Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/GIwn7Ck5x0M3g3Z3wUrAZY6t5Mk.roa
File: GIwn7Ck5x0M3g3Z3wUrAZY6t5Mk.roa (raw, json)
Hash identifier: 0w+iLSqmbR4WPnPbrbH22kzCE+MBLkbht/g2Ar8v4bo=
Subject key identifier: 18:8C:27:EC:29:39:C7:43:37:83:76:77:C1:4A:C0:65:8E:AD:E4:C9
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 01A0C9184A1F5000D38DE70C8FF9DE68740D
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/GIwn7Ck5x0M3g3Z3wUrAZY6t5Mk.roa
Signing time: Tue 22 Sep 2026 12:30:07 +0000
ROA not before: Tue 22 Sep 2026 12:30:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8814
IP address blocks: 80.69.52.0/24 maxlen: 24
80.69.54.0/24 maxlen: 24
80.69.55.0/24 maxlen: 24
80.69.58.0/24 maxlen: 24
80.69.59.0/24 maxlen: 24
80.69.61.0/24 maxlen: 24
80.69.62.0/24 maxlen: 24
80.69.63.0/24 maxlen: 24
91.135.245.0/24 maxlen: 24
91.135.246.0/24 maxlen: 24
91.135.247.0/24 maxlen: 24
91.135.248.0/24 maxlen: 24
91.135.249.0/24 maxlen: 24
91.135.250.0/24 maxlen: 24
91.135.251.0/24 maxlen: 24
91.135.254.0/24 maxlen: 24
91.135.255.0/24 maxlen: 24
92.39.88.0/24 maxlen: 24
92.39.89.0/24 maxlen: 24
92.39.95.0/24 maxlen: 24
158.181.32.0/24 maxlen: 24
158.181.33.0/24 maxlen: 24
158.181.35.0/24 maxlen: 24
158.181.36.0/24 maxlen: 24
158.181.40.0/22 maxlen: 22
158.181.44.0/22 maxlen: 22
185.92.227.0/24 maxlen: 24
194.135.152.0/24 maxlen: 24
194.135.153.0/24 maxlen: 24
194.135.154.0/24 maxlen: 24
194.135.155.0/24 maxlen: 24
194.135.156.0/24 maxlen: 24
194.135.157.0/24 maxlen: 24
194.135.158.0/24 maxlen: 24
194.135.159.0/24 maxlen: 24
194.135.160.0/24 maxlen: 24
212.47.128.0/22 maxlen: 22
212.47.132.0/22 maxlen: 22
212.47.136.0/22 maxlen: 22
212.47.140.0/22 maxlen: 22
212.47.144.0/22 maxlen: 22
212.47.148.0/22 maxlen: 22
212.47.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:18:4a:1f:50:00:d3:8d:e7:0c:8f:f9:de:68:74:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Sep 22 12:30:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=188c27ec2939c74337837677c14ac0658eade4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:15:5f:39:af:4e:a6:c2:d7:7a:e3:f7:f9:30:
90:33:71:fa:0c:da:1a:5f:fa:a8:cd:e2:4b:2d:ce:
fd:a8:3d:cc:a4:51:dc:06:bb:9a:fe:42:00:d6:47:
d1:75:82:42:a4:85:f5:1b:e1:b1:a8:95:e7:d7:a3:
3e:9b:aa:10:67:6e:43:c4:12:1c:5e:0d:51:6f:4e:
8d:2e:63:f4:79:39:3e:2f:e5:b4:68:da:4a:6e:60:
94:f3:e0:40:a3:a7:88:31:2d:51:79:b4:ce:07:19:
a9:6b:20:d5:05:c0:91:de:d7:7b:9e:48:c7:c4:dc:
1b:51:ef:3c:98:eb:a9:98:30:31:e4:1e:aa:0f:b2:
7b:ad:76:24:69:0d:17:1f:96:5b:88:b1:7f:bb:7b:
8f:c8:f5:bc:9d:c6:7d:54:36:7a:9f:df:6d:57:5e:
9e:b0:7b:d1:8a:cb:a8:ad:00:64:12:f1:12:02:d6:
a1:2b:e7:e8:46:61:8d:87:93:17:87:f2:db:01:85:
cf:20:c1:72:c4:45:27:2a:1d:4e:ea:2a:e8:ca:47:
54:3c:37:5a:bd:55:8b:44:20:e6:bd:ea:0f:d3:ec:
3e:8d:44:95:9b:bd:37:b4:9d:bf:42:10:82:a8:ed:
29:53:89:11:54:2c:cd:9b:68:35:ae:32:91:73:48:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8C:27:EC:29:39:C7:43:37:83:76:77:C1:4A:C0:65:8E:AD:E4:C9
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/GIwn7Ck5x0M3g3Z3wUrAZY6t5Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.52.0/24
80.69.54.0/23
80.69.58.0/23
80.69.61.0-80.69.63.255
91.135.245.0-91.135.251.255
91.135.254.0/23
92.39.88.0/23
92.39.95.0/24
158.181.32.0/23
158.181.35.0-158.181.36.255
158.181.40.0/21
185.92.227.0/24
194.135.152.0-194.135.160.255
212.47.128.0-212.47.151.255
212.47.159.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:af:b2:c3:23:92:13:39:0d:38:ce:e8:15:7c:f5:50:16:08:
2e:44:f4:d7:e5:d3:08:39:21:90:6d:1f:1e:3f:10:23:b6:f8:
98:80:a9:f7:f5:9f:89:3b:9e:69:f4:09:2c:4a:eb:8e:28:5e:
f4:d2:69:e5:4c:14:89:94:a8:1b:52:05:06:d7:aa:45:dd:66:
52:70:c4:db:e5:31:6d:ae:e0:fd:2b:8e:5a:19:9e:5e:ff:f4:
54:ae:89:38:0a:71:6f:ae:ad:f6:4a:9f:76:3e:c9:ba:2f:87:
69:27:f8:97:ce:d4:04:0f:31:68:93:d1:aa:4f:67:d6:0f:e6:
5e:a3:87:fe:99:7e:8d:f1:15:36:f3:68:95:c7:a2:7a:bc:29:
a7:20:06:a3:fd:7a:ab:a2:54:79:43:d6:0d:33:fd:30:2e:c0:
b2:35:a5:4c:05:eb:fb:71:c8:d6:eb:a5:47:42:86:c0:78:3a:
c5:8b:97:a0:29:fa:77:8f:46:47:bf:67:8f:7f:bf:2f:7c:ce:
f6:02:8f:8a:7d:d6:cd:ce:6b:3a:44:4f:11:35:52:6b:b6:67:
da:3b:42:c9:cd:ae:27:a1:35:a6:46:bf:e7:f3:e8:23:37:e0:
db:12:61:2a:30:a7:bf:9d:be:d0:75:af:35:1e:19:22:1a:1a:
e7:45:06:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:36:12 2026 by rpki-client