Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YvLeUn_yTkkL-T8IgmDvKHTrGBo.roa
File: YvLeUn_yTkkL-T8IgmDvKHTrGBo.roa (raw, json)
Hash identifier: 7xSdBfd3WFYKkyKBq8eCWFPae4kdgJBhpREyiH2C1jI=
Subject key identifier: 62:F2:DE:52:7F:F2:4E:49:0B:F9:3F:08:82:60:EF:28:74:EB:18:1A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01985AB381F541230FF0BC26B9346A0797FF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YvLeUn_yTkkL-T8IgmDvKHTrGBo.roa
Signing time: Wed 30 Jul 2025 09:39:30 +0000
ROA not before: Wed 30 Jul 2025 09:39:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34224
IP address blocks: 31.13.195.0/24 maxlen: 32
31.13.197.0/24 maxlen: 32
31.13.216.0/21 maxlen: 32
31.13.217.0/24 maxlen: 32
31.13.221.0/24 maxlen: 32
31.13.223.0/24 maxlen: 32
31.13.230.0/24 maxlen: 32
31.13.236.0/22 maxlen: 32
31.13.241.0/24 maxlen: 32
31.13.245.0/24 maxlen: 32
37.60.138.0/24 maxlen: 32
37.60.139.0/24 maxlen: 32
45.81.38.0/24 maxlen: 32
45.139.123.0/24 maxlen: 24
82.115.210.0/24 maxlen: 32
83.143.115.0/24 maxlen: 32
85.217.140.0/24 maxlen: 32
87.120.6.0/23 maxlen: 32
87.120.6.0/24 maxlen: 32
87.120.8.0/24 maxlen: 32
87.120.13.0/24 maxlen: 32
87.120.37.0/24 maxlen: 32
87.120.39.0/24 maxlen: 32
87.120.43.0/24 maxlen: 32
87.120.61.0/24 maxlen: 32
87.120.98.0/24 maxlen: 32
87.120.104.0/24 maxlen: 32
87.120.109.0/24 maxlen: 32
87.120.128.0/23 maxlen: 32
87.120.132.0/24 maxlen: 32
87.120.133.0/24 maxlen: 32
87.120.134.0/24 maxlen: 32
87.120.135.0/24 maxlen: 32
87.120.176.0/24 maxlen: 32
87.120.195.0/24 maxlen: 32
87.120.199.0/24 maxlen: 32
87.120.200.0/24 maxlen: 32
87.120.201.0/24 maxlen: 32
87.120.206.0/23 maxlen: 32
87.120.206.0/24 maxlen: 32
87.120.207.0/24 maxlen: 32
87.120.217.0/24 maxlen: 32
87.120.223.0/24 maxlen: 32
87.120.253.0/24 maxlen: 32
87.120.254.0/24 maxlen: 32
87.120.255.0/24 maxlen: 32
87.121.0.0/23 maxlen: 32
87.121.0.0/24 maxlen: 32
87.121.1.0/24 maxlen: 32
87.121.2.0/24 maxlen: 24
87.121.6.0/23 maxlen: 32
87.121.32.0/24 maxlen: 24
87.121.42.0/24 maxlen: 32
87.121.52.0/24 maxlen: 32
87.121.64.0/24 maxlen: 32
87.121.83.0/24 maxlen: 32
87.121.90.0/23 maxlen: 32
87.121.110.0/24 maxlen: 32
87.121.111.0/24 maxlen: 32
87.121.112.0/24 maxlen: 32
87.121.113.0/24 maxlen: 32
87.121.118.0/24 maxlen: 32
87.121.150.0/23 maxlen: 32
87.121.150.0/24 maxlen: 32
87.121.151.0/24 maxlen: 32
87.121.161.0/24 maxlen: 32
91.92.0.0/24 maxlen: 32
91.92.1.0/24 maxlen: 32
91.92.2.0/24 maxlen: 32
91.92.65.0/24 maxlen: 32
91.92.66.0/24 maxlen: 32
91.92.105.0/24 maxlen: 32
91.92.109.0/24 maxlen: 32
91.92.139.0/24 maxlen: 32
91.92.197.0/24 maxlen: 32
