Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/UPGU48EbY7HXBYGBfLVC0Z-8guo.roa
File: UPGU48EbY7HXBYGBfLVC0Z-8guo.roa (raw, json)
Hash identifier: /XKT2LEWYYhVvudBLh/Zx1Wt+pq2IeZT/TtkyZZNDco=
Subject key identifier: 50:F1:94:E3:C1:1B:63:B1:D7:05:81:81:7C:B5:42:D1:9F:BC:82:EA
Certificate issuer: /CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Certificate serial: 01A061FBD2B04E49707B36848AF155C88867
Authority key identifier: 80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/UPGU48EbY7HXBYGBfLVC0Z-8guo.roa
Signing time: Wed 02 Sep 2026 11:58:08 +0000
ROA not before: Wed 02 Sep 2026 11:58:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 5.39.216.0/21 maxlen: 21
5.39.216.0/24 maxlen: 24
5.39.217.0/24 maxlen: 24
5.39.218.0/24 maxlen: 24
5.39.219.0/24 maxlen: 24
5.39.220.0/24 maxlen: 24
5.39.221.0/24 maxlen: 24
5.39.222.0/24 maxlen: 24
5.39.223.0/24 maxlen: 24
5.180.172.0/24 maxlen: 24
5.180.173.0/24 maxlen: 24
31.207.44.0/22 maxlen: 22
31.207.44.0/24 maxlen: 24
31.207.45.0/24 maxlen: 24
31.207.46.0/24 maxlen: 24
31.207.47.0/24 maxlen: 24
43.245.224.0/22 maxlen: 22
43.245.224.0/24 maxlen: 24
43.245.225.0/24 maxlen: 24
43.245.226.0/24 maxlen: 24
43.245.227.0/24 maxlen: 24
45.155.102.0/24 maxlen: 24
45.155.103.0/24 maxlen: 24
46.17.96.0/21 maxlen: 21
46.17.96.0/24 maxlen: 24
46.17.97.0/24 maxlen: 24
46.17.98.0/24 maxlen: 24
46.17.99.0/24 maxlen: 24
46.17.100.0/24 maxlen: 24
46.17.101.0/24 maxlen: 24
46.17.102.0/24 maxlen: 24
46.17.103.0/24 maxlen: 24
66.151.32.0/24 maxlen: 24
66.151.33.0/24 maxlen: 24
66.151.34.0/24 maxlen: 24
66.151.35.0/24 maxlen: 24
66.151.40.0/24 maxlen: 24
66.151.41.0/24 maxlen: 24
66.151.42.0/24 maxlen: 24
66.151.43.0/24 maxlen: 24
66.248.204.0/22 maxlen: 22
66.248.204.0/24 maxlen: 24
66.248.205.0/24 maxlen: 24
66.248.206.0/24 maxlen: 24
66.248.207.0/24 maxlen: 24
103.7.54.0/24 maxlen: 24
103.7.55.0/24 maxlen: 24
146.0.72.0/21 maxlen: 21
146.0.72.0/24 maxlen: 24
146.0.73.0/24 maxlen: 24
146.0.74.0/24 maxlen: 24
146.0.75.0/24 maxlen: 24
146.0.76.0/24 maxlen: 24
146.0.77.0/24 maxlen: 24
146.0.78.0/24 maxlen: 24
146.0.79.0/24 maxlen: 24
152.114.192.0/24 maxlen: 24
152.114.193.0/24 maxlen: 24
152.114.194.0/24 maxlen: 24
152.114.195.0/24 maxlen: 24
156.67.62.0/24 maxlen: 24
156.67.63.0/24 maxlen: 24
176.222.52.0/22 maxlen: 22
176.222.52.0/24 maxlen: 24
176.222.53.0/24 maxlen: 24
176.222.54.0/24 maxlen: 24
176.222.55.0/24 maxlen: 24
185.70.184.0/22 maxlen: 22
185.70.184.0/24 maxlen: 24
185.70.185.0/24 maxlen: 24
185.70.186.0/24 maxlen: 24
185.70.187.0/24 maxlen: 24
185.84.224.0/24 maxlen: 24
185.130.224.0/22 maxlen: 22
185.130.224.0/24 maxlen: 24
185.130.225.0/24 maxlen: 24
185.130.226.0/24 maxlen: 24
185.130.227.0/24 maxlen: 24
185.218.204.0/24 maxlen: 24
193.84.2.0/24 maxlen: 24
193.84.3.0/24 maxlen: 24
193.109.68.0/23 maxlen: 23
193.109.68.0/24 maxlen: 24
193.109.69.0/24 maxlen: 24
193.247.77.0/24 maxlen: 24
193.247.81.0/24 maxlen: 24
193.247.82.0/24 maxlen: 24
194.34.236.0/24 maxlen: 24
194.34.238.0/24 maxlen: 24
194.147.214.0/24 maxlen: 24
194.164.216.0/24 maxlen: 24
194.164.217.0/24 maxlen: 24
194.164.234.0/24 maxlen: 24
194.164.235.0/24 maxlen: 24
194.180.188.0/24 maxlen: 24
194.180.189.0/24 maxlen: 24
194.180.206.0/24 maxlen: 24
194.180.207.0/24 maxlen: 24
