Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/GPDxlZ6Mgtc8M9R7NfXsb6Do6ys.roa
File: GPDxlZ6Mgtc8M9R7NfXsb6Do6ys.roa (raw, json)
Hash identifier: fxquXCdybvfXDDMRSE+/PppS1K/AZObL7YLYVgkksi8=
Subject key identifier: 18:F0:F1:95:9E:8C:82:D7:3C:33:D4:7B:35:F5:EC:6F:A0:E8:EB:2B
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019E516424A93D7EDBB65D6AFA976CB660C0
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/GPDxlZ6Mgtc8M9R7NfXsb6Do6ys.roa
Signing time: Fri 22 May 2026 20:32:57 +0000
ROA not before: Fri 22 May 2026 20:32:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16003
IP address blocks: 31.172.74.0/24 maxlen: 24
31.172.78.0/24 maxlen: 24
79.132.137.0/24 maxlen: 24
79.132.139.0/24 maxlen: 24
81.85.76.0/24 maxlen: 24
89.127.195.0/24 maxlen: 24
89.127.202.0/24 maxlen: 24
89.127.205.0/24 maxlen: 24
89.127.206.0/24 maxlen: 24
89.127.211.0/24 maxlen: 24
89.127.214.0/24 maxlen: 24
89.127.216.0/24 maxlen: 24
89.127.219.0/24 maxlen: 24
89.127.221.0/24 maxlen: 24
89.127.223.0/24 maxlen: 24
103.75.125.0/24 maxlen: 24
103.75.126.0/24 maxlen: 24
162.248.161.0/24 maxlen: 24
185.18.52.0/22 maxlen: 22
185.18.52.0/24 maxlen: 24
185.21.9.0/24 maxlen: 24
185.21.10.0/24 maxlen: 24
194.154.26.0/24 maxlen: 24
213.239.157.0/24 maxlen: 24
213.239.159.0/24 maxlen: 24
217.177.11.0/24 maxlen: 24
217.177.73.0/24 maxlen: 24
217.194.148.0/24 maxlen: 24
2a02:6b40:8002::/48 maxlen: 48
2a02:6b40:8003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:64:24:a9:3d:7e:db:b6:5d:6a:fa:97:6c:b6:60:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: May 22 20:32:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18f0f1959e8c82d73c33d47b35f5ec6fa0e8eb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:90:7d:3e:2c:ef:00:03:c1:2c:37:4e:01:
16:c7:32:64:b2:8c:75:4b:41:a4:0e:cf:f5:29:df:
39:1d:1d:ff:36:2b:90:28:17:06:47:9f:f1:7a:d8:
a2:fb:06:61:35:7f:9f:88:2f:94:92:74:26:67:72:
3d:b7:f8:59:eb:73:8a:fa:ce:01:c0:dc:2e:4a:fe:
3c:01:91:08:06:bf:ba:76:8b:e1:01:15:b3:78:36:
66:6e:b4:22:4e:29:f7:17:6a:fa:07:1d:9b:ef:4b:
c2:e6:57:00:0f:68:9a:b7:c8:be:39:23:e0:16:fe:
ab:55:c7:d8:a0:c5:34:45:4c:d6:5c:0b:2c:47:80:
2a:ca:3a:97:1a:6c:b2:74:db:0d:0f:62:e6:a9:bf:
5e:a4:3e:9a:64:d4:34:8a:96:0a:1f:cd:7a:bd:96:
b0:c8:a4:ef:be:4e:74:5f:2f:82:5c:f2:33:16:4d:
94:ce:1f:48:26:ad:47:ee:b6:4d:80:9a:03:d6:ab:
03:5d:ab:ee:f0:04:ba:40:15:ca:29:af:38:79:1f:
43:d2:2f:81:48:ac:bb:7b:32:b9:f3:11:46:68:76:
3c:c7:fe:61:46:7c:76:51:31:c2:a9:ba:e5:36:de:
4f:c2:c7:94:f0:7b:57:ad:9d:56:60:82:bb:49:ab:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F0:F1:95:9E:8C:82:D7:3C:33:D4:7B:35:F5:EC:6F:A0:E8:EB:2B
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/GPDxlZ6Mgtc8M9R7NfXsb6Do6ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.74.0/24
31.172.78.0/24
79.132.137.0/24
79.132.139.0/24
81.85.76.0/24
89.127.195.0/24
89.127.202.0/24
89.127.205.0-89.127.206.255
89.127.211.0/24
89.127.214.0/24
89.127.216.0/24
89.127.219.0/24
89.127.221.0/24
89.127.223.0/24
103.75.125.0-103.75.126.255
162.248.161.0/24
185.18.52.0/22
185.21.9.0-185.21.10.255
194.154.26.0/24
213.239.157.0/24
213.239.159.0/24
217.177.11.0/24
217.177.73.0/24
217.194.148.0/24
IPv6:
2a02:6b40:8002::/47
Signature Algorithm: sha256WithRSAEncryption
68:e0:93:6c:c2:c9:34:28:61:92:d1:36:0c:b5:33:b6:a5:a1:
d2:39:ef:00:89:e4:f3:fa:5d:34:8d:d7:3e:eb:a3:32:b7:47:
5c:48:65:0a:db:59:ca:2b:c1:1c:96:d0:57:05:61:0b:67:0f:
0c:11:35:a3:6f:ff:20:42:88:7c:75:48:96:e0:30:c4:57:51:
79:f7:ea:1b:99:f6:28:b6:eb:f2:18:70:0f:b6:fe:4e:35:e1:
6d:de:3e:d3:19:24:06:11:59:c9:87:81:61:9b:cd:47:82:d6:
e8:90:08:65:16:95:70:8c:2d:97:1e:49:91:c0:f9:ce:a4:76:
d1:6f:d2:18:92:67:f5:74:51:e1:e4:5d:af:40:f3:2d:7b:fc:
01:f7:97:8e:43:c6:37:23:f7:e1:95:f4:a8:2a:7d:50:fb:94:
84:d6:65:5a:a1:f2:90:34:b1:e2:01:ac:b1:93:a2:66:52:53:
92:37:45:ab:67:d2:d7:a0:42:54:ec:5c:a3:33:8d:71:88:25:
01:24:f5:7e:9a:16:c4:fe:e2:9a:57:33:6c:ab:b4:eb:be:1f:
c9:01:6e:fe:0c:71:60:42:b4:3d:ef:af:3a:00:78:d4:e3:26:
61:0f:35:c6:3b:56:60:a4:81:0f:d8:ea:0c:f8:de:e1:bd:2e:
db:ce:40:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:42 2026 by rpki-client