Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/GQQeYzbK-65JXJ0qZBevgaGoyY0.roa
File: GQQeYzbK-65JXJ0qZBevgaGoyY0.roa (raw, json)
Hash identifier: ueRs74LWWLLfYYUkG03euaJnzuy8JLxTrrKv59F6yy8=
Subject key identifier: 19:04:1E:63:36:CA:FB:AE:49:5C:9D:2A:64:17:AF:81:A1:A8:C9:8D
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 01A062DF5D484735B4D8D82F7F04BC81099D
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/GQQeYzbK-65JXJ0qZBevgaGoyY0.roa
Signing time: Wed 02 Sep 2026 16:06:40 +0000
ROA not before: Wed 02 Sep 2026 16:06:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24940
IP address blocks: 2.28.0.0/16 maxlen: 24
2.29.0.0/16 maxlen: 24
5.9.0.0/16 maxlen: 24
5.75.128.0/17 maxlen: 24
5.161.0.0/16 maxlen: 24
23.88.0.0/17 maxlen: 24
37.27.0.0/16 maxlen: 24
46.4.0.0/16 maxlen: 24
46.62.128.0/17 maxlen: 24
46.224.0.0/15 maxlen: 24
49.12.0.0/16 maxlen: 24
49.13.0.0/16 maxlen: 24
62.238.0.0/17 maxlen: 24
65.21.0.0/16 maxlen: 24
65.108.0.0/16 maxlen: 24
65.109.0.0/16 maxlen: 24
77.42.0.0/17 maxlen: 24
78.46.0.0/15 maxlen: 24
85.10.192.0/18 maxlen: 24
88.99.0.0/16 maxlen: 24
88.198.0.0/16 maxlen: 24
89.167.0.0/17 maxlen: 24
91.98.0.0/16 maxlen: 24
91.99.0.0/16 maxlen: 24
91.107.128.0/17 maxlen: 24
94.130.0.0/16 maxlen: 24
95.216.0.0/16 maxlen: 24
95.217.0.0/16 maxlen: 24
116.202.0.0/16 maxlen: 24
116.203.0.0/16 maxlen: 24
128.140.0.0/17 maxlen: 24
135.181.0.0/16 maxlen: 24
138.199.128.0/17 maxlen: 24
142.132.128.0/17 maxlen: 24
157.90.0.0/16 maxlen: 24
157.180.0.0/17 maxlen: 24
159.69.0.0/16 maxlen: 24
162.55.0.0/16 maxlen: 16
167.233.0.0/16 maxlen: 24
167.235.0.0/16 maxlen: 24
168.119.0.0/16 maxlen: 24
176.9.0.0/16 maxlen: 24
178.63.0.0/16 maxlen: 24
178.104.0.0/15 maxlen: 24
185.12.64.0/22 maxlen: 24
188.34.128.0/17 maxlen: 24
188.40.0.0/16 maxlen: 24
188.245.0.0/16 maxlen: 24
195.201.0.0/16 maxlen: 24
204.168.128.0/17 maxlen: 24
213.133.96.0/19 maxlen: 19
213.239.192.0/18 maxlen: 18
2a01:4f8::/32 maxlen: 48
2a01:4f9::/32 maxlen: 48
2a01:4ff:ff01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:df:5d:48:47:35:b4:d8:d8:2f:7f:04:bc:81:09:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Sep 2 16:06:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19041e6336cafbae495c9d2a6417af81a1a8c98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:63:77:88:78:0b:71:59:61:d0:10:72:52:
9a:e7:6a:29:74:5d:07:98:e4:2c:31:91:69:40:1c:
bf:63:cf:92:01:ce:f6:d9:6f:90:ec:fe:93:51:d8:
07:83:59:9c:d7:9d:d4:cf:d6:70:fc:f3:62:56:64:
c9:65:7f:5a:59:b7:47:52:44:d8:b7:13:e3:be:cc:
34:0f:b9:59:b0:e7:de:f2:3c:ad:c8:3a:2d:f3:94:
ce:fb:8f:41:b9:29:b4:fa:1d:a1:73:d3:a4:99:fe:
39:e9:a5:c5:2a:83:f6:da:7c:ff:14:4a:c7:ce:d2:
4f:2c:7d:22:fc:c0:3d:ba:6a:d8:4a:dc:90:f0:4b:
61:39:90:c8:d3:ce:b2:cf:b8:24:0b:01:b1:d2:4c:
e9:33:98:13:12:c3:e7:52:2c:ea:e3:da:25:a5:ca:
34:9e:44:9a:dd:30:14:96:f9:60:92:aa:d7:cb:5f:
09:ef:83:b9:94:49:f9:2f:70:9b:39:08:07:fd:83:
95:61:65:65:31:2c:79:dd:a8:09:9b:ce:3a:ee:58:
e2:34:29:0b:b9:b6:45:dd:7b:cb:0a:2b:5a:e0:18:
e2:96:34:8e:3b:df:50:95:1e:40:12:fc:e2:fa:b1:
51:51:ab:9f:42:56:87:3b:05:e0:b4:c8:fb:bb:7a:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:04:1E:63:36:CA:FB:AE:49:5C:9D:2A:64:17:AF:81:A1:A8:C9:8D
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/GQQeYzbK-65JXJ0qZBevgaGoyY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.28.0.0/15
5.9.0.0/16
5.75.128.0/17
5.161.0.0/16
23.88.0.0/17
37.27.0.0/16
46.4.0.0/16
46.62.128.0/17
46.224.0.0/15
49.12.0.0/15
62.238.0.0/17
65.21.0.0/16
65.108.0.0/15
77.42.0.0/17
78.46.0.0/15
85.10.192.0/18
88.99.0.0/16
88.198.0.0/16
89.167.0.0/17
91.98.0.0/15
91.107.128.0/17
94.130.0.0/16
95.216.0.0/15
116.202.0.0/15
128.140.0.0/17
135.181.0.0/16
138.199.128.0/17
142.132.128.0/17
157.90.0.0/16
157.180.0.0/17
159.69.0.0/16
162.55.0.0/16
167.233.0.0/16
167.235.0.0/16
168.119.0.0/16
176.9.0.0/16
178.63.0.0/16
178.104.0.0/15
185.12.64.0/22
188.34.128.0/17
188.40.0.0/16
188.245.0.0/16
195.201.0.0/16
204.168.128.0/17
213.133.96.0/19
213.239.192.0/18
IPv6:
2a01:4f8::/31
2a01:4ff:ff01::/48
Signature Algorithm: sha256WithRSAEncryption
61:d6:f5:f2:3c:bd:0f:5b:78:79:e3:46:9f:32:8a:9e:18:02:
8b:ea:93:b4:14:62:45:99:76:33:c2:e2:17:1a:05:59:6a:14:
7d:c1:ba:67:1b:ce:a9:3c:fc:ad:92:42:cb:59:44:0a:9f:be:
07:05:1f:82:37:96:76:11:78:5b:f0:90:1f:bb:f2:b9:44:0f:
6d:5b:75:ad:8a:2b:6f:3c:48:78:ae:79:b1:2f:69:be:07:18:
00:33:15:19:de:4b:9b:2a:cb:ad:78:68:e6:ab:de:0a:b6:8e:
c6:02:a1:a9:95:23:02:ba:ed:aa:44:d1:c9:ad:c0:33:f0:6e:
8d:ed:44:49:79:25:3f:e7:a0:99:10:cf:a6:6b:44:1a:1c:17:
9b:f6:fb:81:98:48:02:a1:3e:03:e6:47:ee:80:00:f2:b2:0a:
86:dc:b3:d4:70:df:4c:76:f5:a8:a5:50:01:65:8a:0f:46:5c:
f7:c0:7d:61:6b:42:3f:51:12:36:1d:1f:15:e6:5b:ab:e4:ab:
51:13:18:0f:9f:e2:6c:48:7b:bf:d3:6e:34:93:6d:d8:10:65:
12:91:69:d4:c8:56:e3:d2:3c:a9:b2:77:9c:b6:06:9f:ea:ca:
80:db:30:ee:d7:f6:3f:60:d7:c0:1f:1f:d6:f0:e1:5c:2e:b0:
89:6e:4c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:18 2026 by rpki-client