Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/GBbfNR6d0u5nwBsF8xTrwEFTIJA.roa
File: GBbfNR6d0u5nwBsF8xTrwEFTIJA.roa (raw, json)
Hash identifier: 2vUhSHXNQ0OXKzt5zGJFduk9dEZI6NIu6WWA5AgTXko=
Subject key identifier: 18:16:DF:35:1E:9D:D2:EE:67:C0:1B:05:F3:14:EB:C0:41:53:20:90
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0198FF06D9FBC3B8712A02C547ADC31AB988
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/GBbfNR6d0u5nwBsF8xTrwEFTIJA.roa
Signing time: Sun 31 Aug 2025 07:28:15 +0000
ROA not before: Sun 31 Aug 2025 07:28:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48728
IP address blocks: 31.11.48.0/21 maxlen: 21
37.186.32.0/23 maxlen: 23
37.186.32.0/24 maxlen: 24
37.186.33.0/24 maxlen: 24
37.186.34.0/24 maxlen: 24
37.186.35.0/24 maxlen: 24
37.186.36.0/24 maxlen: 24
37.186.37.0/24 maxlen: 24
37.186.39.0/24 maxlen: 24
37.186.40.0/24 maxlen: 24
37.186.41.0/24 maxlen: 24
37.186.42.0/23 maxlen: 23
37.186.42.0/24 maxlen: 24
37.186.43.0/24 maxlen: 24
37.186.44.0/24 maxlen: 24
37.186.45.0/24 maxlen: 24
37.186.46.0/24 maxlen: 24
37.186.47.0/24 maxlen: 24
37.186.48.0/24 maxlen: 24
37.186.50.0/24 maxlen: 24
37.186.51.0/24 maxlen: 24
37.186.52.0/24 maxlen: 24
37.186.53.0/24 maxlen: 24
37.186.54.0/24 maxlen: 24
37.186.55.0/24 maxlen: 24
37.186.58.0/24 maxlen: 24
37.186.59.0/24 maxlen: 24
80.76.160.0/24 maxlen: 24
80.76.161.0/24 maxlen: 24
80.76.162.0/24 maxlen: 24
80.76.163.0/24 maxlen: 24
80.76.164.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.170.0/24 maxlen: 24
80.76.171.0/24 maxlen: 24
80.76.172.0/24 maxlen: 24
80.76.173.0/24 maxlen: 24
80.76.174.0/24 maxlen: 24
80.76.175.0/24 maxlen: 24
103.14.208.0/24 maxlen: 24
103.17.0.0/22 maxlen: 22
103.17.1.0/24 maxlen: 24
103.17.2.0/24 maxlen: 24
103.17.3.0/24 maxlen: 24
103.23.124.0/24 maxlen: 24
103.23.125.0/24 maxlen: 24
103.199.88.0/22 maxlen: 22
103.199.88.0/24 maxlen: 24
103.199.89.0/24 maxlen: 24
103.199.90.0/24 maxlen: 24
103.199.91.0/24 maxlen: 24
103.225.72.0/22 maxlen: 22
103.225.72.0/24 maxlen: 24
103.225.73.0/24 maxlen: 24
103.225.74.0/24 maxlen: 24
103.225.75.0/24 maxlen: 24
212.70.96.0/24 maxlen: 24
212.70.97.0/24 maxlen: 24
212.70.98.0/24 maxlen: 24
212.70.99.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
212.70.106.0/24 maxlen: 24
212.70.107.0/24 maxlen: 24
212.70.108.0/24 maxlen: 24
212.70.109.0/24 maxlen: 24
212.70.110.0/24 maxlen: 24
212.70.111.0/24 maxlen: 24
212.70.112.0/24 maxlen: 24
212.70.113.0/24 maxlen: 24
212.70.114.0/24 maxlen: 24
212.70.115.0/24 maxlen: 24
212.70.116.0/24 maxlen: 24
212.70.117.0/24 maxlen: 24
212.70.118.0/24 maxlen: 24
