Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/hzo97s4v3GMC9JemawE_G_69_xQ.roa
File: hzo97s4v3GMC9JemawE_G_69_xQ.roa (raw, json)
Hash identifier: be6E5XX2tZu6F19eYf6ITco22ZDHl9eZTJ8uq+1gKPc=
Subject key identifier: 87:3A:3D:EE:CE:2F:DC:63:02:F4:97:A6:6B:01:3F:1B:FE:BD:FF:14
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019FDC806AEE7B72948F853BF648E152D900
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/hzo97s4v3GMC9JemawE_G_69_xQ.roa
Signing time: Fri 07 Aug 2026 13:53:51 +0000
ROA not before: Fri 07 Aug 2026 13:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 5.226.136.0/21 maxlen: 21
31.14.102.0/24 maxlen: 24
31.14.254.0/24 maxlen: 24
37.10.113.0/24 maxlen: 24
37.10.114.0/24 maxlen: 24
46.102.155.0/24 maxlen: 24
46.231.160.0/21 maxlen: 24
46.247.142.0/23 maxlen: 24
46.247.143.0/24 maxlen: 24
64.239.236.0/22 maxlen: 22
69.5.168.0/21 maxlen: 24
69.5.169.0/24 maxlen: 24
77.81.102.0/24 maxlen: 24
77.81.124.0/22 maxlen: 22
77.81.191.0/24 maxlen: 24
79.139.84.0/22 maxlen: 22
80.240.108.0/23 maxlen: 23
81.19.208.0/20 maxlen: 20
81.19.208.0/23 maxlen: 23
81.19.211.0/24 maxlen: 24
81.19.215.0/24 maxlen: 24
81.19.216.0/24 maxlen: 24
82.97.192.0/23 maxlen: 23
84.247.0.0/24 maxlen: 24
84.247.40.0/23 maxlen: 24
84.247.42.0/23 maxlen: 24
85.204.70.0/24 maxlen: 24
86.54.136.0/22 maxlen: 22
86.104.20.0/22 maxlen: 22
86.104.20.0/23 maxlen: 24
86.104.22.0/23 maxlen: 24
86.104.248.0/22 maxlen: 22
86.104.248.0/24 maxlen: 24
86.104.249.0/24 maxlen: 24
86.106.89.0/24 maxlen: 24
86.106.112.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
86.106.157.0/24 maxlen: 24
86.106.158.0/24 maxlen: 24
86.107.241.0/24 maxlen: 24
89.21.64.0/22 maxlen: 22
89.21.64.0/24 maxlen: 24
89.21.66.0/24 maxlen: 24
89.21.67.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
89.34.96.0/22 maxlen: 24
89.34.97.0/24 maxlen: 24
89.35.25.0/24 maxlen: 24
89.35.28.0/22 maxlen: 22
89.37.64.0/22 maxlen: 24
89.37.172.0/22 maxlen: 22
89.37.173.0/24 maxlen: 24
89.38.68.0/23 maxlen: 24
89.38.68.0/24 maxlen: 24
89.38.69.0/24 maxlen: 24
89.40.212.0/24 maxlen: 24
89.46.222.0/23 maxlen: 23
89.46.223.0/24 maxlen: 24
89.46.248.0/22 maxlen: 22
93.113.175.0/24 maxlen: 24
93.114.83.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
93.118.40.0/22 maxlen: 22
109.69.104.0/21 maxlen: 21
109.69.110.0/24 maxlen: 24
109.70.144.0/21 maxlen: 21
109.70.145.0/24 maxlen: 24
109.70.148.0/24 maxlen: 24
109.70.149.0/24 maxlen: 24
