Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/bWULgqZwLFtgMnHWpi5ob6mG51g.roa
File: bWULgqZwLFtgMnHWpi5ob6mG51g.roa (raw, json)
Hash identifier: lfo7CD8cFvuweAa0KOVUGNQ19lLzJ7antvDI5XPAMSI=
Subject key identifier: 6D:65:0B:82:A6:70:2C:5B:60:32:71:D6:A6:2E:68:6F:A9:86:E7:58
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 019F8A9C1C3266FC398E77D6F10113A22C97
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/bWULgqZwLFtgMnHWpi5ob6mG51g.roa
Signing time: Wed 22 Jul 2026 16:15:14 +0000
ROA not before: Wed 22 Jul 2026 16:15:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64445
IP address blocks: 31.193.188.0/24 maxlen: 24
37.156.174.0/24 maxlen: 24
45.83.56.0/22 maxlen: 24
45.83.57.0/24 maxlen: 24
45.83.58.0/24 maxlen: 24
45.83.59.0/24 maxlen: 24
45.86.144.0/24 maxlen: 24
45.86.145.0/24 maxlen: 24
45.86.146.0/24 maxlen: 24
77.81.103.0/24 maxlen: 24
86.104.67.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
89.34.236.0/24 maxlen: 24
89.34.239.0/24 maxlen: 24
89.39.201.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
89.40.142.0/24 maxlen: 24
89.40.143.0/24 maxlen: 24
89.40.227.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.43.34.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
89.43.52.0/24 maxlen: 24
89.44.237.0/24 maxlen: 24
91.212.52.0/24 maxlen: 24
91.229.186.0/24 maxlen: 24
92.114.86.0/24 maxlen: 24
92.114.87.0/24 maxlen: 24
93.113.144.0/24 maxlen: 24
93.113.145.0/24 maxlen: 24
93.113.146.0/24 maxlen: 24
93.113.147.0/24 maxlen: 24
93.113.148.0/22 maxlen: 22
93.113.148.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
93.115.57.0/24 maxlen: 24
94.176.108.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
94.177.10.0/24 maxlen: 24
94.177.11.0/24 maxlen: 24
94.177.21.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
94.177.48.0/24 maxlen: 24
94.177.49.0/24 maxlen: 24
94.177.96.0/24 maxlen: 24
94.177.98.0/24 maxlen: 24
94.177.99.0/24 maxlen: 24
176.223.64.0/24 maxlen: 24
185.184.240.0/22 maxlen: 22
185.184.240.0/24 maxlen: 24
185.184.241.0/24 maxlen: 24
185.184.242.0/24 maxlen: 24
185.184.243.0/24 maxlen: 24
185.198.244.0/24 maxlen: 24
185.198.245.0/24 maxlen: 24
185.198.246.0/24 maxlen: 24
185.198.247.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
188.208.16.0/24 maxlen: 24
188.208.17.0/24 maxlen: 24
188.211.248.0/24 maxlen: 24
188.214.199.0/24 maxlen: 24
188.215.6.0/24 maxlen: 24
188.215.94.0/24 maxlen: 24
188.240.80.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
188.240.228.0/24 maxlen: 24
188.240.229.0/24 maxlen: 24
188.241.66.0/24 maxlen: 24
188.241.67.0/24 maxlen: 24
188.241.126.0/24 maxlen: 24
188.241.138.0/24 maxlen: 24
188.241.139.0/24 maxlen: 24
188.241.143.0/24 maxlen: 24
188.241.213.0/24 maxlen: 24
193.239.140.0/23 maxlen: 24
193.239.141.0/24 maxlen: 24
217.198.177.0/24 maxlen: 24
