Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/Ohn1TkDNg86_ayTFKaxNgyeDWKw.roa
File: Ohn1TkDNg86_ayTFKaxNgyeDWKw.roa (raw, json)
Hash identifier: UXNLfN4yk/bOhc93qSx+KAzobQ1bu0Nj3leNruG+aAI=
Subject key identifier: 3A:19:F5:4E:40:CD:83:CE:BF:6B:24:C5:29:AC:4D:83:27:83:58:AC
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 019F6593662F8AFCF7CBFB765D92F88B620E
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/Ohn1TkDNg86_ayTFKaxNgyeDWKw.roa
Signing time: Wed 15 Jul 2026 11:39:46 +0000
ROA not before: Wed 15 Jul 2026 11:39:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29314
IP address blocks: 31.11.128.0/17 maxlen: 17
31.11.128.0/24 maxlen: 24
31.11.129.0/24 maxlen: 24
31.11.130.0/24 maxlen: 24
31.11.131.0/24 maxlen: 24
31.11.132.0/22 maxlen: 22
31.11.172.0/24 maxlen: 24
31.11.202.0/24 maxlen: 24
31.11.208.0/22 maxlen: 22
31.11.228.0/24 maxlen: 24
31.22.96.0/21 maxlen: 21
31.22.100.0/23 maxlen: 23
31.135.168.0/21 maxlen: 21
31.135.175.0/24 maxlen: 24
37.8.192.0/18 maxlen: 18
37.8.208.0/24 maxlen: 24
37.8.214.0/24 maxlen: 24
37.8.230.0/24 maxlen: 24
37.8.231.0/24 maxlen: 24
37.77.152.0/21 maxlen: 21
62.122.112.0/21 maxlen: 21
77.222.224.0/21 maxlen: 21
77.222.232.0/21 maxlen: 21
77.222.240.0/20 maxlen: 20
77.222.248.0/22 maxlen: 22
77.222.252.0/22 maxlen: 22
78.31.152.0/21 maxlen: 21
78.31.209.0/24 maxlen: 24
78.88.0.0/17 maxlen: 17
78.88.16.0/24 maxlen: 24
78.88.28.0/22 maxlen: 22
78.88.28.0/24 maxlen: 24
78.88.29.0/24 maxlen: 24
78.88.30.0/24 maxlen: 24
78.88.31.0/24 maxlen: 24
78.88.43.0/24 maxlen: 24
78.88.74.0/24 maxlen: 24
78.88.123.0/24 maxlen: 24
78.88.128.0/17 maxlen: 17
78.88.188.0/22 maxlen: 22
78.88.216.0/22 maxlen: 22
82.139.0.0/18 maxlen: 18
82.139.32.0/21 maxlen: 21
82.139.48.0/21 maxlen: 21
83.143.40.0/21 maxlen: 21
83.143.136.0/21 maxlen: 21
83.243.104.0/21 maxlen: 21
88.156.0.0/18 maxlen: 18
88.156.64.0/18 maxlen: 18
88.156.64.0/24 maxlen: 24
88.156.78.0/24 maxlen: 24
88.156.80.176/28 maxlen: 28
88.156.128.0/18 maxlen: 18
88.156.128.0/21 maxlen: 21
88.156.128.0/23 maxlen: 23
88.156.130.0/23 maxlen: 23
88.156.132.0/23 maxlen: 23
88.156.134.0/23 maxlen: 23
88.156.136.0/21 maxlen: 21
88.156.164.0/22 maxlen: 22
88.156.192.0/18 maxlen: 18
88.156.222.0/24 maxlen: 24
88.156.226.0/23 maxlen: 23
88.156.255.0/24 maxlen: 24
89.151.0.0/18 maxlen: 18
89.151.6.0/24 maxlen: 24
89.151.16.0/20 maxlen: 20
89.151.40.0/21 maxlen: 21
91.192.76.0/22 maxlen: 22
91.192.76.0/24 maxlen: 24
91.192.78.0/24 maxlen: 24
91.230.159.0/24 maxlen: 24
91.230.162.0/23 maxlen: 23
91.230.164.0/22 maxlen: 22
91.231.116.0/23 maxlen: 23
91.238.232.0/22 maxlen: 22
