Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GbqILQq92_hNWbwfIMuBVJbmOEc.roa
File: GbqILQq92_hNWbwfIMuBVJbmOEc.roa (raw, json)
Hash identifier: sGoiDBZ9vsT9/VzaAHlXdqgIFVJspGbe2rQj4zs9AVY=
Subject key identifier: 19:BA:88:2D:0A:BD:DB:F8:4D:59:BC:1F:20:CB:81:54:96:E6:38:47
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019F8A3851D93FEBA62EE08DC9F635B2DF6E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GbqILQq92_hNWbwfIMuBVJbmOEc.roa
Signing time: Wed 22 Jul 2026 14:26:14 +0000
ROA not before: Wed 22 Jul 2026 14:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 5.180.4.0/22 maxlen: 22
5.182.28.0/22 maxlen: 22
45.86.16.0/22 maxlen: 22
89.39.242.0/24 maxlen: 24
91.242.72.0/23 maxlen: 24
91.242.74.0/23 maxlen: 23
91.242.94.0/24 maxlen: 24
91.242.95.0/24 maxlen: 24
91.242.103.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
146.19.50.0/24 maxlen: 24
178.175.176.0/22 maxlen: 22
185.180.145.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
185.214.166.0/24 maxlen: 24
194.50.206.0/23 maxlen: 24
195.138.103.0/24 maxlen: 24
195.138.104.0/22 maxlen: 22
195.138.105.0/24 maxlen: 24
195.138.106.0/24 maxlen: 24
195.138.112.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
195.138.122.0/23 maxlen: 23
195.216.156.0/22 maxlen: 22
213.134.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:38:51:d9:3f:eb:a6:2e:e0:8d:c9:f6:35:b2:df:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 22 14:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19ba882d0abddbf84d59bc1f20cb815496e63847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:0d:5f:ac:76:7f:eb:3a:91:06:79:b4:0b:
60:6d:d0:ef:08:44:58:17:cf:71:d9:17:a6:5d:c2:
4d:39:81:85:c9:2c:d5:84:7e:01:17:82:06:2b:c8:
29:70:56:c6:97:5d:78:73:a2:aa:4d:ed:37:33:cb:
7e:cc:da:4c:b1:f9:d4:9d:49:8c:82:08:93:38:3f:
ae:55:b4:0f:46:8d:1b:72:cb:37:0e:c7:c4:96:ae:
60:12:d4:34:af:94:9f:ab:09:e1:31:05:72:fe:f4:
79:be:09:0e:33:c9:90:13:55:6c:24:3e:e9:36:c1:
aa:9f:1a:e6:35:7a:5b:ba:6d:07:73:6f:c5:84:2c:
6e:e4:6f:74:66:2b:8b:9f:7e:74:1b:14:c1:fa:8e:
bc:67:13:f3:a8:86:81:0d:7a:c1:de:c1:cb:f4:10:
fb:c1:b2:7c:50:15:2d:07:9f:19:78:5c:a7:4f:a8:
d2:d7:83:6c:41:20:da:06:06:30:69:9d:2e:8a:c2:
72:06:c2:85:f0:51:0a:28:b5:a6:35:23:6a:a2:b7:
83:8b:08:50:59:85:9c:cb:04:91:da:b8:17:54:af:
c9:2e:54:dd:e4:74:28:81:d8:a3:e8:21:0a:a5:f6:
29:1c:e1:3c:d9:d3:43:dd:70:8c:1c:cc:e6:4b:0d:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BA:88:2D:0A:BD:DB:F8:4D:59:BC:1F:20:CB:81:54:96:E6:38:47
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/GbqILQq92_hNWbwfIMuBVJbmOEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.4.0/22
5.182.28.0/22
45.86.16.0/22
89.39.242.0/24
91.242.72.0/22
91.242.94.0/23
91.242.103.0/24
94.231.198.0/24
146.19.50.0/24
178.175.176.0/22
185.180.145.0/24
185.212.11.0/24
185.214.166.0/24
194.50.206.0/23
195.138.103.0-195.138.107.255
195.138.112.0/24
195.138.120.0/24
195.138.122.0/23
195.216.156.0/22
213.134.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ca:55:65:25:22:64:c8:bf:0b:ef:20:26:3a:78:85:37:a5:
10:9e:dd:ba:d5:15:75:40:63:5f:c0:14:b8:39:0d:ec:1a:dc:
3e:01:11:85:5e:82:78:16:23:0a:a8:44:a8:78:9d:76:ae:de:
71:c8:6e:00:91:f6:34:c2:56:c3:ed:1c:36:9f:84:40:c8:3b:
1e:fb:06:78:03:a4:42:b4:d1:19:b4:51:be:2a:44:8e:77:00:
c8:86:4b:ff:c4:95:1e:f7:8b:db:b2:d0:6e:15:f3:72:e5:25:
6f:8a:e1:31:6d:2f:c5:58:ab:4b:81:0b:58:e7:f5:8c:e9:42:
ed:22:eb:23:e6:f6:2c:c1:70:f5:25:bf:bf:28:9c:d4:55:c3:
a7:6a:32:4c:e4:75:68:f5:44:c7:7f:2c:40:7c:dd:8d:ec:68:
54:a2:72:26:5a:7e:97:b4:ab:7d:65:d8:22:05:8a:a4:97:2c:
0f:68:59:17:72:e8:3c:c3:be:7f:e7:c2:6e:f1:ac:93:26:cb:
be:44:0c:fc:0f:e3:50:c8:d5:8d:81:04:ad:98:0f:14:92:86:
15:27:f7:94:7e:c4:78:e3:21:ed:4b:39:4b:d0:9b:20:56:47:
0b:5a:2e:78:2c:f2:11:42:9f:2d:f9:f6:04:90:2e:ae:2c:60:
9f:55:a4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:52 2026 by rpki-client