Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/VLthepiGfgBtcpyE47qahgvl8Y4.roa
File: VLthepiGfgBtcpyE47qahgvl8Y4.roa (raw, json)
Hash identifier: mK3KY9t+YQA3SDMdpTF/ADXsO08p6L/+Wl7Z5909RXI=
Subject key identifier: 54:BB:61:7A:98:86:7E:00:6D:72:9C:84:E3:BA:9A:86:0B:E5:F1:8E
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 019E872FF2AF0CA63A5F204F65874AC8A3C6
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/VLthepiGfgBtcpyE47qahgvl8Y4.roa
Signing time: Tue 02 Jun 2026 07:15:26 +0000
ROA not before: Tue 02 Jun 2026 07:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29684
IP address blocks: 46.235.88.0/21 maxlen: 24
46.235.88.0/23 maxlen: 23
46.235.90.0/23 maxlen: 23
46.235.91.0/24 maxlen: 24
46.235.92.0/23 maxlen: 23
46.235.94.0/23 maxlen: 23
46.235.94.0/24 maxlen: 24
62.204.48.0/24 maxlen: 24
77.75.224.0/24 maxlen: 24
79.110.229.0/24 maxlen: 24
88.85.224.0/19 maxlen: 24
88.85.224.0/21 maxlen: 21
88.85.224.0/23 maxlen: 23
88.85.226.0/23 maxlen: 23
88.85.228.0/23 maxlen: 23
88.85.228.0/24 maxlen: 24
88.85.230.0/23 maxlen: 23
88.85.231.0/24 maxlen: 24
88.85.232.0/21 maxlen: 21
88.85.232.0/24 maxlen: 24
88.85.235.0/24 maxlen: 24
88.85.236.0/24 maxlen: 24
88.85.237.0/24 maxlen: 24
88.85.238.0/23 maxlen: 23
88.85.238.0/24 maxlen: 24
88.85.239.0/24 maxlen: 24
88.85.240.0/21 maxlen: 21
88.85.240.0/23 maxlen: 23
88.85.242.0/24 maxlen: 24
88.85.244.0/24 maxlen: 24
88.85.245.0/24 maxlen: 24
88.85.246.0/23 maxlen: 23
88.85.247.0/24 maxlen: 24
88.85.248.0/21 maxlen: 21
88.85.248.0/23 maxlen: 23
88.85.250.0/23 maxlen: 23
88.85.250.0/24 maxlen: 24
88.85.252.0/23 maxlen: 23
88.85.254.0/24 maxlen: 24
88.85.255.0/24 maxlen: 24
146.19.71.0/24 maxlen: 24
158.94.222.0/24 maxlen: 24
176.97.216.0/24 maxlen: 24
176.98.32.0/22 maxlen: 22
176.98.32.0/24 maxlen: 24
176.98.33.0/24 maxlen: 24
176.98.34.0/23 maxlen: 23
176.98.34.0/24 maxlen: 24
176.98.35.0/24 maxlen: 24
176.241.184.0/21 maxlen: 24
176.241.184.0/23 maxlen: 23
176.241.186.0/23 maxlen: 23
176.241.188.0/24 maxlen: 24
176.241.189.0/24 maxlen: 24
176.241.190.0/24 maxlen: 24
176.241.191.0/24 maxlen: 24
178.20.144.0/21 maxlen: 24
178.20.144.0/23 maxlen: 23
178.20.146.0/23 maxlen: 23
178.20.148.0/23 maxlen: 23
178.20.150.0/23 maxlen: 23
185.10.112.0/22 maxlen: 24
185.10.112.0/24 maxlen: 24
185.10.113.0/24 maxlen: 24
185.10.114.0/23 maxlen: 23
185.10.114.0/24 maxlen: 24
185.10.115.0/24 maxlen: 24
185.72.102.0/24 maxlen: 24
185.149.193.0/24 maxlen: 24
185.224.252.0/22 maxlen: 24
185.224.252.0/23 maxlen: 23
185.224.252.0/24 maxlen: 24
185.224.253.0/24 maxlen: 24
185.224.254.0/23 maxlen: 23
185.224.254.0/24 maxlen: 24
185.224.255.0/24 maxlen: 24
193.105.25.0/24 maxlen: 24
193.242.127.0/24 maxlen: 24
194.104.226.0/24 maxlen: 24
212.12.160.0/19 maxlen: 24
212.12.160.0/20 maxlen: 20
212.12.160.0/23 maxlen: 23
212.12.160.0/24 maxlen: 24
