Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/gkRgRPBCDAqfUl9puN6YH8psk8w.roa
File: gkRgRPBCDAqfUl9puN6YH8psk8w.roa (raw, json)
Hash identifier: jvubexYL380wIfUiTc5mHO0cZgLdl9m+TBhjOWzNRFM=
Subject key identifier: 82:44:60:44:F0:42:0C:0A:9F:52:5F:69:B8:DE:98:1F:CA:6C:93:CC
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 01A144E22A67B67FCCE3714FDD9B84184487
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/gkRgRPBCDAqfUl9puN6YH8psk8w.roa
Signing time: Fri 16 Oct 2026 13:23:55 +0000
ROA not before: Fri 16 Oct 2026 13:23:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208677
IP address blocks: 31.40.248.0/23 maxlen: 23
37.18.8.0/23 maxlen: 23
37.18.10.0/24 maxlen: 24
37.18.22.0/24 maxlen: 24
37.18.72.0/23 maxlen: 23
37.18.100.0/23 maxlen: 23
37.18.102.0/24 maxlen: 24
37.18.107.0/24 maxlen: 24
37.18.108.0/22 maxlen: 22
37.18.112.0/23 maxlen: 23
37.18.114.0/24 maxlen: 24
37.18.115.0/24 maxlen: 24
37.18.116.0/22 maxlen: 22
37.18.120.0/23 maxlen: 23
37.18.122.0/24 maxlen: 24
37.44.196.0/23 maxlen: 23
37.44.198.0/24 maxlen: 24
37.230.139.0/24 maxlen: 24
37.230.179.0/24 maxlen: 24
37.230.180.0/23 maxlen: 23
37.230.180.0/24 maxlen: 24
37.230.184.0/23 maxlen: 23
37.230.186.0/24 maxlen: 24
37.230.192.0/21 maxlen: 21
37.230.224.0/24 maxlen: 24
37.230.233.0/24 maxlen: 24
45.9.24.0/22 maxlen: 22
45.89.224.0/22 maxlen: 22
45.132.176.0/22 maxlen: 22
45.136.146.0/23 maxlen: 23
45.151.30.0/23 maxlen: 23
45.155.204.0/23 maxlen: 23
46.16.36.0/24 maxlen: 24
46.243.141.0/24 maxlen: 24
46.243.142.0/23 maxlen: 23
46.243.172.0/24 maxlen: 24
46.243.201.0/24 maxlen: 24
46.243.205.0/24 maxlen: 24
46.243.206.0/24 maxlen: 24
46.243.226.0/23 maxlen: 23
46.243.244.0/23 maxlen: 23
46.253.132.0/24 maxlen: 24
62.233.43.0/24 maxlen: 24
82.202.136.0/21 maxlen: 21
82.202.156.0/22 maxlen: 22
84.54.56.0/22 maxlen: 22
85.208.85.0/24 maxlen: 24
85.208.86.0/23 maxlen: 23
85.208.209.0/24 maxlen: 24
85.208.210.0/23 maxlen: 23
85.209.149.0/24 maxlen: 24
85.209.150.0/23 maxlen: 23
85.235.82.0/23 maxlen: 24
85.235.83.0/24 maxlen: 24
87.242.84.0/22 maxlen: 22
87.242.88.0/21 maxlen: 21
87.242.100.0/22 maxlen: 22
87.242.116.0/22 maxlen: 22
87.242.120.0/21 maxlen: 21
88.218.65.0/24 maxlen: 24
88.218.66.0/23 maxlen: 23
89.232.160.0/21 maxlen: 21
89.232.168.0/22 maxlen: 22
89.232.176.0/22 maxlen: 22
91.214.120.0/23 maxlen: 23
91.224.86.0/23 maxlen: 23
94.139.252.0/22 maxlen: 22
94.158.22.0/23 maxlen: 23
95.174.88.0/21 maxlen: 21
