Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/GAlMaF2krkYTpwYbE6TqEx_Tu_4.roa
File: GAlMaF2krkYTpwYbE6TqEx_Tu_4.roa (raw, json)
Hash identifier: YXF5F3qEn+V3ifxgp0F6hZNsJB3RMIymnp6Om4JHbgY=
Subject key identifier: 18:09:4C:68:5D:A4:AE:46:13:A7:06:1B:13:A4:EA:13:1F:D3:BB:FE
Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial: 019DF99C20C731918C2918DC45B18CE223B0
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/GAlMaF2krkYTpwYbE6TqEx_Tu_4.roa
Signing time: Tue 05 May 2026 19:27:31 +0000
ROA not before: Tue 05 May 2026 19:27:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49765
IP address blocks: 5.226.56.0/21 maxlen: 21
5.226.56.0/24 maxlen: 24
5.226.57.0/24 maxlen: 24
5.226.58.0/23 maxlen: 23
5.226.60.0/24 maxlen: 24
5.226.61.0/24 maxlen: 24
5.226.62.0/24 maxlen: 24
5.226.63.0/24 maxlen: 24
91.102.56.0/21 maxlen: 21
91.102.56.0/24 maxlen: 24
91.102.57.0/24 maxlen: 24
91.102.58.0/23 maxlen: 23
91.102.60.0/22 maxlen: 22
91.102.60.0/24 maxlen: 24
91.102.61.0/24 maxlen: 24
91.102.62.0/23 maxlen: 23
94.136.224.0/19 maxlen: 19
94.136.224.0/23 maxlen: 24
94.136.226.0/24 maxlen: 24
94.136.227.0/24 maxlen: 24
94.136.228.0/24 maxlen: 24
94.136.229.0/24 maxlen: 24
94.136.230.0/24 maxlen: 24
94.136.232.0/24 maxlen: 24
94.136.233.0/24 maxlen: 24
94.136.234.0/24 maxlen: 24
94.136.235.0/24 maxlen: 24
94.136.236.0/23 maxlen: 23
94.136.238.0/23 maxlen: 23
94.136.244.0/24 maxlen: 24
94.136.245.0/24 maxlen: 24
94.136.246.0/24 maxlen: 24
94.136.247.0/24 maxlen: 24
94.136.248.0/24 maxlen: 24
94.136.249.0/24 maxlen: 24
94.136.250.0/24 maxlen: 24
94.136.251.0/24 maxlen: 24
94.136.252.0/24 maxlen: 24
94.136.253.0/24 maxlen: 24
94.136.254.0/24 maxlen: 24
109.72.16.0/20 maxlen: 20
109.72.16.0/24 maxlen: 24
109.72.17.0/24 maxlen: 24
109.72.18.0/24 maxlen: 24
109.72.19.0/24 maxlen: 24
109.72.20.0/24 maxlen: 24
109.72.21.0/24 maxlen: 24
109.72.22.0/24 maxlen: 24
109.72.23.0/24 maxlen: 24
109.72.24.0/24 maxlen: 24
109.72.25.0/24 maxlen: 24
109.72.26.0/24 maxlen: 24
109.72.27.0/24 maxlen: 24
109.72.28.0/24 maxlen: 24
109.72.30.0/24 maxlen: 24
109.72.31.0/24 maxlen: 24
137.221.0.0/20 maxlen: 20
137.221.0.0/23 maxlen: 23
137.221.2.0/24 maxlen: 24
137.221.3.0/24 maxlen: 24
137.221.4.0/24 maxlen: 24
137.221.5.0/24 maxlen: 24
137.221.6.0/24 maxlen: 24
137.221.7.0/24 maxlen: 24
137.221.8.0/24 maxlen: 24
137.221.9.0/24 maxlen: 24
137.221.10.0/23 maxlen: 23
137.221.12.0/24 maxlen: 24
137.221.13.0/24 maxlen: 24
137.221.14.0/24 maxlen: 24
137.221.15.0/24 maxlen: 24
137.221.16.0/21 maxlen: 21
137.221.16.0/24 maxlen: 24
137.221.17.0/24 maxlen: 24
137.221.18.0/24 maxlen: 24
