Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/wrNDqIGL46GbPFlLV3ftdAx_UK4.roa
File:                     wrNDqIGL46GbPFlLV3ftdAx_UK4.roa (raw, json)
Hash identifier:          5QK1F45BImfUqKNV131htGF5A+1+6XK2Skgx/nv8vZo=
Subject key identifier:   C2:B3:43:A8:81:8B:E3:A1:9B:3C:59:4B:57:77:ED:74:0C:7F:50:AE
Certificate issuer:       /CN=b753ac03945289e186bf29737b25618d3ccd4430
Certificate serial:       019F2368BF6402AB4C57B41BD34D4A5FCF99
Authority key identifier: B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/wrNDqIGL46GbPFlLV3ftdAx_UK4.roa
Signing time:             Thu 02 Jul 2026 15:18:14 +0000
ROA not before:           Thu 02 Jul 2026 15:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44217
IP address blocks:        62.201.192.0/18 maxlen: 18
                          62.201.192.0/23 maxlen: 23
                          62.201.193.0/24 maxlen: 24
                          62.201.194.0/24 maxlen: 24
                          62.201.195.0/24 maxlen: 24
                          62.201.196.0/24 maxlen: 24
                          62.201.197.0/24 maxlen: 24
                          62.201.198.0/24 maxlen: 24
                          62.201.200.0/24 maxlen: 24
                          62.201.201.0/24 maxlen: 24
                          62.201.202.0/24 maxlen: 24
                          62.201.203.0/24 maxlen: 24
                          62.201.204.0/23 maxlen: 23
                          62.201.205.0/24 maxlen: 24
                          62.201.206.0/24 maxlen: 24
                          62.201.207.0/24 maxlen: 24
                          62.201.208.0/22 maxlen: 22
                          62.201.208.0/24 maxlen: 24
                          62.201.209.0/24 maxlen: 24
                          62.201.210.0/24 maxlen: 24
                          62.201.211.0/24 maxlen: 24
                          62.201.212.0/22 maxlen: 22
                          62.201.212.0/24 maxlen: 24
                          62.201.213.0/24 maxlen: 24
                          62.201.214.0/24 maxlen: 24
                          62.201.215.0/24 maxlen: 24
                          62.201.216.0/24 maxlen: 24
                          62.201.217.0/24 maxlen: 24
                          62.201.218.0/24 maxlen: 24
                          62.201.219.0/24 maxlen: 24
                          62.201.220.0/22 maxlen: 22
                          62.201.220.0/24 maxlen: 24
                          62.201.221.0/24 maxlen: 24
                          62.201.222.0/24 maxlen: 24
                          62.201.223.0/24 maxlen: 24
                          62.201.224.0/22 maxlen: 22
                          62.201.224.0/24 maxlen: 24
                          62.201.225.0/24 maxlen: 24
                          62.201.226.0/24 maxlen: 24
                          62.201.227.0/24 maxlen: 24
                          62.201.228.0/22 maxlen: 22
                          62.201.228.0/24 maxlen: 24
                          62.201.229.0/24 maxlen: 24
                          62.201.230.0/24 maxlen: 24
                          62.201.231.0/24 maxlen: 24
                          62.201.232.0/22 maxlen: 22
                          62.201.232.0/24 maxlen: 24
                          62.201.233.0/24 maxlen: 24
                          62.201.234.0/24 maxlen: 24
                          62.201.235.0/24 maxlen: 24
                          62.201.236.0/24 maxlen: 24
                          62.201.238.0/24 maxlen: 24
                          62.201.239.0/24 maxlen: 24
                          62.201.240.0/21 maxlen: 21
                          62.201.240.0/24 maxlen: 24
                          62.201.241.0/24 maxlen: 24
                          62.201.242.0/23 maxlen: 24
                          62.201.242.0/24 maxlen: 24
                          62.201.243.0/24 maxlen: 24
                          62.201.244.0/23 maxlen: 24
