Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/lGKAv74gYmGH37A1DRbh0Rl9bx4.roa
File: lGKAv74gYmGH37A1DRbh0Rl9bx4.roa (raw, json)
Hash identifier: E14cPJbJ1TEA8BquVRSARSC5FdHT+0thzYkCOpdQdEk=
Subject key identifier: 94:62:80:BF:BE:20:62:61:87:DF:B0:35:0D:16:E1:D1:19:7D:6F:1E
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019E449550F1BFD679D4B7F61ADA049BB9F8
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/lGKAv74gYmGH37A1DRbh0Rl9bx4.roa
Signing time: Wed 20 May 2026 08:51:36 +0000
ROA not before: Wed 20 May 2026 08:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 45.117.52.0/24 maxlen: 24
45.117.54.0/24 maxlen: 24
45.123.144.0/24 maxlen: 24
103.4.248.0/24 maxlen: 24
103.4.249.0/24 maxlen: 24
103.4.250.0/24 maxlen: 24
103.4.251.0/24 maxlen: 24
103.49.152.0/24 maxlen: 24
103.49.153.0/24 maxlen: 24
103.49.154.0/24 maxlen: 24
103.49.155.0/24 maxlen: 24
103.196.8.0/24 maxlen: 24
103.196.9.0/24 maxlen: 24
103.216.0.0/24 maxlen: 24
103.216.1.0/24 maxlen: 24
103.216.2.0/24 maxlen: 24
103.216.3.0/24 maxlen: 24
139.5.22.0/24 maxlen: 24
139.5.23.0/24 maxlen: 24
152.163.116.0/24 maxlen: 24
152.163.117.0/24 maxlen: 24
152.163.118.0/24 maxlen: 24
152.163.119.0/24 maxlen: 24
189.81.118.0/23 maxlen: 23
189.81.134.0/23 maxlen: 23
189.81.148.0/23 maxlen: 23
189.81.152.0/23 maxlen: 23
189.81.180.0/23 maxlen: 23
189.81.182.0/23 maxlen: 23
189.81.186.0/23 maxlen: 23
189.81.220.0/23 maxlen: 23
189.81.222.0/23 maxlen: 23
189.104.18.0/23 maxlen: 23
189.104.42.0/23 maxlen: 23
189.104.116.0/23 maxlen: 23
189.104.124.0/23 maxlen: 23
189.104.136.0/23 maxlen: 23
189.104.142.0/23 maxlen: 23
189.104.152.0/23 maxlen: 23
189.104.160.0/23 maxlen: 23
189.104.162.0/23 maxlen: 23
189.104.186.0/23 maxlen: 23
189.104.196.0/23 maxlen: 23
189.104.218.0/23 maxlen: 23
189.104.224.0/23 maxlen: 23
189.104.226.0/23 maxlen: 23
189.104.252.0/23 maxlen: 23
205.188.8.0/24 maxlen: 24
205.188.9.0/24 maxlen: 24
205.188.10.0/24 maxlen: 24
205.188.11.0/24 maxlen: 24
205.188.16.0/22 maxlen: 22
205.188.44.0/22 maxlen: 22
205.188.52.0/24 maxlen: 24
205.188.53.0/24 maxlen: 24
205.188.54.0/24 maxlen: 24
205.188.55.0/24 maxlen: 24
205.188.96.0/24 maxlen: 24
205.188.97.0/24 maxlen: 24
205.188.98.0/24 maxlen: 24
205.188.99.0/24 maxlen: 24
205.188.110.0/24 maxlen: 24
205.188.160.0/23 maxlen: 23
205.188.168.0/24 maxlen: 24
205.188.176.0/23 maxlen: 23
205.188.196.0/22 maxlen: 22
205.188.232.0/22 maxlen: 22
205.188.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:95:50:f1:bf:d6:79:d4:b7:f6:1a:da:04:9b:b9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: May 20 08:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=946280bfbe20626187dfb0350d16e1d1197d6f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a0:ea:10:53:10:70:8c:96:7f:ed:97:61:1a:
79:fd:3a:ec:67:72:27:dc:3e:6a:76:bb:72:b4:13:
5d:ab:ed:fa:91:af:f5:bb:fb:76:30:db:5f:89:7f:
35:a6:e9:96:9b:ef:a1:83:5d:84:75:2b:e3:48:87:
b1:c9:19:77:8e:ea:2e:24:80:28:bf:1a:93:e2:e8:
97:70:ee:f4:99:46:a5:3c:63:e0:88:62:11:27:9f:
20:29:bb:5b:bf:1d:0d:5c:fa:6c:3e:cd:d5:6e:c7:
e0:d5:82:61:3b:bd:99:e3:06:3b:d4:58:92:55:b4:
58:6d:e8:61:6d:a2:f9:42:0b:1f:2c:2e:69:c7:fa:
50:64:7c:b0:f8:82:7e:9d:7b:45:e5:7e:a8:89:b6:
c3:15:4a:91:84:a2:08:f7:60:2c:d1:d9:ae:43:19:
05:7f:ea:94:a0:9f:bb:6c:68:5e:1a:16:12:a1:d6:
38:2c:5d:23:e0:f4:e0:7b:03:c1:ce:5b:00:5a:5a:
9c:54:07:3d:85:2f:65:1b:4f:48:c7:8b:3b:15:eb:
50:75:f5:40:f4:59:58:d6:99:2a:2d:a9:97:90:a1:
e7:c7:72:a3:a3:21:f3:2f:62:a1:9d:c7:70:d4:18:
a0:79:c6:87:70:4e:e7:ca:5a:67:f7:2a:76:35:5c:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:62:80:BF:BE:20:62:61:87:DF:B0:35:0D:16:E1:D1:19:7D:6F:1E
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/lGKAv74gYmGH37A1DRbh0Rl9bx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.52.0/24
45.117.54.0/24
45.123.144.0/24
103.4.248.0/22
103.49.152.0/22
103.196.8.0/23
103.216.0.0/22
139.5.22.0/23
152.163.116.0/22
189.81.118.0/23
189.81.134.0/23
189.81.148.0/23
189.81.152.0/23
189.81.180.0/22
189.81.186.0/23
189.81.220.0/22
189.104.18.0/23
189.104.42.0/23
189.104.116.0/23
189.104.124.0/23
189.104.136.0/23
189.104.142.0/23
189.104.152.0/23
189.104.160.0/22
189.104.186.0/23
189.104.196.0/23
189.104.218.0/23
189.104.224.0/22
189.104.252.0/23
205.188.8.0/22
205.188.16.0/22
205.188.44.0/22
205.188.52.0/22
205.188.96.0/22
205.188.110.0/24
205.188.160.0/23
205.188.168.0/24
205.188.176.0/23
205.188.196.0/22
205.188.232.0/22
205.188.244.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:5e:8d:8c:ad:9e:18:65:cf:25:76:54:8f:f8:1b:71:62:c3:
0b:da:fc:b7:e6:60:cb:18:2b:eb:2b:68:71:b7:f4:59:ae:19:
08:48:2d:20:9d:ae:e7:6d:60:1d:ef:cf:aa:4d:36:6b:99:26:
ca:56:80:91:02:13:e5:72:54:be:5a:ae:73:2a:02:f8:36:19:
1c:dd:52:cf:ba:77:4d:a2:fc:31:8c:08:fa:95:7f:6c:94:82:
9b:c7:ae:48:84:f4:6d:63:e4:78:4e:aa:55:5c:a9:92:6b:7a:
32:58:4c:b6:f8:18:c1:df:b4:54:dc:3a:9f:1c:0c:b3:86:86:
5b:90:be:a7:98:24:be:25:2f:9b:f1:dd:2f:7b:fe:de:8f:ab:
50:5f:70:5c:23:65:70:3a:d2:f2:29:66:b0:e1:16:d5:6f:af:
af:83:66:f8:d4:b9:54:2c:1d:09:88:57:36:ec:b7:bd:25:9c:
47:7d:df:b2:94:b7:6a:7f:69:d7:b8:6e:8f:52:cf:e1:32:e2:
e9:ac:37:7b:2f:73:67:dd:8e:43:58:8b:80:63:39:a7:35:0a:
99:93:30:25:20:a6:0b:64:4d:72:f6:56:5c:df:fe:91:c1:93:
d0:1f:f6:02:99:7a:57:d2:f5:78:7a:04:a9:ba:6f:b0:fa:19:
32:ba:00:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:04 2026 by rpki-client