212.70.119.0/24 maxlen: 24
212.70.122.0/24 maxlen: 24
212.70.125.0/24 maxlen: 24
212.70.126.0/24 maxlen: 24
212.70.127.0/24 maxlen: 24
2a04:7f80::/29 maxlen: 29
2a04:7f80::/48 maxlen: 48
2a04:7f80:0:a::/64 maxlen: 64
2a04:7f80:2::/47 maxlen: 47
2a04:7f80:2::/48 maxlen: 48
2a04:7f80:3::/48 maxlen: 48
2a04:7f80:4::/47 maxlen: 47
2a04:7f80:4::/48 maxlen: 48
2a04:7f80:5::/48 maxlen: 48
2a04:7f80:10::/44 maxlen: 44
2a04:7f80:10::/48 maxlen: 48
2a04:7f80:11::/48 maxlen: 48
2a04:7f80:12::/48 maxlen: 48
2a04:7f80:13::/48 maxlen: 48
2a04:7f80:14::/48 maxlen: 48
2a04:7f80:15::/48 maxlen: 48
2a04:7f80:16::/48 maxlen: 48
2a04:7f80:17::/48 maxlen: 48
2a04:7f80:18::/48 maxlen: 48
2a04:7f80:19::/48 maxlen: 48
2a04:7f80:1a::/48 maxlen: 48
2a04:7f80:1b::/48 maxlen: 48
2a04:7f80:1c::/48 maxlen: 48
2a04:7f80:1d::/48 maxlen: 48
2a04:7f80:1e::/48 maxlen: 48
2a04:7f80:1f::/48 maxlen: 48
2a04:7f80:20::/44 maxlen: 44
2a04:7f80:20::/48 maxlen: 48
2a04:7f80:21::/48 maxlen: 48
2a04:7f80:22::/48 maxlen: 48
2a04:7f80:23::/48 maxlen: 48
2a04:7f80:24::/48 maxlen: 48
2a04:7f80:25::/48 maxlen: 48
2a04:7f80:26::/48 maxlen: 48
2a04:7f80:27::/48 maxlen: 48
2a04:7f80:28::/48 maxlen: 48
2a04:7f80:29::/48 maxlen: 48
2a04:7f80:2a::/48 maxlen: 48
2a04:7f80:2b::/48 maxlen: 48
2a04:7f80:2c::/48 maxlen: 48
2a04:7f80:2d::/48 maxlen: 48
2a04:7f80:2e::/48 maxlen: 48
2a04:7f80:2f::/48 maxlen: 48
2a04:7f80:30::/44 maxlen: 44
2a04:7f80:30::/48 maxlen: 48
2a04:7f80:31::/48 maxlen: 48
2a04:7f80:32::/48 maxlen: 48
2a04:7f80:33::/48 maxlen: 48
2a04:7f80:34::/48 maxlen: 48
2a04:7f80:35::/48 maxlen: 48
2a04:7f80:36::/48 maxlen: 48
2a04:7f80:37::/48 maxlen: 48
2a04:7f80:38::/48 maxlen: 48
2a04:7f80:39::/48 maxlen: 48
2a04:7f80:3a::/48 maxlen: 48
2a04:7f80:3b::/48 maxlen: 48
2a04:7f80:3c::/48 maxlen: 48
2a04:7f80:3d::/48 maxlen: 48
2a04:7f80:3e::/48 maxlen: 48
2a04:7f80:3f::/48 maxlen: 48
2a04:7f80:40::/45 maxlen: 45
2a04:7f80:40::/48 maxlen: 48
2a04:7f80:41::/48 maxlen: 48
2a04:7f80:42::/48 maxlen: 48
2a04:7f80:43::/48 maxlen: 48
2a04:7f80:44::/48 maxlen: 48
2a04:7f80:45::/48 maxlen: 48
2a04:7f80:46::/48 maxlen: 48
2a04:7f80:47::/48 maxlen: 48
2a04:7f80:48::/45 maxlen: 45
2a04:7f80:48::/48 maxlen: 48
2a04:7f80:49::/48 maxlen: 48
2a04:7f80:4a::/48 maxlen: 48
2a04:7f80:4b::/48 maxlen: 48
2a04:7f80:4c::/48 maxlen: 48
2a04:7f80:4d::/48 maxlen: 48
2a04:7f80:4e::/48 maxlen: 48
2a04:7f80:4f::/48 maxlen: 48
2a04:7f80:50::/45 maxlen: 45
2a04:7f80:50::/48 maxlen: 48
2a04:7f80:51::/48 maxlen: 48
2a04:7f80:52::/48 maxlen: 48
2a04:7f80:53::/48 maxlen: 48
2a04:7f80:54::/48 maxlen: 48
