Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/aiMUiy2K0rhjgIsKDziHX9nGIvE.roa
File: aiMUiy2K0rhjgIsKDziHX9nGIvE.roa (raw, json)
Hash identifier: Ud35NiLaPGn8A+EI5Bj2Fn1tWoob+jtcb5/i9AYJ+80=
Subject key identifier: 6A:23:14:8B:2D:8A:D2:B8:63:80:8B:0A:0F:38:87:5F:D9:C6:22:F1
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 019E20549D662433E6C76804EE9A1540FA69
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/aiMUiy2K0rhjgIsKDziHX9nGIvE.roa
Signing time: Wed 13 May 2026 07:54:36 +0000
ROA not before: Wed 13 May 2026 07:54:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25145
IP address blocks: 31.40.240.0/24 maxlen: 24
77.92.96.0/19 maxlen: 19
77.92.96.0/24 maxlen: 24
77.92.97.0/24 maxlen: 24
77.92.98.0/24 maxlen: 24
77.92.99.0/24 maxlen: 24
77.92.100.0/22 maxlen: 22
77.92.100.0/24 maxlen: 24
77.92.101.0/24 maxlen: 24
77.92.102.0/24 maxlen: 24
77.92.103.0/24 maxlen: 24
77.92.104.0/24 maxlen: 24
77.92.105.0/24 maxlen: 24
77.92.106.0/24 maxlen: 24
77.92.107.0/24 maxlen: 24
77.92.108.0/22 maxlen: 22
77.92.108.0/24 maxlen: 24
77.92.109.0/24 maxlen: 24
77.92.110.0/24 maxlen: 24
77.92.111.0/24 maxlen: 24
77.92.112.0/22 maxlen: 22
77.92.112.0/24 maxlen: 24
77.92.113.0/24 maxlen: 24
77.92.114.0/24 maxlen: 24
77.92.115.0/24 maxlen: 24
77.92.116.0/24 maxlen: 24
77.92.117.0/24 maxlen: 24
77.92.118.0/24 maxlen: 24
77.92.119.0/24 maxlen: 24
77.92.120.0/24 maxlen: 24
77.92.121.0/24 maxlen: 24
77.92.122.0/24 maxlen: 24
77.92.123.0/24 maxlen: 24
77.92.124.0/24 maxlen: 24
77.92.125.0/24 maxlen: 24
77.92.126.0/24 maxlen: 24
77.92.127.0/24 maxlen: 24
185.115.208.0/24 maxlen: 24
185.115.210.0/24 maxlen: 24
185.115.211.0/24 maxlen: 24
213.144.96.0/19 maxlen: 19
213.144.96.0/22 maxlen: 22
213.144.96.0/24 maxlen: 24
213.144.97.0/24 maxlen: 24
213.144.98.0/24 maxlen: 24
213.144.99.0/24 maxlen: 24
213.144.100.0/24 maxlen: 24
213.144.101.0/24 maxlen: 24
213.144.103.0/24 maxlen: 24
213.144.104.0/22 maxlen: 22
213.144.104.0/24 maxlen: 24
213.144.105.0/24 maxlen: 24
213.144.106.0/24 maxlen: 24
213.144.107.0/24 maxlen: 24
213.144.108.0/22 maxlen: 22
213.144.108.0/24 maxlen: 24
213.144.109.0/24 maxlen: 24
213.144.110.0/24 maxlen: 24
213.144.111.0/24 maxlen: 24
213.144.112.0/22 maxlen: 22
213.144.112.0/24 maxlen: 24
213.144.113.0/24 maxlen: 24
213.144.114.0/24 maxlen: 24
213.144.115.0/24 maxlen: 24
213.144.116.0/22 maxlen: 22