93.105.0.0/17 maxlen: 17
93.105.40.0/24 maxlen: 24
93.105.42.0/24 maxlen: 24
93.105.128.0/17 maxlen: 17
93.105.142.0/24 maxlen: 24
93.105.144.0/22 maxlen: 22
93.105.168.0/21 maxlen: 21
93.105.176.0/23 maxlen: 23
93.105.178.0/23 maxlen: 23
93.105.179.0/24 maxlen: 24
93.105.180.0/24 maxlen: 24
93.105.181.0/24 maxlen: 24
93.105.182.0/24 maxlen: 24
93.105.183.0/24 maxlen: 24
93.105.224.0/21 maxlen: 21
93.105.236.0/24 maxlen: 24
93.105.237.0/24 maxlen: 24
93.176.192.0/18 maxlen: 24
94.231.48.0/20 maxlen: 20
95.160.0.0/17 maxlen: 24
95.160.16.0/22 maxlen: 22
95.160.28.0/22 maxlen: 22
95.160.56.0/22 maxlen: 22
95.160.76.0/22 maxlen: 22
95.160.126.0/23 maxlen: 23
95.160.128.0/17 maxlen: 17
95.160.152.0/24 maxlen: 24
95.160.153.0/24 maxlen: 24
95.160.154.0/24 maxlen: 24
95.160.155.0/24 maxlen: 24
95.160.156.0/24 maxlen: 24
95.160.157.0/24 maxlen: 24
95.160.158.0/24 maxlen: 24
95.160.159.0/24 maxlen: 24
95.160.166.0/24 maxlen: 24
95.160.170.0/24 maxlen: 24
95.160.228.0/22 maxlen: 22
95.160.233.0/24 maxlen: 24
95.160.236.0/22 maxlen: 22
109.107.0.0/19 maxlen: 19
109.107.0.0/21 maxlen: 21
109.107.9.0/24 maxlen: 24
109.197.56.0/21 maxlen: 21
109.197.64.0/21 maxlen: 21
109.241.0.0/18 maxlen: 18
109.241.64.0/18 maxlen: 18
109.241.128.0/18 maxlen: 18
109.241.192.0/18 maxlen: 18
178.235.0.0/17 maxlen: 17
178.235.40.0/24 maxlen: 24
178.235.41.0/24 maxlen: 24
178.235.42.0/24 maxlen: 24
178.235.43.0/24 maxlen: 24
178.235.98.0/24 maxlen: 24
178.235.110.0/24 maxlen: 24
178.235.128.0/17 maxlen: 17
178.235.128.0/24 maxlen: 24
178.235.129.0/24 maxlen: 24
178.235.130.0/24 maxlen: 24
178.235.131.0/24 maxlen: 24
178.235.132.0/23 maxlen: 23
178.235.134.0/24 maxlen: 24
178.235.135.0/24 maxlen: 24
178.235.136.0/23 maxlen: 23
178.235.138.0/23 maxlen: 23
178.235.140.0/24 maxlen: 24
178.235.141.0/24 maxlen: 24
178.235.142.0/23 maxlen: 23
178.235.144.0/23 maxlen: 23
178.235.146.0/24 maxlen: 24
178.235.147.0/24 maxlen: 24
178.235.148.0/22 maxlen: 22
178.235.148.0/23 maxlen: 23
178.235.150.0/23 maxlen: 23
178.235.150.0/24 maxlen: 24
178.235.152.0/21 maxlen: 21
178.235.160.0/19 maxlen: 19
178.235.192.0/18 maxlen: 18
185.51.180.0/22 maxlen: 22
192.166.120.0/23 maxlen: 23
193.201.18.0/23 maxlen: 23
194.54.188.0/22 maxlen: 22
195.26.72.0/22 maxlen: 22
195.28.170.0/23 maxlen: 23
195.191.162.0/23 maxlen: 23
195.225.92.0/22 maxlen: 22
195.242.252.0/22 maxlen: 22
2a00:9f00::/32 maxlen: 32
2a00:9f00::/36 maxlen: 36
2a00:9f00::/48 maxlen: 48
2a00:9f00:1::/48 maxlen: 48
2a00:9f00:a::/48 maxlen: 48
2a00:9f00:c::/48 maxlen: 48
2a00:9f00:10::/48 maxlen: 48
2a00:9f00:aa::/48 maxlen: 48
2a00:9f00:bb::/48 maxlen: 48
