Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/GS7fmdx-1g8pNEM-nhOk5nbSr44.roa
File: GS7fmdx-1g8pNEM-nhOk5nbSr44.roa (raw, json)
Hash identifier: sLHMX5pMnGnYMcV+wRUTNCFpFauzuLy29Qg1lFRshDs=
Subject key identifier: 19:2E:DF:99:DC:7E:D6:0F:29:34:43:3E:9E:13:A4:E6:76:D2:AF:8E
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 01A110B824B7DA8B5DD02F430B24F5782490
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/GS7fmdx-1g8pNEM-nhOk5nbSr44.roa
Signing time: Tue 06 Oct 2026 10:17:45 +0000
ROA not before: Tue 06 Oct 2026 10:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43937
IP address blocks: 78.24.48.0/21 maxlen: 24
78.24.48.0/24 maxlen: 24
78.24.49.0/24 maxlen: 24
78.24.50.0/24 maxlen: 24
78.24.51.0/24 maxlen: 24
78.24.52.0/24 maxlen: 24
78.24.53.0/24 maxlen: 24
78.24.54.0/24 maxlen: 24
78.24.55.0/24 maxlen: 24
82.116.128.0/24 maxlen: 24
82.116.129.0/24 maxlen: 24
82.116.130.0/24 maxlen: 24
82.116.131.0/24 maxlen: 24
82.116.132.0/24 maxlen: 24
82.116.133.0/24 maxlen: 24
82.116.134.0/24 maxlen: 24
82.116.135.0/24 maxlen: 24
82.116.136.0/24 maxlen: 24
82.116.138.0/24 maxlen: 24
82.116.139.0/24 maxlen: 24
82.116.140.0/24 maxlen: 24
82.116.141.0/24 maxlen: 24
82.116.142.0/24 maxlen: 24
82.116.143.0/24 maxlen: 24
82.116.144.0/24 maxlen: 24
82.116.145.0/24 maxlen: 24
82.116.146.0/24 maxlen: 24
82.116.147.0/24 maxlen: 24
82.116.148.0/24 maxlen: 24
82.116.149.0/24 maxlen: 24
82.116.150.0/24 maxlen: 24
82.116.151.0/24 maxlen: 24
82.116.152.0/24 maxlen: 24
82.116.153.0/24 maxlen: 24
82.116.154.0/24 maxlen: 24
82.116.155.0/24 maxlen: 24
82.116.156.0/24 maxlen: 24
82.116.157.0/24 maxlen: 24
82.116.158.0/24 maxlen: 24
82.116.159.0/24 maxlen: 24
87.251.0.0/20 maxlen: 24
87.251.0.0/24 maxlen: 24
87.251.1.0/24 maxlen: 24
87.251.2.0/24 maxlen: 24
87.251.3.0/24 maxlen: 24
87.251.4.0/24 maxlen: 24
87.251.5.0/24 maxlen: 24
87.251.6.0/24 maxlen: 24
87.251.7.0/24 maxlen: 24
87.251.8.0/24 maxlen: 24
87.251.9.0/24 maxlen: 24
87.251.10.0/24 maxlen: 24
87.251.11.0/24 maxlen: 24
87.251.12.0/24 maxlen: 24
87.251.13.0/24 maxlen: 24
87.251.14.0/24 maxlen: 24
87.251.15.0/24 maxlen: 24
93.89.16.0/20 maxlen: 24
93.89.16.0/24 maxlen: 24
93.89.17.0/24 maxlen: 24
93.89.19.0/24 maxlen: 24
93.89.20.0/24 maxlen: 24
93.89.21.0/24 maxlen: 24
93.89.22.0/24 maxlen: 24
93.89.23.0/24 maxlen: 24
93.89.25.0/24 maxlen: 24
93.89.26.0/24 maxlen: 24
93.89.27.0/24 maxlen: 24
93.89.28.0/24 maxlen: 24
93.89.29.0/24 maxlen: 24
93.89.30.0/24 maxlen: 24
