Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/ninSWYVRxBIemI94j-PYMUSu2YA.roa
File: ninSWYVRxBIemI94j-PYMUSu2YA.roa (raw, json)
Hash identifier: QrrWAcI9XBwetBsmpQPw5YCVH1U9RR0mswsdxCxACug=
Subject key identifier: 9E:29:D2:59:85:51:C4:12:1E:98:8F:78:8F:E3:D8:31:44:AE:D9:80
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 01987396A4EA5F1E993E9E529CB5C7F5EB9B
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/ninSWYVRxBIemI94j-PYMUSu2YA.roa
Signing time: Mon 04 Aug 2025 05:38:29 +0000
ROA not before: Mon 04 Aug 2025 05:38:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41798
IP address blocks: 2.57.96.0/24 maxlen: 24
2.57.97.0/24 maxlen: 24
2.57.98.0/24 maxlen: 24
2.57.99.0/24 maxlen: 24
37.17.176.0/21 maxlen: 21
37.17.176.0/24 maxlen: 24
37.17.177.0/24 maxlen: 24
37.17.178.0/24 maxlen: 24
37.17.179.0/24 maxlen: 24
37.17.180.0/24 maxlen: 24
37.17.181.0/24 maxlen: 24
37.17.182.0/24 maxlen: 24
37.17.183.0/24 maxlen: 24
37.208.40.0/21 maxlen: 21
37.208.40.0/24 maxlen: 24
37.208.41.0/24 maxlen: 24
37.208.42.0/24 maxlen: 24
37.208.43.0/24 maxlen: 24
37.208.44.0/24 maxlen: 24
37.208.45.0/24 maxlen: 24
37.208.46.0/24 maxlen: 24
37.208.47.0/24 maxlen: 24
45.140.24.0/23 maxlen: 23
45.140.24.0/24 maxlen: 24
45.140.25.0/24 maxlen: 24
82.115.44.0/22 maxlen: 22
82.115.45.0/24 maxlen: 24
82.115.46.0/24 maxlen: 24
82.115.47.0/24 maxlen: 24
87.255.202.0/23 maxlen: 23
87.255.202.0/24 maxlen: 24
87.255.203.0/24 maxlen: 24
87.255.204.0/22 maxlen: 22
87.255.204.0/24 maxlen: 24
87.255.205.0/24 maxlen: 24
87.255.206.0/24 maxlen: 24
87.255.207.0/24 maxlen: 24
87.255.208.0/20 maxlen: 20
87.255.208.0/24 maxlen: 24
87.255.209.0/24 maxlen: 24
87.255.210.0/24 maxlen: 24
87.255.211.0/24 maxlen: 24
87.255.212.0/24 maxlen: 24
87.255.213.0/24 maxlen: 24
87.255.214.0/24 maxlen: 24
87.255.215.0/24 maxlen: 24
87.255.216.0/24 maxlen: 24
87.255.217.0/24 maxlen: 24
87.255.218.0/24 maxlen: 24
87.255.219.0/24 maxlen: 24
87.255.220.0/24 maxlen: 24
87.255.221.0/24 maxlen: 24
87.255.222.0/24 maxlen: 24
87.255.223.0/24 maxlen: 24
91.185.0.0/19 maxlen: 19
91.185.0.0/24 maxlen: 24
91.185.1.0/24 maxlen: 24
91.185.2.0/24 maxlen: 24
91.185.3.0/24 maxlen: 24
91.185.4.0/24 maxlen: 24
91.185.5.0/24 maxlen: 24
91.185.6.0/24 maxlen: 24
91.185.7.0/24 maxlen: 24
91.185.8.0/24 maxlen: 24
91.185.9.0/24 maxlen: 24
91.185.10.0/24 maxlen: 24
91.185.11.0/24 maxlen: 24
91.185.12.0/24 maxlen: 24
91.185.13.0/24 maxlen: 24
91.185.14.0/24 maxlen: 24
91.185.15.0/24 maxlen: 24
