Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/fVY5gzIIZvJtdrtOozxcL9l2bBc.roa
File: fVY5gzIIZvJtdrtOozxcL9l2bBc.roa (raw, json)
Hash identifier: AGYXpBdFt+30c+3GlaAq4g0YZ4o86Ddcnqm3a8/1HNY=
Subject key identifier: 7D:56:39:83:32:08:66:F2:6D:76:BB:4E:A3:3C:5C:2F:D9:76:6C:17
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 01A19EADAB2FE43C8E4F5A481D4A8572FE94
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/fVY5gzIIZvJtdrtOozxcL9l2bBc.roa
Signing time: Mon 02 Nov 2026 23:52:24 +0000
ROA not before: Mon 02 Nov 2026 23:52:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 5.182.100.0/24 maxlen: 24
5.182.101.0/24 maxlen: 24
45.14.72.0/24 maxlen: 24
45.84.44.0/24 maxlen: 24
45.84.45.0/24 maxlen: 24
45.84.47.0/24 maxlen: 24
45.157.74.0/23 maxlen: 23
85.8.188.0/24 maxlen: 24
85.8.189.0/24 maxlen: 24
85.8.190.0/23 maxlen: 23
85.209.216.0/24 maxlen: 24
85.209.218.0/23 maxlen: 23
88.218.100.0/24 maxlen: 24
88.218.101.0/24 maxlen: 24
88.218.102.0/23 maxlen: 23
91.201.142.0/23 maxlen: 23
92.119.180.0/24 maxlen: 24
92.119.181.0/24 maxlen: 24
92.119.183.0/24 maxlen: 24
139.28.137.0/24 maxlen: 24
139.28.138.0/23 maxlen: 23
141.98.240.0/24 maxlen: 24
141.98.241.0/24 maxlen: 24
141.98.242.0/23 maxlen: 23
193.31.72.0/24 maxlen: 24
193.31.73.0/24 maxlen: 24
193.31.75.0/24 maxlen: 24
194.5.0.0/22 maxlen: 22
194.124.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:ad:ab:2f:e4:3c:8e:4f:5a:48:1d:4a:85:72:fe:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Nov 2 23:52:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d563983320866f26d76bb4ea33c5c2fd9766c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:1a:bc:e4:87:8b:02:e0:41:1a:bb:6d:39:
5e:26:50:97:52:23:d5:bb:df:c4:8f:8d:42:65:6e:
c7:c7:43:cd:0d:5d:f3:05:f8:93:c3:65:d2:99:28:
13:ad:51:35:1f:8d:53:2e:7f:0c:0a:62:d4:54:b3:
3e:06:64:cf:e7:59:ac:72:92:a2:b3:c2:80:95:ae:
bc:91:a5:c5:b0:63:da:4e:28:44:69:97:b7:d0:dd:
11:2a:d8:40:b1:a0:a6:44:d5:7b:e2:f7:92:57:01:
e8:33:0d:26:84:66:e7:0b:cf:9f:09:f8:f1:6d:13:
4d:98:74:92:ea:01:d7:ac:1d:bb:63:9a:c3:d4:2f:
f9:b1:8f:2b:e7:16:89:0b:9d:09:e0:a3:ac:e1:ae:
c9:0c:d8:91:c8:95:d6:a6:69:f8:7b:f4:d1:68:84:
6a:87:8e:9f:71:f4:5c:2d:79:cf:b3:b9:02:40:b0:
25:b9:8a:5b:9c:18:3b:a3:e3:a7:d3:d8:96:38:5e:
40:10:7a:bd:f1:36:98:84:98:ac:d8:9f:35:ed:ae:
b6:b4:57:74:94:78:bb:1c:a1:a1:43:e8:85:ff:98:
8f:04:8d:af:54:50:fc:e7:8a:09:a5:6b:a0:d5:0a:
02:d8:4e:49:f3:63:fd:fc:06:38:66:2b:3c:f7:c1:
95:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:56:39:83:32:08:66:F2:6D:76:BB:4E:A3:3C:5C:2F:D9:76:6C:17
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/fVY5gzIIZvJtdrtOozxcL9l2bBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.100.0/23