109.230.203.0/24 maxlen: 24
109.230.209.0/24 maxlen: 24
109.230.215.0/24 maxlen: 24
109.230.218.0/24 maxlen: 24
109.230.220.0/24 maxlen: 24
128.127.148.0/22 maxlen: 22
134.255.243.0/24 maxlen: 24
176.223.172.0/22 maxlen: 22
176.223.172.0/23 maxlen: 24
176.223.174.0/23 maxlen: 24
178.239.160.0/20 maxlen: 20
178.239.165.0/24 maxlen: 24
178.239.167.0/24 maxlen: 24
178.239.170.0/24 maxlen: 24
178.239.173.0/24 maxlen: 24
185.3.236.0/22 maxlen: 24
185.16.204.0/22 maxlen: 22
185.28.252.0/22 maxlen: 24
185.38.148.0/22 maxlen: 22
185.44.76.0/22 maxlen: 22
185.61.156.0/22 maxlen: 22
185.61.156.0/24 maxlen: 24
185.61.157.0/24 maxlen: 24
185.114.224.0/24 maxlen: 24
185.121.136.0/22 maxlen: 22
185.125.204.0/22 maxlen: 22
185.134.20.0/22 maxlen: 22
185.137.36.0/22 maxlen: 24
185.158.240.0/22 maxlen: 24
185.158.241.0/24 maxlen: 24
185.158.242.0/24 maxlen: 24
185.200.204.0/22 maxlen: 22
185.216.144.0/22 maxlen: 22
185.223.232.0/22 maxlen: 22
185.223.235.0/24 maxlen: 24
185.242.80.0/22 maxlen: 22
188.212.154.0/24 maxlen: 24
188.240.56.0/21 maxlen: 21
188.240.56.0/24 maxlen: 24
188.240.57.0/24 maxlen: 24
188.240.58.0/24 maxlen: 24
188.240.60.0/24 maxlen: 24
188.240.71.0/24 maxlen: 24
188.241.120.0/24 maxlen: 24
188.241.144.0/24 maxlen: 24
188.241.156.0/24 maxlen: 24
188.241.157.0/24 maxlen: 24
188.241.246.0/24 maxlen: 24
193.32.208.0/22 maxlen: 22
193.32.208.0/24 maxlen: 24
193.124.20.0/23 maxlen: 24
193.176.28.0/22 maxlen: 22
193.176.31.0/24 maxlen: 24
194.50.234.0/23 maxlen: 23
194.50.250.0/23 maxlen: 24
194.88.96.0/21 maxlen: 24
194.88.98.0/23 maxlen: 24
195.20.108.0/23 maxlen: 23
195.20.108.0/24 maxlen: 24
195.140.212.0/22 maxlen: 24
195.206.165.0/24 maxlen: 24
195.206.166.0/23 maxlen: 23
195.206.169.0/24 maxlen: 24
195.206.170.0/23 maxlen: 23
195.206.180.0/22 maxlen: 22
195.234.124.0/23 maxlen: 24
195.234.124.0/24 maxlen: 24
195.234.127.0/24 maxlen: 24
212.237.224.0/22 maxlen: 22
213.166.84.0/22 maxlen: 24
217.146.80.0/20 maxlen: 20
217.146.87.0/24 maxlen: 24
217.146.92.0/24 maxlen: 24
2a00:1a30::/32 maxlen: 32
2a01:4020::/32 maxlen: 40
2a01:4020:2::/48 maxlen: 48
2a01:4020:3::/48 maxlen: 48
2a01:4020:30::/48 maxlen: 48
2a01:4020:31::/48 maxlen: 48
2a01:4020:32::/48 maxlen: 48
2a01:4020:33::/48 maxlen: 48
2a01:4020:34::/48 maxlen: 48
2a01:4020:35::/48 maxlen: 48
2a01:4020:100::/40 maxlen: 40
2a01:4020:200::/40 maxlen: 40
2a01:4020:300::/40 maxlen: 48