212.12.161.0/24 maxlen: 24
212.12.162.0/23 maxlen: 23
212.12.162.0/24 maxlen: 24
212.12.163.0/24 maxlen: 24
212.12.164.0/23 maxlen: 23
212.12.164.0/24 maxlen: 24
212.12.166.0/23 maxlen: 23
212.12.166.0/24 maxlen: 24
212.12.167.0/24 maxlen: 24
212.12.168.0/23 maxlen: 23
212.12.168.0/24 maxlen: 24
212.12.169.0/24 maxlen: 24
212.12.170.0/23 maxlen: 23
212.12.170.0/24 maxlen: 24
212.12.171.0/24 maxlen: 24
212.12.172.0/23 maxlen: 23
212.12.174.0/23 maxlen: 23
212.12.175.0/24 maxlen: 24
212.12.176.0/20 maxlen: 20
212.12.176.0/23 maxlen: 23
212.12.178.0/23 maxlen: 23
212.12.180.0/23 maxlen: 23
212.12.182.0/23 maxlen: 23
212.12.182.0/24 maxlen: 24
212.12.183.0/24 maxlen: 24
212.12.184.0/23 maxlen: 23
212.12.185.0/24 maxlen: 24
212.12.186.0/23 maxlen: 23
212.12.187.0/24 maxlen: 24
212.12.188.0/23 maxlen: 23
212.12.189.0/24 maxlen: 24
212.12.190.0/23 maxlen: 23
212.108.85.0/24 maxlen: 24
2a00:1560::/32 maxlen: 48
2a00:1560:4::/47 maxlen: 47
2a00:1560:5::/48 maxlen: 48
2a00:1560:c::/48 maxlen: 48
2a00:1560:10::/48 maxlen: 48
2a00:1560:16::/48 maxlen: 48
2a00:1560:17::/48 maxlen: 48
2a00:1560:18::/48 maxlen: 48
2a00:1560:20::/48 maxlen: 48
2a00:1560:21::/48 maxlen: 48
2a00:1560:24::/48 maxlen: 48
2a00:1560:27::/48 maxlen: 48
2a00:1560:60::/48 maxlen: 48
2a00:1560:1111::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:2f:f2:af:0c:a6:3a:5f:20:4f:65:87:4a:c8:a3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Jun 2 07:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54bb617a98867e006d729c84e3ba9a860be5f18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:f9:a8:b6:08:24:fb:48:2d:d4:92:4d:d5:
13:51:84:1e:c1:e9:bc:90:ba:c3:ee:39:c6:e3:a5:
69:bd:2c:ac:68:14:89:be:68:54:49:06:03:51:36:
7d:34:52:d3:3c:4f:e8:63:18:af:06:5c:f1:65:5b:
b1:9d:c7:65:bd:0f:5f:e1:7b:ba:db:8c:ee:f4:f9:
18:98:72:9a:ca:c3:3b:bb:0b:9a:41:17:c6:6f:cb:
84:09:ab:60:57:10:58:38:52:a0:5c:3f:7c:a5:75:
ba:51:9a:c3:5d:93:eb:db:cd:26:74:e6:4f:74:19:
b8:36:f1:c3:e9:3e:06:1b:66:ab:94:3b:7b:97:cc:
37:a6:4e:7d:8c:06:fe:df:41:b7:51:9c:81:bd:bc:
0b:5e:0a:d8:87:b3:99:cd:a4:d4:28:8f:c0:0b:56:
14:dd:fc:c4:c6:4f:e3:33:f2:79:d9:19:a9:1b:a6:
b0:61:b3:17:fa:02:9c:2e:02:3d:f4:4b:49:64:b0:
5f:75:dd:e5:d5:e2:57:4d:59:e5:d1:23:cb:12:1f:
ea:45:02:35:a4:c9:bb:49:2c:d2:3f:7b:a5:60:de:
cb:75:cf:3a:36:11:f6:38:e3:d2:d8:8b:ff:16:00:
79:b3:d9:98:6e:c1:de:ec:9a:4b:2f:3c:f8:bd:fa:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BB:61:7A:98:86:7E:00:6D:72:9C:84:E3:BA:9A:86:0B:E5:F1:8E
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/VLthepiGfgBtcpyE47qahgvl8Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.88.0/21
62.204.48.0/24
77.75.224.0/24
79.110.229.0/24
88.85.224.0/19
146.19.71.0/24
158.94.222.0/24
176.97.216.0/24
176.98.32.0/22
176.241.184.0/21
178.20.144.0/21
185.10.112.0/22
185.72.102.0/24
185.149.193.0/24
185.224.252.0/22
