Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/_gPGM1J3RSHHj_JkxthUrF_L418.roa
File: _gPGM1J3RSHHj_JkxthUrF_L418.roa (raw, json)
Hash identifier: qs2zGcI0qKrnO9tNgNXEBVzL6X1HVynML9bhYCItHP8=
Subject key identifier: FE:03:C6:33:52:77:45:21:C7:8F:F2:64:C6:D8:54:AC:5F:CB:E3:5F
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A015367F0984850D61B5010A02384F284E
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/_gPGM1J3RSHHj_JkxthUrF_L418.roa
Signing time: Tue 18 Aug 2026 14:11:28 +0000
ROA not before: Tue 18 Aug 2026 14:11:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 2.59.49.0/24 maxlen: 24
31.222.248.0/24 maxlen: 24
45.15.238.0/24 maxlen: 24
45.93.80.0/24 maxlen: 24
45.132.38.0/24 maxlen: 24
45.132.128.0/24 maxlen: 24
45.132.129.0/24 maxlen: 24
45.138.213.0/24 maxlen: 24
45.138.214.0/24 maxlen: 24
45.139.52.0/24 maxlen: 24
45.139.53.0/24 maxlen: 24
45.139.55.0/24 maxlen: 24
45.139.126.0/24 maxlen: 24
45.139.127.0/24 maxlen: 24
45.140.64.0/24 maxlen: 24
45.142.39.0/24 maxlen: 24
45.146.24.0/24 maxlen: 24
45.146.25.0/24 maxlen: 24
45.146.27.0/24 maxlen: 24
45.147.12.0/24 maxlen: 24
45.147.13.0/24 maxlen: 24
45.147.14.0/24 maxlen: 24
45.147.15.0/24 maxlen: 24
45.149.129.0/24 maxlen: 24
45.152.116.0/24 maxlen: 24
45.152.117.0/24 maxlen: 24
45.159.84.0/24 maxlen: 24
45.159.87.0/24 maxlen: 24
62.68.86.0/24 maxlen: 24
91.206.68.0/24 maxlen: 24
91.236.121.0/24 maxlen: 24
94.158.189.0/24 maxlen: 24
157.22.0.0/24 maxlen: 24
157.22.1.0/24 maxlen: 24
157.22.2.0/24 maxlen: 24
157.22.3.0/24 maxlen: 24
157.22.4.0/24 maxlen: 24
157.22.5.0/24 maxlen: 24
157.22.6.0/24 maxlen: 24
157.22.7.0/24 maxlen: 24
157.22.8.0/24 maxlen: 24
157.22.9.0/24 maxlen: 24
157.22.10.0/24 maxlen: 24
157.22.11.0/24 maxlen: 24
157.22.12.0/24 maxlen: 24
157.22.13.0/24 maxlen: 24
157.22.14.0/24 maxlen: 24
157.22.15.0/24 maxlen: 24
157.22.20.0/24 maxlen: 24
157.22.21.0/24 maxlen: 24
157.22.22.0/24 maxlen: 24
157.22.23.0/24 maxlen: 24
157.22.24.0/24 maxlen: 24
157.22.25.0/24 maxlen: 24
157.22.26.0/24 maxlen: 24
157.22.27.0/24 maxlen: 24
157.22.28.0/24 maxlen: 24
157.22.29.0/24 maxlen: 24
157.22.30.0/24 maxlen: 24
157.22.31.0/24 maxlen: 24
157.22.32.0/24 maxlen: 24
157.22.33.0/24 maxlen: 24
157.22.34.0/24 maxlen: 24
157.22.35.0/24 maxlen: 24
157.22.36.0/24 maxlen: 24
157.22.37.0/24 maxlen: 24
157.22.38.0/24 maxlen: 24
157.22.39.0/24 maxlen: 24
157.22.40.0/24 maxlen: 24
157.22.41.0/24 maxlen: 24
157.22.42.0/24 maxlen: 24
157.22.43.0/24 maxlen: 24
157.22.48.0/24 maxlen: 24
157.22.49.0/24 maxlen: 24
157.22.50.0/24 maxlen: 24
157.22.51.0/24 maxlen: 24