2a04:68c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:9c:1c:32:66:fc:39:8e:77:d6:f1:01:13:a2:2c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Jul 22 16:15:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d650b82a6702c5b603271d6a62e686fa986e758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:4a:0b:0d:52:45:22:d8:47:68:dd:54:10:
3d:3a:a8:c6:fd:ed:23:74:87:cb:22:96:41:19:71:
dc:e5:ea:ae:60:b1:58:3b:94:df:a7:45:a4:09:0c:
8c:ba:57:a5:6a:3d:b9:e4:96:a5:b2:d0:9f:73:48:
e9:47:2f:97:1c:5c:9e:c4:60:10:62:f5:76:6c:04:
64:4b:f6:cf:76:60:00:d3:5a:71:ab:48:d5:b4:6b:
12:c8:07:58:4f:f3:5a:38:e4:1b:8b:27:34:39:56:
53:df:e1:e2:bb:4f:2c:ef:20:4f:47:51:af:ec:1f:
9b:06:48:fd:42:80:fd:51:81:ab:42:dc:d5:f5:89:
41:f3:69:7e:92:c7:5b:04:88:95:a5:1f:a0:91:a7:
54:b1:a4:5c:4a:83:d4:df:01:19:32:86:d6:65:2f:
d6:81:d1:2c:0e:b0:0b:f8:e3:d0:63:55:24:cd:1c:
5f:49:ae:46:74:07:94:97:ee:82:d6:cc:ea:e0:9f:
7e:7c:15:ca:8c:6c:7c:fa:c7:2c:0e:24:07:46:48:
37:23:49:18:94:83:33:3e:86:bc:a9:4e:3d:26:c1:
5f:7c:2a:0e:4a:35:ed:2f:d7:ab:d5:87:d1:ae:c8:
e9:13:a6:81:24:d0:b5:6b:a9:b0:70:7c:cf:86:38:
be:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:65:0B:82:A6:70:2C:5B:60:32:71:D6:A6:2E:68:6F:A9:86:E7:58
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/bWULgqZwLFtgMnHWpi5ob6mG51g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.188.0/24
37.156.174.0/24
45.83.56.0/22
45.86.144.0-45.86.146.255
77.81.103.0/24
86.104.67.0/24
86.107.110.0/24
89.34.236.0/24
89.34.239.0/24
89.39.201.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.34.0/23
89.43.52.0/24
89.44.237.0/24
91.212.52.0/24
91.229.186.0/24
92.114.86.0/23
93.113.144.0/21
93.115.57.0/24
94.176.108.0/24
94.176.212.0/24
94.177.10.0/23
94.177.21.0/24
94.177.48.0/23
94.177.96.0/24
94.177.98.0/23
176.223.64.0/24
185.184.240.0/22
185.198.244.0/22
188.208.16.0/23
188.211.248.0/24
188.214.199.0/24
188.215.6.0/24
188.215.94.0/24
188.240.80.0/24
188.240.228.0/23
188.241.66.0/23
188.241.126.0/24
188.241.138.0/23
188.241.143.0/24
188.241.213.0/24
193.239.140.0/23
217.198.177.0/24
IPv6:
2a04:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
b2:54:f5:84:01:bc:ef:7d:be:68:d3:42:31:94:2a:d2:50:da:
e1:80:1a:ad:0f:bd:8a:f1:6c:1d:d4:d1:ff:23:5b:8b:dd:f9:
d1:e2:6d:e0:0d:fa:f2:96:39:75:28:23:aa:11:53:58:e6:3f:
e0:2d:41:86:1f:84:f3:08:87:dc:16:73:71:0d:be:02:bc:7b:
17:ce:a0:ab:10:5e:31:40:61:79:20:a4:4a:4f:ac:00:a4:32:
3e:94:62:79:c8:96:ff:e9:0b:78:97:a5:3f:09:22:ac:d8:d8:
20:f1:4a:8c:7f:59:81:04:63:29:7d:82:94:3c:25:23:6f:a5:
d1:b2:ab:ba:e6:81:cd:65:6a:98:bd:0c:df:1b:1f:bc:2a:da:
40:b6:ba:4c:80:96:76:2a:b3:3c:00:70:28:cb:c6:f4:79:5f:
f8:0a:a2:8f:8c:7a:50:10:8a:4f:fb:c9:df:fc:fe:83:25:43:
dd:62:9a:f9:0a:21:38:75:f0:1f:66:6a:7d:f7:18:6b:92:19:
9c:75:c5:7f:a8:eb:8c:b5:0d:cb:7d:23:e0:b4:ba:e7:3e:ac:
0a:69:a3:38:02:50:05:9e:f0:17:94:a7:03:45:89:80:00:90:
99:d1:e6:6a:11:b3:9c:14:8d:5b:e8:a9:7a:e6:7b:be:fa:e9:
16:80:82:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:29 2026 by rpki-client