Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/G6woknRZCle5soz8v8g0aFH9kxY.roa
File: G6woknRZCle5soz8v8g0aFH9kxY.roa (raw, json)
Hash identifier: ZQ7+WtxpCAddtEJng9FJgz1G6DWKLaKVn4AV62HCEio=
Subject key identifier: 1B:AC:28:92:74:59:0A:57:B9:B2:8C:FC:BF:C8:34:68:51:FD:93:16
Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial: 019F5AC93607B88E331089B9B81004A00E91
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/G6woknRZCle5soz8v8g0aFH9kxY.roa
Signing time: Mon 13 Jul 2026 09:22:43 +0000
ROA not before: Mon 13 Jul 2026 09:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208951
IP address blocks: 31.44.0.0/22 maxlen: 22
31.44.0.0/24 maxlen: 24
31.44.1.0/24 maxlen: 24
31.44.2.0/24 maxlen: 24
31.44.3.0/24 maxlen: 24
31.44.4.0/24 maxlen: 24
31.44.5.0/24 maxlen: 24
31.44.6.0/24 maxlen: 24
31.44.7.0/24 maxlen: 24
45.14.48.0/22 maxlen: 22
45.14.48.0/24 maxlen: 24
45.14.49.0/24 maxlen: 24
45.14.50.0/24 maxlen: 24
45.14.51.0/24 maxlen: 24
45.133.16.0/22 maxlen: 22
45.133.16.0/24 maxlen: 24
45.133.17.0/24 maxlen: 24
45.133.18.0/24 maxlen: 24
45.133.19.0/24 maxlen: 24
45.138.24.0/23 maxlen: 23
45.138.24.0/24 maxlen: 24
45.138.25.0/24 maxlen: 24
45.138.26.0/24 maxlen: 24
45.138.27.0/24 maxlen: 24
78.111.84.0/22 maxlen: 22
78.111.84.0/24 maxlen: 24
78.111.85.0/24 maxlen: 24
78.111.86.0/24 maxlen: 24
78.111.88.0/23 maxlen: 23
78.111.90.0/23 maxlen: 23
78.111.90.0/24 maxlen: 24
78.111.91.0/24 maxlen: 24
92.246.128.0/24 maxlen: 24
92.246.129.0/24 maxlen: 24
92.246.130.0/24 maxlen: 24
92.246.131.0/24 maxlen: 24
94.141.96.0/24 maxlen: 24
94.141.97.0/24 maxlen: 24
94.141.98.0/24 maxlen: 24
94.141.99.0/24 maxlen: 24
109.207.168.0/24 maxlen: 24
109.207.169.0/24 maxlen: 24
109.207.170.0/24 maxlen: 24
109.207.171.0/24 maxlen: 24
109.207.172.0/22 maxlen: 22
109.207.172.0/24 maxlen: 24
109.207.173.0/24 maxlen: 24
109.207.174.0/23 maxlen: 23
188.227.56.0/22 maxlen: 22
188.227.57.0/24 maxlen: 24
188.227.58.0/24 maxlen: 24
188.227.59.0/24 maxlen: 24
188.227.84.0/22 maxlen: 22
188.227.84.0/24 maxlen: 24
188.227.85.0/24 maxlen: 24
188.227.86.0/24 maxlen: 24
188.227.87.0/24 maxlen: 24
188.227.106.0/24 maxlen: 24
188.227.107.0/24 maxlen: 24
2a0e:b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:c9:36:07:b8:8e:33:10:89:b9:b8:10:04:a0:0e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
Validity
Not Before: Jul 13 09:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bac289274590a57b9b28cfcbfc8346851fd9316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:c6:09:e8:07:55:e0:a6:ba:fb:0b:c4:5c:
13:fa:bf:f3:a9:b9:7e:5d:c5:0a:11:9a:7a:3a:f4:
cb:37:ca:8e:fc:db:58:4e:eb:71:3b:b1:88:38:72:
92:7a:87:01:06:e0:98:2b:a0:e2:7d:b8:7f:72:d8:
18:9a:c8:28:fa:6a:df:9f:9b:e1:60:66:bb:60:9d:
74:13:01:c4:64:dc:a9:7a:9e:b5:25:30:06:85:9b:
6d:46:5c:ee:bd:d7:0d:b2:db:24:55:d7:67:7e:4e:
6c:b7:4d:a8:27:fc:72:e5:d4:4e:a0:3d:d6:95:72:
b3:3c:8f:4d:b5:1e:19:62:fc:6f:00:7a:c4:fd:d5:
8d:d0:d7:b2:e0:17:b5:0b:53:63:67:5b:d7:c9:71:
65:82:7d:a7:92:86:79:f2:df:08:ac:bb:87:00:4c:
62:80:cb:06:38:e8:3e:1f:38:e9:8d:50:7c:e6:f5:
db:e0:26:4a:af:7d:0c:34:de:28:66:d3:f8:52:4a:
1a:ea:39:f2:e1:4a:b6:41:93:55:cf:77:77:a6:3a:
56:93:81:cf:4d:71:e5:06:51:87:a7:df:51:d6:fb:
5c:f2:28:97:90:4f:ce:3f:5d:71:77:71:4e:06:38:
60:86:b1:b9:27:79:ff:b1:61:30:ba:0f:33:8f:98:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AC:28:92:74:59:0A:57:B9:B2:8C:FC:BF:C8:34:68:51:FD:93:16
X509v3 Authority Key Identifier:
keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/G6woknRZCle5soz8v8g0aFH9kxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.0.0/21
45.14.48.0/22
45.133.16.0/22
45.138.24.0/22
78.111.84.0-78.111.91.255
92.246.128.0/22
94.141.96.0/22
109.207.168.0/21
188.227.56.0/22
188.227.84.0/22
188.227.106.0/23
IPv6:
2a0e:b80::/29
Signature Algorithm: sha256WithRSAEncryption
80:5d:00:1c:d6:b2:e5:2c:8f:10:32:aa:92:4f:bb:e5:07:a4:
9e:a0:38:10:ce:da:c7:56:f6:98:85:68:d6:e3:9c:4a:e5:be:
f8:c5:6d:3c:be:3e:cf:f5:4f:48:46:2d:b6:26:df:24:df:16:
cd:39:ba:b3:a4:e5:d8:d4:cc:d3:d2:d9:ef:0b:11:a7:3c:2c:
d7:ee:7a:11:05:fe:15:5e:80:07:3c:de:55:ea:f4:5c:43:9b:
23:eb:a4:cd:82:fe:4f:2c:51:e4:9e:58:62:02:ad:d9:4c:8d:
d5:ce:d4:76:d0:df:f2:bf:9c:8b:22:cb:36:40:51:ca:56:b4:
7f:fa:be:9d:fa:e3:1b:94:9e:ab:04:68:55:3f:62:f2:e6:6e:
31:f0:69:20:7e:69:5a:a5:4e:4d:7c:f6:c3:a6:a1:4f:71:d4:
61:07:02:77:fe:d6:f9:3b:3c:d6:9d:13:9b:97:e8:a8:f9:14:
85:39:8a:e4:a7:6f:44:d7:6a:00:08:14:b3:f5:e2:8e:13:c5:
9e:dd:83:90:43:8c:a5:ec:8c:66:47:99:bf:cd:fb:b5:d1:8a:
c6:37:a7:a3:48:95:85:84:52:58:f1:23:02:b1:99:3a:fd:94:
29:26:a8:b6:da:70:6f:cc:63:46:83:c7:7d:59:4d:78:38:6b:
98:c2:5c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:18 2026 by rpki-client