93.89.31.0/24 maxlen: 24
94.190.144.0/24 maxlen: 24
94.190.145.0/24 maxlen: 24
94.190.146.0/24 maxlen: 24
94.190.147.0/24 maxlen: 24
94.190.148.0/24 maxlen: 24
94.190.149.0/24 maxlen: 24
94.190.150.0/24 maxlen: 24
94.190.151.0/24 maxlen: 24
94.190.152.0/24 maxlen: 24
94.190.153.0/24 maxlen: 24
94.190.154.0/24 maxlen: 24
94.190.155.0/24 maxlen: 24
94.190.156.0/24 maxlen: 24
94.190.157.0/24 maxlen: 24
94.190.158.0/24 maxlen: 24
94.190.159.0/24 maxlen: 24
103.220.220.0/24 maxlen: 24
103.220.221.0/24 maxlen: 24
103.220.222.0/24 maxlen: 24
103.220.223.0/24 maxlen: 24
103.245.116.0/24 maxlen: 24
103.245.117.0/24 maxlen: 24
103.245.118.0/24 maxlen: 24
103.245.119.0/24 maxlen: 24
178.255.8.0/21 maxlen: 24
178.255.8.0/24 maxlen: 24
178.255.10.0/24 maxlen: 24
178.255.11.0/24 maxlen: 24
178.255.12.0/24 maxlen: 24
178.255.13.0/24 maxlen: 24
178.255.14.0/24 maxlen: 24
178.255.15.0/24 maxlen: 24
185.6.176.0/24 maxlen: 24
185.6.177.0/24 maxlen: 24
185.6.178.0/24 maxlen: 24
185.6.179.0/24 maxlen: 24
185.249.222.0/24 maxlen: 24
185.249.223.0/24 maxlen: 24
201.7.32.0/19 maxlen: 24
201.7.32.0/24 maxlen: 24
201.7.33.0/24 maxlen: 24
213.187.224.0/24 maxlen: 24
213.187.225.0/24 maxlen: 24
213.187.226.0/24 maxlen: 24
213.187.227.0/24 maxlen: 24
213.187.228.0/24 maxlen: 24
213.187.229.0/24 maxlen: 24
213.187.230.0/24 maxlen: 24
213.187.231.0/24 maxlen: 24
213.187.232.0/24 maxlen: 24
213.187.233.0/24 maxlen: 24
213.187.235.0/24 maxlen: 24
213.187.236.0/24 maxlen: 24
213.187.237.0/24 maxlen: 24
213.187.238.0/24 maxlen: 24
213.187.239.0/24 maxlen: 24
213.187.248.0/21 maxlen: 24
213.187.248.0/24 maxlen: 24
213.187.250.0/24 maxlen: 24
213.187.251.0/24 maxlen: 24
213.187.252.0/24 maxlen: 24
213.187.253.0/24 maxlen: 24
213.187.254.0/24 maxlen: 24
2a02:7980::/32 maxlen: 32
2a02:7980:105::/48 maxlen: 48
2a02:7980:200::/48 maxlen: 48
2a02:7980:201::/48 maxlen: 48
2a02:7980:202::/48 maxlen: 48
2a02:7980:203::/48 maxlen: 48
2a02:7980:204::/48 maxlen: 48
2a02:7980:205::/48 maxlen: 48
2a02:7980:206::/48 maxlen: 48
2a02:7980:207::/48 maxlen: 48
2a02:7980:208::/48 maxlen: 48
2a02:7980:209::/48 maxlen: 48
2a02:7980:210::/48 maxlen: 48
2a02:7980:300::/48 maxlen: 48
2a02:7980:301::/48 maxlen: 48
2a02:7980:302::/48 maxlen: 48
2a02:7980:303::/48 maxlen: 48
2a02:7980:306::/48 maxlen: 48
2a02:7980:308::/48 maxlen: 48
2a02:7980:309::/48 maxlen: 48
2a02:7980:310::/48 maxlen: 48
2a02:7980:311::/48 maxlen: 48
