Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/1-OwLm67bHKRp1fwltJ02rKbmUY8.roa
File: 1-OwLm67bHKRp1fwltJ02rKbmUY8.roa (raw, json)
Hash identifier: YsEOZs1ykQHqbKJnmEqI+6W8aq5KgeEZ5HbWH64Rlgo=
Subject key identifier: F8:EC:0B:9B:AE:DB:1C:A4:69:D5:FC:25:B4:9D:36:AC:A6:E6:51:8F
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019E8DAE494DC34229AB3673E6CFADAEE55C
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/1-OwLm67bHKRp1fwltJ02rKbmUY8.roa
Signing time: Wed 03 Jun 2026 13:31:09 +0000
ROA not before: Wed 03 Jun 2026 13:31:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197706
IP address blocks: 31.171.152.0/24 maxlen: 24
31.171.153.0/24 maxlen: 24
31.171.154.0/24 maxlen: 24
31.171.155.0/24 maxlen: 24
45.74.144.0/24 maxlen: 24
45.74.145.0/24 maxlen: 24
45.74.146.0/24 maxlen: 24
45.74.147.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
103.124.165.0/24 maxlen: 24
103.124.167.0/24 maxlen: 24
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
144.48.54.0/24 maxlen: 24
144.48.55.0/24 maxlen: 24
185.53.100.0/24 maxlen: 24
185.53.101.0/24 maxlen: 24
185.153.125.0/24 maxlen: 24
185.153.126.0/24 maxlen: 24
185.153.127.0/24 maxlen: 24
195.146.16.0/24 maxlen: 24
195.146.18.0/24 maxlen: 24
195.146.20.0/24 maxlen: 24
195.146.22.0/24 maxlen: 24
195.146.24.0/24 maxlen: 24
195.146.26.0/24 maxlen: 24
195.146.28.0/24 maxlen: 24
195.146.30.0/24 maxlen: 24
209.23.44.0/24 maxlen: 24
209.23.45.0/24 maxlen: 24
209.23.46.0/24 maxlen: 24
209.23.47.0/24 maxlen: 24
2a04:27c0::/29 maxlen: 48
2a04:27c0:fffd::/48 maxlen: 48
2a04:27c0:fffe::/48 maxlen: 48
2a09:6e40::/29 maxlen: 48
2a09:6e47::/48 maxlen: 48
2a09:6ec0::/29 maxlen: 48
2a0d:27c0::/29 maxlen: 48
2a0d:27c4::/32 maxlen: 32
2a0d:42c0::/29 maxlen: 48
2a0d:4a40::/29 maxlen: 48
2a0d:4a46::/32 maxlen: 32
2a0e:3f00::/29 maxlen: 48
2a0e:3f01::/48 maxlen: 48
2a0e:4f00::/29 maxlen: 48
2a0e:4f05::/32 maxlen: 32
2a0e:d4c0::/29 maxlen: 48
2a0f:42c0::/29 maxlen: 48
2a0f:a880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:ae:49:4d:c3:42:29:ab:36:73:e6:cf:ad:ae:e5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jun 3 13:31:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8ec0b9baedb1ca469d5fc25b49d36aca6e6518f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:7e:fd:4f:7d:3e:32:f1:40:ee:8b:ad:13:
c7:0f:ab:ea:ec:93:6b:42:ab:dc:71:d3:13:72:39:
73:83:5f:a5:eb:87:67:45:dd:7b:a3:43:42:8e:cb:
9c:9c:88:63:ad:ff:fe:d2:da:e3:5e:c3:61:c5:38:
0a:34:d3:cf:d5:95:49:c8:3b:49:02:e0:35:83:4a:
8e:d5:5f:c4:10:53:29:dc:f0:f1:0d:0f:38:26:5a:
dd:03:8a:8c:2d:8a:00:02:83:bc:2b:be:5e:91:99:
97:60:3a:fd:23:8a:53:0c:a6:1d:b9:b2:7a:c2:53:
54:ff:50:07:dd:5b:77:34:52:20:e1:cf:e1:04:90:
13:42:56:96:5c:23:87:7b:7a:46:2e:1c:9d:77:d1:
46:35:c0:6c:0c:9c:38:42:e0:cb:2e:58:fb:f8:d4:
f2:d1:bf:5b:8c:e9:00:37:77:21:cf:dd:bb:32:12:
9c:cb:0f:f8:9c:c7:0c:19:f9:bb:53:4b:6a:b9:38:
3c:b5:ab:a0:b1:47:f0:5e:b4:e0:a2:c0:8c:f2:91:
86:8d:07:62:e8:2b:a9:20:5b:58:c9:c9:37:07:b5:
03:56:d2:a3:cd:c6:18:c4:72:a9:ed:4e:dd:c0:0b:
4e:63:8b:17:04:e5:a3:bc:3e:89:3e:22:ef:ad:87:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EC:0B:9B:AE:DB:1C:A4:69:D5:FC:25:B4:9D:36:AC:A6:E6:51:8F
