Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/0GldVl2zV8QRQ7FA6esvsphqg0U.roa
File: 0GldVl2zV8QRQ7FA6esvsphqg0U.roa (raw, json)
Hash identifier: KEMAimaHUu19LKNxQEWCIdotZOyiLwEbuO52gYA0wKc=
Subject key identifier: D0:69:5D:56:5D:B3:57:C4:11:43:B1:40:E9:EB:2F:B2:98:6A:83:45
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FC4CA89A50900372464C8CC9B38F1CBC4
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/0GldVl2zV8QRQ7FA6esvsphqg0U.roa
Signing time: Sun 02 Aug 2026 23:23:55 +0000
ROA not before: Sun 02 Aug 2026 23:23:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46261
IP address blocks: 61.14.224.0/24 maxlen: 24
61.14.226.0/23 maxlen: 24
62.106.64.0/24 maxlen: 24
79.110.177.0/24 maxlen: 24
79.110.178.0/23 maxlen: 24
79.110.180.0/22 maxlen: 24
85.202.172.0/24 maxlen: 24
85.202.174.0/23 maxlen: 24
91.132.84.0/24 maxlen: 32
91.132.87.0/24 maxlen: 32
103.203.40.0/23 maxlen: 24
103.203.43.0/24 maxlen: 24
103.205.84.0/23 maxlen: 24
103.205.86.0/24 maxlen: 24
103.207.161.0/24 maxlen: 24
103.207.162.0/24 maxlen: 24
121.46.124.0/22 maxlen: 24
146.19.82.0/24 maxlen: 24
160.238.96.0/24 maxlen: 24
160.238.99.0/24 maxlen: 24
185.93.4.0/24 maxlen: 24
185.105.10.0/24 maxlen: 24
185.118.132.0/24 maxlen: 24
185.118.135.0/24 maxlen: 24
185.145.44.0/24 maxlen: 24
185.145.46.0/24 maxlen: 24
185.157.232.0/22 maxlen: 24
185.176.89.0/24 maxlen: 24
185.176.90.0/24 maxlen: 24
185.176.91.0/24 maxlen: 24
185.190.59.0/24 maxlen: 24
185.196.24.0/24 maxlen: 24
185.202.44.0/23 maxlen: 24
185.202.47.0/24 maxlen: 24
185.206.20.0/23 maxlen: 24
185.209.128.0/23 maxlen: 24
185.209.130.0/24 maxlen: 24
185.213.16.0/24 maxlen: 24
185.214.140.0/23 maxlen: 24
185.214.142.0/24 maxlen: 24
185.218.185.0/24 maxlen: 24
185.219.21.0/24 maxlen: 32
185.219.22.0/24 maxlen: 32
185.225.12.0/23 maxlen: 24
185.225.15.0/24 maxlen: 24
185.227.254.0/24 maxlen: 24
185.228.44.0/22 maxlen: 24
185.232.42.0/24 maxlen: 24
185.235.120.0/23 maxlen: 24
185.235.122.0/24 maxlen: 24
193.3.16.0/24 maxlen: 24
193.31.112.0/24 maxlen: 24
193.31.115.0/24 maxlen: 24
193.163.35.0/24 maxlen: 24
193.176.116.0/24 maxlen: 24
193.176.119.0/24 maxlen: 24
193.187.180.0/22 maxlen: 24
194.8.134.0/24 maxlen: 24
194.50.192.0/23 maxlen: 24
194.50.195.0/24 maxlen: 24
194.69.161.0/24 maxlen: 24
195.216.150.0/24 maxlen: 32
195.245.74.0/23 maxlen: 24
213.109.157.0/24 maxlen: 24
217.18.56.0/23 maxlen: 24
217.18.58.0/24 maxlen: 24
2a07:4580::/29 maxlen: 29
2a07:4580::/32 maxlen: 48
