Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GEIRtmWq7vZeIhMFwGsPbSpIzfE.roa
File: GEIRtmWq7vZeIhMFwGsPbSpIzfE.roa (raw, json)
Hash identifier: LfUj3jpYsfMJ9Rd4X/zxQMaAeTr8WUNW1N22+7hWgSU=
Subject key identifier: 18:42:11:B6:65:AA:EE:F6:5E:22:13:05:C0:6B:0F:6D:2A:48:CD:F1
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0DFBE223CEAD5491D390FC5BECD6137B1
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GEIRtmWq7vZeIhMFwGsPbSpIzfE.roa
Signing time: Sat 26 Sep 2026 22:02:54 +0000
ROA not before: Sat 26 Sep 2026 22:02:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.105.196.0/24 maxlen: 24
62.132.116.0/24 maxlen: 24
77.67.11.0/24 maxlen: 24
77.67.27.0/24 maxlen: 24
77.67.31.0/24 maxlen: 24
77.67.91.0/24 maxlen: 24
77.67.125.0/24 maxlen: 24
81.94.104.0/21 maxlen: 24
193.141.2.0/24 maxlen: 24
194.77.24.0/23 maxlen: 24
194.77.26.0/24 maxlen: 24
194.77.56.0/22 maxlen: 24
194.122.81.0/24 maxlen: 24
194.231.128.0/22 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.132.0/24 maxlen: 24
194.231.134.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.136.0/24 maxlen: 24
194.231.139.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.203.0/24 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/22 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.208.0/24 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.210.0/24 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.220.0/22 maxlen: 24
195.21.129.0/24 maxlen: 24
195.21.144.0/24 maxlen: 24
195.21.146.0/24 maxlen: 24
212.189.23.0/24 maxlen: 24
212.189.24.0/24 maxlen: 24
212.189.26.0/24 maxlen: 24
212.189.48.0/24 maxlen: 24
212.189.75.0/24 maxlen: 24
212.189.79.0/24 maxlen: 24
212.189.80.0/24 maxlen: 24
212.189.89.0/24 maxlen: 24
212.189.90.0/24 maxlen: 24
212.189.91.0/24 maxlen: 24
212.189.95.0/24 maxlen: 24
212.189.103.0/24 maxlen: 24
212.189.110.0/24 maxlen: 24
212.221.26.0/24 maxlen: 24
212.222.112.0/24 maxlen: 24
212.222.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:be:22:3c:ea:d5:49:1d:39:0f:c5:be:cd:61:37:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 26 22:02:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=184211b665aaeef65e221305c06b0f6d2a48cdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:f4:8f:48:bf:aa:af:e1:fe:13:8a:ca:7d:
0a:c2:c2:e0:80:ea:98:bc:f6:34:82:9c:7e:65:95:
e7:e9:ad:8c:31:e5:bf:94:ec:c1:30:ba:60:ba:eb:
a1:33:e8:e1:cb:07:e4:7e:52:ed:0c:88:54:f5:15:
0f:bc:a4:4d:bd:6d:74:24:65:ea:c3:08:ef:f5:25:
13:0e:6a:b4:07:44:d3:8b:c5:49:27:70:4f:23:dd:
ae:7b:94:11:eb:a9:41:d2:bc:4b:48:f3:11:12:4e:
fe:d2:2b:91:40:07:92:bb:34:9e:2e:31:7c:2c:e5:
50:8a:52:5b:0e:77:32:4f:1a:7e:a1:6b:b9:42:bb:
3a:da:85:2a:30:cc:e9:17:cf:ac:d3:6e:e3:ff:35:
5c:f1:d1:e5:08:54:b1:41:ee:84:8e:ef:8a:ca:83:
eb:97:43:9f:d7:f8:ce:d0:13:4b:24:85:52:11:a1:
3f:74:d6:de:d1:84:77:fa:03:cd:b1:62:56:1b:5c:
9e:bd:a3:8c:7f:c7:ec:b2:ca:5e:3d:65:8a:65:9f:
52:cf:7a:69:7d:37:b5:ea:c0:17:13:46:4a:e7:84:
b3:d8:17:0e:96:d8:24:89:c1:d2:ca:cf:94:36:ac:
54:c0:aa:b9:ce:ec:4d:35:86:4a:8a:32:96:cf:3f:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:42:11:B6:65:AA:EE:F6:5E:22:13:05:C0:6B:0F:6D:2A:48:CD:F1
