Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/h-WKTlUMQLOqlyLFoGBOWfk4OrY.roa
File: h-WKTlUMQLOqlyLFoGBOWfk4OrY.roa (raw, json)
Hash identifier: ieHJu/E+ae+fHEeWcEYzkuUUaqlobiXz9aHuLMbuIyg=
Subject key identifier: 87:E5:8A:4E:55:0C:40:B3:AA:97:22:C5:A0:60:4E:59:F9:38:3A:B6
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 019FB450B37E3338DB13F873302638A31991
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/h-WKTlUMQLOqlyLFoGBOWfk4OrY.roa
Signing time: Thu 30 Jul 2026 18:36:55 +0000
ROA not before: Thu 30 Jul 2026 18:36:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51559
IP address blocks: 31.192.208.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.30.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.132.0/24 maxlen: 24
89.252.133.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.141.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.144.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.147.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.149.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.154.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.252.174.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.178.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.182.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
2a02:f80::/32 maxlen: 32
2a03:2100::/32 maxlen: 48
2a03:2100::/48 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1a::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:28::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:3f::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b4:50:b3:7e:33:38:db:13:f8:73:30:26:38:a3:19:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jul 30 18:36:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87e58a4e550c40b3aa9722c5a0604e59f9383ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:44:9b:c7:4e:48:1f:8e:3f:e4:93:a5:6e:
fe:54:68:07:3c:d1:22:df:44:99:e6:55:f1:77:17:
fa:44:8e:cf:4c:ce:d3:c2:bf:db:f4:e8:c0:ae:0a:
8e:18:91:6c:6f:51:6f:27:df:9a:46:a8:96:4f:d4:
50:47:c4:81:39:84:7e:40:50:10:90:91:12:8d:f2:
2c:dc:e0:20:bf:87:55:86:7e:2c:33:77:3b:56:5b:
0d:7a:85:35:21:c9:9a:9a:48:ba:ee:94:ae:44:73:
bb:1c:78:59:c9:f0:08:be:f1:b1:10:be:e5:3b:c2:
a6:a8:55:df:6e:aa:cb:55:3f:c5:8f:d9:95:96:c9:
8f:b0:c1:73:7b:4d:5e:50:5a:00:41:c7:77:94:64:
69:d4:87:08:36:49:aa:ab:a6:ed:98:68:99:c2:3a:
22:f1:7b:c3:72:6b:f8:58:c8:13:d4:d9:5a:d2:4c:
c7:02:92:d9:a4:2e:8c:0c:4a:b4:d7:1b:81:d2:91:
91:36:66:98:91:dc:96:62:36:e7:43:5f:00:37:10:
f3:44:5a:52:f8:be:18:c7:0b:87:4d:21:d0:ba:b0:
37:cd:29:e4:3a:d3:e8:80:5f:73:6b:a4:ac:9b:ae:
79:76:7b:b4:ad:da:c4:f5:7a:e2:ad:78:e4:3e:0a:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E5:8A:4E:55:0C:40:B3:AA:97:22:C5:A0:60:4E:59:F9:38:3A:B6
