Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/gknM0VHXQ3mogQHBPRSu7xoEJHY.roa
File: gknM0VHXQ3mogQHBPRSu7xoEJHY.roa (raw, json)
Hash identifier: JIrP6/pzO0ffljPwBBEio4saGYwu+69HEZpQt7jZOkU=
Subject key identifier: 82:49:CC:D1:51:D7:43:79:A8:81:01:C1:3D:14:AE:EF:1A:04:24:76
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019F935514950755F02F9446FECDD33503A7
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/gknM0VHXQ3mogQHBPRSu7xoEJHY.roa
Signing time: Fri 24 Jul 2026 08:54:14 +0000
ROA not before: Fri 24 Jul 2026 08:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136787
IP address blocks: 186.247.46.0/24 maxlen: 24
186.247.75.0/24 maxlen: 24
186.247.76.0/24 maxlen: 24
186.247.77.0/24 maxlen: 24
186.247.79.0/24 maxlen: 24
186.247.160.0/24 maxlen: 24
186.247.161.0/24 maxlen: 24
186.247.162.0/24 maxlen: 24
186.247.164.0/24 maxlen: 24
186.247.165.0/24 maxlen: 24
186.247.166.0/24 maxlen: 24
186.247.167.0/24 maxlen: 24
186.247.168.0/24 maxlen: 24
186.247.171.0/24 maxlen: 24
186.247.179.0/24 maxlen: 24
186.247.180.0/24 maxlen: 24
186.247.183.0/24 maxlen: 24
186.247.188.0/24 maxlen: 24
187.13.3.0/24 maxlen: 24
187.13.4.0/24 maxlen: 24
187.13.17.0/24 maxlen: 24
187.13.20.0/24 maxlen: 24
187.13.22.0/24 maxlen: 24
187.13.23.0/24 maxlen: 24
187.13.24.0/24 maxlen: 24
187.13.25.0/24 maxlen: 24
187.13.27.0/24 maxlen: 24
187.13.29.0/24 maxlen: 24
187.13.128.0/24 maxlen: 24
187.13.130.0/24 maxlen: 24
187.13.131.0/24 maxlen: 24
187.13.134.0/24 maxlen: 24
187.13.135.0/24 maxlen: 24
187.13.136.0/24 maxlen: 24
187.13.137.0/24 maxlen: 24
187.13.138.0/24 maxlen: 24
187.13.139.0/24 maxlen: 24
187.13.140.0/24 maxlen: 24
187.13.141.0/24 maxlen: 24
187.13.142.0/24 maxlen: 24
187.13.143.0/24 maxlen: 24
187.13.176.0/24 maxlen: 24
187.13.179.0/24 maxlen: 24
187.13.180.0/24 maxlen: 24
187.13.187.0/24 maxlen: 24
187.13.188.0/24 maxlen: 24
187.13.191.0/24 maxlen: 24
187.13.192.0/24 maxlen: 24
187.13.193.0/24 maxlen: 24
187.13.194.0/24 maxlen: 24
187.13.211.0/24 maxlen: 24
187.13.212.0/24 maxlen: 24
187.13.217.0/24 maxlen: 24
187.13.218.0/24 maxlen: 24
187.13.241.0/24 maxlen: 24
187.13.242.0/24 maxlen: 24
187.13.251.0/24 maxlen: 24
187.14.48.0/24 maxlen: 24
187.14.49.0/24 maxlen: 24
187.14.50.0/24 maxlen: 24
187.14.51.0/24 maxlen: 24
187.14.53.0/24 maxlen: 24
187.14.54.0/24 maxlen: 24
187.14.96.0/24 maxlen: 24
187.14.97.0/24 maxlen: 24
187.14.98.0/24 maxlen: 24
187.14.110.0/24 maxlen: 24
187.14.111.0/24 maxlen: 24
187.14.112.0/24 maxlen: 24
187.14.113.0/24 maxlen: 24
187.14.124.0/24 maxlen: 24
187.14.125.0/24 maxlen: 24
187.14.126.0/24 maxlen: 24
187.14.226.0/24 maxlen: 24
187.14.229.0/24 maxlen: 24
187.14.236.0/24 maxlen: 24
187.14.242.0/24 maxlen: 24
187.14.243.0/24 maxlen: 24
187.14.246.0/24 maxlen: 24
187.14.247.0/24 maxlen: 24
187.15.104.0/24 maxlen: 24
187.15.106.0/24 maxlen: 24
187.15.109.0/24 maxlen: 24
187.15.111.0/24 maxlen: 24
187.15.113.0/24 maxlen: 24
187.15.114.0/24 maxlen: 24
187.15.115.0/24 maxlen: 24
