Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-GdDat8mXAb4wsBcx4jAOHdy8fk.roa
File: 1-GdDat8mXAb4wsBcx4jAOHdy8fk.roa (raw, json)
Hash identifier: OfbXXs/L8OyHJ+erXs7+Zcgs1/zC2IPF4nMEHECPxZo=
Subject key identifier: F8:67:43:6A:DF:26:5C:06:F8:C2:C0:5C:C7:88:C0:38:77:72:F1:F9
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019DAADEE34EC28A0BE2431601FEDE6FC89B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-GdDat8mXAb4wsBcx4jAOHdy8fk.roa
Signing time: Mon 20 Apr 2026 12:30:26 +0000
ROA not before: Mon 20 Apr 2026 12:30:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52116
IP address blocks: 77.105.11.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.61.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
185.47.88.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
188.255.130.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.226.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.246.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 May 2026 14:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:de:e3:4e:c2:8a:0b:e2:43:16:01:fe:de:6f:c8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 20 12:30:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f867436adf265c06f8c2c05cc788c0387772f1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:11:de:07:77:89:45:bd:30:c5:9f:b0:b0:d7:
8a:01:8f:7e:5b:be:8d:ff:a3:d0:34:4a:60:0f:b7:
82:b6:8d:65:58:4e:72:b0:2b:76:e8:1c:f3:be:ca:
69:e2:fd:62:48:55:c5:71:30:7e:99:88:05:4b:4d:
fb:1b:4c:3f:a8:4b:05:5e:97:eb:b7:2a:5c:1d:cc:
7b:f6:83:f4:fb:b6:81:78:6e:9e:88:59:b8:9b:26:
96:a2:f7:c4:8f:0d:0e:9c:4b:42:5d:45:d2:0e:80:
78:b9:de:fc:fc:df:73:98:bb:7b:22:03:6c:b0:10:
fc:34:59:1e:15:b4:38:29:83:fd:d8:8e:e0:fa:1a:
7c:92:95:e1:87:a3:ee:0f:f6:e2:14:db:87:3e:8a:
07:a6:e2:0a:d8:0c:f2:bc:b4:a7:89:6e:92:b8:85:
0d:10:42:79:18:e6:ee:21:02:78:c0:f6:00:1a:18:
02:d4:1c:72:ef:f8:3e:2c:67:67:ad:71:cb:30:7d:
93:93:db:1c:00:d0:a3:94:94:c8:e8:9f:d8:19:3d:
62:92:6b:6a:7d:88:42:64:a1:cd:fc:b3:a6:f8:7f:
d1:e3:c0:26:f2:bb:26:76:0d:10:45:df:24:c7:d3:
a8:1b:60:95:31:de:de:71:e4:69:f6:9d:bc:66:f0:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:67:43:6A:DF:26:5C:06:F8:C2:C0:5C:C7:88:C0:38:77:72:F1:F9
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-GdDat8mXAb4wsBcx4jAOHdy8fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.11.0/24
77.105.31.0/24
79.175.116.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.61.0/24
93.186.67.0/24
93.186.72.0/24
178.253.207.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.236.0/24
185.47.88.0/24
185.47.90.0/24
188.255.130.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.226.0/24
188.255.244.0-188.255.246.255