2a04:7f80:55::/48 maxlen: 48
2a04:7f80:56::/48 maxlen: 48
2a04:7f80:57::/48 maxlen: 48
2a04:7f80:58::/45 maxlen: 45
2a04:7f80:58::/48 maxlen: 48
2a04:7f80:59::/48 maxlen: 48
2a04:7f80:5a::/48 maxlen: 48
2a04:7f80:5b::/48 maxlen: 48
2a04:7f80:5c::/48 maxlen: 48
2a04:7f80:5d::/48 maxlen: 48
2a04:7f80:5e::/48 maxlen: 48
2a04:7f80:5f::/48 maxlen: 48
2a04:7f80:60::/44 maxlen: 44
2a04:7f80:60::/48 maxlen: 48
2a04:7f80:61::/48 maxlen: 48
2a04:7f80:62::/48 maxlen: 48
2a04:7f80:63::/48 maxlen: 48
2a04:7f80:64::/48 maxlen: 48
2a04:7f80:65::/48 maxlen: 48
2a04:7f80:66::/48 maxlen: 48
2a04:7f80:67::/48 maxlen: 48
2a04:7f80:68::/48 maxlen: 48
2a04:7f80:69::/48 maxlen: 48
2a04:7f80:6a::/48 maxlen: 48
2a04:7f80:6b::/48 maxlen: 48
2a04:7f80:6c::/48 maxlen: 48
2a04:7f80:6d::/48 maxlen: 48
2a04:7f80:6e::/48 maxlen: 48
2a04:7f80:6f::/48 maxlen: 48
2a04:7f80:88::/45 maxlen: 45
2a04:7f80:90::/45 maxlen: 45
2a04:7f80:99::/48 maxlen: 48
2a04:7f80:1000::/40 maxlen: 40
2a04:7f80:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ff:06:d9:fb:c3:b8:71:2a:02:c5:47:ad:c3:1a:b9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Aug 31 07:28:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1816df351e9dd2ee67c01b05f314ebc041532090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:94:a5:4b:a4:bd:01:45:d4:3d:bb:86:92:
13:f2:19:15:4d:bf:5e:8b:4d:a4:69:36:50:68:95:
11:00:79:45:03:c4:25:68:48:78:5f:b7:30:b1:a0:
8a:23:5d:54:89:31:99:f5:be:6f:eb:23:88:b3:14:
e3:24:ab:f0:32:6a:66:79:bf:11:90:36:7c:f2:71:
21:c1:be:01:59:d4:1b:8e:9a:06:2f:80:8f:4f:7b:
4f:f8:05:c2:22:07:46:40:9b:29:3c:ea:78:00:ec:
75:3c:95:a4:57:bd:1e:4f:85:b0:f6:61:16:08:a0:
16:bc:65:74:3a:37:d9:c8:c8:32:b3:2d:58:e9:4b:
f1:4a:07:b2:21:db:0a:f2:10:df:b7:57:b1:3c:41:
cb:97:4b:25:5b:fe:13:21:bd:2b:44:5f:93:d7:ea:
c4:5c:9e:d8:4c:38:7e:e9:1b:98:aa:2d:86:eb:ba:
43:65:11:12:1f:a9:19:0e:a7:7b:0d:b9:c3:00:e2:
66:a7:ff:f6:a9:0f:14:62:9d:08:b8:eb:99:0d:66:
aa:df:c0:c1:bb:d8:ce:57:e5:a4:af:51:10:a6:55:
18:ff:2c:d6:96:1a:1e:db:a9:ec:7e:cd:98:63:c8:
c8:a5:20:cb:76:2c:aa:3a:b6:16:7b:72:59:5b:1d:
21:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:16:DF:35:1E:9D:D2:EE:67:C0:1B:05:F3:14:EB:C0:41:53:20:90
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/GBbfNR6d0u5nwBsF8xTrwEFTIJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.32.0-37.186.37.255
37.186.39.0-37.186.48.255
37.186.50.0-37.186.55.255
37.186.58.0/23
80.76.160.0-80.76.165.255
80.76.170.0-80.76.175.255
103.14.208.0/24
103.17.0.0/22
103.23.124.0/23
103.199.88.0/22
103.225.72.0/22
212.70.96.0/22
212.70.102.0/24
212.70.106.0-212.70.119.255
212.70.122.0/24