193.105.25.0/24
193.242.127.0/24
194.104.226.0/24
212.12.160.0/19
212.108.85.0/24
IPv6:
2a00:1560::/32
Signature Algorithm: sha256WithRSAEncryption
4e:a9:24:f7:cf:83:b2:92:4e:3f:43:18:de:3d:a4:cb:4c:8d:
0e:8b:98:47:84:df:56:83:03:5c:7d:31:62:49:97:0d:37:b9:
71:00:da:1d:30:40:82:79:27:25:24:78:84:0e:97:73:32:8a:
95:60:1d:29:ab:1a:66:47:29:0f:69:01:25:19:e4:11:8a:02:
58:7b:e3:c3:48:ae:05:c8:e4:ae:16:2b:eb:da:c8:22:52:e6:
d9:77:69:e7:e9:12:79:56:60:c4:cd:c0:42:de:63:00:af:f4:
2d:e1:a3:9b:94:39:b8:db:34:c0:0e:c6:09:60:83:30:4d:31:
31:14:6f:2e:db:28:08:a5:a6:1e:f1:ee:0e:f2:87:51:26:53:
11:cc:ed:81:72:97:c3:63:c0:4d:70:b9:3e:d3:a1:f4:6e:d8:
47:58:d6:f4:87:cc:62:6a:74:6c:38:06:76:33:38:c8:b9:c0:
96:b3:9f:ef:3a:3a:1d:89:e5:51:11:cd:26:cf:4b:be:3a:6b:
69:46:23:5b:75:2b:2a:7e:16:1b:b4:14:2a:0e:18:a0:d0:2a:
cd:ea:e4:19:ee:af:46:4c:8f:bd:b6:c8:eb:42:46:2c:33:e7:
13:a8:0f:7d:32:60:fa:c5:03:5c:42:6a:ad:c9:6e:ad:14:8b:
30:9d:e5:03
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgISAZ6HL/KvDKY6XyBPZYdKyKPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDQ5MmRiOWNiYjBhMGViNmJmNjljMjVjODY5NjFmNDkx
ODNjOWIwHhcNMjYwNjAyMDcxNTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGJiNjE3YTk4ODY3ZTAwNmQ3MjljODRlM2JhOWE4NjBiZTVmMThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaL5qLYIJPtILdSSTdUTUYQewem8
kLrD7jnG46VpvSysaBSJvmhUSQYDUTZ9NFLTPE/oYxivBlzxZVuxncdlvQ9f4Xu6
24zu9PkYmHKaysM7uwuaQRfGb8uECatgVxBYOFKgXD98pXW6UZrDXZPr280mdOZP
dBm4NvHD6T4GG2arlDt7l8w3pk59jAb+30G3UZyBvbwLXgrYh7OZzaTUKI/AC1YU
3fzExk/jM/J52RmpG6awYbMX+gKcLgI99EtJZLBfdd3l1eJXTVnl0SPLEh/qRQI1
pMm7SSzSP3ulYN7Ldc86NhH2OOPS2Iv/FgB5s9mYbsHe7JpLLzz4vfrDBQIDAQAB
o4ICjTCCAokwHQYDVR0OBBYEFFS7YXqYhn4AbXKchOO6moYL5fGOMB8GA1UdIwQY
MBaAFIREktucuwoOtr9pwlyGlh9JGDybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVTUzI1eTdDZzYydjJuQ1hJYVdIMGtZUEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zM2E4ODgtNGNmMy00YThjLTkyOTct
YTFlMGRiMWExN2RmLzEvVkx0aGVwaUdmZ0J0Y3B5RTQ3cWFoZ3ZsOFk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8zM2E4ODgtNGNmMy00YThjLTkyOTctYTFlMGRiMWExN2Rm
LzEvaEVTUzI1eTdDZzYydjJuQ1hJYVdIMGtZUEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGiBggrBgEFBQcBBwEB/wSBkjCBjzB+BAIAATB4AwQDLutY
AwQAPswwAwQATUvgAwQAT27lAwQFWFXgAwQAkhNHAwQAnl7eAwQAsGHYAwQCsGIg
AwQDsPG4AwQDshSQAwQCuQpwAwQAuUhmAwQAuZXBAwQCueD8AwQAwWkZAwQAwfJ/
AwQAwmjiAwQF1AygAwQA1GxVMA0EAgACMAcDBQAqABVgMA0GCSqGSIb3DQEBCwUA
A4IBAQBOqST3z4Oykk4/QxjePaTLTI0Oi5hHhN9WgwNcfTFiSZcNN7lxANodMECC
eSclJHiEDpdzMoqVYB0pqxpmRykPaQElGeQRigJYe+PDSK4FyOSuFivr2sgiUubZ
d2nn6RJ5VmDEzcBC3mMAr/Qt4aOblDm42zTADsYJYIMwTTExFG8u2ygIpaYe8e4O
8odRJlMRzO2BcpfDY8BNcLk+06H0bthHWNb0h8xianRsOAZ2MzjIucCWs5/vOjod
ieVREc0mz0u+OmtpRiNbdSsqfhYbtBQqDhig0CrN6uQZ7q9GTI+9tsjrQkYsM+cT
qA99MmD6xQNcQmqtyW6tFIswneUD
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:03 2026 by rpki-client