Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/gDN1bw8FvN-OdASHlRN4of62_9o.roa
File: gDN1bw8FvN-OdASHlRN4of62_9o.roa (raw, json)
Hash identifier: 4W/nE/V3CDXO8NqW34VgHVbI+S3xOmYEWa2m2w0aPww=
Subject key identifier: 80:33:75:6F:0F:05:BC:DF:8E:74:04:87:95:13:78:A1:FE:B6:FF:DA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A156B9C9BFCE7D99D701588ED0269F488A
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/gDN1bw8FvN-OdASHlRN4of62_9o.roa
Signing time: Tue 20 Oct 2026 00:32:58 +0000
ROA not before: Tue 20 Oct 2026 00:32:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46261
IP address blocks: 61.14.224.0/24 maxlen: 24
61.14.225.0/24 maxlen: 24
61.14.226.0/24 maxlen: 24
61.14.227.0/24 maxlen: 24
62.106.64.0/24 maxlen: 24
79.110.176.0/21 maxlen: 24
85.202.172.0/24 maxlen: 24
85.202.173.0/24 maxlen: 24
85.202.174.0/24 maxlen: 24
91.132.84.0/24 maxlen: 32
91.132.86.0/24 maxlen: 24
91.132.87.0/24 maxlen: 32
103.203.40.0/23 maxlen: 24
103.203.43.0/24 maxlen: 24
103.205.84.0/23 maxlen: 24
103.205.86.0/24 maxlen: 24
103.207.161.0/24 maxlen: 24
103.207.162.0/24 maxlen: 24
103.207.163.0/24 maxlen: 24
121.46.124.0/22 maxlen: 24
146.19.82.0/24 maxlen: 24
160.238.96.0/24 maxlen: 24
160.238.99.0/24 maxlen: 24
185.93.4.0/24 maxlen: 24
185.105.10.0/24 maxlen: 24
185.118.132.0/24 maxlen: 24
185.118.135.0/24 maxlen: 24
185.145.44.0/24 maxlen: 24
185.157.232.0/22 maxlen: 24
185.176.89.0/24 maxlen: 24
185.176.90.0/24 maxlen: 24
185.176.91.0/24 maxlen: 24
185.190.59.0/24 maxlen: 24
185.196.24.0/24 maxlen: 24
185.202.44.0/23 maxlen: 24
185.206.20.0/23 maxlen: 24
185.209.128.0/23 maxlen: 24
185.209.130.0/24 maxlen: 24
185.214.140.0/23 maxlen: 24
185.214.142.0/24 maxlen: 24
185.218.185.0/24 maxlen: 24
185.219.21.0/24 maxlen: 32
185.219.22.0/24 maxlen: 32
185.225.12.0/23 maxlen: 24
185.225.15.0/24 maxlen: 24
185.227.254.0/24 maxlen: 24
185.228.44.0/24 maxlen: 24
185.228.47.0/24 maxlen: 24
185.232.42.0/24 maxlen: 24
185.235.120.0/24 maxlen: 24
185.235.122.0/24 maxlen: 24
185.235.123.0/24 maxlen: 24
193.176.116.0/24 maxlen: 24
193.176.117.0/24 maxlen: 24
193.176.119.0/24 maxlen: 24
193.187.180.0/22 maxlen: 24
194.8.134.0/24 maxlen: 24
194.50.192.0/23 maxlen: 24
194.50.195.0/24 maxlen: 24
194.69.161.0/24 maxlen: 24
195.216.150.0/24 maxlen: 32
195.216.151.0/24 maxlen: 24
195.245.74.0/23 maxlen: 24
213.109.157.0/24 maxlen: 24
217.18.56.0/23 maxlen: 24
217.18.58.0/24 maxlen: 24
2a07:4580::/29 maxlen: 29
2a07:4580::/32 maxlen: 48