213.144.116.0/24 maxlen: 24
213.144.117.0/24 maxlen: 24
213.144.118.0/24 maxlen: 24
213.144.119.0/24 maxlen: 24
213.144.120.0/22 maxlen: 22
213.144.120.0/24 maxlen: 24
213.144.121.0/24 maxlen: 24
213.144.122.0/24 maxlen: 24
213.144.123.0/24 maxlen: 24
213.144.124.0/22 maxlen: 22
213.144.124.0/24 maxlen: 24
213.144.125.0/24 maxlen: 24
213.144.126.0/24 maxlen: 24
213.144.127.0/24 maxlen: 24
2a02:ac80::/29 maxlen: 29
2a02:ac80::/32 maxlen: 32
2a02:ac80:10::/48 maxlen: 48
2a02:ac80:20::/48 maxlen: 48
2a02:ac80:30::/48 maxlen: 48
2a02:ac80:40::/48 maxlen: 48
2a02:ac80:50::/48 maxlen: 48
2a02:ac80:60::/48 maxlen: 48
2a02:ac80:6a::/48 maxlen: 48
2a02:ac80:70::/48 maxlen: 48
2a02:ac80:90::/48 maxlen: 48
2a02:ac80:91::/48 maxlen: 48
2a02:ac80:92::/48 maxlen: 48
2a02:ac80:93::/48 maxlen: 48
2a02:ac80:97::/48 maxlen: 48
2a02:ac80:99::/48 maxlen: 48
2a02:ac80:a0::/48 maxlen: 48
2a02:ac80:b0::/48 maxlen: 48
2a02:ac80:c0::/48 maxlen: 48
2a02:ac80:d0::/48 maxlen: 48
2a02:ac80:e0::/48 maxlen: 48
2a02:ac80:f0::/48 maxlen: 48
2a02:ac80:100::/48 maxlen: 48
2a02:ac80:101::/48 maxlen: 48
2a02:ac80:102::/48 maxlen: 48
2a02:ac80:105::/48 maxlen: 48
2a02:ac80:127::/48 maxlen: 48
2a02:ac80:200::/48 maxlen: 48
2a02:ac80:300::/48 maxlen: 48
2a02:ac80:400::/48 maxlen: 48
2a02:ac80:500::/48 maxlen: 48
2a02:ac80:600::/48 maxlen: 48
2a02:ac80:700::/48 maxlen: 48
2a02:ac80:a00::/48 maxlen: 48
2a02:ac80:b00::/48 maxlen: 48
2a02:ac80:c00::/48 maxlen: 48
2a02:ac80:d00::/48 maxlen: 48
2a02:ac80:e00::/48 maxlen: 48
2a02:ac80:f00::/48 maxlen: 48
2a02:ac80:1000::/48 maxlen: 48
2a02:ac80:2000::/48 maxlen: 48
2a02:ac80:3000::/48 maxlen: 48
2a02:ac80:4000::/48 maxlen: 48
2a02:ac80:5000::/48 maxlen: 48
2a02:ac80:6000::/48 maxlen: 48
2a02:ac80:6100::/48 maxlen: 48
2a02:ac80:6300::/48 maxlen: 48
2a02:ac80:7000::/48 maxlen: 48
2a02:ac80:7370::/48 maxlen: 48
2a02:ac80:9100::/48 maxlen: 48
2a02:ac80:9300::/48 maxlen: 48
2a02:ac80:a000::/48 maxlen: 48
2a02:ac80:b000::/48 maxlen: 48
2a02:ac80:c000::/48 maxlen: 48
2a02:ac80:d000::/48 maxlen: 48
2a02:ac80:e000::/48 maxlen: 48
2a02:ac80:f000::/48 maxlen: 48
2a02:ac81::/32 maxlen: 32
2a02:ac82::/32 maxlen: 32
2a02:ac83::/32 maxlen: 32
2a02:ac84::/32 maxlen: 32
2a02:ac85::/32 maxlen: 32
2a02:ac86::/32 maxlen: 32
2a02:ac87::/32 maxlen: 32
2a02:ac87:5900::/48 maxlen: 48
2a02:ac87:59cb::/48 maxlen: 48
