Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/GHpyOsYTNKmVmhPbkKJQADisTWI.roa
File: GHpyOsYTNKmVmhPbkKJQADisTWI.roa (raw, json)
Hash identifier: o5rzkIYDjSc9NrU4Ms8QG9BjrnW0HZXGqRoHU2L0bZM=
Subject key identifier: 18:7A:72:3A:C6:13:34:A9:95:9A:13:DB:90:A2:50:00:38:AC:4D:62
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 019E3F822EA11359FF643D5C50BBD04ABB41
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/GHpyOsYTNKmVmhPbkKJQADisTWI.roa
Signing time: Tue 19 May 2026 09:12:36 +0000
ROA not before: Tue 19 May 2026 09:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49544
IP address blocks: 5.180.216.0/23 maxlen: 23
5.180.218.0/23 maxlen: 23
5.200.0.0/19 maxlen: 24
31.204.128.0/19 maxlen: 24
31.204.132.0/22 maxlen: 22
31.204.136.0/23 maxlen: 23
31.204.140.0/22 maxlen: 22
31.204.144.0/24 maxlen: 24
31.204.156.0/23 maxlen: 23
89.104.168.0/23 maxlen: 23
89.104.170.0/23 maxlen: 23
89.104.172.0/22 maxlen: 22
89.104.176.0/23 maxlen: 23
89.104.178.0/23 maxlen: 23
89.104.180.0/24 maxlen: 24
89.104.181.0/24 maxlen: 24
91.195.234.0/23 maxlen: 23
91.198.152.0/24 maxlen: 24
91.216.207.0/24 maxlen: 24
104.153.84.0/22 maxlen: 22
109.200.192.0/19 maxlen: 24
109.200.194.0/23 maxlen: 23
109.200.208.0/22 maxlen: 22
138.128.136.0/22 maxlen: 22
138.128.140.0/22 maxlen: 22
146.247.72.0/22 maxlen: 22
146.247.76.0/22 maxlen: 22
162.244.52.0/22 maxlen: 23
162.245.204.0/22 maxlen: 22
185.41.140.0/22 maxlen: 22
185.50.104.0/22 maxlen: 22
185.52.12.0/22 maxlen: 24
185.179.200.0/23 maxlen: 24
185.179.202.0/23 maxlen: 24
185.197.24.0/22 maxlen: 23
188.122.64.0/19 maxlen: 24
193.43.218.0/23 maxlen: 23
193.43.218.0/24 maxlen: 24
212.19.224.0/22 maxlen: 22
213.163.64.0/19 maxlen: 24
213.179.192.0/19 maxlen: 19
213.179.192.0/22 maxlen: 22
213.179.196.0/22 maxlen: 22
213.179.200.0/22 maxlen: 22
213.179.204.0/22 maxlen: 22
213.179.209.0/24 maxlen: 24
213.179.210.0/23 maxlen: 23
213.179.212.0/22 maxlen: 22
213.179.216.0/22 maxlen: 22
213.179.220.0/23 maxlen: 23
2a00:1630::/29 maxlen: 32
2a00:1630::/32 maxlen: 48
2a00:1631::/32 maxlen: 32
2a00:1632::/32 maxlen: 32
2a00:1637::/32 maxlen: 32
2a00:1d20::/29 maxlen: 32
2a00:1d20::/34 maxlen: 34
2a00:1d20:4000::/34 maxlen: 34
2a00:1d20:8000::/34 maxlen: 34
2a00:1d26::/32 maxlen: 34
2a01:9580::/32 maxlen: 34
2a01:9580:c000::/34 maxlen: 34
2a04:c600::/29 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:82:2e:a1:13:59:ff:64:3d:5c:50:bb:d0:4a:bb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: May 19 09:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=187a723ac61334a9959a13db90a2500038ac4d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:04:c3:16:2e:55:cf:0d:a7:03:31:7b:74:
36:93:9a:1d:f0:fc:d4:95:2d:2a:63:54:6c:26:2b:
84:eb:7d:e1:21:96:bf:14:53:ac:41:cb:d5:6f:4f:
a9:7e:ea:9b:05:21:ea:8f:a7:fe:77:00:cc:56:98:
38:d8:9c:d0:db:4b:c2:6f:64:53:b6:c5:5d:ed:13:
d2:18:a2:fc:3c:40:88:39:f0:cd:d6:d5:4d:1d:9f:
36:c1:8c:b9:72:7d:8c:4a:d3:10:d6:d6:6c:66:67:
b9:6b:30:b3:1f:b0:af:82:e6:c8:17:02:ae:1e:92:
bc:98:b2:e6:6e:05:39:fb:71:cf:1d:1a:f0:23:2c:
be:82:a4:fd:d7:a9:41:c2:08:aa:fd:2f:c5:03:7b:
81:c1:1d:14:f4:de:91:db:87:d6:b3:24:3d:a4:90:
ba:e0:a0:42:ee:6e:83:33:8b:8c:e4:9d:96:3e:ec:
86:f9:91:74:4d:f2:65:f7:c6:33:1a:ad:a5:a7:ee:
ee:4b:3a:0c:3d:52:b1:c5:74:10:04:0a:37:68:82:
83:c1:ad:d0:50:23:31:d0:d2:04:30:c6:92:bb:5d:
ce:14:b5:ab:60:92:3b:04:2c:59:ba:93:32:2d:ec:
1a:93:c0:ae:86:19:bd:09:9f:1f:4b:65:e6:f6:d5:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7A:72:3A:C6:13:34:A9:95:9A:13:DB:90:A2:50:00:38:AC:4D:62
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/GHpyOsYTNKmVmhPbkKJQADisTWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.216.0/22
5.200.0.0/19
31.204.128.0/19
89.104.168.0-89.104.181.255
91.195.234.0/23
91.198.152.0/24
91.216.207.0/24
104.153.84.0/22
109.200.192.0/19
138.128.136.0/21
146.247.72.0/21
162.244.52.0/22
162.245.204.0/22
185.41.140.0/22
185.50.104.0/22
185.52.12.0/22
185.179.200.0/22
185.197.24.0/22
188.122.64.0/19
193.43.218.0/23
212.19.224.0/22
213.163.64.0/19
213.179.192.0/19
IPv6:
2a00:1630::/29
2a00:1d20::/29
2a01:9580::/32
2a04:c600::/29
Signature Algorithm: sha256WithRSAEncryption
21:ca:ef:fd:00:bb:20:90:b8:31:ec:98:3d:e7:0f:5c:bc:ed:
83:e1:8a:fb:ac:79:8c:de:93:1c:a7:be:09:f4:eb:3e:c1:47:
78:83:80:25:39:58:d7:f8:24:16:51:40:fc:05:c3:4a:ac:9f:
80:c4:26:00:81:13:61:f7:25:ab:63:e8:1b:b4:17:9e:6b:de:
fa:50:7f:c8:44:28:0d:d5:9e:74:ea:7e:6a:2a:28:56:31:69:
b6:95:9a:24:e3:ee:c6:e0:5e:a4:b2:7c:ab:e2:de:d8:f5:87:
b1:d4:e1:3b:c7:1d:31:f5:44:14:6f:3c:9d:db:55:83:32:60:
b2:11:fe:3f:a2:8e:fa:8d:3c:b2:26:4e:b3:5a:f4:db:06:43:
f7:4a:28:8f:0e:b4:a9:2e:dc:b0:c0:41:1b:4c:91:c1:c0:d8:
8e:cb:c7:9c:ec:e2:7d:c1:71:d6:41:da:78:f3:df:af:13:b6:
3e:f5:ff:bb:79:9f:4c:20:48:90:86:ff:ed:68:e6:da:fd:29:
8c:5c:0b:c8:24:27:70:4d:1a:73:bb:e5:ef:f2:3f:e4:fa:b6:
e4:9b:3e:88:ca:87:c7:35:a0:fd:64:ae:8f:48:cc:08:e5:85:
ec:2b:99:37:ab:5d:09:b6:63:3f:03:85:62:d1:6e:07:5a:b3:
76:88:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:07:44 2026 by rpki-client