Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/Z4vujc4mTXhPndammz45zIANRW0.roa
File: Z4vujc4mTXhPndammz45zIANRW0.roa (raw, json)
Hash identifier: iSNocQx0/MLP3lIr+stuE/8ev5dC4Sgm8xsOYztbkkk=
Subject key identifier: 67:8B:EE:8D:CE:26:4D:78:4F:9D:D6:A6:9B:3E:39:CC:80:0D:45:6D
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 019FA3886B0460C46442485104AE9D56479E
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/Z4vujc4mTXhPndammz45zIANRW0.roa
Signing time: Mon 27 Jul 2026 12:24:14 +0000
ROA not before: Mon 27 Jul 2026 12:24:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51559
IP address blocks: 31.192.208.0/24 maxlen: 24
31.192.209.0/24 maxlen: 24
31.192.210.0/24 maxlen: 24
31.192.213.0/24 maxlen: 24
31.192.215.0/24 maxlen: 24
89.43.28.0/24 maxlen: 24
89.43.29.0/24 maxlen: 24
89.43.30.0/24 maxlen: 24
89.43.31.0/24 maxlen: 24
89.43.64.0/24 maxlen: 24
89.43.65.0/24 maxlen: 24
89.43.66.0/24 maxlen: 24
89.43.67.0/24 maxlen: 24
89.252.128.0/24 maxlen: 24
89.252.129.0/24 maxlen: 24
89.252.130.0/24 maxlen: 24
89.252.131.0/24 maxlen: 24
89.252.132.0/24 maxlen: 24
89.252.133.0/24 maxlen: 24
89.252.134.0/24 maxlen: 24
89.252.135.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
89.252.137.0/24 maxlen: 24
89.252.139.0/24 maxlen: 24
89.252.140.0/24 maxlen: 24
89.252.141.0/24 maxlen: 24
89.252.143.0/24 maxlen: 24
89.252.144.0/24 maxlen: 24
89.252.145.0/24 maxlen: 24
89.252.146.0/24 maxlen: 24
89.252.147.0/24 maxlen: 24
89.252.148.0/24 maxlen: 24
89.252.150.0/24 maxlen: 24
89.252.154.0/24 maxlen: 24
89.252.155.0/24 maxlen: 24
89.252.156.0/24 maxlen: 24
89.252.158.0/24 maxlen: 24
89.252.160.0/24 maxlen: 24
89.252.161.0/24 maxlen: 24
89.252.162.0/24 maxlen: 24
89.252.163.0/24 maxlen: 24
89.252.164.0/24 maxlen: 24
89.252.165.0/24 maxlen: 24
89.252.166.0/24 maxlen: 24
89.252.167.0/24 maxlen: 24
89.252.168.0/24 maxlen: 24
89.252.169.0/24 maxlen: 24
89.252.170.0/24 maxlen: 24
89.252.171.0/24 maxlen: 24
89.252.172.0/24 maxlen: 24
89.252.173.0/24 maxlen: 24
89.252.173.119/32 maxlen: 32
89.252.174.0/24 maxlen: 24
89.252.175.0/24 maxlen: 24
89.252.176.0/24 maxlen: 24
89.252.177.0/24 maxlen: 24
93.113.60.0/24 maxlen: 24
93.113.61.0/24 maxlen: 24
93.113.62.0/24 maxlen: 24
93.113.63.0/24 maxlen: 24
93.115.76.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
93.115.78.0/24 maxlen: 24
93.115.79.0/24 maxlen: 24
94.102.0.0/24 maxlen: 24
94.102.1.0/24 maxlen: 24
94.102.2.0/24 maxlen: 24
94.102.3.0/24 maxlen: 24
94.102.4.0/24 maxlen: 24
94.102.5.0/24 maxlen: 24
94.102.6.0/24 maxlen: 24
94.102.7.0/24 maxlen: 24
94.102.8.0/24 maxlen: 24
94.102.9.0/24 maxlen: 24
94.102.10.0/24 maxlen: 24
94.102.11.0/24 maxlen: 24
94.102.13.0/24 maxlen: 24
94.102.14.0/24 maxlen: 24
94.102.15.0/24 maxlen: 24
95.173.160.0/24 maxlen: 24
95.173.161.0/24 maxlen: 24
95.173.162.0/24 maxlen: 24
95.173.163.0/24 maxlen: 24
95.173.164.0/24 maxlen: 24