91.92.198.0/23 maxlen: 32
91.92.219.0/24 maxlen: 32
91.92.230.0/24 maxlen: 32
91.212.233.0/24 maxlen: 32
92.249.49.0/24 maxlen: 32
93.123.8.0/24 maxlen: 32
93.123.12.0/24 maxlen: 32
93.123.18.0/24 maxlen: 32
93.123.28.0/23 maxlen: 32
93.123.32.0/22 maxlen: 32
93.123.36.0/24 maxlen: 32
93.123.37.0/24 maxlen: 32
93.123.64.0/24 maxlen: 32
94.156.15.0/24 maxlen: 32
94.156.24.0/24 maxlen: 32
94.156.25.0/24 maxlen: 32
94.156.42.0/24 maxlen: 32
94.156.44.0/24 maxlen: 32
94.156.77.0/24 maxlen: 32
94.156.94.0/24 maxlen: 32
94.156.98.0/24 maxlen: 32
94.156.100.0/24 maxlen: 32
94.156.129.0/24 maxlen: 32
94.156.130.0/24 maxlen: 32
94.156.153.0/24 maxlen: 32
94.156.158.0/24 maxlen: 32
94.156.172.0/23 maxlen: 32
94.156.185.0/24 maxlen: 32
94.156.188.0/24 maxlen: 32
94.156.216.0/21 maxlen: 32
94.156.249.0/24 maxlen: 32
94.156.251.0/24 maxlen: 32
94.156.252.0/24 maxlen: 32
185.254.36.0/24 maxlen: 32
194.55.184.0/23 maxlen: 32
194.169.173.0/24 maxlen: 32
212.73.128.0/23 maxlen: 32
212.73.130.0/23 maxlen: 32
212.73.131.0/24 maxlen: 32
212.73.132.0/24 maxlen: 32
212.73.133.0/24 maxlen: 32
212.73.134.0/24 maxlen: 32
212.73.136.0/24 maxlen: 32
212.73.138.0/23 maxlen: 32
212.73.138.0/24 maxlen: 32
212.73.140.0/24 maxlen: 32
212.73.141.0/24 maxlen: 32
212.73.142.0/24 maxlen: 32
212.73.143.0/24 maxlen: 32
212.73.144.0/24 maxlen: 32
212.73.145.0/24 maxlen: 32
212.73.146.0/24 maxlen: 32
212.73.147.0/24 maxlen: 32
212.73.148.0/24 maxlen: 32
212.73.155.0/24 maxlen: 32
212.73.157.0/24 maxlen: 32
212.87.207.0/24 maxlen: 32
2a00:1728::/32 maxlen: 48
2a00:1728:0:d::/64 maxlen: 64
2a00:1728:1::/48 maxlen: 48
2a00:1728:3::/48 maxlen: 48
2a00:1728:1b::/48 maxlen: 48
2a00:1728:1f::/48 maxlen: 48
2a00:1728:21::/48 maxlen: 48
2a00:1728:23::/48 maxlen: 48
2a00:1728:25::/48 maxlen: 48
2a00:1728:27::/48 maxlen: 48
2a00:1728:2f::/48 maxlen: 48
2a00:1728:31::/48 maxlen: 48
2a00:1728:34::/48 maxlen: 48
2a00:1728:35::/48 maxlen: 48
2a00:1728:41::/48 maxlen: 48
2a00:1728:42::/48 maxlen: 48
2a00:1728:43::/48 maxlen: 48
2a00:1728:44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:b3:81:f5:41:23:0f:f0:bc:26:b9:34:6a:07:97:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 30 09:39:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62f2de527ff24e490bf93f088260ef2874eb181a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:f4:c0:ff:5f:6f:6e:12:51:b9:fb:06:a8:
66:b6:fb:35:91:16:cb:78:b7:a0:5e:60:83:98:a8:
86:ab:fa:03:b3:b5:9d:03:61:d1:98:1d:bc:b8:1f:
87:de:cf:5f:47:8b:13:e4:c2:4a:87:69:0a:e7:4d:
16:a9:a4:10:d8:fa:62:0c:14:e9:2d:64:34:9b:76:
e2:d6:9f:88:d4:5d:09:dd:74:e3:d0:d2:42:89:ad:
aa:3d:74:3e:7c:d7:0a:ed:a9:ac:67:f4:3b:51:44:
e1:65:a5:6f:74:76:4e:3e:7a:83:1d:14:56:ec:fb:
53:22:ad:1f:78:d9:78:26:df:e9:13:9d:e1:3a:3a:
8e:ea:a7:63:c0:43:ce:b1:92:15:c3:cf:f8:8d:40:
cf:fa:e8:f6:5d:ae:ea:6d:a6:48:60:2b:67:18:42:
f6:94:08:5c:31:64:e3:77:61:bf:3e:6a:f2:6d:be:
9f:37:5f:06:ac:61:f1:2c:d2:2a:7a:92:41:ab:27:
43:70:01:5b:ce:08:a4:49:8a:fb:89:18:e7:2a:06:
18:a2:22:e0:dd:81:17:09:61:46:1e:ab:4d:6f:51:
88:ae:b7:2f:00:50:74:e5:70:d3:17:63:fc:3c:7d:
37:29:9b:b8:88:de:fc:8a:1e:9b:03:a8:1f:05:8e:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F2:DE:52:7F:F2:4E:49:0B:F9:3F:08:82:60:EF:28:74:EB:18:1A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YvLeUn_yTkkL-T8IgmDvKHTrGBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.195.0/24
31.13.197.0/24
31.13.216.0/21
31.13.230.0/24
31.13.236.0/22
31.13.241.0/24
31.13.245.0/24
37.60.138.0/23
45.81.38.0/24
45.139.123.0/24
82.115.210.0/24
83.143.115.0/24
85.217.140.0/24
87.120.6.0-87.120.8.255
87.120.13.0/24
87.120.37.0/24
87.120.39.0/24
87.120.43.0/24
87.120.61.0/24
87.120.98.0/24
87.120.104.0/24
87.120.109.0/24
87.120.128.0/23
87.120.132.0/22
87.120.176.0/24
87.120.195.0/24
87.120.199.0-87.120.201.255
87.120.206.0/23
87.120.217.0/24
87.120.223.0/24
87.120.253.0-87.121.2.255
87.121.6.0/23
87.121.32.0/24
87.121.42.0/24
87.121.52.0/24
87.121.64.0/24
87.121.83.0/24
87.121.90.0/23
87.121.110.0-87.121.113.255
87.121.118.0/24
87.121.150.0/23
87.121.161.0/24
91.92.0.0-91.92.2.255
91.92.65.0-91.92.66.255
91.92.105.0/24
91.92.109.0/24
91.92.139.0/24
91.92.197.0-91.92.199.255
91.92.219.0/24
91.92.230.0/24
91.212.233.0/24
92.249.49.0/24
93.123.8.0/24
93.123.12.0/24
93.123.18.0/24
93.123.28.0/23
93.123.32.0-93.123.37.255
93.123.64.0/24
94.156.15.0/24
94.156.24.0/23
94.156.42.0/24
94.156.44.0/24
94.156.77.0/24
94.156.94.0/24
94.156.98.0/24
94.156.100.0/24
94.156.129.0-94.156.130.255
94.156.153.0/24
94.156.158.0/24
94.156.172.0/23
94.156.185.0/24
94.156.188.0/24
94.156.216.0/21
94.156.249.0/24
94.156.251.0-94.156.252.255
185.254.36.0/24
194.55.184.0/23
194.169.173.0/24
212.73.128.0-212.73.134.255
212.73.136.0/24
212.73.138.0-212.73.148.255
212.73.155.0/24
212.73.157.0/24
212.87.207.0/24
IPv6:
2a00:1728::/32
Signature Algorithm: sha256WithRSAEncryption
52:3d:45:fc:b2:cb:e9:ff:0c:62:28:ac:0b:26:14:42:5a:04:
13:c5:ec:c4:10:94:bf:b9:47:30:3e:37:7c:6a:ea:c8:89:ae:
ed:04:84:52:b7:6d:35:03:eb:4d:c5:8d:74:56:e4:e4:75:b5:
0f:46:40:a8:e3:3d:80:91:0f:54:c6:54:04:30:33:c8:fb:1e:
94:60:b0:48:7c:68:c7:8a:95:d1:10:87:85:8a:2a:c0:90:76:
d0:78:aa:c7:d7:80:5a:f8:9e:53:bd:c0:75:57:ac:2a:e5:83:
46:98:38:3b:dc:76:21:88:f0:57:16:95:5f:3e:79:5d:af:77:
f2:d0:bd:b0:ba:87:8d:0c:04:71:fc:7f:90:17:6d:5c:24:57:
ef:db:9f:93:76:9e:89:3d:0d:7a:6d:17:1b:1d:9e:3f:08:ee:
36:2f:a0:21:2d:fa:f2:96:6c:68:1a:5b:85:4c:3d:e9:83:8f:
70:2f:69:8a:7a:2d:86:82:47:05:49:7b:22:ea:9b:14:49:66:
7a:3f:6c:65:2d:ac:8b:8e:9e:43:5d:01:7a:47:2a:29:c6:ca:
cc:ea:47:b6:da:91:0f:eb:66:c0:43:d9:ac:ed:26:8c:8d:b2:
1c:69:78:db:c0:5e:2e:00:0f:15:9e:34:06:7d:b9:dd:54:dc:
67:3f:01:52
-----BEGIN CERTIFICATE-----
MIIHZzCCBk+gAwIBAgISAZhas4H1QSMP8LwmuTRqB5f/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNzMwMDkzOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmYyZGU1MjdmZjI0ZTQ5MGJmOTNmMDg4MjYwZWYyODc0ZWIxODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGn0wP9fb24SUbn7Bqhmtvs1kRbL
eLegXmCDmKiGq/oDs7WdA2HRmB28uB+H3s9fR4sT5MJKh2kK500WqaQQ2PpiDBTp
LWQ0m3bi1p+I1F0J3XTj0NJCia2qPXQ+fNcK7amsZ/Q7UUThZaVvdHZOPnqDHRRW
7PtTIq0feNl4Jt/pE53hOjqO6qdjwEPOsZIVw8/4jUDP+uj2Xa7qbaZIYCtnGEL2
lAhcMWTjd2G/Pmrybb6fN18GrGHxLNIqepJBqydDcAFbzgikSYr7iRjnKgYYoiLg
3YEXCWFGHqtNb1GIrrcvAFB05XDTF2P8PH03KZu4iN78ih6bA6gfBY4mRwIDAQAB
o4IEczCCBG8wHQYDVR0OBBYEFGLy3lJ/8k5JC/k/CIJg7yh06xgaMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWXZMZVVuX3lUa2tMLVQ4SWdtRHZLSFRyR0JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIChwYIKwYBBQUHAQcBAf8EggJ2MIICcjCCAl8EAgABMIIC
VwMEAB8NwwMEAB8NxQMEAx8N2AMEAB8N5gMEAh8N7AMEAB8N8QMEAB8N9QMEASU8
igMEAC1RJgMEAC2LewMEAFJz0gMEAFOPcwMEAFXZjDAMAwQBV3gGAwQAV3gIAwQA
V3gNAwQAV3glAwQAV3gnAwQAV3grAwQAV3g9AwQAV3hiAwQAV3hoAwQAV3htAwQB
V3iAAwQCV3iEAwQAV3iwAwQAV3jDMAwDBABXeMcDBAFXeMgDBAFXeM4DBABXeNkD
BABXeN8wDAMEAFd4/QMEAFd5AgMEAVd5BgMEAFd5IAMEAFd5KgMEAFd5NAMEAFd5
QAMEAFd5UwMEAVd5WjAMAwQBV3luAwQBV3lwAwQAV3l2AwQBV3mWAwQAV3mhMAsD
AwJbXAMEAFtcAjAMAwQAW1xBAwQAW1xCAwQAW1xpAwQAW1xtAwQAW1yLMAwDBABb
XMUDBANbXMADBABbXNsDBABbXOYDBABb1OkDBABc+TEDBABdewgDBABdewwDBABd
exIDBAFdexwwDAMEBV17IAMEAV17JAMEAF17QAMEAF6cDwMEAV6cGAMEAF6cKgME
AF6cLAMEAF6cTQMEAF6cXgMEAF6cYgMEAF6cZDAMAwQAXpyBAwQAXpyCAwQAXpyZ
AwQAXpyeAwQBXpysAwQAXpy5AwQAXpy8AwQDXpzYAwQAXpz5MAwDBABenPsDBABe
nPwDBAC5/iQDBAHCN7gDBADCqa0wDAMEB9RJgAMEANRJhgMEANRJiDAMAwQB1EmK
AwQA1EmUAwQA1EmbAwQA1EmdAwQA1FfPMA0EAgACMAcDBQAqABcoMA0GCSqGSIb3
DQEBCwUAA4IBAQBSPUX8ssvp/wxiKKwLJhRCWgQTxezEEJS/uUcwPjd8aurIia7t
BIRSt201A+tNxY10VuTkdbUPRkCo4z2AkQ9UxlQEMDPI+x6UYLBIfGjHipXREIeF
iirAkHbQeKrH14Ba+J5TvcB1V6wq5YNGmDg73HYhiPBXFpVfPnldr3fy0L2wuoeN
DARx/H+QF21cJFfv25+Tdp6JPQ16bRcbHZ4/CO42L6AhLfrylmxoGluFTD3pg49w
L2mKei2GgkcFSXsi6psUSWZ6P2xlLayLjp5DXQF6RyopxsrM6ke22pEP62bAQ9ms
7SaMjbIcaXjbwF4uAA8VnjQGfbndVNxnPwFS
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:52:29 2025 by rpki-client