Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/Gx2TdYaye1CW6jikn3ZdanxLIok.roa
File: Gx2TdYaye1CW6jikn3ZdanxLIok.roa (raw, json)
Hash identifier: lEUJaiweZkhF8hDlvPMbWM1am1KHv6FjfLlxTnc1lZ8=
Subject key identifier: 1B:1D:93:75:86:B2:7B:50:96:EA:38:A4:9F:76:5D:6A:7C:4B:22:89
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 019E0157A8FC7BBBFD9290B4C42EE86BD253
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/Gx2TdYaye1CW6jikn3ZdanxLIok.roa
Signing time: Thu 07 May 2026 07:29:42 +0000
ROA not before: Thu 07 May 2026 07:29:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49628
IP address blocks: 5.187.8.0/21 maxlen: 21
5.187.8.0/24 maxlen: 24
5.187.9.0/24 maxlen: 24
5.187.10.0/24 maxlen: 24
5.187.11.0/24 maxlen: 24
5.187.12.0/24 maxlen: 24
5.187.13.0/24 maxlen: 24
5.187.14.0/24 maxlen: 24
5.187.15.0/24 maxlen: 24
37.75.128.0/21 maxlen: 21
78.40.104.0/22 maxlen: 22
78.40.104.0/24 maxlen: 24
78.40.105.0/24 maxlen: 24
78.40.106.0/24 maxlen: 24
78.40.107.0/24 maxlen: 24
185.46.176.0/22 maxlen: 22
185.46.176.0/24 maxlen: 24
185.46.177.0/24 maxlen: 24
185.46.178.0/24 maxlen: 24
185.46.179.0/24 maxlen: 24
185.81.92.0/22 maxlen: 22
185.81.92.0/24 maxlen: 24
185.81.93.0/24 maxlen: 24
185.81.94.0/24 maxlen: 24
185.81.95.0/24 maxlen: 24
185.168.224.0/22 maxlen: 22
185.168.224.0/24 maxlen: 24
185.168.225.0/24 maxlen: 24
185.168.226.0/24 maxlen: 24
185.168.227.0/24 maxlen: 24
188.227.192.0/22 maxlen: 22
188.227.192.0/24 maxlen: 24
188.227.193.0/24 maxlen: 24
188.227.194.0/24 maxlen: 24
188.227.195.0/24 maxlen: 24
193.176.212.0/22 maxlen: 22
193.176.212.0/24 maxlen: 24
193.176.213.0/24 maxlen: 24
193.176.214.0/24 maxlen: 24
193.176.215.0/24 maxlen: 24
2a01:88e0::/32 maxlen: 32
2a05:86c0::/29 maxlen: 29
2a07:ebc0::/29 maxlen: 29
2a0a:2900::/29 maxlen: 29
2a0a:2907:ffff:1000::/64 maxlen: 64
2a0a:2907:ffff:1100::/64 maxlen: 64
2a0c:6340::/29 maxlen: 29
2a0c:a3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:57:a8:fc:7b:bb:fd:92:90:b4:c4:2e:e8:6b:d2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: May 7 07:29:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b1d937586b27b5096ea38a49f765d6a7c4b2289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:cf:24:c7:91:9c:6e:37:cc:c5:54:52:62:
6b:22:99:8e:da:75:d0:d7:4f:f4:ac:e7:6c:9f:b7:
7c:d9:b6:ec:2a:d0:f2:6a:54:8e:e7:9c:a1:04:08:
02:21:f7:21:05:27:26:f5:7d:75:8e:0d:33:43:bd:
b8:00:65:24:99:ca:12:04:23:7e:09:3f:80:02:42:
e0:37:70:99:7d:5f:66:99:8c:32:c6:61:60:ed:b5:
a3:8e:1d:c7:84:3d:f9:9a:4b:cf:33:ef:e8:25:5d:
c9:cf:81:84:93:cf:06:30:8d:41:62:82:45:52:03:
58:e4:e6:cb:01:db:22:c2:b8:08:0f:02:97:a1:12:
c8:9d:e6:09:23:0a:b8:a8:4e:33:b5:57:01:35:b4:
5b:ff:f0:a6:77:aa:00:c3:16:26:3b:df:61:a9:7f:
85:28:f4:48:7f:b6:ee:41:91:d1:4d:86:0b:cf:52:
37:9f:dc:95:bd:f3:34:17:cf:f0:cf:59:5d:68:0b:
63:38:5e:66:1e:37:a3:01:4f:57:e2:65:6b:9c:8a:
63:78:e2:8b:c3:eb:80:dc:cf:2f:3c:57:63:87:ff:
e9:66:48:40:9c:d1:83:6a:af:21:89:a6:33:3f:5f:
1c:96:6c:c9:49:03:bb:c5:97:77:ac:1b:76:01:1b:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1D:93:75:86:B2:7B:50:96:EA:38:A4:9F:76:5D:6A:7C:4B:22:89
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/Gx2TdYaye1CW6jikn3ZdanxLIok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.8.0/21
37.75.128.0/21
78.40.104.0/22
185.46.176.0/22
185.81.92.0/22
185.168.224.0/22
188.227.192.0/22
193.176.212.0/22
IPv6:
2a01:88e0::/32
2a05:86c0::/29
2a07:ebc0::/29
2a0a:2900::/29
2a0c:6340::/29
2a0c:a3c0::/29
Signature Algorithm: sha256WithRSAEncryption
15:35:05:56:9a:6a:ec:d6:10:95:bc:8b:cd:a2:4b:07:eb:87:
f7:59:87:48:ff:bf:c5:98:a9:26:dd:68:de:0b:5d:38:4d:19:
16:2f:21:57:36:f8:5a:3f:ee:6f:2b:c1:0a:16:83:e8:c6:2f:
84:a6:0a:65:24:11:78:e0:3f:31:d6:e6:cf:86:04:5b:da:e8:
22:27:90:72:e9:1c:73:71:eb:e5:84:70:e3:ad:37:3b:66:9a:
d1:08:66:93:15:5c:5a:ac:d9:5c:3c:d8:94:66:61:61:69:25:
9d:1e:98:e4:75:26:63:01:c2:87:29:45:a0:03:11:d4:3e:4b:
64:ad:53:c6:ae:6b:cf:e3:38:b0:5f:c1:33:ca:79:d8:d5:28:
7a:10:d6:89:e6:24:06:83:c6:7f:df:ac:49:8a:d8:5b:77:28:
a1:65:49:1a:a4:1f:03:bc:e8:da:31:19:c4:6d:41:63:43:89:
8a:e9:c7:42:a1:1a:3c:d5:6a:d4:d5:36:f2:b6:e7:2e:2b:02:
58:07:13:cc:10:33:7f:4a:ce:e5:1a:c3:2a:5f:09:b4:92:19:
bd:f4:e8:49:a1:0d:41:19:d1:0e:91:70:ea:28:c3:cd:45:cb:
b0:bc:20:6f:04:84:a1:17:30:58:66:2f:91:01:f8:f0:7d:51:
5e:b0:b2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:39 2026 by rpki-client