Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/ELkpby9Bdj_JYA7C384OWbqpxJg.roa
File: ELkpby9Bdj_JYA7C384OWbqpxJg.roa (raw, json)
Hash identifier: h31rtApWx4Vz7rykyNrBq0suf7t4VBJaPWG2PoGxA84=
Subject key identifier: 10:B9:29:6F:2F:41:76:3F:C9:60:0E:C2:DF:CE:0E:59:BA:A9:C4:98
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F2368945F8B408D019580245E67FEA55B
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/ELkpby9Bdj_JYA7C384OWbqpxJg.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6866
IP address blocks: 31.153.0.0/16 maxlen: 24
31.153.0.0/17 maxlen: 17
31.153.0.0/19 maxlen: 19
31.153.0.0/20 maxlen: 20
31.153.16.0/20 maxlen: 20
31.153.32.0/19 maxlen: 19
31.153.64.0/19 maxlen: 19
31.153.96.0/19 maxlen: 19
31.153.128.0/19 maxlen: 19
31.153.160.0/19 maxlen: 19
31.153.192.0/19 maxlen: 19
31.153.224.0/19 maxlen: 19
37.149.0.0/16 maxlen: 24
46.198.0.0/17 maxlen: 24
46.198.0.0/18 maxlen: 18
46.198.0.0/19 maxlen: 19
46.198.32.0/19 maxlen: 19
46.198.64.0/18 maxlen: 18
46.198.64.0/19 maxlen: 19
46.198.96.0/19 maxlen: 19
46.199.0.0/16 maxlen: 24
46.199.0.0/18 maxlen: 18
46.199.0.0/19 maxlen: 19
46.199.16.0/20 maxlen: 20
46.199.32.0/19 maxlen: 19
46.199.32.0/20 maxlen: 20
46.199.48.0/20 maxlen: 20
46.199.64.0/20 maxlen: 20
46.199.88.0/24 maxlen: 24
46.199.192.0/19 maxlen: 19
46.199.224.0/19 maxlen: 19
62.228.0.0/16 maxlen: 24
62.228.0.0/19 maxlen: 19
62.228.0.0/21 maxlen: 21
62.228.8.0/21 maxlen: 21
62.228.16.0/22 maxlen: 22
62.228.20.0/22 maxlen: 22
62.228.24.0/21 maxlen: 21
62.228.32.0/19 maxlen: 19
62.228.64.0/19 maxlen: 19
62.228.96.0/19 maxlen: 19
62.228.128.0/19 maxlen: 19
62.228.160.0/19 maxlen: 19
62.228.192.0/19 maxlen: 19
62.228.224.0/19 maxlen: 19
62.228.226.0/23 maxlen: 23
62.228.228.0/24 maxlen: 24
62.228.229.0/24 maxlen: 24
62.228.240.0/23 maxlen: 23
81.4.128.0/18 maxlen: 24
81.4.128.0/19 maxlen: 19
81.4.133.0/24 maxlen: 24
81.4.160.0/19 maxlen: 19
81.4.160.0/20 maxlen: 20
81.4.160.0/21 maxlen: 21
81.4.168.0/21 maxlen: 21
81.4.174.0/24 maxlen: 24
81.4.176.0/21 maxlen: 21
83.168.0.0/18 maxlen: 24
83.168.0.0/19 maxlen: 19
83.168.32.0/19 maxlen: 19
87.228.128.0/17 maxlen: 24
87.228.128.0/18 maxlen: 18
87.228.144.0/20 maxlen: 20
87.228.160.0/20 maxlen: 20
87.228.176.0/20 maxlen: 20
87.228.192.0/20 maxlen: 20
87.228.208.0/20 maxlen: 20
87.228.224.0/19 maxlen: 19
87.228.224.0/20 maxlen: 20
87.228.240.0/20 maxlen: 20
93.109.0.0/16 maxlen: 24
93.109.0.0/19 maxlen: 19
93.109.32.0/19 maxlen: 19
93.109.64.0/19 maxlen: 19
93.109.96.0/19 maxlen: 19
93.109.128.0/19 maxlen: 19
93.109.160.0/19 maxlen: 19
93.109.192.0/19 maxlen: 19
93.109.209.0/24 maxlen: 24
93.109.219.0/24 maxlen: 24
93.109.224.0/19 maxlen: 19
93.109.227.0/24 maxlen: 24
93.109.239.0/24 maxlen: 24
128.0.107.0/24 maxlen: 24
128.0.200.0/21 maxlen: 24
128.0.208.0/20 maxlen: 24
128.0.224.0/20 maxlen: 24
128.0.240.0/20 maxlen: 24
176.92.200.0/21 maxlen: 21
176.92.208.0/20 maxlen: 20
176.92.224.0/19 maxlen: 24
176.92.240.0/20 maxlen: 20
185.2.96.0/22 maxlen: 24
