Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/33oWgdjK_YQ5RE1HBLu9w5DuUys.roa
File: 33oWgdjK_YQ5RE1HBLu9w5DuUys.roa (raw, json)
Hash identifier: YFfSyIkQ8r5EeIE2nKtHSYGUbZnDPhnEtmdTQuVMLZA=
Subject key identifier: DF:7A:16:81:D8:CA:FD:84:39:44:4D:47:04:BB:BD:C3:90:EE:53:2B
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 019E5B1226B842E2C38C6D3C72842979FA78
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/33oWgdjK_YQ5RE1HBLu9w5DuUys.roa
Signing time: Sun 24 May 2026 17:39:36 +0000
ROA not before: Sun 24 May 2026 17:39:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 2.56.63.0/24 maxlen: 24
31.210.152.0/24 maxlen: 24
31.210.153.0/24 maxlen: 24
31.210.154.0/24 maxlen: 24
31.210.155.0/24 maxlen: 24
31.210.156.0/24 maxlen: 24
31.210.157.0/24 maxlen: 24
31.210.158.0/24 maxlen: 24
31.210.159.0/24 maxlen: 24
37.247.96.0/24 maxlen: 24
37.247.97.0/24 maxlen: 24
37.247.98.0/24 maxlen: 24
37.247.99.0/24 maxlen: 24
37.247.100.0/24 maxlen: 24
37.247.101.0/24 maxlen: 24
37.247.102.0/24 maxlen: 24
37.247.103.0/24 maxlen: 24
37.247.104.0/24 maxlen: 24
37.247.105.0/24 maxlen: 24
37.247.106.0/24 maxlen: 24
37.247.107.0/24 maxlen: 24
37.247.108.0/24 maxlen: 24
37.247.109.0/24 maxlen: 24
37.247.110.0/24 maxlen: 24
37.247.111.0/24 maxlen: 24
46.20.0.0/24 maxlen: 24
46.20.1.0/24 maxlen: 24
46.20.2.0/24 maxlen: 24
46.20.3.0/24 maxlen: 24
46.20.4.0/24 maxlen: 24
46.20.5.0/24 maxlen: 24
46.20.6.0/24 maxlen: 24
46.20.7.0/24 maxlen: 24
46.20.8.0/24 maxlen: 24
46.20.9.0/24 maxlen: 24
46.20.11.0/24 maxlen: 24
46.20.14.0/24 maxlen: 24
46.20.15.0/24 maxlen: 24
89.107.224.0/24 maxlen: 24
89.107.225.0/24 maxlen: 24
89.107.226.0/24 maxlen: 24
89.107.227.0/24 maxlen: 24
89.107.228.0/24 maxlen: 24
89.107.229.0/24 maxlen: 24
89.107.230.0/24 maxlen: 24
89.107.231.0/24 maxlen: 24
95.130.168.0/24 maxlen: 24
95.130.169.0/24 maxlen: 24
95.130.170.0/24 maxlen: 24
95.130.171.0/24 maxlen: 24
95.130.172.0/24 maxlen: 24
95.130.173.0/24 maxlen: 24
95.130.175.0/24 maxlen: 24
109.235.248.0/24 maxlen: 24
109.235.249.0/24 maxlen: 24
109.235.250.0/24 maxlen: 24
109.235.251.0/24 maxlen: 24
109.235.252.0/24 maxlen: 24
109.235.253.0/24 maxlen: 24
109.235.254.0/24 maxlen: 24
109.235.255.0/24 maxlen: 24
185.29.120.0/24 maxlen: 24
185.29.121.0/24 maxlen: 24
185.29.122.0/24 maxlen: 24
2a04:4280::/48 maxlen: 48
2a04:4280:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5b:12:26:b8:42:e2:c3:8c:6d:3c:72:84:29:79:fa:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: May 24 17:39:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df7a1681d8cafd8439444d4704bbbdc390ee532b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:33:57:10:bd:1b:51:8e:25:f5:75:c6:50:
d7:72:67:e9:d6:b3:68:2f:2f:b1:aa:e7:31:89:11:
20:e9:24:9d:09:af:45:63:c7:ab:99:98:ff:19:a5:
f1:2b:f7:b8:bf:21:7a:bd:76:86:43:e9:8b:e6:19:
c4:85:80:c9:34:ac:3a:45:b0:0d:d1:b8:c5:4c:01:
4b:67:17:17:68:bb:79:53:0a:c9:20:83:b6:8a:f5:
27:06:e2:73:ff:7b:5e:0a:5b:64:90:d8:de:7d:5a:
a8:8c:f2:22:7d:1e:b2:5c:b2:87:0c:94:78:06:fe:
a2:c0:51:51:1a:3a:2e:99:e8:33:95:d8:91:94:09:
49:b3:66:aa:a1:95:b6:c1:db:40:b4:30:aa:2e:f3:
ed:ce:06:4a:89:33:b2:6d:eb:94:8f:bf:db:b9:56:
