Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gXaSLjHQi37ffuNaK7wWdB6cX4w.roa
File: gXaSLjHQi37ffuNaK7wWdB6cX4w.roa (raw, json)
Hash identifier: /tfKQCPd1Hr+jT+pNO0Vj7M0dSbUh9YyODNOyuvKu10=
Subject key identifier: 81:76:92:2E:31:D0:8B:7E:DF:7E:E3:5A:2B:BC:16:74:1E:9C:5F:8C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019E13702550B44D30301FE91880B908D16D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gXaSLjHQi37ffuNaK7wWdB6cX4w.roa
Signing time: Sun 10 May 2026 19:49:37 +0000
ROA not before: Sun 10 May 2026 19:49:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 80.96.38.0/24 maxlen: 24
80.96.39.0/24 maxlen: 24
80.96.44.0/23 maxlen: 24
80.96.54.0/23 maxlen: 24
80.96.89.0/24 maxlen: 24
80.96.90.0/23 maxlen: 23
80.96.102.0/23 maxlen: 24
80.96.156.0/22 maxlen: 24
80.96.236.0/23 maxlen: 23
80.97.40.0/21 maxlen: 24
80.97.96.0/23 maxlen: 24
81.180.36.0/24 maxlen: 24
81.180.94.0/23 maxlen: 23
81.180.98.0/23 maxlen: 24
81.180.139.0/24 maxlen: 24
81.180.172.0/24 maxlen: 24
81.180.174.0/23 maxlen: 24
81.180.204.0/24 maxlen: 24
81.180.228.0/23 maxlen: 24
81.180.254.0/23 maxlen: 24
81.181.14.0/23 maxlen: 24
81.181.26.0/23 maxlen: 24
81.181.68.0/23 maxlen: 24
81.181.72.0/23 maxlen: 24
81.181.104.0/21 maxlen: 24
85.120.44.0/24 maxlen: 24
85.120.84.0/23 maxlen: 24
85.120.184.0/24 maxlen: 24
85.121.48.0/21 maxlen: 24
85.121.120.0/21 maxlen: 24
85.121.168.0/22 maxlen: 24
85.121.208.0/21 maxlen: 24
85.121.232.0/21 maxlen: 24
85.121.244.0/24 maxlen: 24
85.122.84.0/24 maxlen: 24
85.122.85.0/24 maxlen: 24
85.122.124.0/22 maxlen: 24
85.122.231.0/24 maxlen: 24
193.226.76.0/22 maxlen: 24
194.102.36.0/22 maxlen: 24
194.102.148.0/23 maxlen: 24
194.102.160.0/23 maxlen: 24
194.102.174.0/23 maxlen: 24
194.102.180.0/22 maxlen: 24
194.102.224.0/22 maxlen: 24
194.105.12.0/22 maxlen: 24
194.153.225.0/24 maxlen: 24
194.153.230.0/23 maxlen: 24
194.153.244.0/23 maxlen: 24
217.156.16.0/23 maxlen: 24
217.156.48.0/22 maxlen: 24
217.156.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:13:70:25:50:b4:4d:30:30:1f:e9:18:80:b9:08:d1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 10 19:49:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8176922e31d08b7edf7ee35a2bbc16741e9c5f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:72:68:d2:d2:ac:a8:05:90:63:9c:d3:d5:
91:4a:74:06:f5:55:88:55:94:bf:60:ba:40:41:dc:
89:6a:c1:f3:04:5b:12:df:df:20:7f:2a:14:17:e9:
19:56:38:35:53:51:6e:0a:1e:5f:d6:98:37:b1:b0:
e5:56:65:00:73:d2:4f:f8:fb:86:52:d6:26:a8:66:
57:92:b9:97:76:ed:7e:c6:f5:28:a6:ce:30:1c:6d:
1d:64:a3:cb:93:37:36:5f:3b:8a:ea:3e:cf:e5:51:
d7:36:04:63:0e:82:82:f6:89:11:c3:ce:eb:a2:b4:
ec:37:59:4c:ed:da:bf:42:09:3f:fa:d0:c9:b6:f8:
3e:36:bf:7c:f9:4d:04:1e:02:bb:80:63:13:f6:a2:
75:df:6d:b8:b9:f9:69:d0:30:21:ea:3d:02:11:ce:
76:94:51:5e:72:2f:3d:2d:1d:23:d1:f0:1e:bd:30:
ca:c6:05:cd:94:2e:ac:16:f2:89:72:39:30:fc:c3:
0d:5e:3e:14:87:f6:4c:7b:39:38:ed:fd:bd:8a:0b:
9d:f7:a6:3c:d7:27:1a:7d:d5:89:2a:9d:4f:85:d7:
ff:c9:fb:00:b2:74:fa:d0:f1:03:f7:e5:cd:51:46:
20:1c:43:dc:03:11:1b:4f:99:30:94:e2:41:47:ec:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:76:92:2E:31:D0:8B:7E:DF:7E:E3:5A:2B:BC:16:74:1E:9C:5F:8C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gXaSLjHQi37ffuNaK7wWdB6cX4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.38.0/23
80.96.44.0/23
80.96.54.0/23
80.96.89.0-80.96.91.255
80.96.102.0/23
80.96.156.0/22
80.96.236.0/23
80.97.40.0/21
80.97.96.0/23
81.180.36.0/24
81.180.94.0/23
81.180.98.0/23
81.180.139.0/24
81.180.172.0/24
81.180.174.0/23
81.180.204.0/24
81.180.228.0/23
81.180.254.0/23
81.181.14.0/23
81.181.26.0/23
81.181.68.0/23
81.181.72.0/23
81.181.104.0/21
85.120.44.0/24
85.120.84.0/23
85.120.184.0/24
85.121.48.0/21
85.121.120.0/21
85.121.168.0/22
85.121.208.0/21
85.121.232.0/21
85.121.244.0/24
85.122.84.0/23
85.122.124.0/22
85.122.231.0/24
193.226.76.0/22
194.102.36.0/22
194.102.148.0/23
194.102.160.0/23
194.102.174.0/23
194.102.180.0/22
194.102.224.0/22
194.105.12.0/22
194.153.225.0/24
194.153.230.0/23
194.153.244.0/23
217.156.16.0/23
217.156.48.0/22
217.156.94.0/23
Signature Algorithm: sha256WithRSAEncryption
71:a3:62:49:75:a8:15:79:04:55:ed:3b:45:ff:2f:fb:9d:18:
fe:df:9b:97:14:df:08:d6:cf:fa:b2:e0:39:2a:2e:bc:ed:f3:
2b:dc:53:f6:57:fb:69:f9:a2:10:76:d8:94:17:22:7d:6d:63:
18:4a:f3:93:3a:bb:19:59:f8:c6:49:e8:83:08:82:cc:02:e9:
ab:64:5d:40:be:30:5e:a9:4b:1f:8a:30:7a:af:6f:20:56:30:
c7:54:d8:42:29:e7:9c:bc:07:1b:9d:95:ef:81:da:28:e9:26:
a2:8d:e2:24:ee:0e:e5:fd:39:d3:e5:8d:be:d1:52:ad:7d:a3:
69:7a:18:89:4b:b1:ab:7a:0f:27:93:97:29:b0:e0:d5:37:a9:
ab:31:1e:18:c2:10:a0:dd:b0:75:b5:d3:06:c1:a8:dd:e1:f7:
4e:28:c4:9a:c2:4c:09:24:3c:67:2f:8e:0c:8f:0f:be:d7:ce:
4b:3a:48:da:06:8e:5f:23:0c:47:17:28:a1:03:44:60:ab:73:
8c:66:3c:4c:f4:3f:c6:39:56:81:ca:37:9c:86:c5:a6:9d:db:
b6:d0:c1:8a:df:5c:68:05:36:8b:38:f9:03:2e:92:d4:a0:e1:
74:b5:aa:7c:55:08:bb:fd:c8:3e:22:bb:6a:ba:12:e6:10:97:
69:be:e9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:28 2026 by rpki-client