2a07:4580:b0d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c4:ca:89:a5:09:00:37:24:64:c8:cc:9b:38:f1:cb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 2 23:23:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0695d565db357c41143b140e9eb2fb2986a8345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:bc:1b:82:88:3c:5d:a6:15:98:e0:2a:3e:
94:b9:f6:cd:e5:71:66:69:f0:1b:db:9f:22:f3:a8:
fc:42:39:4f:84:6f:10:a3:bf:e1:65:92:e7:2d:c2:
d4:9f:d5:9b:e7:f2:f2:cd:bb:36:d8:c0:71:34:9f:
e2:29:61:e7:a7:c2:3c:39:19:18:58:b6:bf:01:3b:
1e:0e:68:0b:7d:8b:57:04:aa:90:bb:67:ad:86:49:
3f:16:48:98:92:74:a6:a9:79:99:4b:7e:90:f4:01:
18:08:b8:e3:bf:29:6d:1d:d2:bb:c3:a2:8d:3f:53:
3f:ab:e4:1c:0b:24:b8:9d:0f:df:16:a3:a0:2f:fc:
06:c0:f1:28:89:b7:af:81:42:d5:08:12:96:91:33:
4f:13:51:e3:73:ba:4c:c4:3e:ec:0d:ff:16:c7:2b:
7b:02:4c:3d:97:b1:e8:5d:e0:63:23:68:e9:41:4d:
a4:c3:cb:2c:dd:85:02:d7:ee:a6:c8:96:86:04:5a:
f2:e3:46:bf:4d:20:e8:79:0d:81:71:4d:9f:d2:8e:
84:38:78:7e:bc:a9:14:57:bc:b5:d4:a8:f5:c8:68:
17:2d:6d:7c:9e:7e:f0:43:9b:bd:28:f4:ea:d2:13:
46:f1:8c:b8:56:01:f9:23:08:6c:0c:a5:6c:b3:a7:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:69:5D:56:5D:B3:57:C4:11:43:B1:40:E9:EB:2F:B2:98:6A:83:45
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/0GldVl2zV8QRQ7FA6esvsphqg0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.224.0/24
61.14.226.0/23
62.106.64.0/24
79.110.177.0-79.110.183.255
85.202.172.0/24
85.202.174.0/23
91.132.84.0/24
91.132.87.0/24
103.203.40.0/23
103.203.43.0/24
103.205.84.0-103.205.86.255
103.207.161.0-103.207.162.255
121.46.124.0/22
146.19.82.0/24
160.238.96.0/24
160.238.99.0/24
185.93.4.0/24
185.105.10.0/24
185.118.132.0/24
185.118.135.0/24
185.145.44.0/24
185.145.46.0/24
185.157.232.0/22
185.176.89.0-185.176.91.255
185.190.59.0/24
185.196.24.0/24
185.202.44.0/23
185.202.47.0/24
185.206.20.0/23
185.209.128.0-185.209.130.255
185.213.16.0/24
185.214.140.0-185.214.142.255
185.218.185.0/24
185.219.21.0-185.219.22.255
185.225.12.0/23
185.225.15.0/24
185.227.254.0/24
185.228.44.0/22
185.232.42.0/24
185.235.120.0-185.235.122.255
193.3.16.0/24
193.31.112.0/24
193.31.115.0/24
193.163.35.0/24
193.176.116.0/24
193.176.119.0/24
193.187.180.0/22
194.8.134.0/24
194.50.192.0/23
194.50.195.0/24
194.69.161.0/24
195.216.150.0/24
195.245.74.0/23
213.109.157.0/24
217.18.56.0-217.18.58.255
IPv6:
2a07:4580::/29
Signature Algorithm: sha256WithRSAEncryption
52:0a:2e:7c:34:a4:a9:19:88:55:b7:f2:be:ed:c4:4d:de:90:
82:ba:6e:6e:26:df:41:58:2a:61:31:7b:b5:55:43:a2:e3:cc:
49:e3:95:b5:39:82:36:ed:96:5b:1a:1b:f7:2f:b1:97:24:cd:
b1:3d:90:c7:a6:3c:80:ae:68:c5:a0:e3:9e:d7:46:3b:26:6b:
73:e7:f8:c6:95:fd:9f:8e:f9:f6:f2:27:d6:cc:38:01:71:85:
df:25:63:0b:a1:63:42:c8:3c:6f:91:dc:40:f1:4e:99:b7:57:
94:e8:20:90:73:77:7d:a1:6d:3d:1a:b5:9f:b5:4f:4d:44:31:
e7:2c:8f:da:2a:63:82:c1:6a:d9:44:93:82:75:8a:9f:14:ce:
ab:72:a0:b0:d6:28:d2:8d:6b:69:62:ee:b0:19:d2:64:46:68:
0d:7b:67:26:1c:88:28:fc:e7:ec:1a:cc:65:98:17:e6:b5:a2:
42:af:4d:b5:2d:d8:05:4a:8e:0d:50:9a:57:f1:00:9b:26:b4:
cd:3b:aa:17:8e:2b:48:50:f6:48:9b:b7:b0:98:9b:47:e7:fe:
1e:0b:e4:0a:c7:a0:3e:a6:8c:52:f2:c7:a1:a9:26:c1:f3:b3:
40:aa:76:af:cd:92:5a:b4:c9:5f:a3:8a:92:69:4a:92:2a:64:
9e:0e:3a:fd
-----BEGIN CERTIFICATE-----
MIIGojCCBYqgAwIBAgISAZ/EyomlCQA3JGTIzJs48cvEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwODAyMjMyMzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDY5NWQ1NjVkYjM1N2M0MTE0M2IxNDBlOWViMmZiMjk4NmE4MzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyju8G4KIPF2mFZjgKj6UufbN5XFm
afAb258i86j8QjlPhG8Qo7/hZZLnLcLUn9Wb5/Lyzbs22MBxNJ/iKWHnp8I8ORkY
WLa/ATseDmgLfYtXBKqQu2ethkk/FkiYknSmqXmZS36Q9AEYCLjjvyltHdK7w6KN
P1M/q+QcCyS4nQ/fFqOgL/wGwPEoibevgULVCBKWkTNPE1Hjc7pMxD7sDf8Wxyt7
Akw9l7HoXeBjI2jpQU2kw8ss3YUC1+6myJaGBFry40a/TSDoeQ2BcU2f0o6EOHh+
vKkUV7y11Kj1yGgXLW18nn7wQ5u9KPTq0hNG8Yy4VgH5IwhsDKVss6cP6wIDAQAB
o4IDrjCCA6owHQYDVR0OBBYEFNBpXVZds1fEEUOxQOnrL7KYaoNFMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvMEdsZFZsMnpWOFFSUTdGQTZlc3ZzcGhxZzBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBwgYIKwYBBQUHAQcBAf8EggGxMIIBrTCCAZoEAgABMIIB
kgMEAD0O4AMEAT0O4gMEAD5qQDAMAwQAT26xAwQDT26wAwQAVcqsAwQBVcquAwQA
W4RUAwQAW4RXAwQBZ8soAwQAZ8srMAwDBAJnzVQDBABnzVYwDAMEAGfPoQMEAGfP
ogMEAnkufAMEAJITUgMEAKDuYAMEAKDuYwMEALldBAMEALlpCgMEALl2hAMEALl2
hwMEALmRLAMEALmRLgMEArmd6DAMAwQAubBZAwQCubBYAwQAub47AwQAucQYAwQB
ucosAwQAucovAwQBuc4UMAwDBAe50YADBAC50YIDBAC51RAwDAMEArnWjAMEALnW
jgMEALnauTAMAwQAudsVAwQAudsWAwQBueEMAwQAueEPAwQAueP+AwQCueQsAwQA
uegqMAwDBAO563gDBAC563oDBADBAxADBADBH3ADBADBH3MDBADBoyMDBADBsHQD
BADBsHcDBALBu7QDBADCCIYDBAHCMsADBADCMsMDBADCRaEDBADD2JYDBAHD9UoD
BADVbZ0wDAMEA9kSOAMEANkSOjANBAIAAjAHAwUDKgdFgDANBgkqhkiG9w0BAQsF
AAOCAQEAUgoufDSkqRmIVbfyvu3ETd6QgrpubibfQVgqYTF7tVVDouPMSeOVtTmC
Nu2WWxob9y+xlyTNsT2Qx6Y8gK5oxaDjntdGOyZrc+f4xpX9n4759vIn1sw4AXGF
3yVjC6FjQsg8b5HcQPFOmbdXlOggkHN3faFtPRq1n7VPTUQx5yyP2ipjgsFq2UST
gnWKnxTOq3KgsNYo0o1raWLusBnSZEZoDXtnJhyIKPzn7BrMZZgX5rWiQq9NtS3Y
BUqODVCaV/EAmya0zTuqF44rSFD2SJu3sJibR+f+HgvkCsegPqaMUvLHoakmwfOz
QKp2r82SWrTJX6OKkmlKkipkng46/Q==
-----END CERTIFICATE-----
Generated at Thu Aug 13 02:25:56 2026 by rpki-client