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/h-WKTlUMQLOqlyLFoGBOWfk4OrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0-89.252.137.255
89.252.139.0-89.252.141.255
89.252.143.0-89.252.150.255
89.252.154.0/23
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
00:dd:b4:b6:9e:3e:1c:e6:bd:89:54:9f:6b:5d:fa:dd:39:93:
b8:41:23:91:a4:3d:a3:23:01:fa:d2:a0:67:6e:8b:69:68:8c:
26:96:11:0c:85:2e:67:98:6d:7c:01:95:36:73:30:74:0b:12:
c2:fd:9f:c8:37:b2:db:be:e5:ca:3b:9e:df:9a:be:1c:79:60:
20:81:8b:18:d3:c5:b8:96:6b:31:6c:c5:a1:5d:19:f5:c0:35:
38:d4:61:8f:25:bd:74:dd:7c:d5:9c:6d:23:4b:7f:b1:b3:7c:
d4:62:30:cc:11:5d:28:28:1e:52:d2:be:e9:8b:85:e0:5b:e8:
f4:90:d9:ee:34:bd:15:fe:50:78:28:98:b3:ec:e7:8f:e3:26:
b6:6c:78:fc:47:51:1d:89:51:07:0e:fe:d0:a8:bc:c3:83:79:
ed:1e:e4:98:ea:7a:96:7a:72:66:45:b2:bc:05:cd:00:3b:db:
22:4b:14:84:e6:2c:b8:23:92:45:71:bb:48:24:46:ca:0c:da:
10:83:bd:4f:31:87:68:c1:92:2d:6a:08:4a:8a:83:02:da:aa:
f4:85:90:46:dc:3b:c8:02:59:30:4b:9a:a1:8a:f9:5a:64:e7:
4b:53:25:e6:ae:35:95:b1:ce:64:26:77:c8:cb:33:91:63:66:
9f:b5:69:6f
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISAZ+0ULN+MzjbE/hzMCY4oxmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky
MDVmM2MwHhcNMjYwNzMwMTgzNjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2U1OGE0ZTU1MGM0MGIzYWE5NzIyYzVhMDYwNGU1OWY5MzgzYWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLpEm8dOSB+OP+STpW7+VGgHPNEi
30SZ5lXxdxf6RI7PTM7Twr/b9OjArgqOGJFsb1FvJ9+aRqiWT9RQR8SBOYR+QFAQ
kJESjfIs3OAgv4dVhn4sM3c7VlsNeoU1Icmamki67pSuRHO7HHhZyfAIvvGxEL7l
O8KmqFXfbqrLVT/Fj9mVlsmPsMFze01eUFoAQcd3lGRp1IcINkmqq6btmGiZwjoi
8XvDcmv4WMgT1Nla0kzHApLZpC6MDEq01xuB0pGRNmaYkdyWYjbnQ18ANxDzRFpS
+L4YxwuHTSHQurA3zSnkOtPogF9za6Ssm655dnu0rdrE9XrirXjkPgrlhwIDAQAB
o4IC9zCCAvMwHQYDVR0OBBYEFIflik5VDECzqpcixaBgTln5ODq2MB8GA1UdIwQY
MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt
ZWQzZTM4Zjk1NzdmLzEvaC1XS1RsVU1RTE9xbHlMRm9HQk9XZms0T3JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm
LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgdYEAgABMIHPMAwD
BAQfwNADBAAfwNIDBAAfwNUDBAAfwNcDBAJZKxwDBAJZK0AwDAMEB1n8gAMEAVn8
iDAMAwQAWfyLAwQBWfyMMAwDBABZ/I8DBABZ/JYDBAFZ/JoDBABZ/J4wDAMEBVn8
oAMEAVn8sAMEAl1xPAMEAl1zTDALAwMBXmYDBAJeZggwDAMEAF5mDQMEBF5mADAM
AwQFX62gAwQAX62sMAwDBABfrbEDBAZfrYAwDAMEBZ/9IAMEAJ/9JDAMAwQBn/0m
AwQEn/0gAwQCuV9UMB0EAgACMBcDBQAqAg+AAwUAKgMhAAMHACoDIQIAATANBgkq
hkiG9w0BAQsFAAOCAQEAAN20tp4+HOa9iVSfa1363TmTuEEjkaQ9oyMB+tKgZ26L
aWiMJpYRDIUuZ5htfAGVNnMwdAsSwv2fyDey277lyjue35q+HHlgIIGLGNPFuJZr
MWzFoV0Z9cA1ONRhjyW9dN181ZxtI0t/sbN81GIwzBFdKCgeUtK+6YuF4Fvo9JDZ
7jS9Ff5QeCiYs+znj+Mmtmx4/EdRHYlRBw7+0Ki8w4N57R7kmOp6lnpyZkWyvAXN
ADvbIksUhOYsuCOSRXG7SCRGygzaEIO9TzGHaMGSLWoISoqDAtqq9IWQRtw7yAJZ
MEuaoYr5WmTnS1Ml5q41lbHOZCZ3yMszkWNmn7Vpbw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:14:28 2026 by rpki-client