91.185.16.0/24 maxlen: 24
91.185.17.0/24 maxlen: 24
91.185.18.0/24 maxlen: 24
91.185.19.0/24 maxlen: 24
91.185.20.0/24 maxlen: 24
91.185.21.0/24 maxlen: 24
91.185.22.0/24 maxlen: 24
91.185.23.0/24 maxlen: 24
91.185.24.0/24 maxlen: 24
91.185.25.0/24 maxlen: 24
91.185.26.0/24 maxlen: 24
91.185.27.0/24 maxlen: 24
91.185.28.0/24 maxlen: 24
91.185.29.0/24 maxlen: 24
91.185.30.0/24 maxlen: 24
91.185.31.0/24 maxlen: 24
91.246.80.0/20 maxlen: 20
91.246.80.0/24 maxlen: 24
91.246.81.0/24 maxlen: 24
91.246.82.0/24 maxlen: 24
91.246.83.0/24 maxlen: 24
91.246.84.0/24 maxlen: 24
91.246.85.0/24 maxlen: 24
91.246.86.0/24 maxlen: 24
91.246.87.0/24 maxlen: 24
91.246.88.0/24 maxlen: 24
91.246.89.0/24 maxlen: 24
91.246.90.0/24 maxlen: 24
91.246.91.0/24 maxlen: 24
91.246.92.0/24 maxlen: 24
91.246.93.0/24 maxlen: 24
91.246.94.0/24 maxlen: 24
91.246.95.0/24 maxlen: 24
91.246.96.0/21 maxlen: 21
91.246.96.0/24 maxlen: 24
91.246.97.0/24 maxlen: 24
91.246.98.0/24 maxlen: 24
91.246.99.0/24 maxlen: 24
91.246.100.0/24 maxlen: 24
91.246.101.0/24 maxlen: 24
91.246.102.0/24 maxlen: 24
91.246.103.0/24 maxlen: 24
94.141.224.0/20 maxlen: 20
94.141.224.0/24 maxlen: 24
94.141.225.0/24 maxlen: 24
94.141.226.0/24 maxlen: 24
94.141.227.0/24 maxlen: 24
94.141.228.0/24 maxlen: 24
94.141.229.0/24 maxlen: 24
94.141.230.0/24 maxlen: 24
94.141.231.0/24 maxlen: 24
94.141.232.0/24 maxlen: 24
94.141.233.0/24 maxlen: 24
94.141.234.0/24 maxlen: 24
94.141.235.0/24 maxlen: 24
94.141.236.0/24 maxlen: 24
94.141.237.0/24 maxlen: 24
94.141.238.0/24 maxlen: 24
94.141.239.0/24 maxlen: 24
94.141.240.0/22 maxlen: 22
94.141.240.0/24 maxlen: 24
94.141.241.0/24 maxlen: 24
94.141.242.0/24 maxlen: 24
94.141.243.0/24 maxlen: 24
94.141.248.0/22 maxlen: 22
94.141.248.0/24 maxlen: 24
94.141.249.0/24 maxlen: 24
94.141.250.0/24 maxlen: 24
94.141.251.0/24 maxlen: 24
146.19.255.0/24 maxlen: 24
176.98.224.0/20 maxlen: 20
176.98.224.0/24 maxlen: 24
176.98.225.0/24 maxlen: 24
176.98.226.0/24 maxlen: 24
176.98.227.0/24 maxlen: 24
176.98.228.0/24 maxlen: 24
176.98.229.0/24 maxlen: 24
176.98.230.0/24 maxlen: 24
176.98.231.0/24 maxlen: 24
176.98.232.0/24 maxlen: 24
176.98.233.0/24 maxlen: 24
176.98.234.0/24 maxlen: 24
176.98.235.0/24 maxlen: 24
176.98.236.0/24 maxlen: 24
176.98.237.0/24 maxlen: 24
176.98.238.0/24 maxlen: 24
176.98.239.0/24 maxlen: 24
176.98.240.0/22 maxlen: 22
176.98.240.0/24 maxlen: 24
176.98.241.0/24 maxlen: 24
176.98.242.0/24 maxlen: 24
176.98.243.0/24 maxlen: 24
178.22.168.0/21 maxlen: 21
178.22.168.0/24 maxlen: 24
