Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/1szsUB0VoXuxvDb6acgrvBLYEZY.roa
File: 1szsUB0VoXuxvDb6acgrvBLYEZY.roa (raw, json)
Hash identifier: CAu6oABCOITiB7RP9yG7K6+swFKVut89RRzUhC0wUAY=
Subject key identifier: D6:CC:EC:50:1D:15:A1:7B:B1:BC:36:FA:69:C8:2B:BC:12:D8:11:96
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 019FEBEC4627148B9282DA513FC0B7ECE078
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/1szsUB0VoXuxvDb6acgrvBLYEZY.roa
Signing time: Mon 10 Aug 2026 13:45:57 +0000
ROA not before: Mon 10 Aug 2026 13:45:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198417
IP address blocks: 31.14.64.0/24 maxlen: 24
31.14.218.0/24 maxlen: 24
31.14.232.0/24 maxlen: 24
31.14.253.0/24 maxlen: 24
37.153.137.0/24 maxlen: 24
86.105.194.0/24 maxlen: 24
86.105.197.0/24 maxlen: 24
86.106.21.0/24 maxlen: 24
86.106.82.0/24 maxlen: 24
86.106.178.0/24 maxlen: 24
86.107.188.0/24 maxlen: 24
89.32.124.0/24 maxlen: 24
89.32.128.0/24 maxlen: 24
89.32.201.0/24 maxlen: 24
89.32.205.0/24 maxlen: 24
89.40.131.0/24 maxlen: 24
89.41.30.0/24 maxlen: 24
89.42.34.0/24 maxlen: 24
89.43.39.0/24 maxlen: 24
89.46.128.0/24 maxlen: 24
89.46.129.0/24 maxlen: 24
89.46.130.0/24 maxlen: 24
89.47.35.0/24 maxlen: 24
92.114.34.0/24 maxlen: 24
92.114.99.0/24 maxlen: 24
93.113.88.0/24 maxlen: 24
93.113.108.0/24 maxlen: 24
93.114.141.0/24 maxlen: 24
93.114.250.0/24 maxlen: 24
94.177.64.0/24 maxlen: 24
94.177.119.0/24 maxlen: 24
159.20.112.0/24 maxlen: 24
159.20.113.0/24 maxlen: 24
159.20.114.0/24 maxlen: 24
159.20.115.0/24 maxlen: 24
159.20.116.0/24 maxlen: 24
188.208.18.0/24 maxlen: 24
188.215.40.0/24 maxlen: 24
188.215.41.0/24 maxlen: 24
188.215.42.0/24 maxlen: 24
188.215.43.0/24 maxlen: 24
188.240.16.0/24 maxlen: 24
188.240.46.0/24 maxlen: 24
2a10:3ec0::/29 maxlen: 29
2a10:3ec0:32::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:ec:46:27:14:8b:92:82:da:51:3f:c0:b7:ec:e0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Aug 10 13:45:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6ccec501d15a17bb1bc36fa69c82bbc12d81196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:d2:2b:ec:44:ca:cf:3d:05:8b:e8:82:19:
f2:7d:14:80:8c:84:7a:81:45:9d:3d:ea:9d:7b:2d:
a2:52:4c:16:49:f1:9b:59:bc:3d:12:5e:d5:78:a3:
95:45:6d:2f:23:83:be:28:44:46:57:7d:5d:f8:6f:
ed:a3:bb:a5:52:ae:05:1b:50:05:49:14:39:b2:4d:
8b:ca:b0:d6:a9:7c:e9:1c:b8:93:78:5b:e0:99:71:
0d:9c:9e:d1:91:4d:b0:0f:06:63:4e:bb:40:b9:bd:
6b:43:50:06:20:34:c4:05:a7:db:6b:8b:c4:03:c1:
15:53:f1:72:27:7a:ae:c9:8d:ff:42:02:3d:81:ab:
1f:8a:24:41:90:a9:fd:9d:93:d6:4c:48:e7:ae:9f:
93:46:94:d6:83:f4:df:e0:7e:1b:bf:2d:8d:d5:80:
bf:15:bf:d4:ac:3a:96:57:a8:19:3c:6e:1d:91:30:
d0:04:a0:9f:45:57:e1:44:3a:6e:b6:07:e0:f5:e3:
f4:14:a2:68:37:0e:3d:e4:58:fe:54:10:4a:5e:d5:
fb:cb:39:6f:c2:17:88:07:6c:db:dc:4a:f5:f4:bf:
fd:bf:eb:0d:6c:3b:00:f7:7a:ad:d5:c1:1d:86:25:
e9:2c:3f:bf:a5:1a:5e:5e:2f:97:c9:9a:51:4b:2e:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CC:EC:50:1D:15:A1:7B:B1:BC:36:FA:69:C8:2B:BC:12:D8:11:96
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/1szsUB0VoXuxvDb6acgrvBLYEZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.64.0/24
31.14.218.0/24
31.14.232.0/24
31.14.253.0/24
37.153.137.0/24