2a02:7980:313::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:b8:24:b7:da:8b:5d:d0:2f:43:0b:24:f5:78:24:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Oct 6 10:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=192edf99dc7ed60f2934433e9e13a4e676d2af8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:88:f4:e5:ae:9f:b8:6a:f2:76:6d:e2:c2:
f1:9f:e6:cb:a5:39:a4:01:c3:58:7b:11:74:f7:a2:
b8:99:f4:d5:fa:55:4f:2d:5f:e2:e1:0f:8b:0c:a1:
20:f8:94:e4:6b:97:f3:8a:84:80:72:dc:ea:3d:53:
bc:fa:c0:4f:77:b8:00:0d:7d:8b:4f:e9:33:a7:9f:
95:ca:e5:2f:b2:f4:50:5d:dd:80:a3:02:e2:28:ff:
44:97:c3:5d:05:0f:87:ac:db:d5:34:cb:c9:74:bd:
1d:a1:62:e2:16:ad:da:a6:7a:b0:34:b0:b3:db:59:
b0:fe:e5:f7:be:8c:98:c9:6a:0e:f6:2c:1c:0b:47:
5f:69:5e:0b:94:b6:c5:81:67:c6:df:dc:24:01:89:
0e:a6:63:29:37:70:0d:a8:a0:4d:b5:21:3f:9a:58:
82:03:fe:ac:0b:18:dd:64:fd:d7:f1:bd:ec:20:44:
3d:b0:c6:22:1f:49:88:20:c3:e9:30:d1:72:b3:ee:
1e:60:31:5a:4e:8b:c2:6c:4d:d4:d6:30:1b:f9:34:
b5:47:1c:91:91:4c:e4:87:5e:fc:a4:42:f2:53:63:
7e:89:cc:e6:b6:cf:c4:ff:7e:af:e2:d5:be:8f:e0:
64:2f:5a:fd:ca:19:eb:a3:68:68:25:83:f3:d5:4e:
13:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2E:DF:99:DC:7E:D6:0F:29:34:43:3E:9E:13:A4:E6:76:D2:AF:8E
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/GS7fmdx-1g8pNEM-nhOk5nbSr44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.48.0/21
82.116.128.0-82.116.136.255
82.116.138.0-82.116.159.255
87.251.0.0/20
93.89.16.0/20
94.190.144.0/20
103.220.220.0/22
103.245.116.0/22
178.255.8.0/21
185.6.176.0/22
185.249.222.0/23
201.7.32.0/19
213.187.224.0-213.187.233.255
213.187.235.0-213.187.239.255
213.187.248.0/21
IPv6:
2a02:7980::/32
Signature Algorithm: sha256WithRSAEncryption
41:1e:49:7f:72:51:bf:99:87:61:47:5c:6b:2d:7b:2a:58:3b:
65:dc:3c:32:44:3c:98:8b:6b:84:e3:ac:18:61:7b:47:92:63:
f5:fb:59:b9:56:aa:c9:91:6c:55:34:44:42:a5:59:60:22:f5:
88:bd:6f:1e:6c:c4:34:d7:36:ad:67:b6:e4:60:53:76:b8:cb:
79:ce:67:0d:0f:74:54:60:46:5c:a6:7e:9b:b5:86:3d:ae:4c:
3d:94:fb:d0:43:f0:30:18:16:c2:35:fe:75:b7:f5:07:b3:1c:
e2:6f:b6:2f:f7:99:24:19:c9:b9:2b:e9:64:cc:e7:c7:9c:73:
2f:4f:56:a8:52:72:9b:34:3f:3b:02:a4:c6:08:54:55:11:8f:
83:8a:0a:db:2a:4a:2a:47:c6:f6:27:5a:d1:cd:cd:b0:c0:60:
2b:d9:4c:ea:61:b7:fd:cd:f1:09:69:14:4b:53:4d:f8:f8:ce:
c0:e7:79:49:50:7f:c3:56:d5:c2:02:cd:ba:fa:fe:86:39:a5:
19:50:27:1c:c1:9a:61:fc:a7:ff:b0:2b:7b:b8:77:cd:77:23:
42:44:ce:5e:98:bc:69:99:76:69:64:68:01:47:57:16:c4:45:
44:fe:e3:ee:23:7e:fd:60:38:84:2e:f8:a0:e2:a0:2c:7f:d4:
39:7f:1b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:21:15 2026 by rpki-client