Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/QHuPVbiXdCbm0xR769k6ZQ9hOSU.roa
File: QHuPVbiXdCbm0xR769k6ZQ9hOSU.roa (raw, json)
Hash identifier: C9+w/Q/oGRGiExzWqcNW/5IhYw9QJ3LEuqfkjZIK/no=
Subject key identifier: 40:7B:8F:55:B8:97:74:26:E6:D3:14:7B:EB:D9:3A:65:0F:61:39:25
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 019F804CA3FD4E9E05806E743E07989A25C5
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/QHuPVbiXdCbm0xR769k6ZQ9hOSU.roa
Signing time: Mon 20 Jul 2026 16:12:14 +0000
ROA not before: Mon 20 Jul 2026 16:12:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25145
IP address blocks: 31.40.240.0/24 maxlen: 24
77.92.96.0/19 maxlen: 19
77.92.96.0/24 maxlen: 24
77.92.97.0/24 maxlen: 24
77.92.98.0/24 maxlen: 24
77.92.99.0/24 maxlen: 24
77.92.100.0/22 maxlen: 22
77.92.100.0/24 maxlen: 24
77.92.101.0/24 maxlen: 24
77.92.102.0/24 maxlen: 24
77.92.103.0/24 maxlen: 24
77.92.104.0/24 maxlen: 24
77.92.105.0/24 maxlen: 24
77.92.106.0/24 maxlen: 24
77.92.107.0/24 maxlen: 24
77.92.108.0/22 maxlen: 22
77.92.108.0/24 maxlen: 24
77.92.109.0/24 maxlen: 24
77.92.110.0/24 maxlen: 24
77.92.111.0/24 maxlen: 24
77.92.112.0/22 maxlen: 22
77.92.112.0/24 maxlen: 24
77.92.113.0/24 maxlen: 24
77.92.114.0/24 maxlen: 24
77.92.115.0/24 maxlen: 24
77.92.116.0/24 maxlen: 24
77.92.117.0/24 maxlen: 24
77.92.118.0/24 maxlen: 24
77.92.119.0/24 maxlen: 24
77.92.120.0/24 maxlen: 24
77.92.121.0/24 maxlen: 24
77.92.122.0/24 maxlen: 24
77.92.123.0/24 maxlen: 24
77.92.124.0/24 maxlen: 24
77.92.125.0/24 maxlen: 24
77.92.126.0/24 maxlen: 24
77.92.127.0/24 maxlen: 24
185.115.208.0/24 maxlen: 24
185.115.210.0/24 maxlen: 24
185.115.211.0/24 maxlen: 24
213.144.96.0/19 maxlen: 19
213.144.96.0/22 maxlen: 22
213.144.96.0/24 maxlen: 24
213.144.97.0/24 maxlen: 24
213.144.98.0/24 maxlen: 24
213.144.99.0/24 maxlen: 24
213.144.100.0/24 maxlen: 24
213.144.101.0/24 maxlen: 24
213.144.103.0/24 maxlen: 24
213.144.104.0/22 maxlen: 22
213.144.104.0/24 maxlen: 24
213.144.105.0/24 maxlen: 24
213.144.106.0/24 maxlen: 24
213.144.107.0/24 maxlen: 24
213.144.108.0/22 maxlen: 22
213.144.108.0/24 maxlen: 24
213.144.109.0/24 maxlen: 24
213.144.110.0/24 maxlen: 24
213.144.111.0/24 maxlen: 24
213.144.112.0/22 maxlen: 22
213.144.112.0/24 maxlen: 24
213.144.113.0/24 maxlen: 24
213.144.114.0/24 maxlen: 24
213.144.115.0/24 maxlen: 24
213.144.116.0/22 maxlen: 22
213.144.116.0/24 maxlen: 24
213.144.117.0/24 maxlen: 24
213.144.118.0/24 maxlen: 24
213.144.119.0/24 maxlen: 24
213.144.120.0/22 maxlen: 22
213.144.120.0/24 maxlen: 24
213.144.121.0/24 maxlen: 24
213.144.122.0/24 maxlen: 24
213.144.123.0/24 maxlen: 24
213.144.124.0/22 maxlen: 22
213.144.124.0/24 maxlen: 24
213.144.125.0/24 maxlen: 24
213.144.126.0/24 maxlen: 24
213.144.127.0/24 maxlen: 24
2a02:ac80::/29 maxlen: 29
2a02:ac80::/32 maxlen: 32
2a02:ac80::/48 maxlen: 48
2a02:ac80:10::/48 maxlen: 48
2a02:ac80:20::/48 maxlen: 48