212.70.125.0-212.70.127.255
IPv6:
2a04:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
45:3b:95:60:b9:ca:0b:96:94:a2:de:a6:4c:f1:51:99:d8:16:
e9:00:70:83:c0:c1:20:a6:36:84:d2:e8:bb:e7:df:fa:09:8e:
56:69:a9:bd:dc:5d:e0:8a:3e:0a:36:70:08:ff:04:13:a9:9e:
39:a4:4f:39:5d:bd:4f:ae:6c:27:bb:86:3a:02:c5:dc:1e:6b:
11:df:2a:c9:f1:68:bb:4b:7a:3c:eb:18:34:f2:ad:dc:c3:cf:
f2:e8:27:4c:77:d4:bf:b5:b8:c3:83:d4:de:4d:82:49:8f:34:
dc:42:9f:e6:cd:c2:b2:75:c7:1d:9d:66:1f:05:92:3e:f9:d0:
08:2b:9b:35:8d:98:eb:7b:9d:4c:d6:49:72:ff:1e:ad:ea:4f:
2e:1b:05:b8:c6:ab:2d:8d:0d:9a:c0:02:ae:0b:12:ef:17:0d:
67:98:b2:90:e9:fb:60:37:4c:6e:2b:0a:82:db:55:60:97:d8:
c6:ce:52:40:a7:e7:4e:9b:85:30:0a:78:20:b6:fb:1c:64:40:
0b:fb:aa:26:b3:95:e1:0d:91:79:cc:02:51:7b:0a:4b:2b:1f:
a4:bd:39:20:62:bc:e0:04:02:50:15:cf:af:19:e1:48:c8:c1:
90:70:c2:00:75:1d:86:d9:52:83:0f:68:e6:fd:3a:28:98:1f:
57:33:44:7e
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZj/Btn7w7hxKgLFR63DGrmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5
YTFlMzQwHhcNMjUwODMxMDcyODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODE2ZGYzNTFlOWRkMmVlNjdjMDFiMDVmMzE0ZWJjMDQxNTMyMDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuKUpUukvQFF1D27hpIT8hkVTb9e
i02kaTZQaJURAHlFA8QlaEh4X7cwsaCKI11UiTGZ9b5v6yOIsxTjJKvwMmpmeb8R
kDZ88nEhwb4BWdQbjpoGL4CPT3tP+AXCIgdGQJspPOp4AOx1PJWkV70eT4Ww9mEW
CKAWvGV0OjfZyMgysy1Y6UvxSgeyIdsK8hDft1exPEHLl0slW/4TIb0rRF+T1+rE
XJ7YTDh+6RuYqi2G67pDZRESH6kZDqd7DbnDAOJmp//2qQ8UYp0IuOuZDWaq38DB
u9jOV+Wkr1EQplUY/yzWlhoe26nsfs2YY8jIpSDLdiyqOrYWe3JZWx0hvwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFBgW3zUendLuZ8AbBfMU68BBUyCQMB8GA1UdIwQY
MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt
ZWM1Yjg4ZDAxMzhhLzEvR0JiZk5SNmQwdTVud0JzRjh4VHJ3RUZUSUpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh
LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHKBggrBgEFBQcBBwEB/wSBujCBtzCBpQQCAAEwgZ4DBAMf
CzAwDAMEBSW6IAMEASW6JDAMAwQAJbonAwQAJbowMAwDBAElujIDBAMlujADBAEl
ujowDAMEBVBMoAMEAVBMpDAMAwQBUEyqAwQEUEygAwQAZw7QAwQCZxEAAwQBZxd8
AwQCZ8dYAwQCZ+FIAwQC1EZgAwQA1EZmMAwDBAHURmoDBAPURnADBADURnowDAME
ANRGfQMEB9RGADANBAIAAjAHAwUDKgR/gDANBgkqhkiG9w0BAQsFAAOCAQEARTuV
YLnKC5aUot6mTPFRmdgW6QBwg8DBIKY2hNLou+ff+gmOVmmpvdxd4Io+CjZwCP8E
E6meOaRPOV29T65sJ7uGOgLF3B5rEd8qyfFou0t6POsYNPKt3MPP8ugnTHfUv7W4
w4PU3k2CSY803EKf5s3CsnXHHZ1mHwWSPvnQCCubNY2Y63udTNZJcv8erepPLhsF
uMarLY0NmsACrgsS7xcNZ5iykOn7YDdMbisKgttVYJfYxs5SQKfnTpuFMAp4ILb7
HGRAC/uqJrOV4Q2RecwCUXsKSysfpL05IGK84AQCUBXPrxnhSMjBkHDCAHUdhtlS
gw9o5v06KJgfVzNEfg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 23:01:28 2025 by rpki-client