2a00:9f00:cc::/48 maxlen: 48
2a00:9f00:1000::/36 maxlen: 36
2a00:9f00:2000::/36 maxlen: 36
2a00:9f00:2007::/48 maxlen: 48
2a00:9f00:3000::/36 maxlen: 36
2a00:9f00:4000::/36 maxlen: 36
2a00:9f00:5000::/36 maxlen: 36
2a00:9f00:6000::/36 maxlen: 36
2a00:9f00:7000::/36 maxlen: 36
2a00:9f00:8000::/36 maxlen: 36
2a00:9f00:9000::/36 maxlen: 36
2a00:9f00:a000::/36 maxlen: 36
2a00:9f00:abba::/48 maxlen: 48
2a00:9f00:b000::/36 maxlen: 36
2a00:9f00:babe::/48 maxlen: 48
2a00:9f00:beaf::/48 maxlen: 48
2a00:9f00:beee::/48 maxlen: 48
2a00:9f00:c000::/36 maxlen: 36
2a00:9f00:cafe::/48 maxlen: 48
2a00:9f00:d000::/36 maxlen: 36
2a00:9f00:dead::/48 maxlen: 48
2a00:9f00:e000::/36 maxlen: 36
2a00:9f00:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:93:66:2f:8a:fc:f7:cb:fb:76:5d:92:f8:8b:62:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jul 15 11:39:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a19f54e40cd83cebf6b24c529ac4d83278358ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:e4:2c:5b:23:22:3d:70:77:87:e9:25:75:
51:59:66:36:c3:b3:d6:85:e1:37:44:ee:be:e0:7b:
c8:c6:92:9f:d3:8d:01:74:4d:05:01:39:c5:3f:4a:
96:9e:09:f8:6b:12:df:6e:d2:4f:1b:3e:ef:1d:d4:
8e:06:f6:9b:35:d2:ca:46:4a:6f:81:4d:24:cf:c0:
e5:94:73:52:e5:ea:61:54:a9:77:89:b7:b4:a9:be:
fd:96:0c:49:01:02:62:4f:49:70:76:2d:a6:fe:8f:
82:1e:13:df:03:04:2f:b8:12:58:b3:70:a1:d9:b0:
c3:40:c4:ea:47:da:ad:db:a3:80:62:a6:36:d1:aa:
6f:60:b3:8b:f6:dc:f2:58:ab:a5:a1:41:f7:90:aa:
0b:91:ac:9d:a4:43:9e:a1:51:09:68:bd:d3:6c:05:
c9:85:1e:13:04:44:fe:3d:19:58:12:e4:ff:19:83:
a7:62:05:82:8c:e9:fd:e0:e3:95:70:ec:2f:27:f1:
2a:63:a6:58:0f:69:2c:e6:96:b9:a8:03:3d:1b:53:
8e:d9:5f:f6:03:25:f8:f3:e8:ee:2e:8a:91:04:5c:
16:2c:1c:d2:6e:fd:44:f5:15:9e:a2:62:7a:c7:68:
d2:42:fd:76:f0:20:f4:96:ee:09:84:c8:7d:15:0d:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:19:F5:4E:40:CD:83:CE:BF:6B:24:C5:29:AC:4D:83:27:83:58:AC
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/Ohn1TkDNg86_ayTFKaxNgyeDWKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.128.0/17
31.22.96.0/21
31.135.168.0/21
37.8.192.0/18
37.77.152.0/21
62.122.112.0/21
77.222.224.0/19
78.31.152.0/21
78.31.209.0/24
78.88.0.0/16
82.139.0.0/18
83.143.40.0/21
83.143.136.0/21
83.243.104.0/21
88.156.0.0/16
89.151.0.0/18
91.192.76.0/22
91.230.159.0/24
91.230.162.0-91.230.167.255
91.231.116.0/23
91.238.232.0/22
93.105.0.0/16
93.176.192.0/18
94.231.48.0/20
95.160.0.0/16
109.107.0.0/19
109.197.56.0-109.197.71.255
109.241.0.0/16
178.235.0.0/16
185.51.180.0/22
192.166.120.0/23
193.201.18.0/23
194.54.188.0/22
195.26.72.0/22
195.28.170.0/23
195.191.162.0/23
195.225.92.0/22
195.242.252.0/22