                          62.201.246.0/24 maxlen: 24
                          62.201.247.0/24 maxlen: 24
                          62.201.248.0/24 maxlen: 24
                          62.201.249.0/24 maxlen: 24
                          62.201.250.0/24 maxlen: 24
                          62.201.251.0/24 maxlen: 24
                          62.201.252.0/22 maxlen: 24
                          62.201.253.0/24 maxlen: 24
                          62.201.254.0/23 maxlen: 24
                          89.33.66.0/23 maxlen: 23
                          185.1.98.0/24 maxlen: 24
                          185.90.104.0/22 maxlen: 24
                          2a02:b60::/32 maxlen: 32
                          2a02:b60:0:f::/64 maxlen: 64
                          2a02:b60:20::/48 maxlen: 48
                          2a02:b60:30::/48 maxlen: 48
                          2a02:b60:31::/48 maxlen: 48
                          2a02:b60:32::/48 maxlen: 48
                          2a02:b60:33::/48 maxlen: 48
                          2a02:b60:34::/48 maxlen: 48
                          2a02:b60:35::/48 maxlen: 48
                          2a02:b60:36::/48 maxlen: 48
                          2a02:b60:37::/48 maxlen: 48
                          2a02:b60:38::/48 maxlen: 48
                          2a02:b60:39::/48 maxlen: 48
                          2a02:b60:3a::/48 maxlen: 48
                          2a02:b60:3b::/48 maxlen: 48
                          2a02:b60:3c::/48 maxlen: 48
                          2a02:b60:3d::/48 maxlen: 48
                          2a02:b60:3e::/48 maxlen: 48
                          2a02:b60:3f::/48 maxlen: 48
                          2a02:b60:40::/48 maxlen: 48
                          2a02:b60:41::/48 maxlen: 48
                          2a02:b60:42::/48 maxlen: 48
                          2a02:b60:43::/48 maxlen: 48
                          2a02:b60:44::/48 maxlen: 48
                          2a02:b60:45::/48 maxlen: 48
                          2a02:b60:46::/48 maxlen: 48
                          2a02:b60:47::/48 maxlen: 48
                          2a02:b60:48::/48 maxlen: 48
                          2a02:b60:49::/48 maxlen: 48
                          2a02:b60:4a::/48 maxlen: 48
                          2a02:b60:4b::/48 maxlen: 48
                          2a02:b60:4c::/48 maxlen: 48
                          2a02:b60:4d::/48 maxlen: 48
                          2a02:b60:4e::/48 maxlen: 48
                          2a02:b60:4f::/48 maxlen: 48
                          2a02:b60:50::/48 maxlen: 48
                          2a02:b60:51::/48 maxlen: 48
                          2a02:b60:52::/48 maxlen: 48
                          2a02:b60:53::/48 maxlen: 48
                          2a02:b60:54::/48 maxlen: 48
                          2a02:b60:55::/48 maxlen: 48
                          2a02:b60:56::/48 maxlen: 48
                          2a02:b60:57::/48 maxlen: 48
                          2a02:b60:58::/48 maxlen: 48
                          2a02:b60:59::/48 maxlen: 48
                          2a02:b60:5a::/48 maxlen: 48
                          2a02:b60:5b::/48 maxlen: 48
                          2a02:b60:5c::/48 maxlen: 48
                          2a02:b60:5d::/48 maxlen: 48
                          2a02:b60:5e::/48 maxlen: 48
                          2a02:b60:5f::/48 maxlen: 48
                          2a02:b60:60::/48 maxlen: 48
                          2a02:b60:61::/48 maxlen: 48
                          2a02:b60:62::/48 maxlen: 48
                          2a02:b60:63::/48 maxlen: 48
                          2a02:b60:64::/48 maxlen: 48
                          2a02:b60:65::/48 maxlen: 48
                          2a02:b60:66::/48 maxlen: 48
                          2a02:b60:67::/48 maxlen: 48
                          2a02:b60:68::/48 maxlen: 48