129.101.84.0/24 maxlen: 24
131.222.134.0/23 maxlen: 24
141.101.151.0/24 maxlen: 24
141.101.152.0/24 maxlen: 24
141.101.201.0/24 maxlen: 24
152.89.196.0/24 maxlen: 24
168.113.252.0/22 maxlen: 24
168.222.176.0/22 maxlen: 24
168.222.176.0/24 maxlen: 24
168.222.177.0/24 maxlen: 24
168.222.178.0/24 maxlen: 24
168.222.179.0/24 maxlen: 24
176.108.240.0/20 maxlen: 20
176.109.96.0/20 maxlen: 24
176.123.160.0/21 maxlen: 21
178.170.191.0/24 maxlen: 24
178.170.192.0/22 maxlen: 22
178.170.196.0/23 maxlen: 23
178.170.242.0/24 maxlen: 24
185.50.200.0/22 maxlen: 22
185.234.11.0/24 maxlen: 24
185.241.57.0/24 maxlen: 24
188.72.96.0/24 maxlen: 24
188.72.106.0/23 maxlen: 23
188.72.108.0/23 maxlen: 23
188.72.117.0/24 maxlen: 24
188.72.118.0/24 maxlen: 24
192.144.12.0/22 maxlen: 22
192.144.28.0/24 maxlen: 24
193.42.116.0/23 maxlen: 23
193.105.4.0/24 maxlen: 24
193.163.94.0/24 maxlen: 24
193.201.8.0/24 maxlen: 24
194.5.92.0/23 maxlen: 23
194.26.228.0/24 maxlen: 24
194.50.72.0/24 maxlen: 24
194.113.34.0/23 maxlen: 23
195.128.152.0/24 maxlen: 24
213.171.24.0/21 maxlen: 21
213.178.153.0/24 maxlen: 24
213.178.154.0/24 maxlen: 24
2a0c:2b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:e2:2a:67:b6:7f:cc:e3:71:4f:dd:9b:84:18:44:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Oct 16 13:23:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82446044f0420c0a9f525f69b8de981fca6c93cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:c8:95:dd:da:b6:62:a8:b2:cb:e3:7c:c6:
e2:13:59:39:68:c2:cb:86:cd:08:1d:78:fd:e6:36:
41:d5:93:39:24:35:58:83:eb:ee:06:ef:09:52:c1:
d1:9b:a3:4d:9e:96:52:2b:f3:60:2e:ad:81:74:20:
84:0e:6a:a0:54:f0:f0:90:cf:45:48:46:f7:a3:24:
01:cd:f1:bf:2d:2d:d5:fe:d6:28:72:6e:b1:97:64:
fa:fe:de:31:bc:70:3d:0c:52:ca:f3:1b:9a:30:6c:
17:18:6b:c5:39:cc:60:81:47:ca:22:0d:4a:29:ad:
a4:1e:9d:0c:4f:c0:0d:36:19:6c:86:6a:ce:6f:49:
2a:35:30:6b:26:a0:3a:e3:44:24:76:85:a9:9c:57:
8a:2b:c7:9b:6a:04:c7:78:c1:8d:6e:f5:56:a8:38:
31:53:02:df:50:79:8f:53:5c:5b:21:4d:03:ec:d7:
91:7a:70:98:37:f4:f7:9b:31:5c:2f:59:d8:15:52:
8f:75:81:2f:91:49:1d:cd:85:2a:7a:b6:f8:50:a4:
45:98:f3:c2:56:4d:db:ef:35:5e:d3:c5:1b:8e:0c:
da:8c:19:9e:cb:56:8c:72:c0:3e:0a:48:3b:40:21:
84:44:34:0d:2f:f8:2a:62:21:3f:f5:f8:9d:63:f5:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:44:60:44:F0:42:0C:0A:9F:52:5F:69:B8:DE:98:1F:CA:6C:93:CC
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/gkRgRPBCDAqfUl9puN6YH8psk8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.248.0/23
