.88.96.0/21 maxlen: 24
194.88.98.0/23 maxlen: 24
195.20.108.0/23 maxlen: 23
195.20.108.0/24 maxlen: 24
195.140.212.0/22 maxlen: 24
195.206.165.0/24 maxlen: 24
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
212.237.224.0/22 maxlen: 22
213.166.84.0/22 maxlen: 24
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
217.146.92.0/24 maxlen: 24
2a00:1a30::/32 maxlen: 32
2a01:4020::/32 maxlen: 40
2a01:4020:2::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a01:4020:31::/48 maxlen: 48
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:34::/48 maxlen: 48
2a01:4020:35::/48 maxlen: 48
2a01:4020:100::/40 maxlen: 40
2a01:4020:200::/40 maxlen: 40
2a01:4020:300::/40 maxlen: 48
2a0b:b840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:f7:0d:e2:2e:31:01:ca:4b:57:48:99:3f:cd:83:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Sep 29 02:20:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73b0992545081f1533ff7af8202ee9dd2a7b13d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:0c:bc:f8:fd:b1:4b:03:51:d8:82:2e:c0:
d4:27:72:26:f2:be:c1:32:3c:2e:34:66:a8:67:79:
15:72:35:93:45:8b:53:ee:28:04:69:d3:d2:57:06:
79:3d:0f:bb:93:91:ef:28:22:5b:ee:d3:86:45:fc:
11:3e:aa:ba:bf:93:43:c7:d0:ef:56:62:96:a1:63:
e7:91:69:86:84:aa:38:97:16:ce:91:1e:54:38:b3:
47:f1:75:24:c5:77:fa:58:3f:c9:86:6b:9a:68:64:
76:25:47:bf:d1:26:3f:04:a0:03:ba:2b:46:d5:bc:
54:3e:50:43:ce:29:00:44:7d:0a:90:80:80:66:ed:
4f:04:72:ea:9e:32:f4:cf:71:ed:b8:33:51:05:ef:
09:04:5f:78:d5:7c:a8:bd:ae:20:5d:4b:54:fe:dc:
9d:9f:68:9d:7d:b6:a3:b3:ac:f6:2c:88:d0:99:f4:
30:e0:76:ae:b0:9b:d2:89:68:ec:a2:0f:9a:59:35:
86:51:4e:ae:58:16:24:d1:5f:dd:f2:cd:07:8d:d3:
2e:f0:3f:41:9f:dc:4d:82:65:83:06:0f:91:ee:0c:
a3:fb:49:81:24:7c:a7:85:58:55:a8:16:e4:05:92:
17:b1:60:f5:b8:3f:c1:62:18:91:71:6f:bc:c4:3f:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B0:99:25:45:08:1F:15:33:FF:7A:F8:20:2E:E9:DD:2A:7B:13:D6
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/c7CZJUUIHxUz_3r4IC7p3Sp7E9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.231.160.0/21
46.247.142.0/23
64.239.236.0/22
69.5.168.0/21
77.81.102.0/24
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
80.240.108.0/23
81.19.208.0/20
82.97.192.0/23
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.54.136.0/22
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.28.252.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
185.242.80.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.124.20.0/23
193.176.28.0/22
194.50.234.0/23
194.50.250.0/23
194.88.96.0/21
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
69:c9:28:dc:f1:a3:76:a8:c7:00:40:76:ff:57:06:f8:49:58:
b7:bb:10:14:66:72:ae:e3:1e:8f:2a:3c:ba:c9:8b:92:b6:ed:
f7:80:03:3b:8d:9b:d1:02:9a:9d:59:d5:7c:b1:a1:d5:69:af:
09:59:04:b6:43:fe:b6:5d:9a:a2:3f:a1:20:37:64:94:78:86:
8b:d5:16:9a:4c:32:e8:a4:0c:cd:37:6a:e1:44:cf:bf:10:21:
a6:35:3c:2d:50:df:08:d4:e5:b8:0e:49:ee:6c:df:f8:b7:13:
a9:29:d5:67:d9:d8:48:19:e8:ff:c6:78:4f:97:86:22:f3:3e:
41:a5:ae:a0:9b:75:44:51:e7:bb:e6:7c:c8:a0:6b:be:59:c0:
fc:de:36:61:c8:48:47:b4:e3:31:6f:bd:21:4b:45:ac:e8:ba:
e0:78:d9:97:e7:49:84:fa:4a:d4:48:6d:1d:32:cb:f8:ee:8c:
e8:2b:6a:91:8f:a6:8c:40:4a:00:02:f8:0c:7e:22:19:46:ee:
c0:9c:dd:a6:47:8e:5d:82:3f:4b:67:2e:22:e4:0f:fa:40:8a:
eb:39:ef:69:02:b2:da:d6:e8:04:c6:87:fa:bd:b8:83:26:f0:
ef:31:0f:87:3e:14:41:2e:a6:c9:4c:3b:3f:07:13:71:77:64:
c9:a5:0c:fa
-----BEGIN CERTIFICATE-----
MIIHZjCCBk6gAwIBAgISAaDq9w3iLjEByktXSJk/zYPdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjYwOTI5MDIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2IwOTkyNTQ1MDgxZjE1MzNmZjdhZjgyMDJlZTlkZDJhN2IxM2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfAMvPj9sUsDUdiCLsDUJ3Im8r7B
MjwuNGaoZ3kVcjWTRYtT7igEadPSVwZ5PQ+7k5HvKCJb7tOGRfwRPqq6v5NDx9Dv
VmKWoWPnkWmGhKo4lxbOkR5UOLNH8XUkxXf6WD/JhmuaaGR2JUe/0SY/BKADuitG
1bxUPlBDzikARH0KkICAZu1PBHLqnjL0z3HtuDNRBe8JBF941Xyova4gXUtU/tyd
n2idfbajs6z2LIjQmfQw4HausJvSiWjsog+aWTWGUU6uWBYk0V/d8s0HjdMu8D9B
n9xNgmWDBg+R7gyj+0mBJHynhVhVqBbkBZIXsWD1uD/BYhiRcW+8xD/56QIDAQAB
o4IEcjCCBG4wHQYDVR0OBBYEFHOwmSVFCB8VM/96+CAu6d0qexPWMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvYzdDWkpVVUlIeFV6XzNyNElDN3AzU3A3RTlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIChgYIKwYBBQUHAQcBAf8EggJ1MIICcTCCAlAEAgABMIIC
SAMEAwXiiAMEAB8OZgMEAB8O/jAMAwQAJQpxAwQAJQpyAwQALmabAwQDLuegAwQB
LveOAwQCQO/sAwQDRQWoAwQATVFmAwQCTVF8AwQATVG/AwQCT4tUAwQBUPBsAwQE
URPQAwQBUmHAAwQAVPcAAwQCVPcoAwQAVcxGAwQCVjaIAwQCVmgUAwQCVmj4AwQA
VmpZAwQAVmpwAwQAVmqHMAwDBABWap0DBABWap4DBABWa/EDBAJZFUADBABZIH8D
BAJZImADBABZIxkDBAJZIxwDBAJZJUADBAJZJawDBAFZJkQDBABZKNQDBAFZLt4D
BAJZLvgDBABdca8DBABdclMDBABdcoEDBAJddigDBANtRWgDBANtRpADBABt5ssD
BABt5tEDBABt5tcDBABt5toDBABt5twDBAKAf5QDBACG//MDBAKw36wDBASy76AD
BAK5A+wDBAK5EMwDBAK5HPwDBAK5JpQDBAK5LEwDBAK5PZwDBAC5cuADBAK5eYgD
BAK5fcwDBAK5hhQDBAK5iSQDBAK5nvADBAK5yMwDBAK52JADBAK53+gDBAK58lAD
BAC81JoDBAO88DgDBAC88EcDBAC88XgDBAC88ZADBAG88ZwDBAC88fYDBALBINAD
BAHBfBQDBALBsBwDBAHCMuoDBAHCMvoDBAPCWGADBAHDFGwDBALDjNQwDAMEAMPO
pQMEA8POoDAMAwQAw86pAwQCw86oAwQCw860AwQBw+p8AwQAw+p/AwQC1O3gAwQC
1aZUAwQE2ZJQMBsEAgACMBUDBQAqABowAwUAKgFAIAMFAyoLuEAwDQYJKoZIhvcN
AQELBQADggEBAGnJKNzxo3aoxwBAdv9XBvhJWLe7EBRmcq7jHo8qPLrJi5K27feA
AzuNm9ECmp1Z1XyxodVprwlZBLZD/rZdmqI/oSA3ZJR4hovVFppMMuikDM03auFE
z78QIaY1PC1Q3wjU5bgOSe5s3/i3E6kp1WfZ2EgZ6P/GeE+XhiLzPkGlrqCbdURR
57vmfMiga75ZwPzeNmHISEe04zFvvSFLRazouuB42ZfnSYT6StRIbR0yy/jujOgr
apGPpoxASgAC+Ax+IhlG7sCc3aZHjl2CP0tnLiLkD/pAius572kCstrW6ATGh/q9
uIMm8O8xD4c+FEEupslMOz8HE3F3ZMmlDPo=
-----END CERTIFICATE-----
Generated at Mon Oct 5 12:58:14 2026 by rpki-client