                          2a02:b60:69::/48 maxlen: 48
                          2a02:b60:6a::/48 maxlen: 48
                          2a02:b60:6b::/48 maxlen: 48
                          2a02:b60:6c::/48 maxlen: 48
                          2a02:b60:6d::/48 maxlen: 48
                          2a02:b60:6e::/48 maxlen: 48
                          2a02:b60:6f::/48 maxlen: 48
                          2a02:b60:70::/48 maxlen: 48
                          2a02:b60:71::/48 maxlen: 48
                          2a02:b60:72::/48 maxlen: 48
                          2a02:b60:73::/48 maxlen: 48
                          2a02:b60:74::/48 maxlen: 48
                          2a02:b60:75::/48 maxlen: 48
                          2a02:b60:76::/48 maxlen: 48
                          2a02:b60:77::/48 maxlen: 48
                          2a02:b60:78::/48 maxlen: 48
                          2a02:b60:79::/48 maxlen: 48
                          2a02:b60:7a::/48 maxlen: 48
                          2a02:b60:7b::/48 maxlen: 48
                          2a02:b60:7c::/48 maxlen: 48
                          2a02:b60:7d::/48 maxlen: 48
                          2a02:b60:7e::/48 maxlen: 48
                          2a02:b60:7f::/48 maxlen: 48
                          2a02:b60:80::/48 maxlen: 48
                          2a02:b60:81::/48 maxlen: 48
                          2a02:b60:82::/48 maxlen: 48
                          2a02:b60:83::/48 maxlen: 48
                          2a02:b60:84::/48 maxlen: 48
                          2a02:b60:85::/48 maxlen: 48
                          2a02:b60:86::/48 maxlen: 48
                          2a02:b60:87::/48 maxlen: 48
                          2a02:b60:88::/48 maxlen: 48
                          2a02:b60:89::/48 maxlen: 48
                          2a02:b60:8a::/48 maxlen: 48
                          2a02:b60:8b::/48 maxlen: 48
                          2a02:b60:8c::/48 maxlen: 48
                          2a02:b60:8d::/48 maxlen: 48
                          2a02:b60:8e::/48 maxlen: 48
                          2a02:b60:8f::/48 maxlen: 48
                          2a02:b60:90::/48 maxlen: 48
                          2a02:b60:91::/48 maxlen: 48
                          2a02:b60:92::/48 maxlen: 48
                          2a02:b60:93::/48 maxlen: 48
                          2a02:b60:94::/48 maxlen: 48
                          2a02:b60:95::/48 maxlen: 48
                          2a02:b60:96::/48 maxlen: 48
                          2a02:b60:97::/48 maxlen: 48
                          2a02:b60:98::/48 maxlen: 48
                          2a02:b60:99::/48 maxlen: 48
                          2a02:b60:9a::/48 maxlen: 48
                          2a02:b60:9b::/48 maxlen: 48
                          2a02:b60:9c::/48 maxlen: 48
                          2a02:b60:2000::/35 maxlen: 35
                          2a02:b60:2000::/48 maxlen: 48
                          2a02:b60:2000:3::/64 maxlen: 64
                          2a02:b60:2010::/48 maxlen: 48
                          2a02:b60:4000::/34 maxlen: 34
                          2a02:b60:4000::/48 maxlen: 48
                          2a02:b60:4005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:bf:64:02:ab:4c:57:b4:1b:d3:4d:4a:5f:cf:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b753ac03945289e186bf29737b25618d3ccd4430
        Validity
            Not Before: Jul  2 15:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2b343a8818be3a19b3c594b5777ed740c7f50ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:63:65:fe:7a:ed:6d:51:38:c8:3f:3a:02:b2:
                    1b:98:a8:a1:58:b1:dd:bb:9e:c2:c7:41:b9:2f:12:
                    18:49:34:4b:99:aa:98:52:9f:88:b2:df:b5:b5:b2:
                    62:26:63:b5:ed:ca:91:4c:a0:63:46:75:32:f0:f6:
                    e6:18:c8:17:5a:5f:ee:3f:fb:01:58:b8:58:87:df:
                    70:00:69:5f:1b:5b:3e:43:41:83:af:f0:fb:40:c4:
                    cf:50:12:6d:0d:cb:56:51:4c:b3:66:2a:46:03:ec:
                    0d:cf:af:c4:46:d1:22:b4:57:a0:94:cb:03:d0:6e:
                    c0:9d:64:7d:5e:89:f9:e0:33:b2:e5:95:c4:09:d2:
                    cc:7e:4d:50:25:1b:8c:91:f9:50:f4:93:2f:1b:1c:
                    5d:3f:50:7a:7f:3a:ce:47:d6:a2:9e:57:37:7d:3d:
                    77:fe:05:74:96:72:ef:4c:63:94:e3:41:8e:55:12:
                    f6:9d:94:cc:0f:e7:cb:3a:47:31:fb:b9:cf:57:b0:
                    d3:86:42:7c:69:84:3d:55:10:de:c0:80:bc:aa:2d:
                    ef:72:ab:e7:7f:79:54:28:aa:15:4b:82:d3:46:b4:
                    6c:35:db:24:92:55:be:54:d4:71:db:28:9d:52:e1:
                    e3:65:d9:f4:c9:86:46:2a:90:09:2e:6d:c4:8c:bc:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B3:43:A8:81:8B:E3:A1:9B:3C:59:4B:57:77:ED:74:0C:7F:50:AE
            X509v3 Authority Key Identifier:
                keyid:B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/wrNDqIGL46GbPFlLV3ftdAx_UK4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.201.192.0/18
                  89.33.66.0/23
                  185.1.98.0/24
                  185.90.104.0/22
                IPv6:
                  2a02:b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:23:74:b1:6b:80:0d:b4:06:02:b5:78:b2:6b:8e:b6:e3:77:
         09:19:c4:e8:4c:25:99:2f:d5:d4:ca:02:fb:6f:42:52:2a:f1:
         24:14:1c:42:48:6d:0d:40:54:cf:81:14:a3:c8:af:eb:da:0e:
         4c:ea:1a:b9:86:5f:3f:5c:82:5c:90:27:02:80:11:c9:49:fd:
         3e:ff:a4:6e:8f:88:75:a9:41:91:87:2a:9a:67:6b:fd:de:df:
         d8:cb:e1:e6:36:28:f0:2e:0b:5b:a5:65:ff:d3:a2:93:d4:a4:
         d0:de:fe:09:cb:5b:c7:41:7d:99:9e:86:c0:2e:6f:c6:e3:c4:
         70:a3:bf:ea:12:a7:3e:63:04:7e:22:5c:de:c8:b6:ef:22:5f:
         0d:4e:dc:3f:20:9b:49:76:f8:1a:59:00:67:dd:4a:91:32:84:
         4c:5a:5e:0c:ed:71:23:6b:2a:70:12:f7:2a:8b:5b:c5:1b:cb:
         e1:1c:d7:d9:57:0d:0e:12:05:1b:39:f6:2c:69:37:d4:92:31:
         28:a7:63:26:2f:2a:bc:19:ba:bb:b8:93:52:6c:34:8e:70:cb:
         6c:cf:de:de:8e:09:a0:b4:f6:e2:be:65:ac:59:ef:22:9b:5d:
         5c:ed:9d:76:0d:f6:5d:18:fd:d6:25:39:da:f6:af:e5:7b:d7:
         d7:08:85:03
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZ8jaL9kAqtMV7Qb001KX8+ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NTNhYzAzOTQ1Mjg5ZTE4NmJmMjk3MzdiMjU2MThkM2Nj
ZDQ0MzAwHhcNMjYwNzAyMTUxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmIzNDNhODgxOGJlM2ExOWIzYzU5NGI1Nzc3ZWQ3NDBjN2Y1MGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GNl/nrtbVE4yD86ArIbmKihWLHd
u57Cx0G5LxIYSTRLmaqYUp+Ist+1tbJiJmO17cqRTKBjRnUy8PbmGMgXWl/uP/sB
WLhYh99wAGlfG1s+Q0GDr/D7QMTPUBJtDctWUUyzZipGA+wNz6/ERtEitFeglMsD
0G7AnWR9Xon54DOy5ZXECdLMfk1QJRuMkflQ9JMvGxxdP1B6fzrOR9ainlc3fT13
/gV0lnLvTGOU40GOVRL2nZTMD+fLOkcx+7nPV7DThkJ8aYQ9VRDewIC8qi3vcqvn
f3lUKKoVS4LTRrRsNdskklW+VNRx2yidUuHjZdn0yYZGKpAJLm3EjLzJMQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFMKzQ6iBi+OhmzxZS1d37XQMf1CuMB8GA1UdIwQY
MBaAFLdTrAOUUonhhr8pc3slYY08zUQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFPc0E1UlNpZUdHdnlsemV5VmhqVHpOUkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEvd3JORHFJR0w0NkdiUEZsTFYzZnRkQXhfVUs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvdDFPc0E1UlNpZUdHdnlsemV5VmhqVHpOUkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGPsnAAwQB
WSFCAwQAuQFiAwQCuVpoMA0EAgACMAcDBQAqAgtgMA0GCSqGSIb3DQEBCwUAA4IB
AQBTI3Sxa4ANtAYCtXiya46243cJGcToTCWZL9XUygL7b0JSKvEkFBxCSG0NQFTP
gRSjyK/r2g5M6hq5hl8/XIJckCcCgBHJSf0+/6Ruj4h1qUGRhyqaZ2v93t/Yy+Hm
NijwLgtbpWX/06KT1KTQ3v4Jy1vHQX2ZnobALm/G48Rwo7/qEqc+YwR+IlzeyLbv
Il8NTtw/IJtJdvgaWQBn3UqRMoRMWl4M7XEjaypwEvcqi1vFG8vhHNfZVw0OEgUb
OfYsaTfUkjEop2MmLyq8Gbq7uJNSbDSOcMtsz97ejgmgtPbivmWsWe8im11c7Z12
DfZdGP3WJTna9q/le9fXCIUD
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:27 2026 by rpki-client