IPv6:
2a00:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
4f:10:1a:90:1a:6f:31:6e:a0:ee:57:c1:f4:df:15:cf:b3:9e:
55:cf:a9:7f:44:d7:b7:70:a7:66:fb:7a:fb:8a:eb:03:8a:e6:
59:e2:47:14:31:ed:dc:1a:08:50:46:eb:97:19:8b:b5:57:85:
dc:42:1d:9e:0a:ec:35:8f:40:65:56:fe:65:5c:3f:c3:93:91:
9f:f5:97:b0:d3:10:10:88:5d:ba:2a:e0:ae:55:59:4c:79:39:
ce:94:b2:1c:e5:7b:c8:32:12:cf:26:a8:66:58:67:95:a3:cc:
4d:cf:8b:d9:94:11:14:cc:8c:72:d4:1d:db:eb:c3:6e:46:69:
e4:da:78:73:d8:a0:3b:a1:56:19:89:dc:84:1e:af:cb:ba:42:
46:b5:8a:7c:bf:88:aa:52:31:13:50:98:7b:97:4a:21:5a:64:
66:ac:02:67:6f:49:5a:f8:02:62:27:31:36:0f:fc:6e:3b:ea:
91:59:14:d9:df:00:c4:6c:c1:72:3f:83:3b:49:0c:8b:1c:81:
b0:d0:41:33:eb:47:9d:ef:1f:74:eb:b4:31:c7:3d:1e:dc:f3:
a0:b4:e7:df:90:0a:07:f5:62:29:e0:c7:d3:d4:25:3e:22:29:
bc:05:1a:97:a5:53:86:05:27:63:a6:b4:23:a1:a0:55:f0:b1:
ce:4c:bf:8e
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgISAZ9lk2Yvivz3y/t2XZL4i2IOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh
MjI5NjIwHhcNMjYwNzE1MTEzOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTE5ZjU0ZTQwY2Q4M2NlYmY2YjI0YzUyOWFjNGQ4MzI3ODM1OGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTDkLFsjIj1wd4fpJXVRWWY2w7PW
heE3RO6+4HvIxpKf040BdE0FATnFP0qWngn4axLfbtJPGz7vHdSOBvabNdLKRkpv
gU0kz8DllHNS5ephVKl3ibe0qb79lgxJAQJiT0lwdi2m/o+CHhPfAwQvuBJYs3Ch
2bDDQMTqR9qt26OAYqY20apvYLOL9tzyWKuloUH3kKoLkaydpEOeoVEJaL3TbAXJ
hR4TBET+PRlYEuT/GYOnYgWCjOn94OOVcOwvJ/EqY6ZYD2ks5pa5qAM9G1OO2V/2
AyX48+juLoqRBFwWLBzSbv1E9RWeomJ6x2jSQv128CD0lu4JhMh9FQ2gawIDAQAB
o4IDCDCCAwQwHQYDVR0OBBYEFDoZ9U5AzYPOv2skxSmsTYMng1isMB8GA1UdIwQY
MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt
ZTA1MzRlMjM4NTliLzEvT2huMVRrRE5nODZfYXlURktheE5neWVEV0t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli
LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCB9QQCAAEwge4D
BAcfC4ADBAMfFmADBAMfh6gDBAYlCMADBAMlTZgDBAM+enADBAVN3uADBANOH5gD
BABOH9EDAwBOWAMEBlKLAAMEA1OPKAMEA1OPiAMEA1PzaAMDAFicAwQGWZcAAwQC
W8BMAwQAW+afMAwDBAFb5qIDBANb5qADBAFb53QDBAJb7ugDAwBdaQMEBl2wwAME
BF7nMAMDAF+gAwQFbWsAMAwDBANtxTgDBANtxUADAwBt8QMDALLrAwQCuTO0AwQB
wKZ4AwQBwckSAwQCwja8AwQCwxpIAwQBwxyqAwQBw7+iAwQCw+FcAwQCw/L8MA0E
AgACMAcDBQAqAJ8AMA0GCSqGSIb3DQEBCwUAA4IBAQBPEBqQGm8xbqDuV8H03xXP
s55Vz6l/RNe3cKdm+3r7iusDiuZZ4kcUMe3cGghQRuuXGYu1V4XcQh2eCuw1j0Bl
Vv5lXD/Dk5Gf9Zew0xAQiF26KuCuVVlMeTnOlLIc5XvIMhLPJqhmWGeVo8xNz4vZ
lBEUzIxy1B3b68NuRmnk2nhz2KA7oVYZidyEHq/LukJGtYp8v4iqUjETUJh7l0oh
WmRmrAJnb0la+AJiJzE2D/xuO+qRWRTZ3wDEbMFyP4M7SQyLHIGw0EEz60ed7x90
67Qxxz0e3POgtOffkAoH9WIp4MfT1CU+Iim8BRqXpVOGBSdjprQjoaBV8LHOTL+O
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:53 2026 by rpki-client