2a0b:b840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:80:6a:ee:7b:72:94:8f:85:3b:f6:48:e1:52:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Aug 7 13:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=873a3deece2fdc6302f497a66b013f1bfebdff14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:a2:3b:a3:28:c6:07:c5:78:02:9d:5a:88:
c0:a1:c2:13:0c:52:38:df:a0:54:c4:87:eb:76:e3:
dc:e8:4c:0b:f3:5a:ef:ac:0c:b0:a0:7b:91:42:99:
69:74:49:49:04:21:92:87:87:ac:19:f1:c9:5a:9a:
5c:c7:a4:c2:a2:e4:47:17:26:c3:e9:92:c0:04:21:
5b:4f:7e:a6:52:37:e6:5e:5e:63:a6:74:ab:33:e8:
8c:96:1c:c1:0b:bd:45:90:0c:a4:0b:52:35:9a:79:
88:c0:19:cf:21:c6:10:3b:cd:47:f3:6d:ff:ad:bc:
1e:4e:ef:37:40:11:60:2c:1f:a9:78:bb:6e:d5:99:
e0:9e:bd:b6:9f:98:bb:73:83:94:85:de:c3:24:95:
dd:93:4e:d2:6b:31:24:6a:9a:39:e9:a5:30:4e:f0:
77:07:36:71:16:1e:15:63:3d:2d:34:b4:03:42:e6:
b9:47:7b:dc:6b:0f:d5:26:93:2e:12:c0:8c:77:ca:
f8:6d:4d:f0:71:c9:65:53:5f:a4:65:48:5d:ca:29:
6c:46:97:c3:ec:9a:49:5d:eb:e0:c1:28:c4:d3:f9:
6d:4a:30:17:fb:77:39:ef:23:c8:52:1c:25:c3:c6:
81:7d:9e:b1:29:f3:9a:cd:f4:41:55:8d:1b:a8:40:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3A:3D:EE:CE:2F:DC:63:02:F4:97:A6:6B:01:3F:1B:FE:BD:FF:14
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/hzo97s4v3GMC9JemawE_G_69_xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.231.160.0/21
46.247.142.0/23
64.239.236.0/22
69.5.168.0/21
77.81.102.0/24
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
80.240.108.0/23
81.19.208.0/20
82.97.192.0/23
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.54.136.0/22
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.28.252.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
185.242.80.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.124.20.0/23
193.176.28.0/22
194.50.234.0/23
194.50.250.0/23
194.88.96.0/21
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
Signature Algorithm: sha256WithRSAEncryption
14:b4:a2:4a:5d:3a:99:3f:ff:89:11:f1:e6:c4:98:b2:d4:8c:
36:07:50:e6:6c:cb:63:f3:79:79:23:80:e6:66:da:d3:fa:b7:
f8:fe:0d:64:27:79:9e:a1:ca:9a:8a:7a:6a:de:3d:80:35:a9:
66:1d:c4:ac:20:12:01:ca:b5:cb:82:4f:2b:7d:33:8e:00:b7:
34:3f:55:dd:dd:f0:22:2b:5a:ee:af:18:dd:0a:d3:f6:4a:99:
6e:3a:7d:e7:f9:a6:e8:a4:17:9d:16:b1:46:f2:6b:13:02:65:
69:b9:f2:1e:a7:80:6f:b6:a2:af:17:b5:1b:1e:92:ed:eb:bd:
98:bb:61:2e:de:84:33:bb:00:41:63:8b:05:17:e1:a4:47:39:
a0:d2:61:6f:c5:9f:05:2c:49:84:a4:43:f9:ac:5e:07:5d:ee:
8e:af:fe:8d:6a:b1:12:fb:48:ac:bd:2c:7e:ba:68:10:31:02:
0f:14:89:62:7a:aa:db:7b:20:8b:41:c2:f6:cd:48:50:ee:79:
79:14:7c:d7:05:47:e3:a7:9f:ca:bd:37:c8:46:11:d7:79:dd:
09:e6:e1:5c:35:6e:5a:4d:6d:76:83:2b:37:5c:5c:ed:07:55:
f5:a6:2d:f3:1b:24:d8:62:df:5c:f7:b8:80:3c:ce:47:50:8b:
1d:1c:15:ae
-----BEGIN CERTIFICATE-----
MIIHZjCCBk6gAwIBAgISAZ/cgGrue3KUj4U79kjhUtkAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjYwODA3MTM1MzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzNhM2RlZWNlMmZkYzYzMDJmNDk3YTY2YjAxM2YxYmZlYmRmZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg+iO6MoxgfFeAKdWojAocITDFI4
36BUxIfrduPc6EwL81rvrAywoHuRQplpdElJBCGSh4esGfHJWppcx6TCouRHFybD
6ZLABCFbT36mUjfmXl5jpnSrM+iMlhzBC71FkAykC1I1mnmIwBnPIcYQO81H823/
rbweTu83QBFgLB+peLtu1Zngnr22n5i7c4OUhd7DJJXdk07SazEkapo56aUwTvB3
BzZxFh4VYz0tNLQDQua5R3vcaw/VJpMuEsCMd8r4bU3wccllU1+kZUhdyilsRpfD
7JpJXevgwSjE0/ltSjAX+3c57yPIUhwlw8aBfZ6xKfOazfRBVY0bqEAGFQIDAQAB
o4IEcjCCBG4wHQYDVR0OBBYEFIc6Pe7OL9xjAvSXpmsBPxv+vf8UMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvaHpvOTdzNHYzR01DOUplbWF3RV9HXzY5X3hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIChgYIKwYBBQUHAQcBAf8EggJ1MIICcTCCAlAEAgABMIIC
SAMEAwXiiAMEAB8OZgMEAB8O/jAMAwQAJQpxAwQAJQpyAwQALmabAwQDLuegAwQB
LveOAwQCQO/sAwQDRQWoAwQATVFmAwQCTVF8AwQATVG/AwQCT4tUAwQBUPBsAwQE
URPQAwQBUmHAAwQAVPcAAwQCVPcoAwQAVcxGAwQCVjaIAwQCVmgUAwQCVmj4AwQA
VmpZAwQAVmpwAwQAVmqHMAwDBABWap0DBABWap4DBABWa/EDBAJZFUADBABZIH8D
BAJZImADBABZIxkDBAJZIxwDBAJZJUADBAJZJawDBAFZJkQDBABZKNQDBAFZLt4D
BAJZLvgDBABdca8DBABdclMDBABdcoEDBAJddigDBANtRWgDBANtRpADBABt5ssD
BABt5tEDBABt5tcDBABt5toDBABt5twDBAKAf5QDBACG//MDBAKw36wDBASy76AD
BAK5A+wDBAK5EMwDBAK5HPwDBAK5JpQDBAK5LEwDBAK5PZwDBAC5cuADBAK5eYgD
BAK5fcwDBAK5hhQDBAK5iSQDBAK5nvADBAK5yMwDBAK52JADBAK53+gDBAK58lAD
BAC81JoDBAO88DgDBAC88EcDBAC88XgDBAC88ZADBAG88ZwDBAC88fYDBALBINAD
BAHBfBQDBALBsBwDBAHCMuoDBAHCMvoDBAPCWGADBAHDFGwDBALDjNQwDAMEAMPO
pQMEA8POoDAMAwQAw86pAwQCw86oAwQCw860AwQBw+p8AwQAw+p/AwQC1O3gAwQC
1aZUAwQE2ZJQMBsEAgACMBUDBQAqABowAwUAKgFAIAMFAyoLuEAwDQYJKoZIhvcN
AQELBQADggEBABS0okpdOpk//4kR8ebEmLLUjDYHUOZsy2PzeXkjgOZm2tP6t/j+
DWQneZ6hypqKemrePYA1qWYdxKwgEgHKtcuCTyt9M44AtzQ/Vd3d8CIrWu6vGN0K
0/ZKmW46fef5puikF50WsUbyaxMCZWm58h6ngG+2oq8XtRseku3rvZi7YS7ehDO7
AEFjiwUX4aRHOaDSYW/FnwUsSYSkQ/msXgdd7o6v/o1qsRL7SKy9LH66aBAxAg8U
iWJ6qtt7IItBwvbNSFDueXkUfNcFR+Onn8q9N8hGEdd53Qnm4Vw1blpNbXaDKzdc
XO0HVfWmLfMbJNhi31z3uIA8zkdQix0cFa4=
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:42:37 2026 by rpki-client