37.18.8.0-37.18.10.255
37.18.22.0/24
37.18.72.0/23
37.18.100.0-37.18.102.255
37.18.107.0-37.18.122.255
37.44.196.0-37.44.198.255
37.230.139.0/24
37.230.179.0-37.230.181.255
37.230.184.0-37.230.186.255
37.230.192.0/21
37.230.224.0/24
37.230.233.0/24
45.9.24.0/22
45.89.224.0/22
45.132.176.0/22
45.136.146.0/23
45.151.30.0/23
45.155.204.0/23
46.16.36.0/24
46.243.141.0-46.243.143.255
46.243.172.0/24
46.243.201.0/24
46.243.205.0-46.243.206.255
46.243.226.0/23
46.243.244.0/23
46.253.132.0/24
62.233.43.0/24
82.202.136.0/21
82.202.156.0/22
84.54.56.0/22
85.208.85.0-85.208.87.255
85.208.209.0-85.208.211.255
85.209.149.0-85.209.151.255
85.235.82.0/23
87.242.84.0-87.242.95.255
87.242.100.0/22
87.242.116.0-87.242.127.255
88.218.65.0-88.218.67.255
89.232.160.0-89.232.171.255
89.232.176.0/22
91.214.120.0/23
91.224.86.0/23
94.139.252.0/22
94.158.22.0/23
95.174.88.0/21
129.101.84.0/24
131.222.134.0/23
141.101.151.0-141.101.152.255
141.101.201.0/24
152.89.196.0/24
168.113.252.0/22
168.222.176.0/22
176.108.240.0/20
176.109.96.0/20
176.123.160.0/21
178.170.191.0-178.170.197.255
178.170.242.0/24
185.50.200.0/22
185.234.11.0/24
185.241.57.0/24
188.72.96.0/24
188.72.106.0-188.72.109.255
188.72.117.0-188.72.118.255
192.144.12.0/22
192.144.28.0/24
193.42.116.0/23
193.105.4.0/24
193.163.94.0/24
193.201.8.0/24
194.5.92.0/23
194.26.228.0/24
194.50.72.0/24
194.113.34.0/23
195.128.152.0/24
213.171.24.0/21
213.178.153.0-213.178.154.255
IPv6:
2a0c:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
5c:35:1a:6e:7d:19:50:09:b5:fc:10:1f:46:b8:3e:84:66:ba:
b0:01:a6:ea:aa:a3:4d:bc:89:91:70:39:98:86:0b:6c:6c:4f:
e8:19:98:54:a4:a4:9c:18:c0:61:4d:cd:b1:1f:f5:38:b7:44:
6e:1e:0a:22:db:a7:5c:77:65:79:9a:0b:a5:c0:b2:ae:33:cd:
92:b4:93:5a:bd:77:ae:ac:32:b1:58:8f:1a:a1:0b:c4:cc:84:
e6:7c:e7:89:55:19:ed:31:25:75:39:07:5e:a2:fe:03:a1:59:
af:c9:6b:0d:cf:d4:29:ba:ad:65:1a:bb:f9:4b:73:83:dd:8f:
c1:6f:1d:36:54:20:2b:f7:95:52:49:44:57:f8:2d:58:be:e6:
51:4f:35:b0:68:92:67:00:50:b4:6f:cd:aa:30:1e:7e:44:86:
8f:32:bb:d3:b2:53:57:d2:44:27:21:d8:a8:83:cc:b3:17:db:
b0:ce:6d:d4:d0:00:b3:0c:eb:a6:1a:fb:74:8a:16:b0:19:6f:
0e:23:49:28:5b:c7:0c:73:cc:40:87:23:7d:7c:2f:d4:20:bb:
56:e0:91:32:bc:70:9d:9c:fb:1f:0b:78:20:18:28:b1:f7:17:
05:6e:90:c9:ad:a3:8b:15:b7:75:0c:88:c9:04:aa:b0:6f:42:
77:a0:9b:23
-----BEGIN CERTIFICATE-----
MIIHgDCCBmigAwIBAgISAaFE4ipntn/M43FP3ZuEGESHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTllMWYzZmU2OWI0ZWJkZmYwMmE5YTg1N2U3YzZjMmIy
