Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/guB0mEGEHeEisdoDmumUOGMyplI.roa
File: guB0mEGEHeEisdoDmumUOGMyplI.roa (raw, json)
Hash identifier: exVwP8NxKee5T4OLeyQX++Wtk5vZ8+P8wvvxk5XRlaE=
Subject key identifier: 82:E0:74:98:41:84:1D:E1:22:B1:DA:03:9A:E9:94:38:63:32:A6:52
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019F3C73FAEDD03DA8F8E0406F6056053D6D
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/guB0mEGEHeEisdoDmumUOGMyplI.roa
Signing time: Tue 07 Jul 2026 12:01:01 +0000
ROA not before: Tue 07 Jul 2026 12:01:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34665
IP address blocks: 5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.10.0/24 maxlen: 24
5.8.11.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.16.0/24 maxlen: 24
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/24 maxlen: 24
5.8.49.0/24 maxlen: 24
5.8.50.0/23 maxlen: 23
5.8.50.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.8.52.0/22 maxlen: 22
5.8.52.0/23 maxlen: 23
5.8.52.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.65.0/24 maxlen: 24
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.4.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.101.6.0/24 maxlen: 24
5.101.7.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.101.64.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.90.0/23 maxlen: 23
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.46.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.51.0/24 maxlen: 24
5.188.204.0/23 maxlen: 23
5.188.208.0/23 maxlen: 23
5.188.210.0/24 maxlen: 24
5.188.211.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.189.248.0/22 maxlen: 24
31.44.188.0/22 maxlen: 32
31.184.192.0/22 maxlen: 22
31.184.192.0/23 maxlen: 23
31.184.192.0/24 maxlen: 24
31.184.193.0/24 maxlen: 24
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.196.0/24 maxlen: 24
31.184.197.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.198.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
31.184.240.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.56.0/22 maxlen: 22
37.139.56.0/23 maxlen: 23
37.139.56.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.58.0/24 maxlen: 24
37.139.59.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.8.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.28.0/22 maxlen: 22
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/23 maxlen: 23
46.161.50.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.50.0/23 maxlen: 23
91.243.50.0/24 maxlen: 24
91.243.51.0/24 maxlen: 24
91.243.52.0/22 maxlen: 22
91.243.56.0/22 maxlen: 22
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.2.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
146.185.223.0/24 maxlen: 24
146.185.224.0/21 maxlen: 21
188.143.232.0/22 maxlen: 22
188.143.232.0/23 maxlen: 23
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:73:fa:ed:d0:3d:a8:f8:e0:40:6f:60:56:05:3d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jul 7 12:01:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82e0749841841de122b1da039ae994386332a652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:8d:b7:5c:fc:01:1f:b2:97:79:ce:ac:4b:
ec:d4:b7:7b:a6:f2:7e:5d:79:b3:8a:ed:d4:5b:39:
f7:a9:1f:80:83:72:4f:75:e2:1a:91:3d:22:a1:53:
1d:fe:99:c1:a8:9d:ff:51:05:9c:74:dd:02:32:94:
21:1d:8a:3b:dd:04:09:70:28:72:2a:2d:86:dc:a2:
ec:0a:59:51:90:a1:30:e9:4f:6c:01:20:a5:37:3c:
f8:c0:27:cb:71:07:82:66:c6:bc:e4:f0:70:4c:0b:
dc:d0:f8:01:be:e4:a4:33:b9:3b:c8:bb:58:8d:8a:
83:c5:ef:82:8f:0b:f6:d1:58:70:6c:72:d6:e8:6d:
c5:a8:72:53:c0:55:4f:3b:cd:8a:e5:c0:73:a6:d3:
6d:e0:14:48:69:51:da:be:e7:43:87:91:11:76:3d:
8b:9e:0d:20:19:e5:8b:de:f5:77:20:27:8f:5f:fe:
e5:e9:60:72:fe:3e:dc:e5:9b:07:a7:b7:6a:76:48:
ac:26:39:c8:9d:4f:94:45:7b:14:6f:70:33:05:a1:
e5:ce:8a:b2:c8:a0:ac:3d:12:41:c6:1d:77:c5:0d:
54:f3:24:c0:06:94:a8:cf:57:63:40:9e:f2:93:47:
e5:2a:66:94:33:6f:07:ec:24:ef:35:f7:3d:96:55:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E0:74:98:41:84:1D:E1:22:B1:DA:03:9A:E9:94:38:63:32:A6:52
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/guB0mEGEHeEisdoDmumUOGMyplI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0-5.8.16.255
5.8.48.0/21
5.8.60.0/23
5.8.65.0/24
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.90.0/23
5.188.44.0-5.188.49.255
5.188.51.0/24
5.188.204.0/23
5.188.208.0/22
5.188.223.0/24
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.188.0/22
31.184.192.0/21
31.184.238.0-31.184.241.255
31.184.243.0/24
37.9.48.0/24
37.139.53.0/24
37.139.56.0/22
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.20.0/22
46.161.28.0-46.161.35.255
46.161.44.0-46.161.51.255
91.243.32.0/22
91.243.48.0-91.243.61.255
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
63:51:64:84:f8:e6:b2:7e:5f:f1:19:fe:90:ac:29:e7:70:b2:
3a:ac:de:fa:25:70:75:ce:d4:f8:c5:99:a2:7b:68:93:fa:e5:
c0:55:12:0e:d4:63:16:10:9e:3a:ae:b3:bd:6f:ce:fe:1d:68:
53:d4:37:d6:5b:c2:c2:3b:7c:17:bd:ba:90:fd:50:e2:f5:f0:
8d:39:ff:ca:bf:0a:2d:4d:ac:40:61:cd:9e:6c:d8:24:3e:b5:
f1:2a:15:5b:a8:85:1d:e0:8b:06:a0:6e:83:a7:a8:43:93:1b:
c1:16:24:64:69:f8:5c:76:d2:97:61:65:47:4c:ae:0d:dc:25:
5e:1d:02:21:38:dc:3e:0e:fc:56:22:1f:bf:2b:29:05:30:94:
38:2c:4f:24:84:96:41:92:f3:35:64:a8:a2:ee:fc:e1:aa:f9:
55:ba:5e:b0:92:f1:fa:b2:db:74:46:05:81:05:20:d8:42:2e:
66:43:42:c0:c9:bb:c4:70:5e:ef:d9:8f:a2:70:3c:bb:0d:30:
d1:fc:72:de:56:4b:64:4e:73:2f:b1:32:dc:5e:26:ef:e4:de:
1e:2d:a2:3b:18:94:f4:0f:6e:ba:35:88:bf:45:8e:6f:a6:fe:
d9:d2:4a:44:1a:12:ed:cd:a7:0f:c8:68:33:d2:01:3a:ef:c9:
d3:3f:7f:78
-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgISAZ88c/rt0D2o+OBAb2BWBT1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjYwNzA3MTIwMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmUwNzQ5ODQxODQxZGUxMjJiMWRhMDM5YWU5OTQzODYzMzJhNjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPuNt1z8AR+yl3nOrEvs1Ld7pvJ+
XXmziu3UWzn3qR+Ag3JPdeIakT0ioVMd/pnBqJ3/UQWcdN0CMpQhHYo73QQJcChy
Ki2G3KLsCllRkKEw6U9sASClNzz4wCfLcQeCZsa85PBwTAvc0PgBvuSkM7k7yLtY
jYqDxe+Cjwv20VhwbHLW6G3FqHJTwFVPO82K5cBzptNt4BRIaVHavudDh5ERdj2L
ng0gGeWL3vV3ICePX/7l6WBy/j7c5ZsHp7dqdkisJjnInU+URXsUb3AzBaHlzoqy
yKCsPRJBxh13xQ1U8yTABpSoz1djQJ7yk0flKmaUM28H7CTvNfc9llWhPwIDAQAB
o4IDMjCCAy4wHQYDVR0OBBYEFILgdJhBhB3hIrHaA5rplDhjMqZSMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvZ3VCMG1FR0VIZUVpc2RvRG11bVVPR015cGxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBRgYIKwYBBQUHAQcBAf8EggE1MIIBMTCCARoEAgABMIIB
EjAMAwQDBQgIAwQABQgQAwQDBQgwAwQBBQg8AwQABQhBAwQDBWUAAwQCBWUgAwQC
BWVAAwQBBWVaMAwDBAIFvCwDBAEFvDADBAAFvDMDBAEFvMwDBAIFvNADBAAFvN8w
DAMEAAW86QMEAgW86AMEAgW9+AMEAh8svAMEAx+4wDAMAwQBH7juAwQBH7jwAwQA
H7jzAwQAJQkwAwQAJYs1AwQCJYs4AwQBLqECAwQALqEIAwQALqEKAwQBLqEOAwQC
LqEUMAwDBAIuoRwDBAIuoSAwDAMEAi6hLAMEAi6hMAMEAlvzIDAMAwQEW/MwAwQB
W/M8AwQCX9cAMAwDBACSud8DBAOSueADBAK8j+gDBAHDAvAwEQQCAAIwCwMJBioA
HXgBAAHAMA0GCSqGSIb3DQEBCwUAA4IBAQBjUWSE+Oayfl/xGf6QrCnncLI6rN76
JXB1ztT4xZmie2iT+uXAVRIO1GMWEJ46rrO9b87+HWhT1DfWW8LCO3wXvbqQ/VDi
9fCNOf/KvwotTaxAYc2ebNgkPrXxKhVbqIUd4IsGoG6Dp6hDkxvBFiRkafhcdtKX
YWVHTK4N3CVeHQIhONw+DvxWIh+/KykFMJQ4LE8khJZBkvM1ZKii7vzhqvlVul6w
kvH6stt0RgWBBSDYQi5mQ0LAybvEcF7v2Y+icDy7DTDR/HLeVktkTnMvsTLcXibv
5N4eLaI7GJT0D266NYi/RY5vpv7Z0kpEGhLtzacPyGgz0gE678nTP394
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:13 2026 by rpki-client