86.105.194.0/24
86.105.197.0/24
86.106.21.0/24
86.106.82.0/24
86.106.178.0/24
86.107.188.0/24
89.32.124.0/24
89.32.128.0/24
89.32.201.0/24
89.32.205.0/24
89.40.131.0/24
89.41.30.0/24
89.42.34.0/24
89.43.39.0/24
89.46.128.0-89.46.130.255
89.47.35.0/24
92.114.34.0/24
92.114.99.0/24
93.113.88.0/24
93.113.108.0/24
93.114.141.0/24
93.114.250.0/24
94.177.64.0/24
94.177.119.0/24
159.20.112.0-159.20.116.255
188.208.18.0/24
188.215.40.0/22
188.240.16.0/24
188.240.46.0/24
IPv6:
2a10:3ec0::/29
Signature Algorithm: sha256WithRSAEncryption
a3:43:a1:a1:5f:11:d5:da:3d:85:92:7b:0b:06:6b:57:4f:9d:
d2:72:28:15:ba:6c:4a:d4:53:4c:a2:9f:65:59:18:f1:66:98:
4b:6c:8c:e9:a0:1f:31:c8:5c:94:7a:bf:ee:f9:33:b6:5a:3d:
19:e1:f3:77:bd:1b:17:d9:2f:b9:1e:c8:bc:07:cd:97:a8:16:
5c:4b:a2:da:07:4e:91:cb:5f:a8:36:01:ce:8b:7f:c1:00:7c:
a6:9c:06:a3:3d:56:ea:fb:84:4a:5b:a2:5c:d8:dd:68:70:b6:
d1:d9:5b:9f:ca:f9:44:2b:5b:27:62:72:a6:f7:9c:89:a8:7e:
80:c9:2c:a7:8b:0b:b0:05:e0:6b:12:9a:5e:aa:30:31:27:17:
6f:8f:1f:ad:18:b5:b7:77:83:99:df:e6:6f:97:47:47:1d:bb:
66:57:6b:73:76:5c:71:5b:a7:b7:79:49:9d:2e:fa:18:11:90:
4b:35:15:fd:f6:8a:cb:c5:15:8f:60:cb:c0:3b:48:ca:60:0c:
e3:0e:b1:f0:49:d6:ad:ed:5f:a1:ba:05:9a:42:31:2b:cc:09:
0e:82:83:78:a3:1e:8e:7d:27:7f:7e:38:2b:82:d1:57:d4:9e:
a5:73:99:ee:c6:a8:74:1b:f8:5b:79:36:05:a6:d4:44:48:74:
ae:62:63:01
-----BEGIN CERTIFICATE-----
MIIF6DCCBNCgAwIBAgISAZ/r7EYnFIuSgtpRP8C37OB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTY2NzZjZjM5OGQzOTk0YzRkZDRhMjk2NTk0NjE0ZGZm
NTg2YzcwHhcNMjYwODEwMTM0NTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmNjZWM1MDFkMTVhMTdiYjFiYzM2ZmE2OWM4MmJiYzEyZDgxMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRjSK+xEys89BYvoghnyfRSAjIR6
gUWdPeqdey2iUkwWSfGbWbw9El7VeKOVRW0vI4O+KERGV31d+G/to7ulUq4FG1AF
SRQ5sk2LyrDWqXzpHLiTeFvgmXENnJ7RkU2wDwZjTrtAub1rQ1AGIDTEBafba4vE
A8EVU/FyJ3quyY3/QgI9gasfiiRBkKn9nZPWTEjnrp+TRpTWg/Tf4H4bvy2N1YC/
Fb/UrDqWV6gZPG4dkTDQBKCfRVfhRDputgfg9eP0FKJoNw495Fj+VBBKXtX7yzlv
wheIB2zb3Er19L/9v+sNbDsA93qt1cEdhiXpLD+/pRpeXi+XyZpRSy6nBwIDAQAB
o4IC9DCCAvAwHQYDVR0OBBYEFNbM7FAdFaF7sbw2+mnIK7wS2BGWMB8GA1UdIwQY
MBaAFF+WZ2zzmNOZTE3UopZZRhTf9YbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82YTY4MDUtNWNlMC00MTI4LWEwNGMt
ZjYyZjM1YWY0MzcxLzEvMXN6c1VCMFZvWHV4dkRiNmFjZ3J2QkxZRVpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC82YTY4MDUtNWNlMC00MTI4LWEwNGMtZjYyZjM1YWY0Mzcx
LzEvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgeMEAgABMIHcAwQA
Hw5AAwQAHw7aAwQAHw7oAwQAHw79AwQAJZmJAwQAVmnCAwQAVmnFAwQAVmoVAwQA
VmpSAwQAVmqyAwQAVmu8AwQAWSB8AwQAWSCAAwQAWSDJAwQAWSDNAwQAWSiDAwQA
WSkeAwQAWSoiAwQAWSsnMAwDBAdZLoADBABZLoIDBABZLyMDBABcciIDBABccmMD
BABdcVgDBABdcWwDBABdco0DBABdcvoDBABesUADBABesXcwDAMEBJ8UcAMEAJ8U
dAMEALzQEgMEArzXKAMEALzwEAMEALzwLjANBAIAAjAHAwUDKhA+wDANBgkqhkiG
9w0BAQsFAAOCAQEAo0OhoV8R1do9hZJ7CwZrV0+d0nIoFbpsStRTTKKfZVkY8WaY
S2yM6aAfMchclHq/7vkztlo9GeHzd70bF9kvuR7IvAfNl6gWXEui2gdOkctfqDYB
zot/wQB8ppwGoz1W6vuESluiXNjdaHC20dlbn8r5RCtbJ2Jypveciah+gMksp4sL
sAXgaxKaXqowMScXb48frRi1t3eDmd/mb5dHRx27Zldrc3ZccVunt3lJnS76GBGQ
SzUV/faKy8UVj2DLwDtIymAM4w6x8EnWre1foboFmkIxK8wJDoKDeKMejn0nf344
K4LRV9SepXOZ7saodBv4W3k2BabUREh0rmJjAQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:14:32 2026 by rpki-client