Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/gXb1y1F3U2XUAw7hK8QjhFzzPhI.roa
File: gXb1y1F3U2XUAw7hK8QjhFzzPhI.roa (raw, json)
Hash identifier: Jzhqn78lmsa3hMGtIBekxLwEnu2AFc5tx6/m0IQS4VU=
Subject key identifier: 81:76:F5:CB:51:77:53:65:D4:03:0E:E1:2B:C4:23:84:5C:F3:3E:12
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 019E1719A3EAF26C0613EF9F7192003635F7
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/gXb1y1F3U2XUAw7hK8QjhFzzPhI.roa
Signing time: Mon 11 May 2026 12:53:36 +0000
ROA not before: Mon 11 May 2026 12:53:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16312
IP address blocks: 185.116.240.0/22 maxlen: 24
185.122.112.0/22 maxlen: 24
185.123.32.0/22 maxlen: 24
185.123.92.0/22 maxlen: 24
185.129.24.0/22 maxlen: 24
185.129.64.0/22 maxlen: 24
185.130.244.0/22 maxlen: 24
185.139.152.0/22 maxlen: 24
185.139.160.0/22 maxlen: 24
185.139.164.0/22 maxlen: 24
185.139.172.0/22 maxlen: 24
185.141.72.0/22 maxlen: 24
185.141.88.0/22 maxlen: 24
185.142.80.0/22 maxlen: 24
185.142.228.0/22 maxlen: 24
185.143.4.0/22 maxlen: 24
185.143.8.0/22 maxlen: 24
185.143.12.0/22 maxlen: 24
185.150.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:19:a3:ea:f2:6c:06:13:ef:9f:71:92:00:36:35:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: May 11 12:53:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8176f5cb51775365d4030ee12bc423845cf33e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:b4:47:a5:94:a0:ef:8a:04:48:72:c1:c9:
5b:dc:5f:a1:e0:6f:75:ca:8c:b8:ed:bf:2d:6e:30:
a5:1b:15:8b:4c:c3:a6:b1:fe:2e:e6:0e:05:e9:27:
15:64:3a:ca:32:b5:54:93:64:a3:dc:b0:4a:1c:6c:
7c:eb:c1:0b:92:e3:a2:8c:89:b3:1e:4e:02:62:3c:
52:d9:4e:8c:b8:c5:51:95:12:06:bc:23:ac:78:ad:
f1:85:70:d5:e4:60:7e:67:1b:88:35:a8:df:e1:71:
5f:fd:f6:a4:5d:fb:72:79:01:e7:ee:c1:d7:af:31:
37:ba:13:f7:25:2d:19:d7:ca:f2:60:98:a5:d2:2e:
7e:6e:c1:24:45:14:44:a3:9e:ae:e7:45:57:5e:fa:
d3:d7:04:a2:54:de:c8:f7:76:e1:71:72:f1:ca:75:
46:de:5f:10:5a:47:93:23:b3:89:f0:4f:ae:79:16:
2f:73:98:44:2f:65:72:a5:2c:62:1b:ef:c4:a4:5d:
82:0b:b1:8f:db:09:d3:49:b0:86:26:ac:0c:04:cf:
cf:c2:a1:a1:6e:6f:d9:b6:2c:d8:8d:9e:c0:19:c4:
b2:8a:40:04:f5:6f:70:c4:19:22:3c:a0:13:fd:14:
29:2c:54:98:0c:b4:5e:d0:3f:fc:4a:75:88:27:7d:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:76:F5:CB:51:77:53:65:D4:03:0E:E1:2B:C4:23:84:5C:F3:3E:12
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/gXb1y1F3U2XUAw7hK8QjhFzzPhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.240.0/22
185.122.112.0/22
185.123.32.0/22
185.123.92.0/22
185.129.24.0/22
185.129.64.0/22
185.130.244.0/22