95.173.165.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
95.173.168.0/24 maxlen: 24
95.173.169.0/24 maxlen: 24
95.173.170.0/24 maxlen: 24
95.173.171.0/24 maxlen: 24
95.173.172.0/24 maxlen: 24
95.173.177.0/24 maxlen: 24
95.173.178.0/24 maxlen: 24
95.173.179.0/24 maxlen: 24
95.173.180.0/24 maxlen: 24
95.173.181.0/24 maxlen: 24
95.173.182.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.184.0/24 maxlen: 24
95.173.185.0/24 maxlen: 24
95.173.186.0/24 maxlen: 24
95.173.187.0/24 maxlen: 24
95.173.188.0/24 maxlen: 24
95.173.189.0/24 maxlen: 24
95.173.190.0/24 maxlen: 24
95.173.191.0/24 maxlen: 24
159.253.32.0/24 maxlen: 24
159.253.33.0/24 maxlen: 24
159.253.34.0/24 maxlen: 24
159.253.35.0/24 maxlen: 24
159.253.36.0/24 maxlen: 24
159.253.38.0/24 maxlen: 24
159.253.39.0/24 maxlen: 24
159.253.40.0/24 maxlen: 24
159.253.41.0/24 maxlen: 24
159.253.42.0/24 maxlen: 24
159.253.43.0/24 maxlen: 24
159.253.44.0/24 maxlen: 24
159.253.45.0/24 maxlen: 24
159.253.46.0/24 maxlen: 24
159.253.47.0/24 maxlen: 24
185.95.84.0/24 maxlen: 24
185.95.85.0/24 maxlen: 24
185.95.86.0/24 maxlen: 24
185.95.87.0/24 maxlen: 24
2a02:f80::/32 maxlen: 32
2a03:2100::/32 maxlen: 48
2a03:2100::/48 maxlen: 48
2a03:2100:1::/48 maxlen: 48
2a03:2100:2::/48 maxlen: 48
2a03:2100:3::/48 maxlen: 48
2a03:2100:4::/48 maxlen: 48
2a03:2100:5::/48 maxlen: 48
2a03:2100:6::/48 maxlen: 48
2a03:2100:7::/48 maxlen: 48
2a03:2100:8::/48 maxlen: 48
2a03:2100:9::/48 maxlen: 48
2a03:2100:a::/48 maxlen: 48
2a03:2100:b::/48 maxlen: 48
2a03:2100:c::/48 maxlen: 48
2a03:2100:d::/48 maxlen: 48
2a03:2100:e::/48 maxlen: 48
2a03:2100:f::/48 maxlen: 48
2a03:2100:10::/48 maxlen: 48
2a03:2100:11::/48 maxlen: 48
2a03:2100:12::/48 maxlen: 48
2a03:2100:13::/48 maxlen: 48
2a03:2100:14::/48 maxlen: 48
2a03:2100:15::/48 maxlen: 48
2a03:2100:16::/48 maxlen: 48
2a03:2100:17::/48 maxlen: 48
2a03:2100:18::/48 maxlen: 48
2a03:2100:19::/48 maxlen: 48
2a03:2100:1a::/48 maxlen: 48
2a03:2100:1b::/48 maxlen: 48
2a03:2100:1c::/48 maxlen: 48
2a03:2100:1d::/48 maxlen: 48
2a03:2100:1e::/48 maxlen: 48
2a03:2100:1f::/48 maxlen: 48
2a03:2100:20::/48 maxlen: 48
2a03:2100:21::/48 maxlen: 48
2a03:2100:22::/48 maxlen: 48
2a03:2100:23::/48 maxlen: 48
2a03:2100:24::/48 maxlen: 48
2a03:2100:25::/48 maxlen: 48
2a03:2100:26::/48 maxlen: 48
2a03:2100:27::/48 maxlen: 48
2a03:2100:28::/48 maxlen: 48
2a03:2100:29::/48 maxlen: 48
2a03:2100:2a::/48 maxlen: 48
2a03:2100:2b::/48 maxlen: 48
2a03:2100:2c::/48 maxlen: 48
2a03:2100:2d::/48 maxlen: 48
2a03:2100:2e::/48 maxlen: 48
2a03:2100:2f::/48 maxlen: 48
2a03:2100:32::/48 maxlen: 48
2a03:2100:33::/48 maxlen: 48
2a03:2100:34::/48 maxlen: 48
2a03:2100:35::/48 maxlen: 48
2a03:2100:36::/48 maxlen: 48
2a03:2100:37::/48 maxlen: 48
2a03:2100:38::/48 maxlen: 48
2a03:2100:39::/48 maxlen: 48
2a03:2100:3a::/48 maxlen: 48
2a03:2100:3b::/48 maxlen: 48
2a03:2100:3c::/48 maxlen: 48
2a03:2100:3d::/48 maxlen: 48