178.22.169.0/24 maxlen: 24
178.22.170.0/24 maxlen: 24
178.22.171.0/24 maxlen: 24
178.22.172.0/24 maxlen: 24
178.22.173.0/24 maxlen: 24
178.22.174.0/24 maxlen: 24
178.22.175.0/24 maxlen: 24
185.187.17.0/24 maxlen: 24
193.104.253.0/24 maxlen: 24
193.111.175.0/24 maxlen: 24
194.26.239.0/24 maxlen: 24
212.23.218.0/24 maxlen: 24
212.46.53.0/24 maxlen: 24
2a00:ab40::/32 maxlen: 48
2a00:ab40:3000::/48 maxlen: 48
2a00:ab40:4000::/48 maxlen: 48
2a00:ab40:5000::/48 maxlen: 48
2a00:ab40:7200::/48 maxlen: 48
2a00:ab40:7201::/48 maxlen: 48
2a00:ab40:7300::/48 maxlen: 48
2a00:ab40:7301::/48 maxlen: 48
2a00:ab40:7400::/48 maxlen: 48
2a00:ab40:7401::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:96:a4:ea:5f:1e:99:3e:9e:52:9c:b5:c7:f5:eb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Aug 4 05:38:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e29d2598551c4121e988f788fe3d83144aed980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:93:5f:5e:0a:01:30:c4:23:e3:df:11:37:
b0:37:a9:62:61:16:9e:55:8b:c2:a7:55:44:c4:6d:
e1:6a:00:aa:85:ed:99:b5:af:14:f6:7f:99:c2:4c:
bf:bd:30:d0:da:73:86:44:c4:5f:72:36:da:48:9c:
90:e0:e1:e4:0e:8f:76:b5:66:88:d1:d0:d3:00:99:
97:fa:3d:06:f0:5c:43:8f:97:0e:6d:aa:f8:c2:db:
8f:9c:02:c4:01:17:1f:35:aa:79:99:51:d8:19:90:
59:4c:3d:fe:09:be:c8:5c:d6:61:08:4a:a2:7e:5e:
a0:64:9c:7d:75:29:ea:a7:c3:a3:a4:5d:e6:f6:aa:
c8:2b:9a:41:d5:6e:58:6f:41:dc:77:0c:a7:58:21:
02:69:cc:ef:d9:09:01:78:43:c9:06:9e:fb:5d:c7:
36:aa:11:85:cf:6f:48:1c:25:17:2b:9a:73:1d:ce:
42:89:b4:e7:0d:51:3d:5c:31:8f:e4:7e:8f:48:93:
04:9e:c2:7d:77:49:78:a6:36:25:85:23:88:de:81:
4d:8a:ad:a0:b3:8f:f9:2d:3f:a2:85:65:ab:b2:a8:
af:fb:63:2a:d6:77:57:5e:46:59:8a:22:63:f0:4e:
18:18:b2:c8:0d:a0:39:08:e7:c8:13:3e:a1:9f:a5:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:29:D2:59:85:51:C4:12:1E:98:8F:78:8F:E3:D8:31:44:AE:D9:80
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/ninSWYVRxBIemI94j-PYMUSu2YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.96.0/22
37.17.176.0/21
37.208.40.0/21
45.140.24.0/23
82.115.44.0/22
87.255.202.0-87.255.223.255
91.185.0.0/19
91.246.80.0-91.246.103.255
94.141.224.0-94.141.243.255
94.141.248.0/22
146.19.255.0/24
176.98.224.0-176.98.243.255
178.22.168.0/21
185.187.17.0/24
193.104.253.0/24
193.111.175.0/24
194.26.239.0/24
212.23.218.0/24
212.46.53.0/24
IPv6:
2a00:ab40::/32
Signature Algorithm: sha256WithRSAEncryption
83:f1:23:d9:3d:08:67:85:03:9b:f5:61:f3:da:95:a9:e5:4c:
1f:c5:fa:f4:6a:7f:25:f4:77:d2:69:e8:08:ea:5f:0d:9e:ef:
