Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xAHtcrJ85WeNkswbHBAqT1vs54U.roa
File: xAHtcrJ85WeNkswbHBAqT1vs54U.roa (raw, json)
Hash identifier: A9tzbd4q3+nuPlG/uWZ74P9soTlrlJpoS9fA6ON+k7g=
Subject key identifier: C4:01:ED:72:B2:7C:E5:67:8D:92:CC:1B:1C:10:2A:4F:5B:EC:E7:85
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FA768DBD06EEB455C8E104E2290DE0DAA
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xAHtcrJ85WeNkswbHBAqT1vs54U.roa
Signing time: Tue 28 Jul 2026 06:28:14 +0000
ROA not before: Tue 28 Jul 2026 06:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.41.24.0/24 maxlen: 24
62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
62.105.194.0/24 maxlen: 24
62.105.195.0/24 maxlen: 24
62.132.2.0/24 maxlen: 24
77.67.6.0/24 maxlen: 24
77.67.26.0/24 maxlen: 24
193.141.2.0/24 maxlen: 24
194.45.47.0/24 maxlen: 24
194.77.4.0/24 maxlen: 24
194.77.6.0/24 maxlen: 24
194.77.62.0/24 maxlen: 24
194.77.70.0/24 maxlen: 24
194.77.78.0/24 maxlen: 24
194.77.186.0/24 maxlen: 24
194.77.187.0/24 maxlen: 24
194.77.192.0/24 maxlen: 24
194.122.78.0/24 maxlen: 24
194.122.80.0/24 maxlen: 24
194.122.84.0/24 maxlen: 24
194.231.128.0/22 maxlen: 24
194.231.128.0/24 maxlen: 24
194.231.129.0/24 maxlen: 24
194.231.130.0/24 maxlen: 24
194.231.131.0/24 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.132.0/24 maxlen: 24
194.231.134.0/24 maxlen: 24
194.231.135.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.136.0/24 maxlen: 24
194.231.137.0/24 maxlen: 24
194.231.138.0/24 maxlen: 24
194.231.139.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.148.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.199.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.200.0/24 maxlen: 24
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.202.0/24 maxlen: 24
194.231.203.0/24 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/22 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.213.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.220.0/22 maxlen: 24
194.231.222.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
195.21.132.0/24 maxlen: 24
195.21.133.0/24 maxlen: 24
195.21.134.0/24 maxlen: 24
195.21.144.0/24 maxlen: 24
195.21.145.0/24 maxlen: 24
195.21.146.0/24 maxlen: 24
212.189.8.0/24 maxlen: 24
212.189.26.0/24 maxlen: 24
212.189.36.0/24 maxlen: 24
212.189.61.0/24 maxlen: 24
212.189.69.0/24 maxlen: 24
212.189.75.0/24 maxlen: 24
212.189.79.0/24 maxlen: 24
212.189.80.0/24 maxlen: 24
212.189.85.0/24 maxlen: 24
212.189.88.0/24 maxlen: 24
212.189.89.0/24 maxlen: 24
212.189.90.0/24 maxlen: 24
212.189.95.0/24 maxlen: 24
212.189.96.0/24 maxlen: 24
