Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/G2oy9MliYxCpxhRDwqB22e8obwg.roa
File: G2oy9MliYxCpxhRDwqB22e8obwg.roa (raw, json)
Hash identifier: VPY8AAaHFFlT33kAMy/oBSq57d3fL0GWckyh4nCVABM=
Subject key identifier: 1B:6A:32:F4:C9:62:63:10:A9:C6:14:43:C2:A0:76:D9:EF:28:6F:08
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019F82CAC498E1445401B3F9F7FC595F5FD2
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/G2oy9MliYxCpxhRDwqB22e8obwg.roa
Signing time: Tue 21 Jul 2026 03:49:14 +0000
ROA not before: Tue 21 Jul 2026 03:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46261
IP address blocks: 61.14.224.0/22 maxlen: 24
62.106.64.0/24 maxlen: 24
79.110.176.0/21 maxlen: 24
79.110.181.0/24 maxlen: 24
85.8.148.0/24 maxlen: 24
85.8.150.0/24 maxlen: 24
85.202.172.0/22 maxlen: 24
85.202.173.0/24 maxlen: 24
91.132.84.0/24 maxlen: 32
91.132.87.0/24 maxlen: 32
103.203.40.0/22 maxlen: 24
103.205.84.0/22 maxlen: 24
103.207.160.0/22 maxlen: 24
103.207.163.0/24 maxlen: 24
121.46.124.0/22 maxlen: 24
146.19.82.0/24 maxlen: 24
160.238.96.0/22 maxlen: 24
185.93.4.0/24 maxlen: 24
185.105.10.0/24 maxlen: 24
185.118.132.0/24 maxlen: 24
185.118.135.0/24 maxlen: 24
185.145.44.0/22 maxlen: 24
185.157.232.0/22 maxlen: 24
185.176.88.0/22 maxlen: 24
185.176.90.0/24 maxlen: 24
185.190.59.0/24 maxlen: 24
185.196.24.0/24 maxlen: 24
185.202.44.0/23 maxlen: 24
185.202.46.0/23 maxlen: 24
185.206.20.0/23 maxlen: 24
185.209.128.0/23 maxlen: 24
185.209.128.0/24 maxlen: 24
185.209.130.0/23 maxlen: 24
185.213.16.0/24 maxlen: 24
185.214.140.0/23 maxlen: 24
185.214.142.0/24 maxlen: 24
185.218.185.0/24 maxlen: 24
185.219.21.0/24 maxlen: 32
185.219.22.0/24 maxlen: 32
185.225.12.0/23 maxlen: 24
185.225.14.0/23 maxlen: 24
185.227.254.0/23 maxlen: 24
185.228.44.0/22 maxlen: 24
185.232.42.0/24 maxlen: 24
185.235.120.0/22 maxlen: 24
185.235.122.0/24 maxlen: 24
185.235.123.0/24 maxlen: 24
193.3.16.0/24 maxlen: 24
193.31.112.0/22 maxlen: 24
193.31.114.0/24 maxlen: 24
193.163.35.0/24 maxlen: 24
193.176.116.0/22 maxlen: 24
193.187.180.0/22 maxlen: 24
194.8.134.0/24 maxlen: 24
194.50.192.0/22 maxlen: 24
194.69.161.0/24 maxlen: 24
195.216.150.0/24 maxlen: 32
195.245.74.0/23 maxlen: 24
213.109.157.0/24 maxlen: 24
217.18.56.0/22 maxlen: 24
2a07:4580::/29 maxlen: 29
2a07:4580::/32 maxlen: 48