45.14.72.0/24
45.84.44.0/23
45.84.47.0/24
45.157.74.0/23
85.8.188.0/22
85.209.216.0/24
85.209.218.0/23
88.218.100.0/22
91.201.142.0/23
92.119.180.0/23
92.119.183.0/24
139.28.137.0-139.28.139.255
141.98.240.0/22
193.31.72.0/23
193.31.75.0/24
194.5.0.0/22
194.124.52.0/22
Signature Algorithm: sha256WithRSAEncryption
05:e0:40:db:b5:b3:64:93:df:8c:61:17:76:60:40:a4:33:b7:
14:34:eb:fe:71:dc:17:5b:ec:fc:59:72:c8:59:18:fe:44:cb:
c4:36:47:08:fd:38:92:71:cc:be:a1:e0:dc:e1:01:a2:38:7e:
fd:cc:4c:9e:6c:05:a2:36:62:d7:fc:5b:6f:d3:5d:06:20:a6:
1d:11:ef:0d:2f:0d:11:ef:c5:21:c5:78:2b:6d:27:b1:f3:8b:
5a:39:23:d5:60:fa:0d:04:83:37:ec:2f:35:57:30:6d:a5:c3:
e4:86:5e:2c:b6:26:e9:14:40:7f:32:cf:1a:63:91:67:a0:3a:
35:de:b6:f7:c1:05:6a:5b:91:71:51:37:47:df:d2:c5:b6:2a:
a9:2a:4d:27:06:30:43:89:c0:58:7d:bc:b5:e4:b4:96:d4:43:
e9:3f:fb:4e:d0:18:bf:b4:35:46:a8:7f:40:23:2f:a2:44:56:
43:41:6f:b3:fe:96:eb:3b:28:81:4a:82:c4:9d:16:b6:81:d5:
37:f9:11:76:a7:57:45:a1:81:21:0d:1a:4f:aa:35:68:48:21:
b7:6d:22:7e:93:92:e4:54:67:30:61:e9:56:5a:34:55:91:96:
36:b9:e5:e5:ac:43:eb:a5:0f:55:0e:d5:06:ab:37:94:43:ca:
9d:66:5f:3e
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAaGerasv5DyOT1pIHUqFcv6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx
MTliZDcwHhcNMjYxMTAyMjM1MjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDU2Mzk4MzMyMDg2NmYyNmQ3NmJiNGVhMzNjNWMyZmQ5NzY2YzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/AavOSHiwLgQRq7bTleJlCXUiPV
u9/Ej41CZW7Hx0PNDV3zBfiTw2XSmSgTrVE1H41TLn8MCmLUVLM+BmTP51mscpKi
s8KAla68kaXFsGPaTihEaZe30N0RKthAsaCmRNV74veSVwHoMw0mhGbnC8+fCfjx
bRNNmHSS6gHXrB27Y5rD1C/5sY8r5xaJC50J4KOs4a7JDNiRyJXWpmn4e/TRaIRq
h46fcfRcLXnPs7kCQLAluYpbnBg7o+On09iWOF5AEHq98TaYhJis2J817a62tFd0
lHi7HKGhQ+iF/5iPBI2vVFD854oJpWug1QoC2E5J82P9/AY4Zis898GVIwIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFH1WOYMyCGbybXa7TqM8XC/ZdmwXMB8GA1UdIwQY
MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt
YjZmMmFjODZlZjI3LzEvZlZZNWd6SUladkp0ZHJ0T296eGNMOWwyYkJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3
LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAQW2ZAME
AC0OSAMEAS1ULAMEAC1ULwMEAS2dSgMEAlUIvAMEAFXR2AMEAVXR2gMEAljaZAME
AVvJjgMEAVx3tAMEAFx3tzAMAwQAixyJAwQCixyIAwQCjWLwAwQBwR9IAwQAwR9L
AwQCwgUAAwQCwnw0MA0GCSqGSIb3DQEBCwUAA4IBAQAF4EDbtbNkk9+MYRd2YECk
M7cUNOv+cdwXW+z8WXLIWRj+RMvENkcI/TiSccy+oeDc4QGiOH79zEyebAWiNmLX
/Ftv010GIKYdEe8NLw0R78UhxXgrbSex84taOSPVYPoNBIM37C81VzBtpcPkhl4s
tibpFEB/Ms8aY5FnoDo13rb3wQVqW5FxUTdH39LFtiqpKk0nBjBDicBYfby15LSW
1EPpP/tO0Bi/tDVGqH9AIy+iRFZDQW+z/pbrOyiBSoLEnRa2gdU3+RF2p1dFoYEh
DRpPqjVoSCG3bSJ+k5LkVGcwYelWWjRVkZY2ueXlrEPrpQ9VDtUGqzeUQ8qdZl8+
-----END CERTIFICATE-----
Generated at Wed Nov 4 05:36:40 2026 by rpki-client