2a07:4580:b0d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:b9:c9:bf:ce:7d:99:d7:01:58:8e:d0:26:9f:48:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Oct 20 00:32:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8033756f0f05bcdf8e740487951378a1feb6ffda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f7:27:ba:54:de:09:9c:62:b7:5f:d0:9a:38:
db:e9:b1:04:ae:3b:8a:2c:7f:0b:45:a2:dd:95:26:
26:88:df:b4:48:d6:79:47:8b:52:63:14:1c:10:20:
31:2c:65:ec:7f:d1:99:33:31:15:f2:f4:fa:c3:56:
14:67:e9:af:19:ad:e5:d1:09:e0:23:72:f3:29:fc:
52:cc:f7:ce:2b:1f:2a:12:95:ce:ce:d1:9c:db:14:
6f:e1:64:b0:79:f3:c6:db:26:a4:90:f7:d6:6e:a0:
2f:aa:e8:4c:8b:b7:8b:8f:f7:84:64:32:5f:99:dd:
90:1c:86:69:5e:fd:be:8c:95:c4:d8:6c:f3:96:f4:
2c:ce:6d:5b:35:11:96:df:6a:b8:62:93:80:f7:ad:
4d:dc:98:07:e7:77:bf:60:59:d9:22:a9:20:33:62:
bb:6f:46:8a:29:df:93:ee:25:9c:63:c8:14:e3:ff:
78:68:f1:ca:56:7b:48:d7:17:99:37:51:2e:7d:78:
3e:4a:2f:93:54:91:b3:2e:3c:ee:97:55:65:9a:91:
00:a6:85:54:ab:f9:06:87:8a:a7:a3:89:5f:50:61:
2e:66:e0:36:35:7c:e9:b9:fe:08:4e:83:31:4a:25:
91:72:97:70:a0:b7:43:1c:26:26:e9:80:6d:9f:6c:
c0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:33:75:6F:0F:05:BC:DF:8E:74:04:87:95:13:78:A1:FE:B6:FF:DA
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/gDN1bw8FvN-OdASHlRN4of62_9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.224.0/22
62.106.64.0/24
79.110.176.0/21
85.202.172.0-85.202.174.255
91.132.84.0/24
91.132.86.0/23
103.203.40.0/23
103.203.43.0/24
103.205.84.0-103.205.86.255
103.207.161.0-103.207.163.255
121.46.124.0/22
146.19.82.0/24
160.238.96.0/24
160.238.99.0/24
185.93.4.0/24
185.105.10.0/24
185.118.132.0/24
185.118.135.0/24
185.145.44.0/24
185.157.232.0/22
185.176.89.0-185.176.91.255
185.190.59.0/24
185.196.24.0/24
185.202.44.0/23
185.206.20.0/23
185.209.128.0-185.209.130.255
185.214.140.0-185.214.142.255
185.218.185.0/24
185.219.21.0-185.219.22.255
185.225.12.0/23
185.225.15.0/24
185.227.254.0/24
185.228.44.0/24
185.228.47.0/24
185.232.42.0/24
185.235.120.0/24
185.235.122.0/23
193.176.116.0/23
193.176.119.0/24
193.187.180.0/22
194.8.134.0/24
194.50.192.0/23
194.50.195.0/24
194.69.161.0/24
195.216.150.0/23
195.245.74.0/23
213.109.157.0/24
217.18.56.0-217.18.58.255
IPv6:
2a07:4580::/29
Signature Algorithm: sha256WithRSAEncryption
4c:03:9b:16:88:d5:ac:79:ba:61:ca:d0:05:48:7f:f5:e9:67:
42:0a:ab:fc:b0:21:44:b3:41:38:91:01:94:c6:cd:7e:d9:8b:
6b:ed:f1:88:2f:49:ef:e7:d3:45:39:79:0e:6d:a3:a5:83:aa:
f4:f0:04:fc:21:c5:25:94:36:3f:80:b7:bd:fc:30:b8:03:8e:
6f:ad:ba:82:e6:ff:db:dd:be:8c:ca:2a:c8:1a:9c:94:fd:b4:
10:df:2c:56:37:bd:ee:26:de:cc:39:65:2f:10:a7:9a:e3:76:
8a:4d:d9:29:1d:8e:ce:b7:0a:be:1d:95:17:d6:c4:bc:cd:04:
11:de:91:c4:57:d2:90:99:a4:d1:24:40:b9:8b:ab:be:d7:e0:
1c:33:25:68:19:42:94:41:13:68:ca:3f:b9:f0:f8:36:09:49:
2c:74:b2:d7:c0:c8:b0:f4:12:83:e1:dc:37:64:1e:a6:f8:ee:
57:94:10:af:d1:2e:17:5f:3d:7f:57:c8:3e:d6:a2:87:86:42:
16:7c:2d:8e:29:a5:37:7d:27:25:a3:80:84:c0:b6:15:81:8a:
6b:1b:9e:c9:14:47:a7:6d:40:53:3d:96:13:34:58:d3:85:77:
4f:50:c4:51:c1:d7:0a:ff:0c:1a:9b:21:58:3e:3d:a3:5d:bf:
51:3e:d2:fc
-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgISAaFWucm/zn2Z1wFYjtAmn0iKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYxMDIwMDAzMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDMzNzU2ZjBmMDViY2RmOGU3NDA0ODc5NTEzNzhhMWZlYjZmZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fcnulTeCZxit1/Qmjjb6bEErjuK
LH8LRaLdlSYmiN+0SNZ5R4tSYxQcECAxLGXsf9GZMzEV8vT6w1YUZ+mvGa3l0Qng
I3LzKfxSzPfOKx8qEpXOztGc2xRv4WSwefPG2yakkPfWbqAvquhMi7eLj/eEZDJf
md2QHIZpXv2+jJXE2GzzlvQszm1bNRGW32q4YpOA961N3JgH53e/YFnZIqkgM2K7
b0aKKd+T7iWcY8gU4/94aPHKVntI1xeZN1EufXg+Si+TVJGzLjzul1VlmpEApoVU
q/kGh4qno4lfUGEuZuA2NXzpuf4IToMxSiWRcpdwoLdDHCYm6YBtn2zAIQIDAQAB
o4IDfDCCA3gwHQYDVR0OBBYEFIAzdW8PBbzfjnQEh5UTeKH+tv/aMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvZ0ROMWJ3OEZ2Ti1PZEFTSGxSTjRvZjYyXzlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBkAYIKwYBBQUHAQcBAf8EggF/MIIBezCCAWgEAgABMIIB
YAMEAj0O4AMEAD5qQAMEA09usDAMAwQCVcqsAwQAVcquAwQAW4RUAwQBW4RWAwQB
Z8soAwQAZ8srMAwDBAJnzVQDBABnzVYwDAMEAGfPoQMEAmfPoAMEAnkufAMEAJIT
UgMEAKDuYAMEAKDuYwMEALldBAMEALlpCgMEALl2hAMEALl2hwMEALmRLAMEArmd
6DAMAwQAubBZAwQCubBYAwQAub47AwQAucQYAwQBucosAwQBuc4UMAwDBAe50YAD
BAC50YIwDAMEArnWjAMEALnWjgMEALnauTAMAwQAudsVAwQAudsWAwQBueEMAwQA
ueEPAwQAueP+AwQAueQsAwQAueQvAwQAuegqAwQAuet4AwQBuet6AwQBwbB0AwQA
wbB3AwQCwbu0AwQAwgiGAwQBwjLAAwQAwjLDAwQAwkWhAwQBw9iWAwQBw/VKAwQA
1W2dMAwDBAPZEjgDBADZEjowDQQCAAIwBwMFAyoHRYAwDQYJKoZIhvcNAQELBQAD
ggEBAEwDmxaI1ax5umHK0AVIf/XpZ0IKq/ywIUSzQTiRAZTGzX7Zi2vt8YgvSe/n
00U5eQ5to6WDqvTwBPwhxSWUNj+At738MLgDjm+tuoLm/9vdvozKKsganJT9tBDf
LFY3ve4m3sw5ZS8Qp5rjdopN2Skdjs63Cr4dlRfWxLzNBBHekcRX0pCZpNEkQLmL
q77X4BwzJWgZQpRBE2jKP7nw+DYJSSx0stfAyLD0EoPh3DdkHqb47leUEK/RLhdf
PX9XyD7WooeGQhZ8LY4ppTd9JyWjgITAthWBimsbnskUR6dtQFM9lhM0WNOFd09Q
xFHB1wr/DBqbIVg+PaNdv1E+0vw=
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:22 2026 by rpki-client