2a07:4580:b0d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:ca:c4:98:e1:44:54:01:b3:f9:f7:fc:59:5f:5f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 21 03:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b6a32f4c9626310a9c61443c2a076d9ef286f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:47:b2:32:3e:ed:63:fe:07:e0:40:b2:87:
98:98:56:98:8e:d3:be:85:80:de:c9:14:aa:35:83:
0e:c6:70:da:51:2f:c3:e8:24:f3:fd:85:61:ae:cd:
d5:16:ac:ea:9a:35:24:48:c3:8a:c8:9c:e7:a5:0f:
bb:e4:32:4d:a9:e3:a7:27:3b:58:1c:38:e2:58:d3:
be:33:ab:09:05:f4:48:78:15:d7:7d:f8:50:d1:64:
09:dc:74:9c:12:11:54:cc:93:84:8b:d0:56:b3:13:
a5:55:ef:b1:f5:7f:71:3b:75:2a:ac:20:42:40:8d:
f2:d3:fe:86:d9:77:3b:0b:f7:63:ca:37:e1:f7:ea:
da:9e:37:1b:b7:13:bf:20:6c:db:82:5b:7b:5d:9c:
b3:7e:68:fb:c6:82:b5:17:b5:c5:cd:91:08:da:78:
91:01:06:56:c6:22:51:ae:bb:40:35:80:cb:7d:c9:
d5:41:32:36:6d:85:2e:fc:2e:d7:ed:d5:19:3f:f1:
94:36:21:03:3c:a1:ff:29:93:ea:23:aa:2d:5e:d0:
a8:44:82:0e:5b:85:72:48:2d:d4:e4:b9:0d:82:bf:
89:25:10:7b:be:1c:cf:ff:c1:1d:e6:fc:93:00:dc:
a1:ac:ba:e1:b2:be:6e:b9:36:8d:ea:66:15:fc:f8:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6A:32:F4:C9:62:63:10:A9:C6:14:43:C2:A0:76:D9:EF:28:6F:08
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/G2oy9MliYxCpxhRDwqB22e8obwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.224.0/22
62.106.64.0/24
79.110.176.0/21
85.8.148.0/24
85.8.150.0/24
85.202.172.0/22
91.132.84.0/24
91.132.87.0/24
103.203.40.0/22
103.205.84.0/22
103.207.160.0/22
121.46.124.0/22
146.19.82.0/24
160.238.96.0/22
185.93.4.0/24
185.105.10.0/24
185.118.132.0/24
185.118.135.0/24
185.145.44.0/22
185.157.232.0/22
185.176.88.0/22
185.190.59.0/24
185.196.24.0/24
185.202.44.0/22
185.206.20.0/23
185.209.128.0/22
185.213.16.0/24
185.214.140.0-185.214.142.255
185.218.185.0/24
185.219.21.0-185.219.22.255
185.225.12.0/22
185.227.254.0/23
185.228.44.0/22
185.232.42.0/24
185.235.120.0/22
193.3.16.0/24
193.31.112.0/22
193.163.35.0/24
193.176.116.0/22
193.187.180.0/22
194.8.134.0/24
194.50.192.0/22
194.69.161.0/24
195.216.150.0/24
195.245.74.0/23
213.109.157.0/24
217.18.56.0/22
IPv6:
2a07:4580::/29
Signature Algorithm: sha256WithRSAEncryption
87:e2:a9:76:5b:65:87:07:70:f9:16:61:05:fa:49:e6:81:e5:
13:5d:0b:78:0c:eb:78:a4:25:0a:e1:e9:8b:6b:58:1e:95:8d:
7c:b3:a2:25:eb:7e:a4:0b:62:fb:7a:1e:fc:fd:55:c7:7e:28:
c9:51:c4:26:1d:d4:31:ba:4c:b8:ce:4d:93:b0:e8:32:27:77:
98:a3:39:3e:4e:3e:0b:76:bb:59:92:f3:e4:15:ed:c0:8b:07:
21:52:09:9e:87:08:a0:5a:01:5e:d3:6b:93:17:32:b1:8d:9a:
80:4f:cc:f5:ca:af:a9:72:95:91:ad:e1:16:17:eb:0a:ca:72:
fe:8d:7d:0f:1f:a6:c1:a8:2a:06:61:a9:7a:b9:b8:32:9c:de:
55:f7:62:65:c1:e5:e9:f1:75:26:a2:03:cf:b2:72:82:18:b1:
10:49:c8:53:e8:dd:1a:22:54:f0:4b:eb:16:32:70:f6:a5:a2:
58:bc:ee:ea:a2:21:84:6a:6a:de:36:5f:f3:47:49:e8:fc:ea:
64:5e:10:7a:44:9f:95:b6:aa:5c:ed:58:2b:48:3c:6b:d2:c7:
da:fa:f4:b5:34:65:37:49:86:4f:54:4e:47:26:26:44:1a:4f:
78:45:2d:05:db:c9:e3:36:5b:c5:3c:ea:77:1c:d3:4f:9c:95:
ca:48:d6:27
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgISAZ+CysSY4URUAbP59/xZX1/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwNzIxMDM0OTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjZhMzJmNGM5NjI2MzEwYTljNjE0NDNjMmEwNzZkOWVmMjg2ZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMhHsjI+7WP+B+BAsoeYmFaYjtO+
hYDeyRSqNYMOxnDaUS/D6CTz/YVhrs3VFqzqmjUkSMOKyJznpQ+75DJNqeOnJztY
HDjiWNO+M6sJBfRIeBXXffhQ0WQJ3HScEhFUzJOEi9BWsxOlVe+x9X9xO3UqrCBC
QI3y0/6G2Xc7C/djyjfh9+ranjcbtxO/IGzbglt7XZyzfmj7xoK1F7XFzZEI2niR
AQZWxiJRrrtANYDLfcnVQTI2bYUu/C7X7dUZP/GUNiEDPKH/KZPqI6otXtCoRIIO
W4VySC3U5LkNgr+JJRB7vhzP/8Ed5vyTANyhrLrhsr5uuTaN6mYV/PgVTwIDAQAB
o4IDRjCCA0IwHQYDVR0OBBYEFBtqMvTJYmMQqcYUQ8KgdtnvKG8IMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvRzJveTlNbGlZeENweGhSRHdxQjIyZThvYndnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBWgYIKwYBBQUHAQcBAf8EggFJMIIBRTCCATIEAgABMIIB
KgMEAj0O4AMEAD5qQAMEA09usAMEAFUIlAMEAFUIlgMEAlXKrAMEAFuEVAMEAFuE
VwMEAmfLKAMEAmfNVAMEAmfPoAMEAnkufAMEAJITUgMEAqDuYAMEALldBAMEALlp
CgMEALl2hAMEALl2hwMEArmRLAMEArmd6AMEArmwWAMEALm+OwMEALnEGAMEArnK
LAMEAbnOFAMEArnRgAMEALnVEDAMAwQCudaMAwQAudaOAwQAudq5MAwDBAC52xUD
BAC52xYDBAK54QwDBAG54/4DBAK55CwDBAC56CoDBAK563gDBADBAxADBALBH3AD
BADBoyMDBALBsHQDBALBu7QDBADCCIYDBALCMsADBADCRaEDBADD2JYDBAHD9UoD
BADVbZ0DBALZEjgwDQQCAAIwBwMFAyoHRYAwDQYJKoZIhvcNAQELBQADggEBAIfi
qXZbZYcHcPkWYQX6SeaB5RNdC3gM63ikJQrh6YtrWB6VjXyzoiXrfqQLYvt6Hvz9
Vcd+KMlRxCYd1DG6TLjOTZOw6DInd5ijOT5OPgt2u1mS8+QV7cCLByFSCZ6HCKBa
AV7Ta5MXMrGNmoBPzPXKr6lylZGt4RYX6wrKcv6NfQ8fpsGoKgZhqXq5uDKc3lX3
YmXB5enxdSaiA8+ycoIYsRBJyFPo3RoiVPBL6xYycPaloli87uqiIYRqat42X/NH
Sej86mReEHpEn5W2qlztWCtIPGvSx9r69LU0ZTdJhk9UTkcmJkQaT3hFLQXbyeM2
W8U86ncc00+clcpI1ic=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:48 2026 by rpki-client