187.15.120.0/24 maxlen: 24
187.15.130.0/24 maxlen: 24
187.15.137.0/24 maxlen: 24
187.15.138.0/24 maxlen: 24
187.15.145.0/24 maxlen: 24
187.15.158.0/24 maxlen: 24
187.15.163.0/24 maxlen: 24
187.15.164.0/24 maxlen: 24
187.15.165.0/24 maxlen: 24
187.15.169.0/24 maxlen: 24
187.15.172.0/24 maxlen: 24
187.15.173.0/24 maxlen: 24
187.40.37.0/24 maxlen: 24
187.40.38.0/24 maxlen: 24
187.40.40.0/24 maxlen: 24
187.40.41.0/24 maxlen: 24
187.40.42.0/24 maxlen: 24
187.40.43.0/24 maxlen: 24
187.40.44.0/24 maxlen: 24
187.40.47.0/24 maxlen: 24
187.40.48.0/24 maxlen: 24
187.40.230.0/24 maxlen: 24
187.40.244.0/24 maxlen: 24
187.40.248.0/24 maxlen: 24
187.40.249.0/24 maxlen: 24
187.40.250.0/24 maxlen: 24
187.40.251.0/24 maxlen: 24
187.40.252.0/24 maxlen: 24
187.40.253.0/24 maxlen: 24
187.40.254.0/24 maxlen: 24
187.40.255.0/24 maxlen: 24
2a13:240:100::/40 maxlen: 40
2a13:240:200::/40 maxlen: 40
2a13:240:400::/40 maxlen: 40
2a13:240:600::/40 maxlen: 40
2a13:240:800::/40 maxlen: 40
2a13:240:a00::/40 maxlen: 40
2a13:240:c00::/40 maxlen: 40
2a13:240:d00::/40 maxlen: 40
2a13:240:e00::/40 maxlen: 40
2a13:240:f00::/40 maxlen: 40
2a13:240:1000::/40 maxlen: 40
2a13:240:1100::/40 maxlen: 40
2a13:240:1200::/40 maxlen: 40
2a13:240:1300::/40 maxlen: 40
2a13:240:1400::/40 maxlen: 40
2a13:240:1800::/40 maxlen: 40
2a13:240:1900::/40 maxlen: 40
2a13:240:1a00::/40 maxlen: 40
2a13:240:1d00::/40 maxlen: 40
2a13:240:1e00::/40 maxlen: 40
2a13:240:1f00::/40 maxlen: 40
2a13:240:2000::/40 maxlen: 40
2a13:240:2200::/40 maxlen: 40
2a13:240:2300::/40 maxlen: 40
2a13:240:2500::/40 maxlen: 40
2a13:240:2700::/40 maxlen: 40
2a13:240:2a00::/40 maxlen: 40
2a13:240:2d00::/40 maxlen: 40
2a13:240:2f00::/40 maxlen: 40
2a13:240:3400::/40 maxlen: 40
2a13:240:3900::/40 maxlen: 40
2a13:240:3a00::/40 maxlen: 40
2a13:240:3b00::/40 maxlen: 40
2a13:240:3c00::/40 maxlen: 40
2a13:240:3e00::/40 maxlen: 40
2a13:240:3f00::/40 maxlen: 40
2a13:240:8000::/40 maxlen: 40
2a13:240:8888::/48 maxlen: 48
2a13:240:9999::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:55:14:95:07:55:f0:2f:94:46:fe:cd:d3:35:03:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jul 24 08:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8249ccd151d74379a88101c13d14aeef1a042476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:32:84:eb:23:2d:fd:7e:74:34:dc:b6:6d:
95:d9:f6:ae:0e:19:61:9f:7a:c5:1a:13:d4:4c:74:
4c:3a:94:9f:12:0b:6f:11:6b:13:08:93:da:5f:39:
85:bc:45:c7:3e:b8:40:6b:ed:da:12:84:c2:21:fd:
e4:40:3b:21:01:fe:e5:de:4d:99:5f:a4:ab:21:2a:
24:0a:19:b5:18:a0:f8:cd:22:0e:c6:a8:2e:74:bf:
5e:a7:e1:ac:d2:8f:21:90:a0:35:54:9c:ec:94:42:
13:73:5a:90:e4:9b:8d:94:91:02:c1:0a:df:34:6f:
f5:af:53:30:b9:18:b4:39:5a:73:87:22:b0:62:4a:
34:a3:23:36:08:ee:43:9c:6a:69:c7:7b:f2:67:92:
7a:8e:81:9f:b2:de:82:84:bc:83:87:68:40:ab:0a:
4a:97:0b:82:47:d2:9f:5c:11:47:76:5c:c6:e0:3b:
7d:0a:f8:0b:b2:d3:3c:59:48:16:1a:31:a9:4a:d0:
43:98:b6:ae:f5:6a:ac:68:7f:35:29:18:71:b5:5a:
3f:43:79:95:09:fb:d1:fe:7b:42:9a:f1:bb:e8:ea:
17:79:c2:b0:a2:14:18:97:8a:dd:51:3e:95:a8:28:
2a:bd:a4:f6:03:72:14:f4:02:9b:50:94:72:f8:06:
6e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:49:CC:D1:51:D7:43:79:A8:81:01:C1:3D:14:AE:EF:1A:04:24:76
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/gknM0VHXQ3mogQHBPRSu7xoEJHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.247.46.0/24
186.247.75.0-186.247.77.255
186.247.79.0/24
186.247.160.0-186.247.162.255
186.247.164.0-186.247.168.255
186.247.171.0/24
186.247.179.0-186.247.180.255
186.247.183.0/24
186.247.188.0/24
187.13.3.0-187.13.4.255
187.13.17.0/24
187.13.20.0/24
187.13.22.0-187.13.25.255
187.13.27.0/24
187.13.29.0/24
187.13.128.0/24
187.13.130.0/23
187.13.134.0-187.13.143.255
187.13.176.0/24
187.13.179.0-187.13.180.255
187.13.187.0-187.13.188.255
187.13.191.0-187.13.194.255
187.13.211.0-187.13.212.255
187.13.217.0-187.13.218.255
187.13.241.0-187.13.242.255
187.13.251.0/24
187.14.48.0/22
187.14.53.0-187.14.54.255
187.14.96.0-187.14.98.255
187.14.110.0-187.14.113.255
187.14.124.0-187.14.126.255
187.14.226.0/24
187.14.229.0/24
187.14.236.0/24
187.14.242.0/23
187.14.246.0/23
187.15.104.0/24
187.15.106.0/24
187.15.109.0/24
187.15.111.0/24
187.15.113.0-187.15.115.255
187.15.120.0/24
187.15.130.0/24
187.15.137.0-187.15.138.255
187.15.145.0/24
187.15.158.0/24
187.15.163.0-187.15.165.255
187.15.169.0/24
187.15.172.0/23
187.40.37.0-187.40.38.255
187.40.40.0-187.40.44.255
187.40.47.0-187.40.48.255
187.40.230.0/24
187.40.244.0/24
187.40.248.0/21
IPv6:
2a13:240:100::-2a13:240:2ff:ffff:ffff:ffff:ffff:ffff
2a13:240:400::/40
2a13:240:600::/40
2a13:240:800::/40
2a13:240:a00::/40
2a13:240:c00::-2a13:240:14ff:ffff:ffff:ffff:ffff:ffff
2a13:240:1800::-2a13:240:1aff:ffff:ffff:ffff:ffff:ffff
2a13:240:1d00::-2a13:240:20ff:ffff:ffff:ffff:ffff:ffff
2a13:240:2200::/39
2a13:240:2500::/40
2a13:240:2700::/40
2a13:240:2a00::/40
2a13:240:2d00::/40
2a13:240:2f00::/40
2a13:240:3400::/40
2a13:240:3900::-2a13:240:3cff:ffff:ffff:ffff:ffff:ffff
2a13:240:3e00::/39
2a13:240:8000::/40
2a13:240:8888::/48
2a13:240:9999::/48
Signature Algorithm: sha256WithRSAEncryption
8d:95:9c:21:86:7e:7e:4e:fc:8e:2c:a9:29:cd:b9:0b:97:6c:
22:f6:e8:45:19:35:ba:01:48:c7:c9:98:45:a2:64:eb:5f:eb:
1c:29:e1:b8:75:23:96:7b:ab:56:29:f9:6b:97:e6:ae:d0:3e:
28:8a:03:fa:65:ad:cd:58:36:7e:d8:11:9d:b1:11:a6:74:9b:
c4:d5:4d:80:de:7b:d9:d9:f8:72:8a:aa:3b:23:5d:a7:82:2d:
b7:89:c6:d7:d7:7b:e7:1b:36:af:72:9f:30:db:7b:f5:ed:66:
64:c4:55:2e:63:5c:b0:1f:64:02:d2:5c:d1:ac:5d:71:75:e1:
30:4f:89:13:c0:fd:f1:07:74:dc:03:5a:6e:88:a4:40:b3:a6:
f4:07:36:f8:1c:01:3f:67:c2:b7:df:a7:71:f1:c1:ef:51:2f:
36:bd:84:65:7d:77:91:dd:92:ae:4e:70:21:fb:cc:df:7a:3d:
16:31:eb:85:36:ba:91:fe:b4:4d:f9:9d:ef:04:26:75:74:14:
28:b5:c4:e2:64:7a:a2:51:1e:91:0e:79:4b:1f:09:b9:1f:64:
a5:37:65:6f:a3:c1:32:f5:1c:3d:f2:4c:5b:85:7b:c0:24:8f:
46:cd:a5:77:04:72:4b:03:d6:e6:37:c7:59:4d:ca:5e:4d:b3:
d9:21:f7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:57:34 2026 by rpki-client