Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/1-DJULH3ZwYfARcWJFOAy7L08L0o.roa
File: 1-DJULH3ZwYfARcWJFOAy7L08L0o.roa (raw, json)
Hash identifier: uzSvKMA/ek9jjzwiFTQKtBUiZnp+CdlB8u/4bLmjAWk=
Subject key identifier: F8:32:54:2C:7D:D9:C1:87:C0:45:C5:89:14:E0:32:EC:BD:3C:2F:4A
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 019FEA47069D40B311377F4693E5893D45C3
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/1-DJULH3ZwYfARcWJFOAy7L08L0o.roa
Signing time: Mon 10 Aug 2026 06:05:51 +0000
ROA not before: Mon 10 Aug 2026 06:05:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54994
IP address blocks: 91.194.204.0/24 maxlen: 24
91.194.205.0/24 maxlen: 24
91.202.200.0/24 maxlen: 24
93.188.131.0/24 maxlen: 24
93.188.132.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
148.253.34.0/24 maxlen: 24
148.253.36.0/24 maxlen: 24
148.253.41.0/24 maxlen: 24
148.253.42.0/24 maxlen: 24
148.253.44.0/24 maxlen: 24
148.253.47.0/24 maxlen: 24
148.253.50.0/24 maxlen: 24
148.253.60.0/24 maxlen: 24
148.253.61.0/24 maxlen: 24
148.253.62.0/24 maxlen: 24
148.253.63.0/24 maxlen: 24
148.253.228.0/24 maxlen: 24
148.253.229.0/24 maxlen: 24
148.253.231.0/24 maxlen: 24
148.253.232.0/24 maxlen: 24
148.253.233.0/24 maxlen: 24
148.253.234.0/24 maxlen: 24
148.253.235.0/24 maxlen: 24
148.253.237.0/24 maxlen: 24
148.253.239.0/24 maxlen: 24
148.253.241.0/24 maxlen: 24
148.253.244.0/24 maxlen: 24
148.253.245.0/24 maxlen: 24
148.253.246.0/24 maxlen: 24
148.253.248.0/24 maxlen: 24
151.249.92.0/24 maxlen: 24
151.249.93.0/24 maxlen: 24
151.249.94.0/24 maxlen: 24
163.171.64.0/24 maxlen: 24
163.171.67.0/24 maxlen: 24
163.171.70.0/24 maxlen: 24
163.171.71.0/24 maxlen: 24
163.171.77.0/24 maxlen: 24
163.171.84.0/24 maxlen: 24
163.171.85.0/24 maxlen: 24
163.171.87.0/24 maxlen: 24
163.171.93.0/24 maxlen: 24
163.171.94.0/24 maxlen: 24
163.171.96.0/24 maxlen: 24
163.171.97.0/24 maxlen: 24
163.171.98.0/24 maxlen: 24
163.171.101.0/24 maxlen: 24
163.171.102.0/24 maxlen: 24
163.171.103.0/24 maxlen: 24
163.171.104.0/24 maxlen: 24
163.171.110.0/24 maxlen: 24
163.171.119.0/24 maxlen: 24
163.171.126.0/24 maxlen: 24
163.171.143.0/24 maxlen: 24
163.171.149.0/24 maxlen: 24
163.171.151.0/24 maxlen: 24
163.171.153.0/24 maxlen: 24
163.171.164.0/24 maxlen: 24
163.171.166.0/24 maxlen: 24
163.171.176.0/24 maxlen: 24
163.171.177.0/24 maxlen: 24
163.171.182.0/24 maxlen: 24
163.171.188.0/24 maxlen: 24
163.171.198.0/24 maxlen: 24
163.171.207.0/24 maxlen: 24
163.171.215.0/24 maxlen: 24
163.171.216.0/24 maxlen: 24
163.171.217.0/24 maxlen: 24
163.171.218.0/24 maxlen: 24
163.171.222.0/24 maxlen: 24
163.171.224.0/24 maxlen: 24
163.171.225.0/24 maxlen: 24
163.171.227.0/24 maxlen: 24
163.171.228.0/24 maxlen: 24
163.171.230.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.234.0/24 maxlen: 24
163.171.235.0/24 maxlen: 24
163.171.237.0/24 maxlen: 24
163.171.239.0/24 maxlen: 24
163.171.244.0/24 maxlen: 24
163.171.245.0/24 maxlen: 24