185.2.96.0/24 maxlen: 24
185.2.97.0/24 maxlen: 24
185.2.98.0/24 maxlen: 24
185.2.99.0/24 maxlen: 24
195.14.128.0/19 maxlen: 24
195.14.128.0/20 maxlen: 20
195.14.142.0/24 maxlen: 24
195.14.144.0/20 maxlen: 20
195.14.146.0/24 maxlen: 24
195.14.151.0/24 maxlen: 24
195.14.153.0/24 maxlen: 24
212.31.96.0/19 maxlen: 24
212.31.96.0/20 maxlen: 20
212.31.96.0/24 maxlen: 24
212.31.112.0/20 maxlen: 20
212.31.121.0/24 maxlen: 24
212.31.122.0/24 maxlen: 24
212.31.123.0/24 maxlen: 24
212.31.124.0/24 maxlen: 24
212.31.125.0/24 maxlen: 24
212.31.127.0/24 maxlen: 24
213.7.0.0/16 maxlen: 24
213.7.0.0/17 maxlen: 17
213.7.0.0/20 maxlen: 20
213.7.16.0/20 maxlen: 20
213.7.32.0/20 maxlen: 20
213.7.48.0/20 maxlen: 20
213.7.64.0/20 maxlen: 20
213.7.80.0/20 maxlen: 20
213.7.96.0/20 maxlen: 20
213.7.112.0/20 maxlen: 20
213.7.128.0/18 maxlen: 18
213.7.128.0/20 maxlen: 20
213.7.144.0/20 maxlen: 20
213.7.160.0/20 maxlen: 20
213.7.176.0/20 maxlen: 20
213.7.192.0/20 maxlen: 20
213.7.208.0/20 maxlen: 20
213.7.208.0/24 maxlen: 24
213.7.220.0/22 maxlen: 22
213.7.224.0/20 maxlen: 20
213.7.240.0/20 maxlen: 20
213.7.240.0/24 maxlen: 24
213.149.160.0/19 maxlen: 24
213.149.160.0/20 maxlen: 20
213.149.176.0/20 maxlen: 20
2a00:1358::/29 maxlen: 48
2a00:1358::/30 maxlen: 48
2a00:1358::/31 maxlen: 48
2a00:1358::/32 maxlen: 48
2a00:1358:1000::/48 maxlen: 48
2a00:1358:b000::/44 maxlen: 44
2a00:1358:d000::/40 maxlen: 40
2a00:1358:df00::/48 maxlen: 48
2a00:1358:f000::/40 maxlen: 40
2a00:1358:f000::/41 maxlen: 41
2a00:1358:f080::/41 maxlen: 41
2a00:1359::/32 maxlen: 48
2a00:135a::/31 maxlen: 48
2a00:135a::/32 maxlen: 48
2a00:135b::/32 maxlen: 48
2a00:135c::/30 maxlen: 48
2a00:135c::/31 maxlen: 48
2a00:135c::/32 maxlen: 48
2a00:135d::/32 maxlen: 48
2a00:135e::/31 maxlen: 48
2a00:135e::/32 maxlen: 48
2a00:135f::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:94:5f:8b:40:8d:01:95:80:24:5e:67:fe:a5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10b9296f2f41763fc9600ec2dfce0e59baa9c498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:70:61:9b:cf:4f:ef:77:e0:e6:8a:9b:f5:
2d:20:3d:36:c6:af:59:da:08:06:a8:29:ac:e2:ab:
8e:01:79:6c:b2:f1:9a:e5:99:55:dc:a7:17:af:fe:
5e:ca:a6:27:9b:a9:bb:47:cf:f7:4f:e8:e1:6a:b2:
9f:2c:03:cf:8e:fe:d8:f9:d5:f4:03:a9:30:f4:d4:
00:9c:22:39:d3:cf:02:3d:f2:0a:00:d3:57:05:92:
4e:61:5f:44:7d:6a:d1:04:0d:ac:c7:ab:fb:d8:72:
3a:76:a5:d2:f0:dc:85:bf:7f:4e:c9:e8:de:25:38:
fc:9f:08:e7:87:c2:7b:e1:65:a3:51:23:8d:fe:a4:
59:f1:a8:46:03:0c:88:c2:25:0d:b1:84:e9:94:c8:
64:6c:ed:04:a7:79:ff:03:93:42:e8:96:e2:4c:c0:
a6:f4:f4:3b:f1:76:e1:d6:90:b3:66:10:13:2e:ac:
65:d2:0d:04:9b:d3:ba:23:bf:90:ec:e3:15:a7:77:
c6:39:57:38:51:0e:b6:f9:42:5d:3e:68:b5:dc:f2:
13:88:bb:68:83:ba:17:71:28:aa:f9:5b:7f:ab:fe:
f7:ff:4d:77:91:e3:e7:36:04:52:b1:7f:d5:61:38:
31:1e:a0:a7:5b:2e:a2:4d:d9:b5:98:e1:6c:68:9c:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B9:29:6F:2F:41:76:3F:C9:60:0E:C2:DF:CE:0E:59:BA:A9:C4:98