2a02:ac80:30::/48 maxlen: 48
2a02:ac80:40::/48 maxlen: 48
2a02:ac80:50::/48 maxlen: 48
2a02:ac80:60::/48 maxlen: 48
2a02:ac80:6a::/48 maxlen: 48
2a02:ac80:70::/48 maxlen: 48
2a02:ac80:90::/48 maxlen: 48
2a02:ac80:91::/48 maxlen: 48
2a02:ac80:92::/48 maxlen: 48
2a02:ac80:93::/48 maxlen: 48
2a02:ac80:96::/48 maxlen: 48
2a02:ac80:97::/48 maxlen: 48
2a02:ac80:99::/48 maxlen: 48
2a02:ac80:a0::/48 maxlen: 48
2a02:ac80:b0::/48 maxlen: 48
2a02:ac80:c0::/48 maxlen: 48
2a02:ac80:d0::/48 maxlen: 48
2a02:ac80:e0::/48 maxlen: 48
2a02:ac80:f0::/48 maxlen: 48
2a02:ac80:100::/48 maxlen: 48
2a02:ac80:101::/48 maxlen: 48
2a02:ac80:102::/48 maxlen: 48
2a02:ac80:103::/48 maxlen: 48
2a02:ac80:104::/48 maxlen: 48
2a02:ac80:105::/48 maxlen: 48
2a02:ac80:117::/48 maxlen: 48
2a02:ac80:127::/48 maxlen: 48
2a02:ac80:200::/48 maxlen: 48
2a02:ac80:300::/48 maxlen: 48
2a02:ac80:400::/48 maxlen: 48
2a02:ac80:500::/48 maxlen: 48
2a02:ac80:600::/48 maxlen: 48
2a02:ac80:700::/48 maxlen: 48
2a02:ac80:a00::/48 maxlen: 48
2a02:ac80:b00::/48 maxlen: 48
2a02:ac80:c00::/48 maxlen: 48
2a02:ac80:d00::/48 maxlen: 48
2a02:ac80:e00::/48 maxlen: 48
2a02:ac80:f00::/48 maxlen: 48
2a02:ac80:1000::/48 maxlen: 48
2a02:ac80:2000::/48 maxlen: 48
2a02:ac80:3000::/48 maxlen: 48
2a02:ac80:4000::/48 maxlen: 48
2a02:ac80:5000::/48 maxlen: 48
2a02:ac80:6000::/48 maxlen: 48
2a02:ac80:6100::/48 maxlen: 48
2a02:ac80:6300::/48 maxlen: 48
2a02:ac80:7000::/48 maxlen: 48
2a02:ac80:7370::/48 maxlen: 48
2a02:ac80:9100::/48 maxlen: 48
2a02:ac80:9300::/48 maxlen: 48
2a02:ac80:a000::/48 maxlen: 48
2a02:ac80:b000::/48 maxlen: 48
2a02:ac80:c000::/48 maxlen: 48
2a02:ac80:d000::/48 maxlen: 48
2a02:ac80:e000::/48 maxlen: 48
2a02:ac80:f000::/48 maxlen: 48
2a02:ac81::/32 maxlen: 32
2a02:ac82::/32 maxlen: 32
2a02:ac83::/32 maxlen: 32
2a02:ac84::/32 maxlen: 32
2a02:ac85::/32 maxlen: 32
2a02:ac86::/32 maxlen: 32
2a02:ac87::/32 maxlen: 32
2a02:ac87:5900::/48 maxlen: 48
2a02:ac87:59cb::/48 maxlen: 48
2a02:ac87:ac87::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:4c:a3:fd:4e:9e:05:80:6e:74:3e:07:98:9a:25:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Jul 20 16:12:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=407b8f55b8977426e6d3147bebd93a650f613925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:9d:25:17:ab:87:be:91:65:2d:37:65:a3:
de:09:4c:a9:5f:6a:37:8b:4a:88:8b:58:c2:05:ed:
59:18:6b:c5:13:8e:43:50:64:fd:1c:7a:d1:59:34:
a2:c0:65:3c:a0:1e:4d:e9:fe:04:88:61:d9:af:b7:
5e:00:a3:9f:99:54:49:a2:e7:77:6c:91:2a:71:65:
80:98:58:c9:09:d1:2b:9d:46:c7:c3:6d:f0:4b:82:
dc:b1:2e:56:18:df:96:74:62:11:46:38:77:9b:a3:
e0:e8:54:b7:dc:d7:1c:7c:85:60:91:7f:44:7c:ef:
d4:d6:2d:3e:f8:88:cc:38:98:ce:03:7e:fe:2a:de:
27:46:19:ea:14:b1:49:ec:5e:a5:8d:41:e9:0f:ee:
ff:76:24:0f:0c:f1:3f:5c:68:81:a9:d9:0b:6c:56:
45:50:34:e1:7e:70:27:84:78:9e:6e:ba:65:3e:c9:
8b:62:f9:42:90:d8:8a:d5:0f:0a:8f:87:53:8b:5a:
9e:fa:f5:82:79:d0:d5:10:b6:43:54:8e:ba:20:ab:
01:a5:8b:4d:3e:1e:1c:97:00:b8:ab:98:58:56:78:
18:14:d7:cb:ce:be:d5:06:21:75:29:16:87:74:69:
11:6b:05:2f:68:bf:11:ac:12:de:87:1c:1f:e5:9b:
a0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7B:8F:55:B8:97:74:26:E6:D3:14:7B:EB:D9:3A:65:0F:61:39:25
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/QHuPVbiXdCbm0xR769k6ZQ9hOSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.240.0/24
77.92.96.0/19
185.115.208.0/24
185.115.210.0/23
213.144.96.0/19
IPv6:
2a02:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
c0:c8:c9:7c:55:ce:fb:ac:ab:de:ec:5c:15:62:07:99:82:73:
ba:14:6f:f1:00:8c:31:5c:4c:e3:45:2f:36:8b:d1:21:42:0b:
e0:da:54:0f:76:cd:02:17:0d:0a:e7:67:ce:35:73:82:b8:13:
af:55:be:f9:68:80:0a:af:c1:e8:36:da:c3:82:e6:4b:d8:9e:
bd:22:ad:c2:d1:b8:35:ab:f5:b6:04:4b:c9:c5:c0:64:30:03:
23:45:a9:c9:cd:22:ed:14:40:93:0a:10:03:d3:cb:b1:81:55:
16:9c:8c:39:36:4f:d4:a4:23:d9:d5:1f:ea:a5:3e:ce:c4:96:
48:c4:6c:e3:96:4e:10:df:7a:c6:23:0d:57:96:d0:b6:18:bc:
f4:00:5e:6c:42:d9:7b:53:41:1c:d6:5d:42:1b:d4:b3:e4:5d:
cf:97:3c:54:4a:21:35:1b:35:ad:a7:59:45:8d:5c:9d:8b:30:
82:c8:35:ef:4f:37:d4:b4:1e:e0:48:18:33:68:2b:38:c8:bd:
9b:b4:be:15:da:70:5f:c0:3b:33:83:a9:b2:20:f7:4e:c0:28:
66:8c:b1:b8:a5:cd:3d:06:35:e7:a3:08:ad:75:20:e0:7d:c5:
14:84:d0:0e:64:40:32:2b:4b:37:fa:fd:8b:01:b1:d1:17:dd:
b4:68:aa:d0
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZ+ATKP9Tp4FgG50PgeYmiXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTYyMThjMjBlZmQ4ZmU1M2ZjYTk5OTBiNzI1ZGQ3OTYz
Yzg4NWMwHhcNMjYwNzIwMTYxMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDdiOGY1NWI4OTc3NDI2ZTZkMzE0N2JlYmQ5M2E2NTBmNjEzOTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EqdJRerh76RZS03ZaPeCUypX2o3
i0qIi1jCBe1ZGGvFE45DUGT9HHrRWTSiwGU8oB5N6f4EiGHZr7deAKOfmVRJoud3
bJEqcWWAmFjJCdErnUbHw23wS4LcsS5WGN+WdGIRRjh3m6Pg6FS33NccfIVgkX9E
fO/U1i0++IjMOJjOA37+Kt4nRhnqFLFJ7F6ljUHpD+7/diQPDPE/XGiBqdkLbFZF
UDThfnAnhHiebrplPsmLYvlCkNiK1Q8Kj4dTi1qe+vWCedDVELZDVI66IKsBpYtN
Ph4clwC4q5hYVngYFNfLzr7VBiF1KRaHdGkRawUvaL8RrBLehxwf5ZugEQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFEB7j1W4l3Qm5tMUe+vZOmUPYTklMB8GA1UdIwQY
MBaAFMqWIYwg79j+U/ypmQtyXdeWPIhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAt
ZDcxMmQ0NzM4MDQ2LzEvUUh1UFZiaVhkQ2JtMHhSNzY5azZaUTloT1NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAtZDcxMmQ0NzM4MDQ2
LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAHyjwAwQF
TVxgAwQAuXPQAwQBuXPSAwQF1ZBgMA0EAgACMAcDBQMqAqyAMA0GCSqGSIb3DQEB
CwUAA4IBAQDAyMl8Vc77rKve7FwVYgeZgnO6FG/xAIwxXEzjRS82i9EhQgvg2lQP
ds0CFw0K52fONXOCuBOvVb75aIAKr8HoNtrDguZL2J69Iq3C0bg1q/W2BEvJxcBk
MAMjRanJzSLtFECTChAD08uxgVUWnIw5Nk/UpCPZ1R/qpT7OxJZIxGzjlk4Q33rG
Iw1XltC2GLz0AF5sQtl7U0Ec1l1CG9Sz5F3PlzxUSiE1GzWtp1lFjVydizCCyDXv
TzfUtB7gSBgzaCs4yL2btL4V2nBfwDszg6myIPdOwChmjLG4pc09BjXnowitdSDg
fcUUhNAOZEAyK0s3+v2LAbHRF920aKrQ
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:36 2026 by rpki-client