Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/9GCgP_DEuUkQjqQ99w0TCtPb0eA.roa
File: 9GCgP_DEuUkQjqQ99w0TCtPb0eA.roa (raw, json)
Hash identifier: vx1ov+H5IElExJmmSWW4c1zLrQLB9GfLrsCjJuNPOzw=
Subject key identifier: F4:60:A0:3F:F0:C4:B9:49:10:8E:A4:3D:F7:0D:13:0A:D3:DB:D1:E0
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A1895DD417F9B70C96216C2060EE2F4AB7
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/9GCgP_DEuUkQjqQ99w0TCtPb0eA.roa
Signing time: Thu 29 Oct 2026 20:33:10 +0000
ROA not before: Thu 29 Oct 2026 20:33:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209372
IP address blocks: 5.104.74.0/24 maxlen: 24
31.40.192.0/24 maxlen: 24
31.40.194.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
45.130.185.0/24 maxlen: 24
45.130.186.0/24 maxlen: 24
45.140.7.0/24 maxlen: 24
45.152.136.0/24 maxlen: 24
45.152.138.0/24 maxlen: 24
45.154.120.0/22 maxlen: 24
77.83.21.0/24 maxlen: 24
77.83.22.0/24 maxlen: 24
77.83.48.0/23 maxlen: 24
77.83.48.0/24 maxlen: 24
77.83.49.0/24 maxlen: 24
77.83.50.0/23 maxlen: 24
80.243.230.0/23 maxlen: 24
84.252.64.0/24 maxlen: 24
84.252.65.0/24 maxlen: 24
85.31.52.0/24 maxlen: 24
86.62.53.0/24 maxlen: 24
86.62.54.0/24 maxlen: 24
86.62.55.0/24 maxlen: 24
88.218.80.0/24 maxlen: 24
88.218.81.0/24 maxlen: 24
88.218.82.0/23 maxlen: 24
88.218.239.0/24 maxlen: 24
91.132.126.0/24 maxlen: 24
91.132.127.0/24 maxlen: 24
91.245.238.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
95.214.94.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
95.214.244.0/22 maxlen: 24
176.113.40.0/23 maxlen: 24
176.113.42.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
176.118.190.0/24 maxlen: 24
176.118.191.0/24 maxlen: 24
185.155.100.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
185.177.78.0/23 maxlen: 24
193.9.57.0/24 maxlen: 24
193.9.58.0/24 maxlen: 24
193.9.59.0/24 maxlen: 24
193.31.124.0/23 maxlen: 24
193.47.36.0/22 maxlen: 24
193.56.22.0/24 maxlen: 24
193.160.69.0/24 maxlen: 24
193.160.74.0/24 maxlen: 24
193.160.75.0/24 maxlen: 24
193.202.113.0/24 maxlen: 24
193.228.48.0/24 maxlen: 24
193.228.49.0/24 maxlen: 24
193.228.50.0/24 maxlen: 24
193.228.51.0/24 maxlen: 24
194.53.188.0/22 maxlen: 24
194.104.4.0/24 maxlen: 24
194.104.7.0/24 maxlen: 24
194.124.41.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.135.0/24 maxlen: 24
213.109.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:5d:d4:17:f9:b7:0c:96:21:6c:20:60:ee:2f:4a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 29 20:33:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f460a03ff0c4b949108ea43df70d130ad3dbd1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:c0:c9:ef:59:38:4f:89:4b:b5:cd:92:26:
87:f5:ed:6d:ee:80:2b:75:c4:fd:05:ed:0c:b4:36:
2b:d1:e5:16:c5:d5:c9:3b:4d:53:17:fc:3c:5e:6b:
26:cd:9c:7b:ee:5b:cf:9c:4f:7f:79:87:e3:41:26:
4b:1d:00:1e:89:dd:46:72:95:6c:4f:11:fa:f4:8a:
0f:4a:3d:4d:0b:19:d7:a9:52:7d:5b:0e:6d:59:cb:
15:5a:2e:fb:1b:b9:dd:4d:ef:6e:37:6a:c9:64:99:
a8:cb:54:6f:2f:9c:e0:09:dc:4b:5d:6a:a7:a2:63:
e6:7b:5d:4a:a4:b3:37:75:4a:7a:93:16:a4:2b:65:
d6:27:9d:5a:2f:8d:61:30:d1:bd:75:c8:cc:b1:b0:
2e:fd:c6:8a:1a:81:4b:a2:54:65:3a:73:a3:8b:89:
81:e9:e5:83:be:78:35:1d:57:3a:7b:85:29:ad:be:
08:3f:f2:2c:1b:a2:5f:b2:76:31:23:2e:a6:5b:ad:
6d:fe:dc:99:4c:d1:23:f0:24:24:d3:01:8c:fb:ea:
b2:f1:ce:c3:de:9e:0d:98:0c:7c:c7:ee:92:12:41:
df:de:0e:cf:34:a5:7c:2c:80:2b:7b:b9:42:4e:da:
16:c0:d9:c7:8a:57:de:bb:4f:2a:e2:3f:01:0f:19:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:60:A0:3F:F0:C4:B9:49:10:8E:A4:3D:F7:0D:13:0A:D3:DB:D1:E0
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/9GCgP_DEuUkQjqQ99w0TCtPb0eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.74.0/24
31.40.192.0/24
31.40.194.0/24
45.130.184.0-45.130.186.255
45.140.7.0/24
45.152.136.0/24
45.152.138.0/24
45.154.120.0/22
77.83.21.0-77.83.22.255
77.83.48.0/22
80.243.230.0/23
84.252.64.0/23
85.31.52.0/24
86.62.53.0-86.62.55.255
88.218.80.0/22
88.218.239.0/24
91.132.126.0/23
91.245.238.0/23
95.214.93.0-95.214.95.255
95.214.244.0/22
176.113.40.0-176.113.42.255
176.118.188.0/24
176.118.190.0/23
185.155.100.0/24
185.177.77.0-185.177.79.255
193.9.57.0-193.9.59.255
193.31.124.0/23
193.47.36.0/22
193.56.22.0/24
193.160.69.0/24
193.160.74.0/23
193.202.113.0/24
193.228.48.0/22
194.53.188.0/22
194.104.4.0/24
194.104.7.0/24
194.124.41.0/24
212.69.133.0/24
212.69.135.0/24
213.109.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:f6:4c:de:f7:c8:f4:c9:c8:0e:4a:b9:0d:00:2d:fc:ae:d1:
e6:63:02:f7:63:2b:c8:9b:96:3d:5a:19:1a:ab:2a:dc:c7:15:
ba:b2:0e:9d:d9:7c:68:23:f9:4f:ad:2d:b9:ed:1d:c5:30:7b:
2b:9d:5c:77:48:d0:0c:ce:75:22:f4:5f:e8:fb:0a:2b:8e:56:
bc:33:7c:89:66:6d:94:bb:bb:e4:e9:02:6b:b5:f7:45:56:04:
5a:fd:48:11:bc:7b:65:a6:a9:ea:6e:0e:c9:e1:97:2f:5a:12:
ab:ef:83:8c:66:7d:52:37:5a:80:46:ee:a8:bc:f4:02:3e:d3:
46:d0:d8:9e:42:c8:00:b5:da:af:8f:6d:24:a6:3f:66:0f:78:
37:06:e3:15:6f:f6:b3:46:08:87:5d:57:03:e9:fe:9a:3b:0c:
ea:50:d5:af:4b:f6:5e:98:13:4b:55:dd:ce:45:9f:24:b3:d8:
1b:dc:f2:67:a4:e7:d8:20:34:d8:8e:cf:48:d4:b5:f4:b3:83:
b1:88:4a:2e:ef:a4:c0:fe:6c:22:7d:55:da:34:e4:68:b3:2b:
a2:49:b0:cd:9b:39:1b:eb:ff:2e:d2:5f:01:6b:da:03:e0:18:
d8:8d:2e:e9:cd:38:19:22:f5:89:0d:1f:46:c3:3c:37:1b:e7:
7f:22:5a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:06 2026 by rpki-client