185.139.152.0/22
185.139.160.0/21
185.139.172.0/22
185.141.72.0/22
185.141.88.0/22
185.142.80.0/22
185.142.228.0/22
185.143.4.0-185.143.15.255
185.150.112.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:1e:1e:8a:09:2a:32:98:36:16:d0:e3:0c:7d:f0:4e:5c:11:
1b:e7:56:4f:6c:74:22:bb:7e:d8:3d:65:4c:84:1f:1c:37:00:
fb:6a:c0:ae:61:d5:eb:86:82:c2:33:df:a5:32:b8:a5:b6:4f:
ed:2f:32:96:2a:82:c8:d5:31:2a:d3:b3:24:93:c8:95:01:61:
a9:6b:e4:ff:ef:73:7f:2f:06:4c:ce:e0:56:08:b8:73:ca:81:
3d:c5:49:ea:f9:b0:7d:c7:3b:fe:32:5f:5d:f5:b5:08:71:1d:
2f:bf:19:ba:d9:28:0e:54:15:06:f6:b5:6a:55:29:8d:0f:22:
33:86:d2:2a:2a:21:b9:34:19:47:95:93:63:17:4a:49:00:71:
2b:49:cc:72:12:78:05:45:6b:1a:15:8d:1c:57:36:2a:6b:07:
90:43:be:9c:0d:88:2f:16:85:4b:5e:39:e8:57:70:d4:04:9e:
4d:59:76:5a:8b:4a:74:fe:ab:20:e2:1c:3e:f5:2e:db:89:53:
ad:fc:0d:37:65:40:be:cf:28:42:af:06:3f:e3:16:79:b8:a1:
11:54:b3:96:86:e5:f9:45:55:31:46:34:52:8a:0c:4e:b1:dd:
32:d2:7e:74:c6:b5:84:91:99:b2:45:35:70:28:c4:be:40:e8:
e6:71:60:f1
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAZ4XGaPq8mwGE++fcZIANjX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4
MDQ3MjgwHhcNMjYwNTExMTI1MzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTc2ZjVjYjUxNzc1MzY1ZDQwMzBlZTEyYmM0MjM4NDVjZjMzZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqe0R6WUoO+KBEhywclb3F+h4G91
yoy47b8tbjClGxWLTMOmsf4u5g4F6ScVZDrKMrVUk2Sj3LBKHGx868ELkuOijImz
Hk4CYjxS2U6MuMVRlRIGvCOseK3xhXDV5GB+ZxuINajf4XFf/fakXftyeQHn7sHX
rzE3uhP3JS0Z18ryYJil0i5+bsEkRRREo56u50VXXvrT1wSiVN7I93bhcXLxynVG
3l8QWkeTI7OJ8E+ueRYvc5hEL2VypSxiG+/EpF2CC7GP2wnTSbCGJqwMBM/PwqGh
bm/ZtizYjZ7AGcSyikAE9W9wxBkiPKAT/RQpLFSYDLRe0D/8SnWIJ308wwIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFIF29ctRd1Nl1AMO4SvEI4Rc8z4SMB8GA1UdIwQY
MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt
ZGFiNmI4M2NmN2VjLzEvZ1hiMXkxRjNVMlhVQXc3aEs4UWpoRnp6UGhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj
LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEArl08AME
Arl6cAMEArl7IAMEArl7XAMEArmBGAMEArmBQAMEArmC9AMEArmLmAMEA7mLoAME
ArmLrAMEArmNSAMEArmNWAMEArmOUAMEArmO5DAMAwQCuY8EAwQEuY8AAwQCuZZw
MA0GCSqGSIb3DQEBCwUAA4IBAQB9Hh6KCSoymDYW0OMMffBOXBEb51ZPbHQiu37Y
PWVMhB8cNwD7asCuYdXrhoLCM9+lMriltk/tLzKWKoLI1TEq07Mkk8iVAWGpa+T/
73N/LwZMzuBWCLhzyoE9xUnq+bB9xzv+Ml9d9bUIcR0vvxm62SgOVBUG9rVqVSmN
DyIzhtIqKiG5NBlHlZNjF0pJAHErScxyEngFRWsaFY0cVzYqaweQQ76cDYgvFoVL
XjnoV3DUBJ5NWXZai0p0/qsg4hw+9S7biVOt/A03ZUC+zyhCrwY/4xZ5uKERVLOW
huX5RVUxRjRSigxOsd0y0n50xrWEkZmyRTVwKMS+QOjmcWDx
-----END CERTIFICATE-----
Generated at Wed May 13 04:17:23 2026 by rpki-client