163.171.249.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
185.27.228.0/24 maxlen: 24
185.27.230.0/24 maxlen: 24
194.107.19.0/24 maxlen: 24
2a01:53c0:ff19::/48 maxlen: 48
2a01:53c0:ffc6::/48 maxlen: 48
2a01:53c0:ffe2::/48 maxlen: 48
2a01:53c0:ffe3::/48 maxlen: 48
2a01:53c0:ffe7::/48 maxlen: 48
2a01:53c0:fff2::/48 maxlen: 48
2a01:53c0:fff4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:47:06:9d:40:b3:11:37:7f:46:93:e5:89:3d:45:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Aug 10 06:05:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f832542c7dd9c187c045c58914e032ecbd3c2f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:b6:8d:f0:29:e8:5c:f5:fc:3b:7a:56:8b:
94:bb:d9:72:b6:65:65:75:2f:29:93:17:7e:41:0d:
31:cf:8c:52:cd:3d:51:7d:e8:ae:e2:73:e4:28:92:
8d:de:fe:73:3f:dc:a4:79:97:c0:f8:c6:c3:b1:6b:
6e:43:d3:98:2e:e3:66:0f:62:4a:1b:52:1b:8b:cf:
c5:38:b6:c7:69:fc:be:6e:13:10:20:87:24:91:04:
af:2d:5c:6f:5b:7f:f7:2b:6d:3b:02:56:78:d3:ce:
fa:0d:90:46:84:fd:1d:97:24:5a:1c:0b:91:f2:45:
1b:7b:75:d8:19:65:02:5a:24:63:f7:f1:76:20:0a:
17:50:d6:d8:2e:2c:12:43:2b:44:b9:d7:b4:19:bc:
7f:a4:d0:a7:3e:5e:88:c9:38:56:61:34:31:50:76:
5a:de:2b:51:80:a2:58:02:c9:af:ae:e4:19:7a:5c:
64:c7:f1:64:aa:57:f1:2a:cd:af:3a:b9:46:d9:d4:
9d:07:15:88:57:2d:f8:32:e2:2c:44:d8:f7:37:40:
2a:6e:f4:1b:1e:f0:ad:b0:ba:ad:98:50:f6:c4:4f:
a8:2a:20:e2:a7:7a:4a:ac:95:7c:16:62:88:c4:52:
82:c9:f6:1c:2f:a0:dc:1f:f9:3a:90:57:4c:c6:34:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:32:54:2C:7D:D9:C1:87:C0:45:C5:89:14:E0:32:EC:BD:3C:2F:4A
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/1-DJULH3ZwYfARcWJFOAy7L08L0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.204.0/23
91.202.200.0/24
93.188.131.0-93.188.132.255
93.188.135.0/24
148.253.34.0/24
148.253.36.0/24
148.253.41.0-148.253.42.255
148.253.44.0/24
148.253.47.0/24
148.253.50.0/24
148.253.60.0/22
148.253.228.0/23
148.253.231.0-148.253.235.255
148.253.237.0/24
148.253.239.0/24
148.253.241.0/24
148.253.244.0-148.253.246.255
148.253.248.0/24
151.249.92.0-151.249.94.255
163.171.64.0/24
163.171.67.0/24
163.171.70.0/23
163.171.77.0/24
163.171.84.0/23
163.171.87.0/24
163.171.93.0-163.171.94.255
163.171.96.0-163.171.98.255
163.171.101.0-163.171.104.255
163.171.110.0/24
163.171.119.0/24
163.171.126.0/24
163.171.143.0/24
163.171.149.0/24
163.171.151.0/24
163.171.153.0/24
163.171.164.0/24
163.171.166.0/24
163.171.176.0/23
163.171.182.0/24
163.171.188.0/24
163.171.198.0/24
163.171.207.0/24
163.171.215.0-163.171.218.255
163.171.222.0/24
163.171.224.0/23
163.171.227.0-163.171.228.255
163.171.230.0/23
163.171.234.0/23
163.171.237.0/24
163.171.239.0/24
163.171.244.0/23
163.171.249.0/24
163.171.252.0/24
185.27.228.0/24
185.27.230.0/24
194.107.19.0/24
IPv6:
2a01:53c0:ff19::/48
2a01:53c0:ffc6::/48
2a01:53c0:ffe2::/47
2a01:53c0:ffe7::/48
2a01:53c0:fff2::/48
2a01:53c0:fff4::/48
Signature Algorithm: sha256WithRSAEncryption
4e:68:2c:f6:cb:59:7c:03:a4:b6:57:97:58:5f:1b:20:54:15:
7f:bc:e8:c7:5c:81:a1:ff:6b:21:80:d9:71:fe:59:6e:db:b9:
b0:af:42:b3:6c:d2:07:b1:56:26:6b:78:e8:87:d9:52:6e:cf:
c9:c9:85:f7:5e:5b:cb:44:a3:d4:05:9a:0c:d5:f2:f4:55:02:
90:72:0d:56:23:50:1a:39:a1:95:62:d4:6e:20:e5:76:92:65:
95:ed:17:35:cb:c7:5b:7b:1d:62:06:45:04:52:71:97:d7:dc:
26:60:e6:5a:2d:b5:e2:a6:de:50:9f:da:a0:da:62:f0:ce:0b:
37:27:b9:08:df:45:01:c5:d9:b8:76:0c:48:26:9c:ef:69:aa:
b2:83:8d:96:ab:d0:18:e9:62:8a:bb:5b:6f:f2:0c:dd:bc:ac:
b0:d6:20:09:a8:27:f4:2a:d0:56:4d:a7:35:5b:c5:14:a3:9d:
02:f3:b8:fd:0e:8f:40:0f:3f:60:d7:96:91:e6:7f:64:d4:20:
09:08:4e:a2:e8:c2:d3:24:80:ab:c0:87:95:6f:44:00:d5:6c:
e2:a4:54:b9:60:68:b5:e5:3f:d8:7a:35:9d:da:9b:9a:07:30:
14:26:00:f9:b0:94:99:e1:46:45:fd:ef:8f:5b:fe:a2:a1:fe:
8e:de:af:2c
-----BEGIN CERTIFICATE-----
MIIG4DCCBcigAwIBAgISAZ/qRwadQLMRN39Gk+WJPUXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5
ZDcwNmEwHhcNMjYwODEwMDYwNTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODMyNTQyYzdkZDljMTg3YzA0NWM1ODkxNGUwMzJlY2JkM2MyZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH+2jfAp6Fz1/Dt6VouUu9lytmVl
dS8pkxd+QQ0xz4xSzT1Rfeiu4nPkKJKN3v5zP9ykeZfA+MbDsWtuQ9OYLuNmD2JK
G1Ibi8/FOLbHafy+bhMQIIckkQSvLVxvW3/3K207AlZ40876DZBGhP0dlyRaHAuR
8kUbe3XYGWUCWiRj9/F2IAoXUNbYLiwSQytEude0Gbx/pNCnPl6IyThWYTQxUHZa
3itRgKJYAsmvruQZelxkx/FkqlfxKs2vOrlG2dSdBxWIVy34MuIsRNj3N0AqbvQb
HvCtsLqtmFD2xE+oKiDip3pKrJV8FmKIxFKCyfYcL6DcH/k6kFdMxjSZvQIDAQAB
o4ID7DCCA+gwHQYDVR0OBBYEFPgyVCx92cGHwEXFiRTgMuy9PC9KMB8GA1UdIwQY
MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt
YjVkODg4YWRmZDM3LzEvMS1ESlVMSDNad1lmQVJjV0pGT0F5N0wwOEwwby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODAvNjRhM2RlLTgxMmEtNGFjZS04MTRkLWI1ZDg4OGFkZmQz
Ny8xL1o3V3dMY1FCWm03Z1JhdVF6SWlCZi1DZGNHby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAf8GCCsGAQUFBwEHAQH/BIIB7jCCAeowggGoBAIAATCC
AaADBAFbwswDBABbysgwDAMEAF28gwMEAF28hAMEAF28hwMEAJT9IgMEAJT9JDAM
AwQAlP0pAwQAlP0qAwQAlP0sAwQAlP0vAwQAlP0yAwQClP08AwQBlP3kMAwDBACU
/ecDBAKU/egDBACU/e0DBACU/e8DBACU/fEwDAMEApT99AMEAJT99gMEAJT9+DAM
AwQCl/lcAwQAl/leAwQAo6tAAwQAo6tDAwQBo6tGAwQAo6tNAwQBo6tUAwQAo6tX
MAwDBACjq10DBACjq14wDAMEBaOrYAMEAKOrYjAMAwQAo6tlAwQAo6toAwQAo6tu
AwQAo6t3AwQAo6t+AwQAo6uPAwQAo6uVAwQAo6uXAwQAo6uZAwQAo6ukAwQAo6um
AwQBo6uwAwQAo6u2AwQAo6u8AwQAo6vGAwQAo6vPMAwDBACjq9cDBACjq9oDBACj
q94DBAGjq+AwDAMEAKOr4wMEAKOr5AMEAaOr5gMEAaOr6gMEAKOr7QMEAKOr7wME
AaOr9AMEAKOr+QMEAKOr/AMEALkb5AMEALkb5gMEAMJrEzA8BAIAAjA2AwcAKgFT
wP8ZAwcAKgFTwP/GAwcBKgFTwP/iAwcAKgFTwP/nAwcAKgFTwP/yAwcAKgFTwP/0
MA0GCSqGSIb3DQEBCwUAA4IBAQBOaCz2y1l8A6S2V5dYXxsgVBV/vOjHXIGh/2sh
gNlx/llu27mwr0KzbNIHsVYma3joh9lSbs/JyYX3XlvLRKPUBZoM1fL0VQKQcg1W
I1AaOaGVYtRuIOV2kmWV7Rc1y8dbex1iBkUEUnGX19wmYOZaLbXipt5Qn9qg2mLw
zgs3J7kI30UBxdm4dgxIJpzvaaqyg42Wq9AY6WKKu1tv8gzdvKyw1iAJqCf0KtBW
Tac1W8UUo50C87j9Do9ADz9g15aR5n9k1CAJCE6i6MLTJICrwIeVb0QA1WzipFS5
YGi15T/YejWd2puaBzAUJgD5sJSZ4UZF/e+PW/6iof6O3q8s
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:55:04 2026 by rpki-client