Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/pGu8GcbbZbLZt-kWBlX8mkJ2KcQ.roa
File: pGu8GcbbZbLZt-kWBlX8mkJ2KcQ.roa (raw, json)
Hash identifier: ZyqI4jtad4ACDtzdoYJgjoRlgqeJuJh17Jd3WnDxfww=
Subject key identifier: A4:6B:BC:19:C6:DB:65:B2:D9:B7:E9:16:06:55:FC:9A:42:76:29:C4
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 019FD5BD3361EC4396A5E9264A47FAF359C2
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/pGu8GcbbZbLZt-kWBlX8mkJ2KcQ.roa
Signing time: Thu 06 Aug 2026 06:22:54 +0000
ROA not before: Thu 06 Aug 2026 06:22:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43872
IP address blocks: 5.253.252.0/22 maxlen: 22
45.136.108.0/24 maxlen: 24
89.222.48.0/20 maxlen: 20
92.118.111.0/24 maxlen: 24
176.101.169.0/24 maxlen: 24
185.183.20.0/22 maxlen: 22
185.187.61.0/24 maxlen: 24
185.253.176.0/22 maxlen: 22
193.105.189.0/24 maxlen: 24
193.247.94.0/24 maxlen: 24
193.247.101.0/24 maxlen: 24
193.247.103.0/24 maxlen: 24
193.247.165.0/24 maxlen: 24
195.234.28.0/24 maxlen: 24
217.198.183.0/24 maxlen: 24
2a0b:180::/29 maxlen: 29
2a0d:1e80::/29 maxlen: 29
2a10:c740::/29 maxlen: 29
2a10:c7c0::/29 maxlen: 29
2a10:c8c0::/29 maxlen: 29
2a10:c9c0::/29 maxlen: 29
2a10:cac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:bd:33:61:ec:43:96:a5:e9:26:4a:47:fa:f3:59:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Aug 6 06:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a46bbc19c6db65b2d9b7e9160655fc9a427629c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:0c:95:39:fa:76:f8:c1:08:04:2e:bc:d4:
77:22:0b:11:31:df:8d:f4:1f:e0:47:5d:10:50:4c:
a8:c0:9c:9d:30:b2:f7:c3:7b:30:f1:6e:6d:88:85:
e3:07:87:1c:d1:f0:2e:ed:88:02:a9:4c:e7:93:92:
f8:f8:7d:3f:f2:83:a4:9b:b4:53:9a:b1:c5:51:39:
83:68:b3:ec:11:17:f6:d6:7d:05:5e:25:c9:dd:3b:
3d:49:57:5c:3e:4f:b9:41:36:84:8e:75:7e:4c:62:
9e:5f:bc:fa:84:24:fd:f6:4d:bf:38:02:8e:73:50:
6c:3b:ac:3b:3d:2f:f9:eb:89:7b:7e:69:7d:e6:53:
33:17:a0:4b:15:82:6e:28:bc:4f:25:7f:65:60:c7:
96:bf:66:b0:5b:e2:71:2d:0e:a0:30:bb:cd:f8:22:
68:c5:43:6d:db:52:5d:46:bc:31:44:f4:39:b6:21:
7e:fc:de:11:ee:67:fc:fe:7c:74:41:4a:25:5b:69:
e3:43:bd:80:3a:7b:06:0a:68:74:8f:91:bf:2b:10:
4c:c1:81:eb:56:cf:95:4b:5b:99:7a:bc:e8:91:04:
0b:5b:84:3b:32:0e:10:48:d9:af:83:9e:bf:8a:5f:
ca:5c:46:38:fe:af:68:96:f9:f6:b5:95:81:84:0f:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6B:BC:19:C6:DB:65:B2:D9:B7:E9:16:06:55:FC:9A:42:76:29:C4
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/pGu8GcbbZbLZt-kWBlX8mkJ2KcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.252.0/22
45.136.108.0/24
89.222.48.0/20
92.118.111.0/24
176.101.169.0/24
185.183.20.0/22
185.187.61.0/24
185.253.176.0/22
193.105.189.0/24
193.247.94.0/24
193.247.101.0/24
193.247.103.0/24
193.247.165.0/24
195.234.28.0/24
217.198.183.0/24
IPv6:
2a0b:180::/29
2a0d:1e80::/29
2a10:c740::/29
2a10:c7c0::/29
2a10:c8c0::/29
2a10:c9c0::/29
2a10:cac0::/29
Signature Algorithm: sha256WithRSAEncryption
29:da:db:8d:7a:c6:28:8b:d6:ec:e1:2d:29:4e:21:55:9e:88:
c9:af:b3:44:1f:61:1a:93:36:93:cf:6c:65:81:c2:82:da:59:
ef:fb:59:4a:be:02:a5:1e:65:bd:2a:87:3b:de:c9:32:5a:05:
9c:22:11:71:93:68:92:26:ba:3d:25:27:fc:7c:ab:5a:bf:61:
6c:ad:0d:b9:ab:6b:cd:c5:c8:e5:1c:cb:ce:e0:1b:d7:a4:4d:
07:9f:27:83:33:8c:e2:f9:52:6a:fc:1e:b2:5c:60:13:a9:48:
2d:3a:1d:2f:cc:3e:1a:e2:47:31:5a:43:7c:67:ac:51:09:02:
ff:61:68:33:49:25:9e:09:a3:e2:07:f2:2f:be:1a:b1:87:bd:
41:18:ee:03:41:f2:30:a2:a2:25:98:ab:c0:1d:eb:dc:84:7c:
0d:67:c3:bf:03:61:9c:2d:ff:6b:85:56:c2:08:70:b4:9a:70:
f3:b8:2f:a3:30:9f:1d:7b:0b:06:54:80:1a:1f:5c:2f:3d:a8:
28:99:26:a1:89:af:26:0f:af:9e:24:1d:a4:b0:d7:6f:25:4d:
e1:47:8e:81:81:aa:37:79:ff:a2:f3:10:5f:ba:c3:a2:81:c6:
d0:35:fe:d8:4d:52:11:5a:f2:e4:03:fb:27:c2:70:f2:94:42:
80:e5:4c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:12 2026 by rpki-client