Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/8Id6sTHdcFkfUCqRJpjnYeFNQBk.roa
File: 8Id6sTHdcFkfUCqRJpjnYeFNQBk.roa (raw, json)
Hash identifier: HvMiexrvTWxUOohCCadA9QpvUikgt3I/EHl1Snej7o4=
Subject key identifier: F0:87:7A:B1:31:DD:70:59:1F:50:2A:91:26:98:E7:61:E1:4D:40:19
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 019E631E1610B390C697784090574BF48A09
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/8Id6sTHdcFkfUCqRJpjnYeFNQBk.roa
Signing time: Tue 26 May 2026 07:09:36 +0000
ROA not before: Tue 26 May 2026 07:09:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25145
IP address blocks: 31.40.240.0/24 maxlen: 24
77.92.96.0/19 maxlen: 19
77.92.96.0/24 maxlen: 24
77.92.97.0/24 maxlen: 24
77.92.98.0/24 maxlen: 24
77.92.99.0/24 maxlen: 24
77.92.100.0/22 maxlen: 22
77.92.100.0/24 maxlen: 24
77.92.101.0/24 maxlen: 24
77.92.102.0/24 maxlen: 24
77.92.103.0/24 maxlen: 24
77.92.104.0/24 maxlen: 24
77.92.105.0/24 maxlen: 24
77.92.106.0/24 maxlen: 24
77.92.107.0/24 maxlen: 24
77.92.108.0/22 maxlen: 22
77.92.108.0/24 maxlen: 24
77.92.109.0/24 maxlen: 24
77.92.110.0/24 maxlen: 24
77.92.111.0/24 maxlen: 24
77.92.112.0/22 maxlen: 22
77.92.112.0/24 maxlen: 24
77.92.113.0/24 maxlen: 24
77.92.114.0/24 maxlen: 24
77.92.115.0/24 maxlen: 24
77.92.116.0/24 maxlen: 24
77.92.117.0/24 maxlen: 24
77.92.118.0/24 maxlen: 24
77.92.119.0/24 maxlen: 24
77.92.120.0/24 maxlen: 24
77.92.121.0/24 maxlen: 24
77.92.122.0/24 maxlen: 24
77.92.123.0/24 maxlen: 24
77.92.124.0/24 maxlen: 24
77.92.125.0/24 maxlen: 24
77.92.126.0/24 maxlen: 24
77.92.127.0/24 maxlen: 24
185.115.208.0/24 maxlen: 24
185.115.210.0/24 maxlen: 24
185.115.211.0/24 maxlen: 24
213.144.96.0/19 maxlen: 19
213.144.96.0/22 maxlen: 22
213.144.96.0/24 maxlen: 24
213.144.97.0/24 maxlen: 24
213.144.98.0/24 maxlen: 24
213.144.99.0/24 maxlen: 24
213.144.100.0/24 maxlen: 24
213.144.101.0/24 maxlen: 24
213.144.103.0/24 maxlen: 24
213.144.104.0/22 maxlen: 22
213.144.104.0/24 maxlen: 24
213.144.105.0/24 maxlen: 24
213.144.106.0/24 maxlen: 24
213.144.107.0/24 maxlen: 24
213.144.108.0/22 maxlen: 22
213.144.108.0/24 maxlen: 24
213.144.109.0/24 maxlen: 24
213.144.110.0/24 maxlen: 24
213.144.111.0/24 maxlen: 24
213.144.112.0/22 maxlen: 22
213.144.112.0/24 maxlen: 24
213.144.113.0/24 maxlen: 24
213.144.114.0/24 maxlen: 24
213.144.115.0/24 maxlen: 24
213.144.116.0/22 maxlen: 22
213.144.116.0/24 maxlen: 24
213.144.117.0/24 maxlen: 24
213.144.118.0/24 maxlen: 24
213.144.119.0/24 maxlen: 24
213.144.120.0/22 maxlen: 22
213.144.120.0/24 maxlen: 24
213.144.121.0/24 maxlen: 24
213.144.122.0/24 maxlen: 24
213.144.123.0/24 maxlen: 24
213.144.124.0/22 maxlen: 22
213.144.124.0/24 maxlen: 24
213.144.125.0/24 maxlen: 24
213.144.126.0/24 maxlen: 24
213.144.127.0/24 maxlen: 24
2a02:ac80::/29 maxlen: 29
2a02:ac80::/32 maxlen: 32
2a02:ac80::/48 maxlen: 48
2a02:ac80:10::/48 maxlen: 48
2a02:ac80:20::/48 maxlen: 48