212.189.97.0/24 maxlen: 24
212.189.98.0/24 maxlen: 24
212.189.103.0/24 maxlen: 24
212.189.104.0/24 maxlen: 24
212.189.110.0/24 maxlen: 24
212.189.115.0/24 maxlen: 24
212.189.116.0/24 maxlen: 24
212.189.121.0/24 maxlen: 24
212.222.168.0/24 maxlen: 24
212.222.170.0/24 maxlen: 24
212.222.171.0/24 maxlen: 24
217.117.162.0/24 maxlen: 24
217.117.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:68:db:d0:6e:eb:45:5c:8e:10:4e:22:90:de:0d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 28 06:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c401ed72b27ce5678d92cc1b1c102a4f5bece785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:02:44:d1:42:e4:1b:10:38:02:f0:aa:10:
ee:2a:9c:97:e9:45:32:5f:d8:1d:07:1c:12:83:91:
91:fa:67:bd:e6:e5:3c:46:5d:52:b9:06:8d:4a:83:
bb:6d:e5:9a:64:39:bb:ad:dd:13:9a:11:c5:cc:51:
47:d6:85:34:f1:39:90:00:48:2e:09:c2:56:be:5b:
03:d2:c8:7f:fc:40:2d:c7:6c:fc:54:16:9e:1b:8f:
b6:62:50:24:14:0f:fe:e0:ba:37:d9:8e:2b:ff:58:
ee:6f:4e:83:a0:b0:53:94:23:5d:f6:ab:ee:d8:59:
48:b2:90:32:b8:11:93:f2:a9:ec:6d:03:d0:b0:85:
b6:46:dc:90:11:9d:ec:dc:87:e4:2c:20:3f:a2:ab:
7e:e0:94:bc:4b:67:1e:f3:84:9e:7c:3f:89:2c:8e:
0f:63:f6:d2:c7:4f:a4:80:e8:5d:cd:01:82:d6:11:
32:9b:14:00:04:92:55:4d:70:e2:de:0b:b7:5a:df:
f1:47:f7:e9:50:50:7e:f0:78:18:6b:13:c2:be:d9:
64:f2:2c:29:49:f7:c4:d8:7f:63:17:b7:c0:39:04:
5e:07:d9:ea:ab:ed:c3:ca:ff:b7:0d:48:50:1e:7c:
ce:25:40:e8:14:aa:7e:47:63:10:a0:9a:b4:f8:25:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:01:ED:72:B2:7C:E5:67:8D:92:CC:1B:1C:10:2A:4F:5B:EC:E7:85
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/xAHtcrJ85WeNkswbHBAqT1vs54U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.24.0/24
62.41.32.0/24
62.41.37.0/24
62.105.194.0/23
62.132.2.0/24
77.67.6.0/24
77.67.26.0/24
193.141.2.0/24
194.45.47.0/24
194.77.4.0/24
194.77.6.0/24
194.77.62.0/24
194.77.70.0/24
194.77.78.0/24
194.77.186.0/23
194.77.192.0/24
194.122.78.0/24
194.122.80.0/24
194.122.84.0/24
194.231.128.0-194.231.139.255
194.231.142.0/24
194.231.148.0/24
194.231.150.0-194.231.155.255
194.231.157.0-194.231.158.255
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
195.21.132.0-195.21.134.255
195.21.144.0-195.21.146.255
212.189.8.0/24
212.189.26.0/24
212.189.36.0/24
212.189.61.0/24
212.189.69.0/24
212.189.75.0/24
212.189.79.0-212.189.80.255
212.189.85.0/24
212.189.88.0-212.189.90.255
212.189.95.0-212.189.98.255
212.189.103.0-212.189.104.255
212.189.110.0/24
212.189.115.0-212.189.116.255
212.189.121.0/24
212.222.168.0/24
212.222.170.0/23
217.117.162.0/23
Signature Algorithm: sha256WithRSAEncryption
75:a1:de:b6:1e:7c:61:ba:82:5f:0d:52:d1:f8:bb:ce:0d:c7:
d9:12:34:36:f8:f5:a5:a8:30:2d:26:36:e2:0d:3c:9e:fd:1e:
cc:8f:f7:5d:0d:0c:22:0a:93:ff:3f:9b:de:07:ac:fc:55:a8:
39:a1:86:a4:66:a5:02:44:93:07:14:62:53:f3:74:7d:26:85:
cb:f6:47:5a:56:fe:07:a6:e8:65:1d:7c:6f:c9:bc:6a:76:23:
4d:b7:21:3e:b9:e3:1f:c6:18:17:c6:47:b1:5a:ff:c4:38:40:
f4:be:98:c4:bc:18:18:13:82:dd:a5:46:c3:7a:eb:f6:ff:e4:
f2:d7:3f:a1:57:e9:be:82:03:cb:cd:96:c3:a9:cc:c8:35:c5:
de:9c:67:a5:72:ae:57:45:65:15:46:8a:1f:e1:71:06:49:09:
7a:82:9b:ab:f6:52:08:bb:a3:4d:1a:41:a7:fd:13:fa:ad:04:
10:2a:fb:ea:da:a8:06:d9:3e:42:47:71:be:e2:d1:fe:3d:db:
72:e5:b1:f3:92:fd:1b:7f:25:ee:64:83:8a:e0:b7:ad:17:e5:
9f:14:e8:07:2b:c8:57:57:f9:44:30:16:4b:52:9e:13:f4:91:
fa:82:3c:29:0c:30:46:62:00:0c:df:58:e8:14:ab:46:5b:70:
34:ef:2d:c1
-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgISAZ+naNvQbutFXI4QTiKQ3g2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNzI4MDYyODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDAxZWQ3MmIyN2NlNTY3OGQ5MmNjMWIxYzEwMmE0ZjViZWNlNzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIUCRNFC5BsQOALwqhDuKpyX6UUy
X9gdBxwSg5GR+me95uU8Rl1SuQaNSoO7beWaZDm7rd0TmhHFzFFH1oU08TmQAEgu
CcJWvlsD0sh//EAtx2z8VBaeG4+2YlAkFA/+4Lo32Y4r/1jub06DoLBTlCNd9qvu
2FlIspAyuBGT8qnsbQPQsIW2RtyQEZ3s3IfkLCA/oqt+4JS8S2ce84SefD+JLI4P
Y/bSx0+kgOhdzQGC1hEymxQABJJVTXDi3gu3Wt/xR/fpUFB+8HgYaxPCvtlk8iwp
SffE2H9jF7fAOQReB9nqq+3Dyv+3DUhQHnzOJUDoFKp+R2MQoJq0+CUZ6wIDAQAB
o4IDezCCA3cwHQYDVR0OBBYEFMQB7XKyfOVnjZLMGxwQKk9b7OeFMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEveEFIdGNySjg1V2VOa3N3YkhCQXFUMXZzNTRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBjwYIKwYBBQUHAQcBAf8EggF+MIIBejCCAXYEAgABMIIB
bgMEAD4pGAMEAD4pIAMEAD4pJQMEAT5pwgMEAD6EAgMEAE1DBgMEAE1DGgMEAMGN
AgMEAMItLwMEAMJNBAMEAMJNBgMEAMJNPgMEAMJNRgMEAMJNTgMEAcJNugMEAMJN
wAMEAMJ6TgMEAMJ6UAMEAMJ6VDAMAwQHwueAAwQCwueIAwQAwueOAwQAwueUMAwD
BAHC55YDBALC55gwDAMEAMLnnQMEAMLnnjAMAwQAwufDAwQDwufQMAwDBAHC59oD
BAXC58AwDAMEAsMVhAMEAMMVhjAMAwQEwxWQAwQAwxWSAwQA1L0IAwQA1L0aAwQA
1L0kAwQA1L09AwQA1L1FAwQA1L1LMAwDBADUvU8DBADUvVADBADUvVUwDAMEA9S9
WAMEANS9WjAMAwQA1L1fAwQA1L1iMAwDBADUvWcDBADUvWgDBADUvW4wDAMEANS9
cwMEANS9dAMEANS9eQMEANTeqAMEAdTeqgMEAdl1ojANBgkqhkiG9w0BAQsFAAOC
AQEAdaHeth58YbqCXw1S0fi7zg3H2RI0Nvj1pagwLSY24g08nv0ezI/3XQ0MIgqT
/z+b3ges/FWoOaGGpGalAkSTBxRiU/N0fSaFy/ZHWlb+B6boZR18b8m8anYjTbch
PrnjH8YYF8ZHsVr/xDhA9L6YxLwYGBOC3aVGw3rr9v/k8tc/oVfpvoIDy82Ww6nM
yDXF3pxnpXKuV0VlFUaKH+FxBkkJeoKbq/ZSCLujTRpBp/0T+q0EECr76tqoBtk+
QkdxvuLR/j3bcuWx85L9G38l7mSDiuC3rRflnxToByvIV1f5RDAWS1KeE/SR+oI8
KQwwRmIADN9Y6BSrRltwNO8twQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:59:19 2026 by rpki-client