Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/gHXgRBqvH7IlrD2yOeoUp0U3cNg.roa
File: gHXgRBqvH7IlrD2yOeoUp0U3cNg.roa (raw, json)
Hash identifier: M4/vtgIwsY5Ra8SdnKmcOycMbgk7Ch2mnkUvyEElkJ4=
Subject key identifier: 80:75:E0:44:1A:AF:1F:B2:25:AC:3D:B2:39:EA:14:A7:45:37:70:D8
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0195AAEA88F56E20B84C7E79FBA4FC563
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/gHXgRBqvH7IlrD2yOeoUp0U3cNg.roa
Signing time: Wed 19 Aug 2026 09:29:28 +0000
ROA not before: Wed 19 Aug 2026 09:29:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 46.33.64.0/19 maxlen: 24
62.41.0.0/20 maxlen: 24
62.41.16.0/21 maxlen: 24
62.41.56.0/21 maxlen: 24
62.41.64.0/20 maxlen: 24
62.41.80.0/22 maxlen: 24
62.41.84.0/23 maxlen: 24
62.41.102.0/24 maxlen: 24
62.41.160.0/24 maxlen: 24
62.50.128.0/19 maxlen: 19
62.132.0.0/22 maxlen: 22
62.132.16.0/22 maxlen: 22
62.132.24.0/23 maxlen: 23
62.132.28.0/24 maxlen: 24
62.132.42.0/23 maxlen: 23
62.132.114.0/23 maxlen: 23
62.132.116.0/23 maxlen: 23
62.132.132.0/23 maxlen: 23
77.67.0.0/17 maxlen: 24
77.77.128.0/18 maxlen: 24
87.119.64.0/18 maxlen: 24
89.149.128.0/18 maxlen: 24
92.71.0.0/17 maxlen: 17
92.71.128.0/18 maxlen: 18
134.222.0.0/16 maxlen: 16
135.196.48.0/21 maxlen: 24
135.196.228.0/23 maxlen: 24
135.196.232.0/23 maxlen: 24
135.196.238.0/23 maxlen: 24
141.136.96.0/20 maxlen: 20
185.160.40.0/22 maxlen: 22
192.16.202.0/24 maxlen: 24
192.54.104.0/24 maxlen: 24
192.67.190.0/23 maxlen: 23
192.67.192.0/22 maxlen: 22
192.67.196.0/24 maxlen: 24
192.129.32.0/23 maxlen: 23
192.129.36.0/24 maxlen: 24
192.129.43.0/24 maxlen: 24
192.129.44.0/24 maxlen: 24
192.129.46.0/23 maxlen: 23
192.129.48.0/23 maxlen: 23
192.129.54.0/24 maxlen: 24
192.129.56.0/23 maxlen: 24
193.141.0.0/23 maxlen: 23
193.141.40.0/22 maxlen: 22
193.141.44.0/23 maxlen: 23
193.141.140.0/23 maxlen: 23
193.242.80.0/20 maxlen: 20
194.41.62.0/24 maxlen: 24
194.45.4.0/23 maxlen: 23
194.45.12.0/23 maxlen: 23
194.45.98.0/23 maxlen: 23
194.45.182.0/23 maxlen: 23
194.120.0.0/24 maxlen: 24
194.120.43.0/24 maxlen: 24
194.120.112.0/22 maxlen: 22
194.120.120.0/22 maxlen: 22
194.121.52.0/22 maxlen: 22
194.121.104.0/23 maxlen: 23
194.121.123.0/24 maxlen: 24
194.121.203.0/24 maxlen: 24
194.121.220.0/22 maxlen: 22
194.122.76.0/22 maxlen: 22
194.122.80.0/21 maxlen: 21
194.122.120.0/21 maxlen: 21
194.122.224.0/20 maxlen: 20
194.122.248.0/22 maxlen: 22
194.123.122.0/24 maxlen: 24
194.123.164.0/24 maxlen: 24
195.86.28.0/22 maxlen: 24
195.86.32.0/22 maxlen: 24
195.86.44.0/22 maxlen: 24
195.86.52.0/22 maxlen: 24
195.86.164.0/22 maxlen: 24
195.86.176.0/20 maxlen: 24
195.86.224.0/21 maxlen: 24
195.86.236.0/23 maxlen: 24
195.143.0.0/16 maxlen: 24
212.0.224.0/19 maxlen: 19
212.1.0.0/19 maxlen: 19
212.14.64.0/19 maxlen: 19
212.27.160.0/19 maxlen: 19
212.56.0.0/19 maxlen: 19
212.81.64.0/18 maxlen: 18
212.115.128.0/18 maxlen: 24
212.189.0.0/17 maxlen: 17
212.221.0.0/17 maxlen: 24
212.222.0.0/16 maxlen: 24
213.200.64.0/18 maxlen: 18
213.251.0.0/18 maxlen: 24
213.254.192.0/18 maxlen: 24
217.117.160.0/20 maxlen: 20
217.118.112.0/20 maxlen: 20
217.195.224.0/19 maxlen: 19
2001:668::/29 maxlen: 64
2001:680::/32 maxlen: 32
2001:680:12::/48 maxlen: 48
2001:680:16::/48 maxlen: 48
2001:680:19::/48 maxlen: 48
2001:680:20::/48 maxlen: 48
2a00:1750::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:5a:ae:a8:8f:56:e2:0b:84:c7:e7:9f:ba:4f:c5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 19 09:29:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8075e0441aaf1fb225ac3db239ea14a7453770d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:19:70:c5:7d:07:fd:29:cc:7b:3f:cf:72:
88:74:03:b1:48:06:b6:34:d3:38:d1:02:7a:82:05:
44:29:9f:de:6c:08:51:87:e5:9b:ac:a5:cc:33:c4:
b6:38:de:a1:5c:03:40:78:0a:cd:fa:b2:2a:69:fd:
ad:ca:46:7c:4c:15:25:dc:ec:94:2e:e0:24:61:8d:
56:d0:1b:31:9f:c8:9a:9a:70:b7:0f:56:7e:5f:3f:
26:ff:50:ad:aa:a9:db:cf:43:95:00:64:01:a0:a7:
1d:9b:e9:f6:12:bf:08:d9:8f:1f:f0:48:bc:54:aa:
4c:e0:ef:ec:41:37:bf:a0:de:53:6f:bc:9b:45:a0:
5e:69:28:86:dc:de:1f:f9:79:22:2f:19:bc:fe:83:
a0:cb:4d:6f:31:e5:82:41:fd:80:21:62:7b:56:84:
4c:ff:86:4a:bf:c4:9d:b4:1e:51:d9:6b:35:18:71:
dd:a4:50:10:9e:d0:b2:e6:d6:61:ef:70:d6:44:f1:
5a:85:df:6d:49:57:09:d9:61:bc:13:87:a1:88:57:
48:03:68:08:cd:ce:55:f0:99:a6:2f:b7:55:0f:b2:
16:50:a7:89:f4:e4:10:ba:92:ac:be:fa:be:a1:85:
ee:a7:6c:a6:70:58:68:30:26:61:1a:6e:71:a5:fb:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:75:E0:44:1A:AF:1F:B2:25:AC:3D:B2:39:EA:14:A7:45:37:70:D8
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/gHXgRBqvH7IlrD2yOeoUp0U3cNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.64.0/19
62.41.0.0-62.41.23.255
62.41.56.0-62.41.85.255
62.41.102.0/24
62.41.160.0/24
62.50.128.0/19
62.132.0.0/22
62.132.16.0/22
62.132.24.0/23
62.132.28.0/24
62.132.42.0/23
62.132.114.0-62.132.117.255
62.132.132.0/23
77.67.0.0/17
77.77.128.0/18
87.119.64.0/18
89.149.128.0/18
92.71.0.0-92.71.191.255
134.222.0.0/16
135.196.48.0/21
135.196.228.0/23
135.196.232.0/23
135.196.238.0/23
141.136.96.0/20
185.160.40.0/22
192.16.202.0/24
192.54.104.0/24
192.67.190.0-192.67.196.255
192.129.32.0/23
192.129.36.0/24
192.129.43.0-192.129.44.255
192.129.46.0-192.129.49.255
192.129.54.0/24
192.129.56.0/23
193.141.0.0/23
193.141.40.0-193.141.45.255
193.141.140.0/23
193.242.80.0/20
194.41.62.0/24
194.45.4.0/23
194.45.12.0/23
194.45.98.0/23
194.45.182.0/23
194.120.0.0/24
194.120.43.0/24
194.120.112.0/22
194.120.120.0/22
194.121.52.0/22
194.121.104.0/23
194.121.123.0/24
194.121.203.0/24
194.121.220.0/22
194.122.76.0-194.122.87.255
194.122.120.0/21
194.122.224.0/20
194.122.248.0/22
194.123.122.0/24
194.123.164.0/24
195.86.28.0-195.86.35.255
195.86.44.0/22
195.86.52.0/22
195.86.164.0/22
195.86.176.0/20
195.86.224.0/21
195.86.236.0/23
195.143.0.0/16
212.0.224.0-212.1.31.255
212.14.64.0/19
212.27.160.0/19
212.56.0.0/19
212.81.64.0/18
212.115.128.0/18
212.189.0.0/17
212.221.0.0/17
212.222.0.0/16
213.200.64.0/18
213.251.0.0/18
213.254.192.0/18
217.117.160.0/20
217.118.112.0/20
217.195.224.0/19
IPv6:
2001:668::/29
2001:680::/32
2a00:1750::/32
Signature Algorithm: sha256WithRSAEncryption
0d:c3:f4:26:4b:da:ca:38:c5:d0:ae:34:d6:d9:eb:f0:9e:f6:
c1:65:b1:65:60:ae:3c:57:0a:50:bc:2d:5c:c2:24:94:ec:2f:
05:6d:f4:50:50:b0:23:e6:21:86:d7:f1:44:86:e1:37:bb:aa:
57:68:ca:dd:48:82:ba:6b:ba:e6:1f:74:ad:62:c4:75:9a:f9:
01:c0:fa:8c:ca:d3:7b:26:29:86:5c:cf:de:6e:d1:0a:0c:b1:
6a:2c:89:f5:6b:f8:a3:fc:b7:94:45:6a:90:95:64:6d:e0:0a:
8a:fd:20:f2:cf:d5:4a:47:9f:11:73:de:b5:20:8f:24:4f:6a:
53:00:22:0f:ef:15:d4:57:dd:f3:39:21:26:bd:4b:74:f7:f7:
82:85:96:81:c8:16:6a:cb:b5:f2:91:e7:d7:4e:1f:40:d5:64:
fe:b1:d8:8c:d4:a0:fa:16:c3:53:61:07:dc:a6:fc:db:62:82:
82:20:47:23:5e:09:62:b4:01:71:77:d4:a5:d9:f5:07:7f:9d:
d1:55:0b:a9:1d:05:e6:7e:36:47:fd:fb:a8:62:6f:67:35:95:
b2:03:13:2e:b6:0b:4f:ff:83:03:f4:97:02:c9:57:5e:3a:70:
c7:c7:30:f8:20:ba:c9:60:04:8f:4e:0d:e1:dc:a0:43:cc:29:
9c:89:f9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:49:15 2026 by rpki-client