82:67:7f:7b:c5:30:b6:17:4b:a3:6e:d8:fe:b4:12:7c:66:ab:
01:52:98:99:ee:cc:8a:64:ea:8f:7b:d0:31:f9:3b:f1:f9:bb:
c8:c6:e9:1f:f4:3c:e3:8c:82:66:ed:80:a2:7a:b5:bd:09:f3:
55:e9:8f:a1:7d:d5:93:a0:48:23:12:d5:82:f1:4b:53:29:e1:
9e:7d:1b:39:ba:5e:ec:91:41:66:ef:1c:84:e4:80:00:17:21:
a8:50:78:ad:13:65:08:98:26:87:ef:1b:11:f4:b8:33:a1:88:
61:ed:42:c9:7b:bc:3c:06:02:dd:8b:16:6f:3a:7b:2c:59:22:
99:bb:fa:05:76:70:71:39:d2:53:df:24:5c:1d:09:9a:d6:24:
3d:dc:61:00:82:a4:98:62:3a:e6:ba:be:48:8e:c3:bf:78:ad:
b4:61:8f:a0:77:db:5f:78:1b:0f:0f:7e:28:10:b8:95:c7:7c:
b7:0c:ce:72:7e:5a:c1:98:a2:00:d2:aa:e9:63:da:94:c8:b0:
b2:fa:2c:24:27:34:3e:02:fb:87:34:2f:c3:cf:16:23:a7:53:
21:0f:3d:11
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgISAZhzlqTqXx6ZPp5SnLXH9eubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NTc4NmM3NWZjMTY1ODRiMDI3MWZmMjdiOTcxZDcyMzQx
NjYxOGQwHhcNMjUwODA0MDUzODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTI5ZDI1OTg1NTFjNDEyMWU5ODhmNzg4ZmUzZDgzMTQ0YWVkOTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhaTX14KATDEI+PfETewN6liYRae
VYvCp1VExG3hagCqhe2Zta8U9n+Zwky/vTDQ2nOGRMRfcjbaSJyQ4OHkDo92tWaI
0dDTAJmX+j0G8FxDj5cObar4wtuPnALEARcfNap5mVHYGZBZTD3+Cb7IXNZhCEqi
fl6gZJx9dSnqp8OjpF3m9qrIK5pB1W5Yb0HcdwynWCECaczv2QkBeEPJBp77Xcc2
qhGFz29IHCUXK5pzHc5CibTnDVE9XDGP5H6PSJMEnsJ9d0l4pjYlhSOI3oFNiq2g
s4/5LT+ihWWrsqiv+2Mq1ndXXkZZiiJj8E4YGLLIDaA5COfIEz6hn6Xj8wIDAQAB
o4ICqTCCAqUwHQYDVR0OBBYEFJ4p0lmFUcQSHpiPeI/j2DFErtmAMB8GA1UdIwQY
MBaAFIZXhsdfwWWEsCcf8nuXHXI0FmGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xOWE2NDktMDQ0Mi00ZjNkLTljYjkt
OGNmOWQ1MGFkZjI5LzEvbmluU1dZVlJ4QkllbUk5NGotUFlNVVN1MllBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xOWE2NDktMDQ0Mi00ZjNkLTljYjktOGNmOWQ1MGFkZjI5
LzEvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG+BggrBgEFBQcBBwEB/wSBrjCBqzCBmQQCAAEwgZIDBAIC
OWADBAMlEbADBAMl0CgDBAEtjBgDBAJScywwDAMEAVf/ygMEBVf/wAMEBVu5ADAM
AwQEW/ZQAwQDW/ZgMAwDBAVejeADBAJejfADBAJejfgDBACSE/8wDAMEBbBi4AME
ArBi8AMEA7IWqAMEALm7EQMEAMFo/QMEAMFvrwMEAMIa7wMEANQX2gMEANQuNTAN
BAIAAjAHAwUAKgCrQDANBgkqhkiG9w0BAQsFAAOCAQEAg/Ej2T0IZ4UDm/Vh89qV
qeVMH8X69Gp/JfR30mnoCOpfDZ7vgmd/e8UwthdLo27Y/rQSfGarAVKYme7MimTq
j3vQMfk78fm7yMbpH/Q844yCZu2Aonq1vQnzVemPoX3Vk6BIIxLVgvFLUynhnn0b
Obpe7JFBZu8chOSAABchqFB4rRNlCJgmh+8bEfS4M6GIYe1CyXu8PAYC3YsWbzp7
LFkimbv6BXZwcTnSU98kXB0JmtYkPdxhAIKkmGI65rq+SI7Dv3ittGGPoHfbX3gb
Dw9+KBC4lcd8twzOcn5awZiiANKq6WPalMiwsvosJCc0PgL7hzQvw88WI6dTIQ89
EQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:39:57 2025 by rpki-client