Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/jG2gqQaKxjCZUGN5RVY6YoSjnLY.roa
File: jG2gqQaKxjCZUGN5RVY6YoSjnLY.roa (raw, json)
Hash identifier: hmBFQU8ZDCZ0uTqJBMHGXXuDV4olTPedHjkCYLm+KBA=
Subject key identifier: 8C:6D:A0:A9:06:8A:C6:30:99:50:63:79:45:56:3A:62:84:A3:9C:B6
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019E7EC96046470480695D18A6F04B9EDE5F
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/jG2gqQaKxjCZUGN5RVY6YoSjnLY.roa
Signing time: Sun 31 May 2026 16:06:27 +0000
ROA not before: Sun 31 May 2026 16:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44285
IP address blocks: 5.1.43.0/24 maxlen: 24
37.32.32.0/21 maxlen: 21
37.32.32.0/22 maxlen: 22
37.32.32.0/24 maxlen: 24
37.32.33.0/24 maxlen: 24
37.32.34.0/24 maxlen: 24
37.32.35.0/24 maxlen: 24
37.32.37.0/24 maxlen: 24
37.32.38.0/24 maxlen: 24
37.32.39.0/24 maxlen: 24
37.75.243.0/24 maxlen: 24
37.75.244.0/22 maxlen: 22
37.75.244.0/24 maxlen: 24
37.75.245.0/24 maxlen: 24
37.75.246.0/24 maxlen: 24
37.75.247.0/24 maxlen: 24
45.9.252.0/22 maxlen: 24
45.9.252.0/24 maxlen: 24
45.9.253.0/24 maxlen: 24
45.9.254.0/24 maxlen: 24
45.87.4.0/23 maxlen: 24
45.140.224.0/22 maxlen: 22
46.28.72.0/21 maxlen: 24
46.28.72.0/24 maxlen: 24
46.28.73.0/24 maxlen: 24
46.28.74.0/24 maxlen: 24
78.110.120.0/22 maxlen: 24
80.249.114.0/24 maxlen: 24
84.47.224.0/21 maxlen: 21
84.47.224.0/22 maxlen: 22
84.47.224.0/24 maxlen: 24
84.47.225.0/24 maxlen: 24
84.47.226.0/24 maxlen: 24
84.47.227.0/24 maxlen: 24
84.47.228.0/22 maxlen: 22
84.47.228.0/24 maxlen: 24
84.47.229.0/24 maxlen: 24
84.47.230.0/23 maxlen: 24
84.47.231.0/24 maxlen: 24
85.198.24.0/22 maxlen: 24
88.135.37.0/24 maxlen: 24
88.135.38.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
91.236.168.0/23 maxlen: 23
91.236.168.0/24 maxlen: 24
91.236.169.0/24 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.212.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
185.51.200.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.121.128.0/22 maxlen: 24
185.121.128.0/24 maxlen: 24
185.121.129.0/24 maxlen: 24
185.121.130.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.128.136.0/24 maxlen: 24
185.128.137.0/24 maxlen: 24
185.128.138.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
185.141.132.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
185.141.134.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
185.182.248.0/22 maxlen: 22
185.182.248.0/23 maxlen: 23
185.182.250.0/23 maxlen: 23
185.182.250.0/24 maxlen: 24
185.182.251.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
195.110.38.0/23 maxlen: 23
195.110.38.0/24 maxlen: 24
195.110.39.0/24 maxlen: 24
217.172.120.0/21 maxlen: 24
217.172.124.0/23 maxlen: 23
217.172.126.0/23 maxlen: 23
217.172.127.0/24 maxlen: 24
2a02:828::/29 maxlen: 29
2a02:828::/32 maxlen: 32
2a02:828::/48 maxlen: 48
2a02:828::/64 maxlen: 64
2a02:828:1::/48 maxlen: 48
2a02:829::/32 maxlen: 32
2a02:82a::/32 maxlen: 32
2a02:82b::/32 maxlen: 32
2a02:82c::/32 maxlen: 32
2a02:82d::/32 maxlen: 32
2a02:82e::/32 maxlen: 32
2a02:82f::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7e:c9:60:46:47:04:80:69:5d:18:a6:f0:4b:9e:de:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: May 31 16:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c6da0a9068ac6309950637945563a6284a39cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:08:86:48:88:a2:6b:b3:b7:0f:fb:aa:60:
44:06:2d:ff:bf:53:02:de:b6:8d:4a:78:99:4e:a2:
fb:ce:6a:de:66:ab:27:1d:fb:00:1b:22:0e:71:27:
0d:92:d8:08:6c:61:85:58:50:e3:ac:c8:ca:76:4a:
cd:43:58:ad:4e:3d:99:09:77:d3:c6:3a:d7:d6:2e:
66:c4:98:c8:df:4e:df:23:e5:b9:d8:86:a4:d3:d2:
94:5e:36:fb:0b:91:62:75:db:0f:c4:16:66:f1:e4:
71:74:09:ad:f9:fd:84:53:c6:a8:3d:45:16:e0:3c:
39:b2:dd:0c:dd:2d:2e:7b:f0:1b:6f:e7:1b:19:f4:
2f:be:f1:fb:6b:49:6b:b8:78:56:50:94:79:61:f4:
1a:e5:40:2a:b6:2f:5e:67:97:6a:c1:33:67:f1:4c:
ae:18:61:d1:49:c6:c6:de:e7:00:83:05:71:e9:df:
64:f5:93:7b:68:75:30:8e:e9:f7:ac:54:94:9d:9f:
ce:18:1d:73:98:3d:b7:2c:52:0b:4a:92:85:a0:3a:
32:d7:e5:f3:91:be:5d:84:aa:7c:b2:e7:b0:0a:29:
4e:91:0e:b4:37:c1:50:e3:9e:e5:ee:fe:63:eb:6e:
1e:03:34:b1:3d:a2:1c:ce:af:0d:d3:d8:5b:df:1c:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6D:A0:A9:06:8A:C6:30:99:50:63:79:45:56:3A:62:84:A3:9C:B6
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/jG2gqQaKxjCZUGN5RVY6YoSjnLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.43.0/24
37.32.32.0/21
37.75.243.0-37.75.247.255
45.9.252.0/22
45.87.4.0/23
45.140.224.0/22
46.28.72.0/21
78.110.120.0/22
80.249.114.0/24
84.47.224.0/21
85.198.24.0/22
88.135.37.0-88.135.39.255
91.236.168.0/23
185.18.212.0/22
185.51.200.0/22
185.121.128.0/22
185.128.136.0/22
185.141.132.0/22
185.182.248.0/22
188.209.152.0/23
195.110.38.0/23
217.172.120.0/21
IPv6:
2a02:828::/29
Signature Algorithm: sha256WithRSAEncryption
8f:d5:6c:80:ea:08:ed:0c:7a:b3:46:f1:28:ad:3c:ec:19:21:
ba:fc:b2:13:60:42:ea:de:f5:e7:f4:70:3f:8b:74:87:27:af:
8d:80:94:db:a1:0c:d6:28:7f:8a:98:8d:bf:67:1f:0f:99:81:
ff:d2:58:c9:b2:ba:54:c3:ae:6b:cb:b6:82:c6:ca:ff:67:3d:
7c:bc:07:6f:6a:89:06:b4:85:86:bb:ca:c5:db:0c:6a:4b:02:
41:4c:a7:11:78:09:0a:38:dd:29:76:66:c4:ee:a0:03:7c:87:
b0:33:7e:bd:fc:48:35:21:30:b3:87:a0:54:99:67:06:c5:6d:
0f:a4:5a:55:0d:08:f9:e8:c6:87:0a:90:d7:a0:60:e2:a2:8c:
e5:7f:4c:22:74:13:1b:0e:a3:7b:dc:c9:c1:e7:bd:b1:fa:3d:
81:7b:f6:41:1f:c8:59:3b:65:e2:61:4f:d0:2b:79:af:52:70:
1f:eb:08:03:70:21:43:69:6b:38:b2:14:1c:3c:69:c8:30:68:
16:28:41:c0:6a:81:c6:d3:88:b0:1b:e6:e9:05:7f:d9:f9:a9:
33:03:21:9a:bf:62:7a:35:6a:38:77:8b:f4:da:8f:81:b5:c0:
95:51:54:96:c1:a9:1f:65:3f:c8:69:8b:5a:5c:89:39:29:a5:
21:58:1e:e2
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgISAZ5+yWBGRwSAaV0YpvBLnt5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk
OGYwNjUwHhcNMjYwNTMxMTYwNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzZkYTBhOTA2OGFjNjMwOTk1MDYzNzk0NTU2M2E2Mjg0YTM5Y2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt8IhkiIomuztw/7qmBEBi3/v1MC
3raNSniZTqL7zmreZqsnHfsAGyIOcScNktgIbGGFWFDjrMjKdkrNQ1itTj2ZCXfT
xjrX1i5mxJjI307fI+W52Iak09KUXjb7C5FiddsPxBZm8eRxdAmt+f2EU8aoPUUW
4Dw5st0M3S0ue/Abb+cbGfQvvvH7a0lruHhWUJR5YfQa5UAqti9eZ5dqwTNn8Uyu
GGHRScbG3ucAgwVx6d9k9ZN7aHUwjun3rFSUnZ/OGB1zmD23LFILSpKFoDoy1+Xz
kb5dhKp8suewCilOkQ60N8FQ457l7v5j624eAzSxPaIczq8N09hb3xxqNQIDAQAB
o4ICqzCCAqcwHQYDVR0OBBYEFIxtoKkGisYwmVBjeUVWOmKEo5y2MB8GA1UdIwQY
MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt
MDM2NzI2OGZmODcxLzEvakcyZ3FRYUt4akNaVUdONVJWWTZZb1NqbkxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx
LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHABggrBgEFBQcBBwEB/wSBsDCBrTCBmwQCAAEwgZQDBAAF
ASsDBAMlICAwDAMEACVL8wMEAyVL8AMEAi0J/AMEAS1XBAMEAi2M4AMEAy4cSAME
Ak5ueAMEAFD5cgMEA1Qv4AMEAlXGGDAMAwQAWIclAwQDWIcgAwQBW+yoAwQCuRLU
AwQCuTPIAwQCuXmAAwQCuYCIAwQCuY2EAwQCubb4AwQBvNGYAwQBw24mAwQD2ax4
MA0EAgACMAcDBQMqAggoMA0GCSqGSIb3DQEBCwUAA4IBAQCP1WyA6gjtDHqzRvEo
rTzsGSG6/LITYELq3vXn9HA/i3SHJ6+NgJTboQzWKH+KmI2/Zx8PmYH/0ljJsrpU
w65ry7aCxsr/Zz18vAdvaokGtIWGu8rF2wxqSwJBTKcReAkKON0pdmbE7qADfIew
M369/Eg1ITCzh6BUmWcGxW0PpFpVDQj56MaHCpDXoGDioozlf0widBMbDqN73MnB
572x+j2Be/ZBH8hZO2XiYU/QK3mvUnAf6wgDcCFDaWs4shQcPGnIMGgWKEHAaoHG
04iwG+bpBX/Z+akzAyGav2J6NWo4d4v02o+BtcCVUVSWwakfZT/IaYtaXIk5KaUh
WB7i
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:31:01 2026 by rpki-client