2a02:ac87:ac87::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:54:9d:66:24:33:e6:c7:68:04:ee:9a:15:40:fa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: May 13 07:54:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a23148b2d8ad2b863808b0a0f38875fd9c622f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:c2:ea:87:cb:24:47:e2:59:77:da:22:71:
be:1d:9d:3a:6b:15:ff:f6:73:12:3e:07:76:d8:0b:
cd:05:47:27:b3:67:23:d6:cc:56:68:04:ac:65:fb:
5f:ca:d9:6d:8e:0e:9e:85:66:19:52:85:46:b1:1b:
9c:a4:5e:ef:38:1a:3c:12:ff:a7:a8:72:76:7e:0b:
3b:5c:43:c3:c1:53:a7:9a:0a:fa:ef:93:38:f3:91:
d7:73:73:f5:1e:f0:72:22:a7:4e:3a:cb:83:9f:5a:
01:3a:cd:2c:3c:64:df:28:75:57:f3:64:88:a7:be:
b2:90:70:45:1b:db:65:0f:ad:17:49:28:aa:1a:e8:
4b:08:e1:72:62:c3:f9:65:09:00:82:d4:b4:82:6b:
db:dd:15:af:84:e9:81:45:00:e4:ec:8f:37:ce:1e:
db:ea:1b:35:35:27:9b:54:40:47:ed:b4:79:f0:fa:
be:26:b1:af:81:25:b7:c1:f9:93:19:4b:89:c8:47:
f6:eb:30:d3:27:f6:3f:bc:38:24:f8:e5:c6:9f:3d:
70:58:f9:ea:2f:42:80:df:38:44:2e:f9:46:83:2e:
d7:26:e5:f6:cf:9d:74:95:1e:93:a3:6a:89:f6:d4:
34:99:50:11:75:02:9e:a7:15:ce:a5:f7:bd:48:bb:
75:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:23:14:8B:2D:8A:D2:B8:63:80:8B:0A:0F:38:87:5F:D9:C6:22:F1
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/aiMUiy2K0rhjgIsKDziHX9nGIvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.240.0/24
77.92.96.0/19
185.115.208.0/24
185.115.210.0/23
213.144.96.0/19
IPv6:
2a02:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
22:51:fb:7d:9a:23:4d:1c:0f:60:b9:09:6a:9e:4d:6a:d4:6e:
14:24:3a:01:71:c7:ed:cf:68:9e:80:c4:25:3f:df:c8:5c:19:
78:41:ee:e0:b3:74:07:c8:ad:d5:b1:4f:40:73:fa:6f:5b:a2:
d0:a4:8c:05:f8:d0:0f:bb:9c:3f:f3:fc:b9:63:71:c7:d3:f3:
e3:15:58:e7:0a:43:33:c9:6e:75:13:47:28:c2:7e:de:72:e6:
52:c2:03:26:45:4c:87:f1:b4:22:cb:85:07:56:0c:ad:81:e9:
3d:26:97:ea:f0:a8:a1:81:df:ec:b6:6c:31:a4:40:a3:89:bb:
c8:66:fb:17:50:8a:55:dd:d7:b2:62:68:c6:6b:f2:5f:2b:f5:
a9:74:ed:4e:00:fd:8a:d8:37:80:e3:66:de:7d:4d:a8:f9:7b:
8f:5e:0b:02:b5:4f:05:e1:19:c1:66:31:7d:ab:5c:ac:d1:d6:
38:d2:27:a0:6b:fa:e1:bc:fb:ad:36:d0:f3:75:a6:13:00:4a:
9c:55:f7:4e:74:e5:8e:ea:dc:00:fd:c9:41:91:df:cd:92:f8:
ec:a3:32:c8:c1:0f:88:bf:13:35:68:07:af:5a:b4:5c:47:a8:
c7:70:3d:5b:fb:09:4c:dc:b3:27:a7:19:98:31:34:ec:46:6a:
09:b2:fb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:14:43 2026 by rpki-client