Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/sg2X_VSrqiGQvz9mfUdDVRCE4Es.roa
File: sg2X_VSrqiGQvz9mfUdDVRCE4Es.roa (raw, json)
Hash identifier: oCL5mU98jaR6/xfDV0sQYsVGrhmVt5HTGJ23DlDxp5g=
Subject key identifier: B2:0D:97:FD:54:AB:AA:21:90:BF:3F:66:7D:47:43:55:10:84:E0:4B
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01A00C545235FDBE36DE553DD018CC656D06
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/sg2X_VSrqiGQvz9mfUdDVRCE4Es.roa
Signing time: Sun 16 Aug 2026 20:47:27 +0000
ROA not before: Sun 16 Aug 2026 20:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59711
IP address blocks: 5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
77.83.196.0/24 maxlen: 24
77.83.197.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
79.141.164.0/23 maxlen: 23
79.141.174.0/23 maxlen: 23
80.75.215.0/24 maxlen: 24
85.158.108.0/24 maxlen: 24
85.158.109.0/24 maxlen: 24
85.158.110.0/24 maxlen: 24
89.44.80.0/24 maxlen: 24
89.150.40.0/24 maxlen: 24
89.150.45.0/24 maxlen: 24
89.150.48.0/24 maxlen: 24
89.150.57.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
91.220.8.0/24 maxlen: 24
94.126.224.0/24 maxlen: 24
94.126.225.0/24 maxlen: 24
94.126.226.0/24 maxlen: 24
94.126.227.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.80.54.0/23 maxlen: 23
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
185.104.192.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
185.117.90.0/23 maxlen: 23
185.123.102.0/24 maxlen: 24
185.174.133.0/24 maxlen: 24
185.174.135.0/24 maxlen: 24
185.221.222.0/24 maxlen: 24
185.221.223.0/24 maxlen: 24
185.223.57.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
185.253.116.0/24 maxlen: 24
185.253.117.0/24 maxlen: 24
185.253.118.0/24 maxlen: 24
193.24.121.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
193.111.208.0/24 maxlen: 24
194.33.28.0/24 maxlen: 24
195.95.155.0/24 maxlen: 24
212.2.32.0/24 maxlen: 24
212.2.33.0/24 maxlen: 24
212.2.34.0/24 maxlen: 24
212.2.35.0/24 maxlen: 24
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:6::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:12::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
2a01:8640:14::/48 maxlen: 48
2a01:8640:15::/48 maxlen: 48
2a01:8640:17::/48 maxlen: 48
2a01:8640:18::/48 maxlen: 48
2a01:8640:1a::/48 maxlen: 48
2a01:8640:1b::/48 maxlen: 48
2a01:8640:1c::/48 maxlen: 48
2a01:8640:1d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 19:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0c:54:52:35:fd:be:36:de:55:3d:d0:18:cc:65:6d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Aug 16 20:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b20d97fd54abaa2190bf3f667d4743551084e04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:3c:43:1d:ce:0f:16:53:8f:8c:aa:49:39:
78:a0:c9:43:74:ae:22:b7:f1:43:1b:c7:93:3d:18:
a8:1c:74:30:09:84:b0:c4:da:85:ed:fe:ff:82:ef:
49:ae:ad:3a:96:55:01:c2:7a:43:67:1d:e2:0a:07:
9d:20:ac:c7:88:57:92:c3:94:50:79:18:2c:88:29:
9d:0b:a2:0f:fc:63:0b:24:08:f8:47:d7:5d:9b:58:
0e:7b:9a:ba:ea:2e:fb:0f:ff:9e:12:fa:5d:47:5e:
5a:c4:4a:1f:8a:60:ac:eb:18:30:70:0c:5b:e4:0a:
da:6b:41:b0:c2:83:84:89:78:1d:8e:f6:15:3f:a1:
0e:d0:d9:f4:b0:ed:87:38:c7:b2:78:e4:73:e6:4a:
f6:10:1f:8b:33:e4:44:05:94:7e:a8:bd:f3:ab:1c:
b5:4d:68:9d:db:94:9e:d3:c5:6a:b0:e2:b1:8e:5a:
b1:ed:b9:52:1e:24:c9:2f:1d:96:73:b8:42:9c:ef:
52:6a:a2:c6:6b:7f:cc:d8:98:9c:0c:8d:24:1c:86:
f4:75:9a:59:a0:6c:a3:f8:0a:7f:e3:60:cc:19:ea:
2b:e4:73:cc:bc:7f:7d:ca:47:88:7d:1a:6c:a9:82:
90:8e:bd:0d:b2:e1:b1:e9:37:32:0a:3c:e6:19:57:
b9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0D:97:FD:54:AB:AA:21:90:BF:3F:66:7D:47:43:55:10:84:E0:4B
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/sg2X_VSrqiGQvz9mfUdDVRCE4Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0-77.83.198.255
79.141.164.0/23
79.141.174.0/23
80.75.215.0/24
85.158.108.0-85.158.110.255
89.44.80.0/24
89.150.40.0/24
89.150.45.0/24
89.150.48.0/24
89.150.57.0/24
91.193.18.0/24
91.220.8.0/24
94.126.224.0/22
185.40.86.0/24
185.80.52.0/22
185.81.114.0/23
185.104.192.0-185.104.194.255
185.117.88.0/22
185.123.102.0/24
185.174.133.0/24
185.174.135.0/24
185.221.222.0/23
185.223.57.0/24
185.235.137.0-185.235.138.255
185.253.116.0-185.253.118.255
193.24.121.0/24
193.42.36.0/24
193.42.39.0/24
193.111.208.0/24
194.33.28.0/24
195.95.155.0/24
212.2.32.0/22
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:6::/48
2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:15:ffff:ffff:ffff:ffff:ffff
2a01:8640:17::-2a01:8640:18:ffff:ffff:ffff:ffff:ffff
2a01:8640:1a::-2a01:8640:1d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
98:ed:a7:ab:22:ec:b2:d9:fc:93:08:ac:d4:68:51:5f:1b:a7:
01:49:b4:4a:7d:9a:bb:2f:23:ef:a8:85:10:9a:ed:de:78:8c:
78:36:7d:19:15:63:ea:41:16:0e:21:39:9a:8c:4e:12:6e:11:
fe:0e:1b:14:04:48:9f:e7:ec:4e:44:f9:0d:73:81:b9:6a:6c:
53:35:e1:e9:a7:2d:d3:a0:19:1a:8c:10:80:5e:c7:4f:2a:30:
60:11:8a:b2:97:c3:53:d5:36:4e:e4:9c:21:b4:1c:fa:11:b7:
3f:b3:a4:9e:85:0d:c2:50:5c:20:82:7f:c8:20:59:ea:bf:68:
80:5f:8b:3b:84:64:95:4e:f7:74:a3:32:98:c0:0a:04:f7:83:
41:6a:9a:ba:1b:78:f0:c7:e6:01:09:48:8f:b5:19:36:db:1c:
5c:31:e1:8a:b9:ba:5f:a4:59:08:27:8c:bc:b6:a5:67:55:d5:
7d:f1:d6:fa:ba:a5:9a:f3:85:32:23:c2:5a:a3:8d:8b:df:68:
b5:53:84:52:cf:83:ea:5e:4c:ab:0a:1e:79:39:63:26:e4:a3:
be:fd:ef:48:7e:e0:63:09:54:95:62:69:f4:89:8a:27:07:99:
89:76:00:60:6c:2d:14:5d:b7:04:35:a2:0b:41:09:69:03:50:
04:25:87:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 05:49:53 2026 by rpki-client