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GEIRtmWq7vZeIhMFwGsPbSpIzfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.196.0/24
62.132.116.0/24
77.67.11.0/24
77.67.27.0/24
77.67.31.0/24
77.67.91.0/24
77.67.125.0/24
81.94.104.0/21
193.141.2.0/24
194.77.24.0-194.77.26.255
194.77.56.0/22
194.122.81.0/24
194.231.128.0-194.231.139.255
194.231.142.0/24
194.231.150.0/24
194.231.152.0/22
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
195.21.129.0/24
195.21.144.0/24
195.21.146.0/24
212.189.23.0-212.189.24.255
212.189.26.0/24
212.189.48.0/24
212.189.75.0/24
212.189.79.0-212.189.80.255
212.189.89.0-212.189.91.255
212.189.95.0/24
212.189.103.0/24
212.189.110.0/24
212.221.26.0/24
212.222.112.0/24
212.222.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:10:f6:8b:d2:d1:93:46:aa:11:c6:f9:48:3b:1c:5a:bb:3a:
53:0d:92:13:07:7b:4a:bb:82:eb:ba:0d:27:8f:b0:14:0d:15:
28:60:65:65:32:d4:e4:90:e1:00:7a:ee:a6:bc:ce:46:5b:bc:
e6:03:2e:4a:43:55:e1:29:31:6d:df:70:07:98:2b:26:c9:f7:
19:d7:1f:c9:0c:ac:ee:2c:af:77:e0:97:40:60:0f:ec:22:d5:
f0:2d:ed:ed:c7:3c:49:ab:88:2b:77:9a:b8:20:5e:c2:d3:0a:
bc:5a:f3:2d:28:d8:c5:1a:ab:65:e0:6f:24:d6:cc:78:05:a1:
46:7a:24:1f:39:53:eb:5b:7d:d3:fd:58:e9:fd:e9:f1:a0:85:
0e:87:e8:bd:2a:00:c9:ab:a6:8d:c3:67:35:dc:24:7a:95:99:
51:21:22:aa:3f:33:6b:db:20:aa:59:33:94:cf:55:ce:f3:f5:
eb:e0:46:5f:8e:57:e2:cd:b4:37:4a:92:37:c0:8a:a3:ac:c2:
f2:a5:91:c7:89:e8:e3:4b:1a:6c:51:6e:ea:ff:60:29:76:70:
df:f4:cc:46:2e:a6:4a:b3:20:d9:27:ff:af:3f:a2:a5:29:ae:
10:20:43:c0:d4:ea:0b:01:3f:83:59:75:48:d2:18:e6:97:29:
3a:f3:1e:f6
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgISAaDfviI86tVJHTkPxb7NYTexMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwOTI2MjIwMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODQyMTFiNjY1YWFlZWY2NWUyMjEzMDVjMDZiMGY2ZDJhNDhjZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Yb0j0i/qq/h/hOKyn0KwsLggOqY
vPY0gpx+ZZXn6a2MMeW/lOzBMLpguuuhM+jhywfkflLtDIhU9RUPvKRNvW10JGXq
wwjv9SUTDmq0B0TTi8VJJ3BPI92ue5QR66lB0rxLSPMREk7+0iuRQAeSuzSeLjF8
LOVQilJbDncyTxp+oWu5Qrs62oUqMMzpF8+s027j/zVc8dHlCFSxQe6Eju+KyoPr
l0Of1/jO0BNLJIVSEaE/dNbe0YR3+gPNsWJWG1yevaOMf8fssspePWWKZZ9Sz3pp
fTe16sAXE0ZK54Sz2BcOltgkicHSys+UNqxUwKq5zuxNNYZKijKWzz+zLQIDAQAB
o4IDCjCCAwYwHQYDVR0OBBYEFBhCEbZlqu72XiITBcBrD20qSM3xMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvR0VJUnRtV3E3dlplSWhNRndHc1BiU3BJemZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHgYIKwYBBQUHAQcBAf8EggENMIIBCTCCAQUEAgABMIH+
AwQAPmnEAwQAPoR0AwQATUMLAwQATUMbAwQATUMfAwQATUNbAwQATUN9AwQDUV5o
AwQAwY0CMAwDBAPCTRgDBADCTRoDBALCTTgDBADCelEwDAMEB8LngAMEAsLniAME
AMLnjgMEAMLnlgMEAsLnmDAMAwQAwufDAwQDwufQMAwDBAHC59oDBAXC58ADBADD
FYEDBADDFZADBADDFZIwDAMEANS9FwMEANS9GAMEANS9GgMEANS9MAMEANS9SzAM
AwQA1L1PAwQA1L1QMAwDBADUvVkDBALUvVgDBADUvV8DBADUvWcDBADUvW4DBADU
3RoDBADU3nADBADU3qowDQYJKoZIhvcNAQELBQADggEBAE4Q9ovS0ZNGqhHG+Ug7
HFq7OlMNkhMHe0q7guu6DSePsBQNFShgZWUy1OSQ4QB67qa8zkZbvOYDLkpDVeEp
MW3fcAeYKybJ9xnXH8kMrO4sr3fgl0BgD+wi1fAt7e3HPEmriCt3mrggXsLTCrxa
8y0o2MUaq2XgbyTWzHgFoUZ6JB85U+tbfdP9WOn96fGghQ6H6L0qAMmrpo3DZzXc
JHqVmVEhIqo/M2vbIKpZM5TPVc7z9evgRl+OV+LNtDdKkjfAiqOswvKlkceJ6ONL
GmxRbur/YCl2cN/0zEYupkqzINkn/68/oqUprhAgQ8DU6gsBP4NZdUjSGOaXKTrz
HvY=
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:27:13 2026 by rpki-client