2a03:2100:3e::/48 maxlen: 48
2a03:2100:3f::/48 maxlen: 48
2a03:2100:40::/48 maxlen: 48
2a03:2100:44::/48 maxlen: 48
2a03:2102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:88:6b:04:60:c4:64:42:48:51:04:ae:9d:56:47:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jul 27 12:24:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=678bee8dce264d784f9dd6a69b3e39cc800d456d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:38:01:4d:3d:20:d6:52:66:1d:68:e7:66:
1b:72:91:63:6c:41:ef:50:7a:72:6d:77:50:05:2c:
03:4a:3e:2d:49:00:2a:df:9c:3d:81:d9:21:bb:b7:
75:f4:34:60:89:e0:e7:87:e0:1a:9f:ab:5f:af:ba:
46:2a:ab:53:a3:72:57:62:f0:54:5c:b0:3a:01:64:
32:bd:77:ce:81:05:63:60:8d:80:60:5a:3c:5f:07:
32:cb:71:13:38:6f:16:79:8d:0f:fb:5d:e4:f6:90:
80:63:c9:28:25:4d:fa:8c:88:29:f1:30:dc:57:4d:
11:94:78:7d:31:31:91:7b:e3:06:1c:54:94:e3:f6:
6e:d6:33:48:43:fd:a1:17:3b:51:f7:ef:c1:f9:64:
36:90:3a:f7:3f:33:69:7b:e3:db:6a:9a:d8:bb:a4:
c6:7b:8d:5a:c7:d0:74:e4:f8:aa:29:b2:22:0e:4a:
13:20:15:93:b8:60:3c:1a:9f:ba:75:77:ce:e3:bd:
3d:ec:61:2e:ec:c6:a3:be:b7:48:4c:4c:d9:5e:bc:
9e:02:1c:23:56:bb:56:43:a5:d5:14:01:2c:5f:ab:
66:81:2a:0f:24:d1:2e:b3:83:9b:f0:b9:2a:09:ec:
d8:21:ac:97:4a:31:6f:5f:12:6c:e4:42:13:43:2c:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8B:EE:8D:CE:26:4D:78:4F:9D:D6:A6:9B:3E:39:CC:80:0D:45:6D
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/Z4vujc4mTXhPndammz45zIANRW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.208.0-31.192.210.255
31.192.213.0/24
31.192.215.0/24
89.43.28.0/22
89.43.64.0/22
89.252.128.0-89.252.137.255
89.252.139.0-89.252.141.255
89.252.143.0-89.252.148.255
89.252.150.0/24
89.252.154.0-89.252.156.255
89.252.158.0/24
89.252.160.0-89.252.177.255
93.113.60.0/22
93.115.76.0/22
94.102.0.0-94.102.11.255
94.102.13.0-94.102.15.255
95.173.160.0-95.173.172.255
95.173.177.0-95.173.191.255
159.253.32.0-159.253.36.255
159.253.38.0-159.253.47.255
185.95.84.0/22
IPv6:
2a02:f80::/32
2a03:2100::/32
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
6f:a8:d8:fa:17:d8:02:5a:44:1d:cf:71:ce:ea:f7:15:1d:a3:
79:3e:e6:80:8f:bb:d7:a6:79:d3:14:92:64:f2:4e:e0:30:f4:
ca:7a:34:d0:eb:28:35:0d:f7:be:f9:c6:03:63:86:9a:8b:bc:
1c:2b:49:90:65:d5:e6:d3:7a:dd:64:8e:a6:c2:26:d4:6b:2c:
f0:49:6f:a5:47:71:d2:5c:6a:3c:32:7e:6d:de:8d:2c:ba:56:
e7:35:c0:e8:6f:06:58:ba:6c:94:07:6b:13:a8:de:2c:8d:24:
c8:51:cf:32:7c:2e:b0:69:0d:68:c9:ff:69:b4:2f:4a:0c:4a:
1e:c3:b2:73:7b:cb:97:ea:71:87:c0:e3:21:7b:69:2b:2e:33:
dc:c3:f7:47:c8:c7:22:d8:03:17:7f:55:68:39:59:aa:91:d7:
b0:60:f6:80:fb:d0:65:49:fa:e5:4e:fa:b1:b5:5d:6c:18:66:
6d:7e:3d:a7:c7:83:24:c4:d4:c4:6a:11:cb:4b:d6:b7:26:d8:
61:66:d8:ef:ef:5a:f1:ea:01:7d:a2:aa:d3:0a:15:ba:07:59:
2b:28:98:74:5a:55:38:49:1b:46:43:3d:b9:be:14:3c:2c:c2:
cf:17:76:03:23:3d:87:63:fc:5f:fb:b2:b5:ae:a0:b8:fa:3f:
21:d6:fd:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:47:00 2026 by rpki-client