6d:f3:ab:e3:39:c0:04:a3:47:8b:9a:fb:2a:fd:21:
d9:35:42:26:df:1d:63:99:bd:fb:51:f4:1a:0e:58:
66:b9:c7:c9:5b:e1:81:53:36:5d:5d:93:b6:b3:fe:
fb:dd:bf:54:ab:fb:26:e2:ef:85:8b:0d:6d:4b:24:
a3:00:d4:b1:b4:74:d3:1e:2b:31:22:30:ae:0d:42:
ad:76:8b:ec:78:02:2a:5d:6c:94:32:25:65:e0:49:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7A:16:81:D8:CA:FD:84:39:44:4D:47:04:BB:BD:C3:90:EE:53:2B
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/33oWgdjK_YQ5RE1HBLu9w5DuUys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.63.0/24
31.210.152.0/21
37.247.96.0/20
46.20.0.0-46.20.9.255
46.20.11.0/24
46.20.14.0/23
89.107.224.0/21
95.130.168.0-95.130.173.255
95.130.175.0/24
109.235.248.0/21
185.29.120.0-185.29.122.255
IPv6:
2a04:4280::/48
2a04:4280:100::/48
Signature Algorithm: sha256WithRSAEncryption
c5:b0:3e:74:fe:c9:01:90:10:dc:ab:db:e4:05:4d:7d:08:fa:
68:2f:86:a6:fa:73:da:fd:fa:f2:6e:07:67:cf:0b:3c:4e:dd:
0b:ae:21:37:15:dd:23:06:85:6e:68:d0:b7:0b:2c:7f:b8:4c:
f2:4c:c5:a1:dc:e2:69:50:0e:3c:7e:23:2c:24:97:6c:9a:81:
c1:ce:50:74:f3:db:c8:7c:39:90:88:6d:41:5e:2b:74:e9:4d:
5b:a9:de:7c:3c:6a:43:ad:69:a4:cd:3c:45:b1:d0:88:f5:dd:
31:af:e0:47:9f:04:60:76:de:f5:a0:2f:c2:af:f6:80:3e:9d:
ac:29:4b:99:17:7e:b3:b9:6b:76:53:a8:a5:dd:5c:bb:da:4d:
2a:f7:53:1b:ef:fc:09:c7:d8:e0:13:d6:71:ea:6c:8f:62:6b:
70:cc:00:14:ff:2b:36:6e:84:d1:11:53:ee:cb:c6:92:f0:66:
fb:c0:de:a3:7b:29:bd:eb:1c:af:ef:b0:7d:00:58:d6:91:a2:
68:c3:19:7e:8b:6b:39:eb:97:53:44:4b:a1:b6:b0:ff:b0:89:
f7:06:f9:3d:46:15:d4:5c:05:8b:84:bd:f4:38:66:2a:a6:a0:
22:c7:48:2e:0b:35:72:23:0c:3a:f8:5f:be:ba:05:85:c7:57:
b1:8a:a5:dc
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgISAZ5bEia4QuLDjG08coQpefp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2
MDk4YjcwHhcNMjYwNTI0MTczOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjdhMTY4MWQ4Y2FmZDg0Mzk0NDRkNDcwNGJiYmRjMzkwZWU1MzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDQzVxC9G1GOJfV1xlDXcmfp1rNo
Ly+xqucxiREg6SSdCa9FY8ermZj/GaXxK/e4vyF6vXaGQ+mL5hnEhYDJNKw6RbAN
0bjFTAFLZxcXaLt5UwrJIIO2ivUnBuJz/3teCltkkNjefVqojPIifR6yXLKHDJR4
Bv6iwFFRGjoumegzldiRlAlJs2aqoZW2wdtAtDCqLvPtzgZKiTOybeuUj7/buVZt
86vjOcAEo0eLmvsq/SHZNUIm3x1jmb37UfQaDlhmucfJW+GBUzZdXZO2s/773b9U
q/sm4u+Fiw1tSySjANSxtHTTHisxIjCuDUKtdovseAIqXWyUMiVl4EmHjQIDAQAB
o4ICdzCCAnMwHQYDVR0OBBYEFN96FoHYyv2EOURNRwS7vcOQ7lMrMB8GA1UdIwQY
MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt
NDQzYmU2M2ZjMTIzLzEvMzNvV2dkaktfWVE1UkUxSEJMdTl3NUR1VXlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz
LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGMBggrBgEFBQcBBwEB/wR9MHswXwQCAAEwWQMEAAI4PwME
Ax/SmAMEBCX3YDALAwMCLhQDBAEuFAgDBAAuFAsDBAEuFA4DBANZa+AwDAMEA1+C
qAMEAV+CrAMEAF+CrwMEA23r+DAMAwQDuR14AwQAuR16MBgEAgACMBIDBwAqBEKA
AAADBwAqBEKAAQAwDQYJKoZIhvcNAQELBQADggEBAMWwPnT+yQGQENyr2+QFTX0I
+mgvhqb6c9r9+vJuB2fPCzxO3QuuITcV3SMGhW5o0LcLLH+4TPJMxaHc4mlQDjx+
Iywkl2yagcHOUHTz28h8OZCIbUFeK3TpTVup3nw8akOtaaTNPEWx0Ij13TGv4Eef
BGB23vWgL8Kv9oA+nawpS5kXfrO5a3ZTqKXdXLvaTSr3Uxvv/AnH2OAT1nHqbI9i
a3DMABT/KzZuhNERU+7LxpLwZvvA3qN7Kb3rHK/vsH0AWNaRomjDGX6Laznrl1NE
S6G2sP+wifcG+T1GFdRcBYuEvfQ4ZiqmoCLHSC4LNXIjDDr4X766BYXHV7GKpdw=
-----END CERTIFICATE-----
Generated at Thu Jun 4 07:56:45 2026 by rpki-client