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/ELkpby9Bdj_JYA7C384OWbqpxJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.153.0.0/16
37.149.0.0/16
46.198.0.0/17
46.199.0.0/16
62.228.0.0/16
81.4.128.0/18
83.168.0.0/18
87.228.128.0/17
93.109.0.0/16
128.0.107.0/24
128.0.200.0-128.0.255.255
176.92.200.0-176.92.255.255
185.2.96.0/22
195.14.128.0/19
212.31.96.0/19
213.7.0.0/16
213.149.160.0/19
IPv6:
2a00:1358::/29
Signature Algorithm: sha256WithRSAEncryption
60:4b:3c:e6:9d:2b:65:93:82:cb:b0:5b:56:84:50:b8:56:21:
00:63:0a:c6:c4:51:93:83:0a:3f:af:46:02:24:0a:1e:9a:1a:
9b:d9:50:6d:b6:60:e9:4a:b9:31:b8:74:c6:48:37:1a:e1:78:
7b:d3:7e:d0:12:f7:37:00:44:98:9d:1a:31:1a:1e:85:59:4e:
1e:75:41:b5:80:da:86:a9:f4:ea:59:d2:58:9c:27:c5:ec:60:
d4:cc:a9:9f:8c:45:82:62:7a:ac:4e:f7:30:cb:31:10:22:f1:
dd:5d:52:88:11:5f:54:a7:24:4e:90:a3:a3:7b:a8:1d:57:ec:
61:c2:84:3b:ae:26:18:b2:ac:14:81:e8:78:1f:a5:99:c5:1a:
1f:02:09:1a:10:cb:97:75:7e:0b:fd:b8:6d:aa:67:cb:87:b0:
cc:7d:84:ec:0e:8f:bf:47:5b:0d:63:3b:d7:e6:5c:cf:ce:75:
5b:61:8e:07:8e:9d:8e:09:36:f5:19:7f:64:56:75:38:ae:8b:
75:25:1c:eb:67:9a:a2:74:ef:ad:c9:17:6b:cf:df:2d:95:e5:
7c:f0:23:ba:6f:ae:f5:4f:25:7a:2c:29:4d:8f:5c:c7:3b:44:
ff:4b:c4:a3:0d:5c:ad:f6:2c:5b:79:b6:2d:da:79:20:9e:e4:
e2:7f:12:3f
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZ8jaJRfi0CNAZWAJF5n/qVbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NmU0Nzk0YWZjM2EyYmEyNWQyNTJhODU3MzQ3ZWQ0ZWVh
ZTZiNDAwHhcNMjYwNzAyMTUxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGI5Mjk2ZjJmNDE3NjNmYzk2MDBlYzJkZmNlMGU1OWJhYTljNDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+dwYZvPT+934OaKm/UtID02xq9Z
2ggGqCms4quOAXlssvGa5ZlV3KcXr/5eyqYnm6m7R8/3T+jharKfLAPPjv7Y+dX0
A6kw9NQAnCI5088CPfIKANNXBZJOYV9EfWrRBA2sx6v72HI6dqXS8NyFv39Oyeje
JTj8nwjnh8J74WWjUSON/qRZ8ahGAwyIwiUNsYTplMhkbO0Ep3n/A5NC6JbiTMCm
9PQ78Xbh1pCzZhATLqxl0g0Em9O6I7+Q7OMVp3fGOVc4UQ62+UJdPmi13PITiLto
g7oXcSiq+Vt/q/73/013kePnNgRSsX/VYTgxHqCnWy6iTdm1mOFsaJwAzQIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFBC5KW8vQXY/yWAOwt/ODlm6qcSYMB8GA1UdIwQY
MBaAFNZuR5Svw6K6JdJSqFc0ftTurmtAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW01SGxLX0Rvcm9sMGxLb1Z6Ui0xTzZ1YTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt
YjBmNGI5YzM3ZTQ5LzEvRUxrcGJ5OUJkal9KWUE3QzM4NE9XYnFweEpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5
LzEvMW01SGxLX0Rvcm9sMGxLb1Z6Ui0xTzZ1YTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTB0BAIAATBuAwMAH5kD
AwAllQMEBy7GAAMDAC7HAwMAPuQDBAZRBIADBAZTqAADBAdX5IADAwBdbQMEAIAA
azALAwQDgADIAwMAgAAwCwMEA7BcyAMDALBcAwQCuQJgAwQFww6AAwQF1B9gAwMA
1QcDBAXVlaAwDQQCAAIwBwMFAyoAE1gwDQYJKoZIhvcNAQELBQADggEBAGBLPOad
K2WTgsuwW1aEULhWIQBjCsbEUZODCj+vRgIkCh6aGpvZUG22YOlKuTG4dMZINxrh
eHvTftAS9zcARJidGjEaHoVZTh51QbWA2oap9OpZ0licJ8XsYNTMqZ+MRYJieqxO
9zDLMRAi8d1dUogRX1SnJE6Qo6N7qB1X7GHChDuuJhiyrBSB6HgfpZnFGh8CCRoQ
y5d1fgv9uG2qZ8uHsMx9hOwOj79HWw1jO9fmXM/OdVthjgeOnY4JNvUZf2RWdTiu
i3UlHOtnmqJ0763JF2vP3y2V5XzwI7pvrvVPJXosKU2PXMc7RP9LxKMNXK32LFt5
ti3aeSCe5OJ/Ej8=
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:27 2026 by rpki-client