Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/wEmUsp4YHWLJBUqUou-fXnddnNI.roa
File: wEmUsp4YHWLJBUqUou-fXnddnNI.roa (raw, json)
Hash identifier: mZCp4WYgBJMwxzFtP8EVDxeoQ9DuWh60+a4TXLeKQbA=
Subject key identifier: C0:49:94:B2:9E:18:1D:62:C9:05:4A:94:A2:EF:9F:5E:77:5D:9C:D2
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 019919CC9D256820542A0A4B5A4A4131CE6E
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/wEmUsp4YHWLJBUqUou-fXnddnNI.roa
Signing time: Fri 05 Sep 2025 12:14:23 +0000
ROA not before: Fri 05 Sep 2025 12:14:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51559
IP address blocks: 31.192.208.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.30.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.141.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.144.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.147.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.154.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.156.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.252.174.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.178.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.182.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
2a02:f80::/32 maxlen: 32
2a03:2100::/32 maxlen: 48
2a03:2100::/48 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1a::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:28::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:3f::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:cc:9d:25:68:20:54:2a:0a:4b:5a:4a:41:31:ce:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Sep 5 12:14:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c04994b29e181d62c9054a94a2ef9f5e775d9cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:11:68:06:59:e3:fc:1f:67:9c:31:58:c5:
6c:af:1c:82:67:a6:ad:a0:f6:28:5e:b7:b1:b1:1a:
d5:e0:f2:82:12:45:81:29:52:46:bc:d3:be:5d:be:
b2:d7:7f:36:87:71:92:f4:1f:c4:90:46:50:5b:ed:
5d:b7:37:d3:f7:c9:a2:07:31:1f:85:25:cc:87:6b:
30:79:a3:b7:89:f8:35:d8:b8:4b:a7:1a:9c:83:8c:
bf:7d:76:8f:59:a7:6b:22:e6:5c:1b:0b:ff:12:35:
e8:7f:a2:a5:3f:9e:97:c7:36:e3:fa:c4:54:05:f1:
03:5b:f1:ac:26:26:44:da:44:09:f8:77:00:0f:98:
87:13:d3:d6:c3:b5:e3:61:af:08:cf:39:b3:03:93:
88:2a:7b:25:76:17:52:cd:ae:21:2e:35:3c:b9:0e:
44:72:2f:6f:d3:cb:d3:0e:f3:85:47:b8:23:a0:9d:
74:ac:9d:7a:2e:48:48:72:3a:95:ff:96:77:b1:5e:
c1:b0:23:fa:6a:98:a2:cb:32:e0:91:9b:b2:61:a8:
70:d5:c7:8c:d5:21:c1:a5:de:7a:3c:5a:b1:69:6d:
58:3b:db:07:dc:3c:51:33:b6:60:51:9e:c6:92:36:
df:6a:ca:64:eb:8b:79:0c:db:cd:7d:93:48:88:a9:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:49:94:B2:9E:18:1D:62:C9:05:4A:94:A2:EF:9F:5E:77:5D:9C:D2
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/wEmUsp4YHWLJBUqUou-fXnddnNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0/22
89.252.134.0-89.252.137.255
89.252.139.0-89.252.141.255
89.252.143.0-89.252.148.255
89.252.150.0/24
89.252.154.0-89.252.156.255
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
03:88:6b:8a:b0:bd:cc:e4:69:93:e1:f1:01:a3:01:14:81:8b:
32:da:58:b7:d6:e7:02:2b:bd:d4:ea:53:d2:0d:ff:4c:1a:23:
42:78:55:29:5f:0a:93:8a:0c:0e:cc:9f:0e:c2:18:39:d0:ec:
6b:2c:09:49:f0:a4:05:5c:71:af:3d:ea:a8:db:24:34:78:35:
7d:b9:a8:8d:cc:07:a3:8f:b1:b9:a6:0b:0e:d6:3f:37:38:3e:
26:9f:57:7d:42:ac:e9:65:b0:c4:81:85:88:56:da:bd:87:e2:
f8:11:ae:9d:ab:78:f3:d4:3d:d8:71:f6:e6:0a:2e:8b:65:19:
43:38:ce:72:24:96:71:d1:9c:b5:d9:dd:f6:31:1e:5b:da:78:
73:37:99:30:0d:17:af:1a:9d:25:2f:af:01:d2:73:2f:0e:16:
db:de:f8:40:c6:9d:96:ff:b3:b3:a9:2b:db:ee:19:ee:a6:bb:
02:87:9e:72:da:6f:c1:75:78:34:8d:35:80:63:c5:27:ab:b0:
3c:ce:ca:e7:d4:cb:02:1e:be:52:be:2a:65:65:4b:d4:0a:af:
0a:5c:60:dc:a2:fd:97:8f:68:ee:48:c3:ad:88:54:b0:58:ef:
e5:3c:88:1a:3a:15:3a:ae:aa:5a:bf:1d:44:c4:84:3c:dd:d8:
53:5e:56:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:40:51 2025 by rpki-client