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/1-OwLm67bHKRp1fwltJ02rKbmUY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/22
45.74.144.0/22
45.142.26.0/24
103.124.165.0/24
103.124.167.0/24
109.104.140.0/23
144.48.54.0/23
185.53.100.0/23
185.153.125.0-185.153.127.255
195.146.16.0/24
195.146.18.0/24
195.146.20.0/24
195.146.22.0/24
195.146.24.0/24
195.146.26.0/24
195.146.28.0/24
195.146.30.0/24
209.23.44.0/22
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a09:6ec0::/29
2a0d:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:3f00::/29
2a0e:4f00::/29
2a0e:d4c0::/29
2a0f:42c0::/29
2a0f:a880::/29
Signature Algorithm: sha256WithRSAEncryption
32:c5:93:cb:d3:00:24:74:0a:b9:ce:fa:ac:b1:fc:b6:98:6c:
c5:e2:4d:5f:bf:2d:58:a1:f3:e8:67:70:00:be:b1:e9:16:4d:
29:ca:20:f2:4f:48:f7:8c:05:dd:2b:a7:52:60:7c:9c:47:e5:
6d:e2:54:0e:38:df:79:9b:8c:44:95:95:64:3f:78:3d:86:45:
2f:63:c5:c0:fd:42:9b:f3:32:75:10:01:ea:81:b2:52:ab:9b:
89:05:ee:72:5c:38:2b:ab:5b:2b:9e:16:e2:ce:a3:d1:d2:5b:
08:97:3b:a7:60:27:58:e8:b4:da:82:d8:cb:39:c1:03:4d:e6:
4c:a7:c7:e3:ac:d2:72:3b:d1:a5:f4:5d:8b:99:5e:d3:71:07:
44:8f:50:26:ec:bf:9a:c8:bc:5d:37:31:57:e2:d9:75:93:f5:
d9:99:d5:9b:73:17:9c:ef:e9:99:b8:ef:b4:b7:aa:d2:69:b3:
97:2f:b4:82:c0:41:bb:12:73:a6:1e:fb:d1:4c:42:8a:65:3a:
4f:1e:35:a4:96:86:09:34:91:b5:6e:07:86:a3:9e:b9:88:6a:
b8:59:83:e1:33:a3:05:88:a3:94:11:04:55:1b:f4:23:c9:54:
0d:12:c2:be:c6:ad:9e:ee:95:6d:35:f5:ea:1e:8c:bf:99:cc:
a1:66:d5:8a
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgISAZ6NrklNw0IpqzZz5s+truVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh
ZmU0NGUwHhcNMjYwNjAzMTMzMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGVjMGI5YmFlZGIxY2E0NjlkNWZjMjViNDlkMzZhY2E2ZTY1MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsh+/U99PjLxQO6LrRPHD6vq7JNr
QqvccdMTcjlzg1+l64dnRd17o0NCjsucnIhjrf/+0trjXsNhxTgKNNPP1ZVJyDtJ
AuA1g0qO1V/EEFMp3PDxDQ84JlrdA4qMLYoAAoO8K75ekZmXYDr9I4pTDKYdubJ6
wlNU/1AH3Vt3NFIg4c/hBJATQlaWXCOHe3pGLhydd9FGNcBsDJw4QuDLLlj7+NTy
0b9bjOkAN3chz927MhKcyw/4nMcMGfm7U0tquTg8taugsUfwXrTgosCM8pGGjQdi
6CupIFtYyck3B7UDVtKjzcYYxHKp7U7dwAtOY4sXBOWjvD6JPiLvrYfCLwIDAQAB
o4IC0DCCAswwHQYDVR0OBBYEFPjsC5uu2xykadX8JbSdNqym5lGPMB8GA1UdIwQY
MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct
ZmI1OTQ5ODA4ZGRjLzEvMS1Pd0xtNjdiSEtScDFmd2x0SjAycktibVVZOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDAvYWExMDE5LTU2NGYtNGM0Ni1hMjE3LWZiNTk0OTgwOGRk
Yy8xL1lrclVVMXJJamRVMEdaOHFjbUNWcjNHdjVFNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCB5AYIKwYBBQUHAQcBAf8EgdQwgdEwegQCAAEwdAMEAh+r
mAMEAi1KkAMEAC2OGgMEAGd8pQMEAGd8pwMEAW1ojAMEAZAwNgMEAbk1ZDAMAwQA
uZl9AwQHuZkAAwQAw5IQAwQAw5ISAwQAw5IUAwQAw5IWAwQAw5IYAwQAw5IaAwQA
w5IcAwQAw5IeAwQC0RcsMFMEAgACME0DBQMqBCfAAwUDKgluQAMFAyoJbsADBQMq
DSfAAwUDKg1CwAMFAyoNSkADBQMqDj8AAwUDKg5PAAMFAyoO1MADBQMqD0LAAwUD
Kg+ogDANBgkqhkiG9w0BAQsFAAOCAQEAMsWTy9MAJHQKuc76rLH8tphsxeJNX78t
WKHz6GdwAL6x6RZNKcog8k9I94wF3SunUmB8nEflbeJUDjjfeZuMRJWVZD94PYZF
L2PFwP1Cm/MydRAB6oGyUqubiQXuclw4K6tbK54W4s6j0dJbCJc7p2AnWOi02oLY
yznBA03mTKfH46zScjvRpfRdi5le03EHRI9QJuy/msi8XTcxV+LZdZP12ZnVm3MX
nO/pmbjvtLeq0mmzly+0gsBBuxJzph770UxCimU6Tx41pJaGCTSRtW4HhqOeuYhq
uFmD4TOjBYijlBEEVRv0I8lUDRLCvsatnu6VbTX16h6Mv5nMoWbVig==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:37:13 2026 by rpki-client