2a02:ac80:30::/48 maxlen: 48
2a02:ac80:40::/48 maxlen: 48
2a02:ac80:50::/48 maxlen: 48
2a02:ac80:60::/48 maxlen: 48
2a02:ac80:6a::/48 maxlen: 48
2a02:ac80:70::/48 maxlen: 48
2a02:ac80:90::/48 maxlen: 48
2a02:ac80:91::/48 maxlen: 48
2a02:ac80:92::/48 maxlen: 48
2a02:ac80:93::/48 maxlen: 48
2a02:ac80:97::/48 maxlen: 48
2a02:ac80:99::/48 maxlen: 48
2a02:ac80:a0::/48 maxlen: 48
2a02:ac80:b0::/48 maxlen: 48
2a02:ac80:c0::/48 maxlen: 48
2a02:ac80:d0::/48 maxlen: 48
2a02:ac80:e0::/48 maxlen: 48
2a02:ac80:f0::/48 maxlen: 48
2a02:ac80:100::/48 maxlen: 48
2a02:ac80:101::/48 maxlen: 48
2a02:ac80:102::/48 maxlen: 48
2a02:ac80:103::/48 maxlen: 48
2a02:ac80:104::/48 maxlen: 48
2a02:ac80:105::/48 maxlen: 48
2a02:ac80:127::/48 maxlen: 48
2a02:ac80:200::/48 maxlen: 48
2a02:ac80:300::/48 maxlen: 48
2a02:ac80:400::/48 maxlen: 48
2a02:ac80:500::/48 maxlen: 48
2a02:ac80:600::/48 maxlen: 48
2a02:ac80:700::/48 maxlen: 48
2a02:ac80:a00::/48 maxlen: 48
2a02:ac80:b00::/48 maxlen: 48
2a02:ac80:c00::/48 maxlen: 48
2a02:ac80:d00::/48 maxlen: 48
2a02:ac80:e00::/48 maxlen: 48
2a02:ac80:f00::/48 maxlen: 48
2a02:ac80:1000::/48 maxlen: 48
2a02:ac80:2000::/48 maxlen: 48
2a02:ac80:3000::/48 maxlen: 48
2a02:ac80:4000::/48 maxlen: 48
2a02:ac80:5000::/48 maxlen: 48
2a02:ac80:6000::/48 maxlen: 48
2a02:ac80:6100::/48 maxlen: 48
2a02:ac80:6300::/48 maxlen: 48
2a02:ac80:7000::/48 maxlen: 48
2a02:ac80:7370::/48 maxlen: 48
2a02:ac80:9100::/48 maxlen: 48
2a02:ac80:9300::/48 maxlen: 48
2a02:ac80:a000::/48 maxlen: 48
2a02:ac80:b000::/48 maxlen: 48
2a02:ac80:c000::/48 maxlen: 48
2a02:ac80:d000::/48 maxlen: 48
2a02:ac80:e000::/48 maxlen: 48
2a02:ac80:f000::/48 maxlen: 48
2a02:ac81::/32 maxlen: 32
2a02:ac82::/32 maxlen: 32
2a02:ac83::/32 maxlen: 32
2a02:ac84::/32 maxlen: 32
2a02:ac85::/32 maxlen: 32
2a02:ac86::/32 maxlen: 32
2a02:ac87::/32 maxlen: 32
2a02:ac87:5900::/48 maxlen: 48
2a02:ac87:59cb::/48 maxlen: 48
2a02:ac87:ac87::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:1e:16:10:b3:90:c6:97:78:40:90:57:4b:f4:8a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: May 26 07:09:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0877ab131dd70591f502a912698e761e14d4019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:6b:e1:94:b9:c9:d8:17:4c:55:ec:83:ee:
d3:a1:3d:4c:7a:91:ca:2e:e0:1c:04:8c:de:93:38:
62:77:36:cf:08:98:1f:1b:08:c1:65:04:51:9e:d7:
2e:fd:75:bb:2f:38:06:63:69:97:99:d8:15:d6:20:
e7:01:7f:dd:1d:06:73:8a:47:a5:01:59:6a:cb:19:
89:24:e0:e8:29:19:48:eb:fd:f7:7b:33:78:3c:bf:
77:55:79:72:4d:58:e8:36:a5:04:05:53:a1:da:70:
81:63:e7:a9:a2:f5:47:2d:56:63:08:21:9d:e8:94:
05:46:ab:c9:83:b0:a0:fb:5b:4a:61:e1:9c:f7:dd:
20:2b:fd:2e:e3:07:15:9c:91:64:7f:fa:d0:0a:b6:
57:f9:04:c0:1b:8a:14:06:b8:31:c4:69:8e:5d:9f:
b8:1c:a1:d7:5b:b1:69:86:32:27:fc:42:eb:6b:4c:
c1:bc:a9:35:9f:45:11:87:64:d6:7d:67:dc:89:80:
3a:26:6f:5e:1a:9b:16:8b:b2:a0:7f:a1:b0:8b:26:
6b:43:68:ee:c5:54:b0:7d:42:08:16:72:ad:12:a5:
a0:37:a2:4c:34:f5:d6:67:87:2c:ca:87:c6:db:49:
dd:87:a0:48:3c:cc:6e:8b:be:94:d7:0a:87:2c:24:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:87:7A:B1:31:DD:70:59:1F:50:2A:91:26:98:E7:61:E1:4D:40:19
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/8Id6sTHdcFkfUCqRJpjnYeFNQBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.240.0/24
77.92.96.0/19
185.115.208.0/24
185.115.210.0/23
213.144.96.0/19
IPv6:
2a02:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
6c:32:3c:31:cc:ce:6a:0c:30:2a:78:b0:96:1d:5c:7b:25:03:
00:32:d7:3d:f5:f4:0c:05:bf:80:0a:80:82:a7:45:59:8b:93:
fa:b2:02:c3:ba:7d:03:be:d4:ec:b9:85:f2:8a:79:3a:cb:4a:
94:97:c3:69:13:c7:e7:61:84:1c:0f:6b:82:7f:c7:07:8b:ec:
31:63:1a:d3:42:7e:76:88:57:a2:dc:3a:23:b0:3b:96:f1:57:
e9:f4:64:51:3d:cf:e1:bc:6a:65:36:ac:4f:bb:03:4f:22:57:
55:3e:ae:ec:43:76:c0:eb:9d:9e:0c:1a:cc:92:d4:d1:75:a1:
ab:fb:28:2c:bf:b0:24:72:a0:2a:56:e9:d9:98:6e:33:c3:c9:
9c:62:2e:9d:ef:61:81:40:7e:86:fa:97:ae:2c:a8:4f:23:85:
07:9d:2b:47:5e:f0:d2:2f:be:25:67:43:59:e7:e7:c1:94:87:
5b:d3:94:35:12:fc:18:a6:1e:07:7f:18:05:de:9a:fc:2b:03:
c7:45:cd:5f:6a:9d:89:f7:46:9c:89:10:c7:ff:f0:80:da:b4:
64:2a:7b:b1:21:9b:7a:af:9d:55:42:d8:e5:9c:44:5b:cb:bb:
f6:90:aa:c0:da:f6:ff:42:35:89:84:08:bb:79:38:39:05:8a:
e5:84:b3:54
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZ5jHhYQs5DGl3hAkFdL9IoJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTYyMThjMjBlZmQ4ZmU1M2ZjYTk5OTBiNzI1ZGQ3OTYz
Yzg4NWMwHhcNMjYwNTI2MDcwOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDg3N2FiMTMxZGQ3MDU5MWY1MDJhOTEyNjk4ZTc2MWUxNGQ0MDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQBr4ZS5ydgXTFXsg+7ToT1MepHK
LuAcBIzekzhidzbPCJgfGwjBZQRRntcu/XW7LzgGY2mXmdgV1iDnAX/dHQZzikel
AVlqyxmJJODoKRlI6/33ezN4PL93VXlyTVjoNqUEBVOh2nCBY+epovVHLVZjCCGd
6JQFRqvJg7Cg+1tKYeGc990gK/0u4wcVnJFkf/rQCrZX+QTAG4oUBrgxxGmOXZ+4
HKHXW7FphjIn/ELra0zBvKk1n0URh2TWfWfciYA6Jm9eGpsWi7Kgf6GwiyZrQ2ju
xVSwfUIIFnKtEqWgN6JMNPXWZ4csyofG20ndh6BIPMxui76U1wqHLCTgdwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFPCHerEx3XBZH1AqkSaY52HhTUAZMB8GA1UdIwQY
MBaAFMqWIYwg79j+U/ypmQtyXdeWPIhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAt
ZDcxMmQ0NzM4MDQ2LzEvOElkNnNUSGRjRmtmVUNxUkpwam5ZZUZOUUJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAtZDcxMmQ0NzM4MDQ2
LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAHyjwAwQF
TVxgAwQAuXPQAwQBuXPSAwQF1ZBgMA0EAgACMAcDBQMqAqyAMA0GCSqGSIb3DQEB
CwUAA4IBAQBsMjwxzM5qDDAqeLCWHVx7JQMAMtc99fQMBb+ACoCCp0VZi5P6sgLD
un0DvtTsuYXyink6y0qUl8NpE8fnYYQcD2uCf8cHi+wxYxrTQn52iFei3DojsDuW
8Vfp9GRRPc/hvGplNqxPuwNPIldVPq7sQ3bA652eDBrMktTRdaGr+ygsv7AkcqAq
VunZmG4zw8mcYi6d72GBQH6G+peuLKhPI4UHnStHXvDSL74lZ0NZ5+fBlIdb05Q1
EvwYph4HfxgF3pr8KwPHRc1fap2J90aciRDH//CA2rRkKnuxIZt6r51VQtjlnERb
y7v2kKrA2vb/QjWJhAi7eTg5BYrlhLNU
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:13 2026 by rpki-client