157.22.52.0/24 maxlen: 24
157.22.53.0/24 maxlen: 24
157.22.54.0/24 maxlen: 24
157.22.55.0/24 maxlen: 24
157.22.56.0/24 maxlen: 24
157.22.57.0/24 maxlen: 24
157.22.58.0/24 maxlen: 24
157.22.59.0/24 maxlen: 24
157.22.60.0/24 maxlen: 24
157.22.61.0/24 maxlen: 24
157.22.62.0/24 maxlen: 24
157.22.63.0/24 maxlen: 24
157.22.64.0/24 maxlen: 24
157.22.65.0/24 maxlen: 24
157.22.66.0/24 maxlen: 24
157.22.67.0/24 maxlen: 24
157.22.68.0/24 maxlen: 24
157.22.70.0/24 maxlen: 24
157.22.71.0/24 maxlen: 24
157.22.76.0/24 maxlen: 24
157.22.77.0/24 maxlen: 24
157.22.78.0/24 maxlen: 24
157.22.79.0/24 maxlen: 24
157.22.80.0/24 maxlen: 24
157.22.81.0/24 maxlen: 24
157.22.82.0/24 maxlen: 24
157.22.83.0/24 maxlen: 24
157.22.84.0/24 maxlen: 24
157.22.85.0/24 maxlen: 24
157.22.86.0/24 maxlen: 24
157.22.87.0/24 maxlen: 24
157.22.88.0/24 maxlen: 24
157.22.89.0/24 maxlen: 24
157.22.90.0/24 maxlen: 24
157.22.91.0/24 maxlen: 24
157.22.92.0/24 maxlen: 24
157.22.93.0/24 maxlen: 24
157.22.94.0/24 maxlen: 24
157.22.95.0/24 maxlen: 24
157.22.96.0/24 maxlen: 24
157.22.97.0/24 maxlen: 24
157.22.98.0/24 maxlen: 24
157.22.99.0/24 maxlen: 24
157.22.104.0/24 maxlen: 24
157.22.105.0/24 maxlen: 24
157.22.106.0/24 maxlen: 24
157.22.107.0/24 maxlen: 24
157.22.108.0/24 maxlen: 24
157.22.109.0/24 maxlen: 24
157.22.110.0/24 maxlen: 24
157.22.111.0/24 maxlen: 24
157.22.112.0/24 maxlen: 24
157.22.113.0/24 maxlen: 24
157.22.114.0/24 maxlen: 24
157.22.115.0/24 maxlen: 24
157.22.116.0/24 maxlen: 24
157.22.117.0/24 maxlen: 24
157.22.118.0/24 maxlen: 24
157.22.120.0/24 maxlen: 24
157.22.121.0/24 maxlen: 24
157.22.122.0/24 maxlen: 24
157.22.123.0/24 maxlen: 24
176.56.37.0/24 maxlen: 24
176.222.56.0/24 maxlen: 24
176.222.57.0/24 maxlen: 24
176.222.59.0/24 maxlen: 24
178.212.143.0/24 maxlen: 24
185.46.175.0/24 maxlen: 24
185.92.211.0/24 maxlen: 24
185.161.79.0/24 maxlen: 24
193.31.5.0/24 maxlen: 24
193.33.66.0/24 maxlen: 24
193.56.29.0/24 maxlen: 24
193.58.170.0/24 maxlen: 24
193.201.126.0/24 maxlen: 24
194.32.238.0/24 maxlen: 24
194.32.239.0/24 maxlen: 24
194.56.180.0/24 maxlen: 24
195.64.110.0/24 maxlen: 24
195.96.146.0/24 maxlen: 24
212.18.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:36:7f:09:84:85:0d:61:b5:01:0a:02:38:4f:28:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Aug 18 14:11:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe03c63352774521c78ff264c6d854ac5fcbe35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:8c:de:10:9e:77:d4:cf:c6:b2:ac:9f:2b:
6c:14:60:55:f4:4a:09:a1:bb:29:95:ca:b8:54:8a:
a3:57:7b:3f:f6:59:e2:fc:a1:8b:9e:0f:82:b6:2f:
70:4d:db:bc:0e:2b:87:ad:cb:0c:a7:70:eb:c7:59:
ec:b9:fb:36:fa:46:50:99:64:33:fe:a1:9e:69:02:
d3:b2:7d:63:bc:87:10:53:b8:22:8d:6f:d4:c8:e6:
70:a4:3c:7f:f8:69:e6:69:92:d1:0e:05:80:d7:9c:
b5:90:47:94:3f:58:d2:f6:c8:b8:a5:66:b2:20:a6:
9a:66:1e:51:08:cc:f3:29:58:77:4c:c1:f0:b0:f8:
2f:85:83:cf:5e:fe:37:d9:14:88:d0:f8:cb:22:7e:
9f:4e:23:4d:9c:67:20:3a:77:4e:77:5c:05:0b:bf:
3d:27:33:82:e1:2b:7f:47:9a:18:c4:34:cf:34:cb:
07:1e:03:91:c8:87:62:87:a2:23:99:d3:52:a3:ff:
39:12:4b:0a:5e:2f:c8:1b:61:90:44:51:f9:9f:a6:
02:4b:17:d2:a1:4e:1f:cd:28:2e:ca:95:ce:99:14:
5f:b6:ed:fa:b7:32:dc:de:a9:c3:0a:1f:6f:88:6d:
84:c2:0e:37:29:2d:c3:f8:88:e0:92:f7:9f:37:1f:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:03:C6:33:52:77:45:21:C7:8F:F2:64:C6:D8:54:AC:5F:CB:E3:5F
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/_gPGM1J3RSHHj_JkxthUrF_L418.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.49.0/24
31.222.248.0/24
45.15.238.0/24
45.93.80.0/24
45.132.38.0/24
45.132.128.0/23
45.138.213.0-45.138.214.255
45.139.52.0/23
45.139.55.0/24
45.139.126.0/23
45.140.64.0/24
45.142.39.0/24
45.146.24.0/23
45.146.27.0/24
45.147.12.0/22
45.149.129.0/24
45.152.116.0/23
45.159.84.0/24
45.159.87.0/24
62.68.86.0/24
91.206.68.0/24
91.236.121.0/24
94.158.189.0/24
157.22.0.0/20
157.22.20.0-157.22.43.255
157.22.48.0-157.22.68.255
157.22.70.0/23
157.22.76.0-157.22.99.255
157.22.104.0-157.22.118.255
157.22.120.0/22
176.56.37.0/24
176.222.56.0/23
176.222.59.0/24
178.212.143.0/24
185.46.175.0/24
185.92.211.0/24
185.161.79.0/24
193.31.5.0/24
193.33.66.0/24
193.56.29.0/24
193.58.170.0/24
193.201.126.0/24
194.32.238.0/23
194.56.180.0/24
195.64.110.0/24
195.96.146.0/24
212.18.103.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b4:cf:38:e0:da:32:f8:2e:bb:ef:06:c2:5e:41:b0:68:63:
64:15:ec:fb:cd:b1:c7:5d:ab:df:c4:29:e8:1a:c8:03:f0:6a:
e4:09:d8:37:5f:7d:b9:32:5a:68:01:5a:7a:a9:d4:25:06:15:
bb:41:c4:5c:8b:d9:f8:b9:c3:21:43:54:a7:ff:1c:22:e4:dd:
a4:18:dc:0e:25:85:4a:70:f0:a6:75:3a:19:d3:a5:34:6c:27:
81:76:ac:62:fd:58:d3:72:0d:e6:c4:5d:a6:25:be:ea:45:d9:
11:a6:ea:ed:d6:be:4c:dd:20:3a:5b:16:d5:7e:a4:3c:b7:6f:
0e:5f:ec:1d:e9:ac:cb:75:6e:ca:b0:cb:7c:89:ec:bf:6a:cb:
42:c2:4b:17:ba:1a:32:8d:bf:9e:d7:ae:6c:5c:5e:cf:61:e2:
0c:37:56:5c:b3:7e:bb:f0:71:1e:ac:97:59:8c:17:c2:d7:3b:
b8:e9:b4:a8:bd:05:a5:a3:fe:f5:c6:80:1b:b7:ff:d0:13:77:
7d:c9:c7:86:7c:f4:03:a9:b6:f7:7e:20:30:8f:47:b6:32:77:
d6:f2:5a:3f:9d:3e:56:36:c3:c2:5e:5f:44:b7:a7:f4:7d:98:
28:0a:3b:32:91:7f:72:7b:c8:c8:be:cd:cf:c9:68:ef:a4:96:
25:2b:c7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 18:31:19 2026 by rpki-client