137.221.19.0/24 maxlen: 24
137.221.20.0/24 maxlen: 24
137.221.21.0/24 maxlen: 24
137.221.22.0/24 maxlen: 24
137.221.23.0/24 maxlen: 24
185.48.108.0/22 maxlen: 22
185.48.108.0/24 maxlen: 24
185.48.109.0/24 maxlen: 24
185.48.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:9c:20:c7:31:91:8c:29:18:dc:45:b1:8c:e2:23:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Validity
Not Before: May 5 19:27:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18094c685da4ae4613a7061b13a4ea131fd3bbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2c:0a:4f:1c:c8:7c:10:77:72:1a:e5:bb:4f:
40:63:e4:d1:ec:6a:19:77:ee:1a:cc:9e:ce:9c:ab:
88:4c:09:8b:fd:27:db:0e:d6:67:69:c9:f7:99:fd:
7b:40:0f:38:a7:cc:55:f0:7e:07:36:3c:74:e1:ee:
8e:26:10:93:e5:76:85:56:02:2f:86:59:ee:41:03:
8f:6a:46:ac:3a:fa:ab:c6:58:8f:cc:8f:2f:46:9d:
40:be:8b:b5:19:92:d9:b4:1b:a6:5c:d6:f3:14:84:
24:dd:da:45:bd:7c:42:e1:30:9e:8a:51:ca:e1:60:
d8:82:02:b7:55:c2:a0:68:66:90:a1:72:49:cb:86:
04:5a:4f:a2:69:12:87:8b:8a:12:70:40:57:96:f4:
4f:a6:14:dd:5b:fe:13:1c:18:fa:ba:95:18:8a:92:
8e:c1:40:c2:7c:ef:41:74:d0:fb:8b:cc:12:73:13:
1f:8a:de:58:18:b3:c9:84:27:1b:41:7b:dd:6e:f0:
c8:a6:54:92:0c:1d:55:cb:8b:5d:8d:9a:73:48:9f:
07:e6:3b:ac:21:2f:4f:6e:c3:1a:4e:bf:bf:b4:d9:
8c:db:11:45:4e:f1:33:eb:60:d3:f1:3e:7b:aa:3a:
ba:79:31:ae:f6:48:64:94:07:d6:b1:a7:6a:1c:95:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:09:4C:68:5D:A4:AE:46:13:A7:06:1B:13:A4:EA:13:1F:D3:BB:FE
X509v3 Authority Key Identifier:
keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/GAlMaF2krkYTpwYbE6TqEx_Tu_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.56.0/21
91.102.56.0/21
94.136.224.0/19
109.72.16.0/20
137.221.0.0-137.221.23.255
185.48.108.0/22
Signature Algorithm: sha256WithRSAEncryption
00:9b:74:69:03:23:af:0f:01:fd:35:b2:42:03:6c:ec:99:c2:
8a:88:50:84:31:98:94:c4:63:76:25:00:74:90:4a:16:b3:d1:
c4:ca:25:05:d2:68:27:f3:2d:26:94:c8:da:15:31:32:10:e0:
8d:d2:06:09:3f:9f:33:ea:54:a3:86:d6:50:22:fc:8f:9c:86:
35:ec:e6:83:d7:73:a1:dd:7e:14:0a:a5:6d:00:51:3c:02:d2:
3e:12:71:d6:6f:5f:fe:ce:4f:5b:c3:b2:2a:93:31:06:e8:79:
dc:4f:f6:d5:e3:11:cc:45:89:43:a6:e9:f0:d6:ab:bb:f2:ca:
9c:09:e5:d3:40:32:78:01:2e:b9:66:ee:fc:31:a9:ea:07:a6:
9d:95:87:1b:a8:37:e2:4d:05:8d:09:1d:bd:9e:18:9f:e9:aa:
fe:67:0e:5f:9d:c0:85:70:2d:d1:b8:b0:33:46:ea:2a:e7:a2:
da:e8:d3:b1:54:ba:d2:36:d4:b3:ef:2f:0c:c7:8d:29:ca:85:
eb:22:7c:11:84:fa:b4:63:e4:ad:50:5e:83:67:05:e3:75:2f:
24:b1:49:f8:ce:90:c1:4c:83:6c:8d:6c:46:03:6e:a1:4b:08:
26:78:9e:bd:9f:38:33:ac:db:05:f8:01:fc:7c:85:0b:20:54:
ac:b5:9f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 04:21:27 2026 by rpki-client