NTMwMWEwHhcNMjYxMDE2MTMyMzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjQ0NjA0NGYwNDIwYzBhOWY1MjVmNjliOGRlOTgxZmNhNmM5M2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXPIld3atmKossvjfMbiE1k5aMLL
hs0IHXj95jZB1ZM5JDVYg+vuBu8JUsHRm6NNnpZSK/NgLq2BdCCEDmqgVPDwkM9F
SEb3oyQBzfG/LS3V/tYocm6xl2T6/t4xvHA9DFLK8xuaMGwXGGvFOcxggUfKIg1K
Ka2kHp0MT8ANNhlshmrOb0kqNTBrJqA640QkdoWpnFeKK8ebagTHeMGNbvVWqDgx
UwLfUHmPU1xbIU0D7NeRenCYN/T3mzFcL1nYFVKPdYEvkUkdzYUqerb4UKRFmPPC
Vk3b7zVe08UbjgzajBmey1aMcsA+Ckg7QCGERDQNL/gqYiE/9fidY/Wx2QIDAQAB
o4IEjDCCBIgwHQYDVR0OBBYEFIJEYETwQgwKn1JfabjemB/KbJPMMB8GA1UdIwQY
MBaAFPkZ4fP+abTr3/AqmoV+fGwrJTAaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Sbmg4XzVwdE92ZjhDcWFoWDU4YkNzbE1Cby5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAz
LWRhZDA0MjBiODVkMy8xL2drUmdSUEJDREFxZlVsOXB1TjZZSDhwc2s4dy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAzLWRhZDA0MjBiODVk
My8xLzEtUm5oOF81cHRPdmY4Q3FhaFg1OGJDc2xNQm8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwggKeBggrBgEFBQcBBwEB/wSCAo0wggKJMIICdgQCAAEw
ggJuAwQBHyj4MAwDBAMlEggDBAAlEgoDBAAlEhYDBAElEkgwDAMEAiUSZAMEACUS
ZjAMAwQAJRJrAwQAJRJ6MAwDBAIlLMQDBAAlLMYDBAAl5oswDAMEACXmswMEASXm
tDAMAwQDJea4AwQAJea6AwQDJebAAwQAJebgAwQAJebpAwQCLQkYAwQCLVngAwQC
LYSwAwQBLYiSAwQBLZceAwQBLZvMAwQALhAkMAwDBAAu840DBAQu84ADBAAu86wD
BAAu88kwDAMEAC7zzQMEAC7zzgMEAS7z4gMEAS7z9AMEAC79hAMEAD7pKwMEA1LK
iAMEAlLKnAMEAlQ2ODAMAwQAVdBVAwQDVdBQMAwDBABV0NEDBAJV0NAwDAMEAFXR
lQMEA1XRkAMEAVXrUjAMAwQCV/JUAwQFV/JAAwQCV/JkMAwDBAJX8nQDBAdX8gAw
DAMEAFjaQQMEAljaQDAMAwQFWeigAwQCWeioAwQCWeiwAwQBW9Z4AwQBW+BWAwQC
Xov8AwQBXp4WAwQDX65YAwQAgWVUAwQBg96GMAwDBACNZZcDBACNZZgDBACNZckD
BACYWcQDBAKocfwDBAKo3rADBASwbPADBASwbWADBAOwe6AwDAMEALKqvwMEAbKq
xAMEALKq8gMEArkyyAMEALnqCwMEALnxOQMEALxIYDAMAwQBvEhqAwQBvEhsMAwD
BAC8SHUDBAC8SHYDBALAkAwDBADAkBwDBAHBKnQDBADBaQQDBADBo14DBADByQgD
BAHCBVwDBADCGuQDBADCMkgDBAHCcSIDBADDgJgDBAPVqxgwDAMEANWymQMEANWy
mjANBAIAAjAHAwUDKgwrgDANBgkqhkiG9w0BAQsFAAOCAQEAXDUabn0ZUAm1/BAf
Rrg+hGa6sAGm6qqjTbyJkXA5mIYLbGxP6BmYVKSknBjAYU3NsR/1OLdEbh4KItun
XHdleZoLpcCyrjPNkrSTWr13rqwysViPGqELxMyE5nzniVUZ7TEldTkHXqL+A6FZ
r8lrDc/UKbqtZRq7+Utzg92PwW8dNlQgK/eVUklEV/gtWL7mUU81sGiSZwBQtG/N
qjAefkSGjzK707JTV9JEJyHYqIPMsxfbsM5t1NAAswzrphr7dIoWsBlvDiNJKFvH
DHPMQIcjfXwv1CC7VuCRMrxwnZz7Hwt4IBgosfcXBW6Qya2jixW3dQyIyQSqsG9C
d6CbIw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 14:20:52 2026 by rpki-client