188.255.252.0/24
188.255.254.0/23
212.69.7.0/24
212.69.12.0/24
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1f:1d:f5:43:93:47:8e:ed:58:26:5d:2b:76:24:70:f9:a3:
c1:ac:c6:f0:57:92:b1:f1:22:f4:c4:f2:61:2a:7c:44:01:24:
34:e8:c6:14:18:02:c8:52:ec:45:20:fd:aa:9c:b5:32:fc:3f:
c9:cf:89:f2:48:2f:79:0c:20:39:a6:89:8e:60:64:6d:bd:44:
70:8f:13:61:c6:6c:c0:0e:5a:df:db:0f:6a:46:6f:d1:0f:fe:
18:70:5e:18:97:2f:f4:5c:e2:ca:15:8b:7d:15:e1:8d:4a:8a:
6b:61:f0:5f:81:70:8f:ee:84:07:e2:70:f8:bb:8d:a5:69:9f:
fa:47:24:41:01:c7:09:c6:dc:15:ba:cf:46:7f:77:c7:0b:70:
2b:23:93:f2:05:08:71:c2:c8:04:a6:7a:bd:47:e2:0d:bd:50:
bb:d8:8e:79:09:6b:ca:25:74:9b:6b:1d:7d:db:18:f8:6e:ad:
56:42:99:4a:66:6d:d0:34:20:88:50:8c:44:2b:b9:5b:17:ed:
f8:f9:40:2d:13:3b:d3:78:6f:da:8b:cd:3a:14:47:79:eb:04:
3d:fa:a6:38:e4:92:7b:94:6f:40:d6:4d:44:a0:ed:75:1b:ea:
d7:45:be:e5:24:b0:cf:a0:7c:83:af:26:a0:75:b9:b2:54:94:
1c:3b:07:8b
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgISAZ2q3uNOwooL4kMWAf7eb8ibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwNDIwMTIzMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODY3NDM2YWRmMjY1YzA2ZjhjMmMwNWNjNzg4YzAzODc3NzJmMWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRHeB3eJRb0wxZ+wsNeKAY9+W76N
/6PQNEpgD7eCto1lWE5ysCt26Bzzvspp4v1iSFXFcTB+mYgFS037G0w/qEsFXpfr
typcHcx79oP0+7aBeG6eiFm4myaWovfEjw0OnEtCXUXSDoB4ud78/N9zmLt7IgNs
sBD8NFkeFbQ4KYP92I7g+hp8kpXhh6PuD/biFNuHPooHpuIK2AzyvLSniW6SuIUN
EEJ5GObuIQJ4wPYAGhgC1Bxy7/g+LGdnrXHLMH2Tk9scANCjlJTI6J/YGT1ikmtq
fYhCZKHN/LOm+H/R48Am8rsmdg0QRd8kx9OoG2CVMd7eceRp9p28ZvCrXwIDAQAB
o4ICvTCCArkwHQYDVR0OBBYEFPhnQ2rfJlwG+MLAXMeIwDh3cvH5MB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvMS1HZERhdDhtWEFiNHdzQmN4NGpBT0hkeThmay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzYvZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2Ix
Yi8xL2I0VGtjNHB3NmpuQWpPOGhCREt1T1o3SDZSVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCB0QYIKwYBBQUHAQcBAf8EgcEwgb4wgbsEAgABMIG0AwQA
TWkLAwQATWkfAwQAT690MAwDBABREjEDBABREjIDBAFREjQDBABREj0DBABdukMD
BABdukgDBACy/c8wDAMEALL91QMEALL91gMEALL92wMEALL97AMEALkvWAMEALkv
WgMEALz/ggMEALz/vgMEALz/0AMEALz/1QMEALz/2wMEALz/4jAMAwQCvP/0AwQA
vP/2AwQAvP/8AwQBvP/+AwQA1EUHAwQA1EUMAwQA1EUSMA0GCSqGSIb3DQEBCwUA
A4IBAQBmHx31Q5NHju1YJl0rdiRw+aPBrMbwV5Kx8SL0xPJhKnxEASQ06MYUGALI
UuxFIP2qnLUy/D/Jz4nySC95DCA5pomOYGRtvURwjxNhxmzADlrf2w9qRm/RD/4Y
cF4Yly/0XOLKFYt9FeGNSoprYfBfgXCP7oQH4nD4u42laZ/6RyRBAccJxtwVus9G
f3fHC3ArI5PyBQhxwsgEpnq9R+INvVC72I55CWvKJXSbax192xj4bq1WQplKZm3Q
NCCIUIxEK7lbF+34+UAtEzvTeG/ai806FEd56wQ9+qY45JJ7lG9A1k1EoO11G+rX
Rb7lJLDPoHyDryagdbmyVJQcOweL
-----END CERTIFICATE-----
Generated at Mon May 4 21:28:19 2026 by rpki-client