194.247.182.0/24 maxlen: 24
194.247.183.0/24 maxlen: 24
194.247.186.0/24 maxlen: 24
194.247.187.0/24 maxlen: 24
195.26.230.0/24 maxlen: 24
195.26.231.0/24 maxlen: 24
195.162.68.0/24 maxlen: 24
195.162.69.0/24 maxlen: 24
202.148.52.0/24 maxlen: 24
202.148.53.0/24 maxlen: 24
202.148.54.0/24 maxlen: 24
202.148.55.0/24 maxlen: 24
212.69.84.0/24 maxlen: 24
212.69.85.0/24 maxlen: 24
212.69.86.0/24 maxlen: 24
212.69.87.0/24 maxlen: 24
212.102.125.0/24 maxlen: 24
212.108.82.0/24 maxlen: 24
212.108.83.0/24 maxlen: 24
212.237.216.0/24 maxlen: 24
212.237.217.0/24 maxlen: 24
212.237.218.0/24 maxlen: 24
212.237.219.0/24 maxlen: 24
2a05:b40::/32 maxlen: 32
2a05:b41:100::/40 maxlen: 40
2a05:b42::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:fb:d2:b0:4e:49:70:7b:36:84:8a:f1:55:c8:88:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Validity
Not Before: Sep 2 11:58:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50f194e3c11b63b1d70581817cb542d19fbc82ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:a6:7b:73:14:6c:fa:67:0a:c3:f3:8f:ea:
7f:c0:49:6d:cc:15:68:b3:88:91:34:32:dc:62:3f:
ab:12:d3:33:c7:ee:6c:a7:3b:32:0b:98:b1:59:9c:
2f:7c:9f:ec:43:f0:38:a5:ab:ed:4d:d8:62:85:fa:
51:be:f1:19:2e:8a:39:a3:88:36:15:66:c2:43:1e:
71:45:c1:31:58:8a:aa:9c:b7:dd:c1:f6:5a:cd:ca:
0a:76:d4:ce:ac:78:6c:43:28:7a:f4:96:8c:47:be:
b6:da:3e:00:b2:21:12:3c:c4:28:dd:d5:d1:02:ec:
1e:d7:fb:6d:f8:f0:af:95:d4:68:61:9d:18:4e:3e:
ff:6c:1b:74:7c:a7:92:ba:02:cb:c2:e3:dd:ff:ec:
bc:31:6a:ce:97:81:ff:99:09:d1:16:76:df:25:cb:
c1:67:28:32:0f:31:ba:c1:14:a9:48:38:f1:e0:69:
03:d9:0f:38:d7:55:4d:d3:a6:e4:81:a8:dc:b3:46:
de:21:89:dc:5d:c4:f3:5c:69:f1:f4:ec:b0:90:6d:
dd:2c:a0:41:f9:34:23:b0:ca:fc:0f:f8:95:da:f3:
8b:e5:83:79:01:28:8a:56:58:9a:6a:60:c4:6c:c3:
e5:9d:cc:16:d8:f7:09:37:e9:91:85:d1:1c:01:8c:
2e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F1:94:E3:C1:1B:63:B1:D7:05:81:81:7C:B5:42:D1:9F:BC:82:EA
X509v3 Authority Key Identifier:
keyid:80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/UPGU48EbY7HXBYGBfLVC0Z-8guo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.216.0/21
5.180.172.0/23
31.207.44.0/22
43.245.224.0/22
45.155.102.0/23
46.17.96.0/21
66.151.32.0/22
66.151.40.0/22
66.248.204.0/22
103.7.54.0/23
146.0.72.0/21
152.114.192.0/22
156.67.62.0/23
176.222.52.0/22
185.70.184.0/22
185.84.224.0/24
185.130.224.0/22
185.218.204.0/24
193.84.2.0/23
193.109.68.0/23
193.247.77.0/24
193.247.81.0-193.247.82.255
194.34.236.0/24
194.34.238.0/24
194.147.214.0/24
194.164.216.0/23
194.164.234.0/23
194.180.188.0/23
194.180.206.0/23
194.247.182.0/23
194.247.186.0/23
195.26.230.0/23
195.162.68.0/23
202.148.52.0/22
212.69.84.0/22
212.102.125.0/24
212.108.82.0/23
212.237.216.0/22
IPv6:
2a05:b40::/32
2a05:b41:100::/40
2a05:b42::/32
Signature Algorithm: sha256WithRSAEncryption
80:4c:2d:6d:7a:8c:f0:5e:54:cb:6a:a7:59:d3:79:7f:2a:56:
e6:a6:6b:80:50:1a:22:1b:f6:ea:41:69:5f:7b:2a:c5:19:f4:
54:09:23:1b:3f:32:37:cb:d1:2a:55:b8:b4:90:d9:04:64:82:
1a:58:47:23:69:f8:f4:0b:6a:79:e7:a6:e0:ac:86:ca:a0:93:
54:ca:bb:e8:9b:41:57:90:c6:0d:3e:f6:d6:59:a7:c7:98:d4:
75:bc:8f:08:94:01:a9:b1:aa:da:98:f3:55:74:4d:45:84:6d:
3d:e5:ae:4a:66:e2:b7:61:28:2c:33:2d:75:28:f3:56:6e:5d:
5a:e5:81:e7:4d:23:e8:7b:4f:6a:06:74:68:fd:21:d8:96:f4:
a2:09:3d:be:d0:88:25:3e:ab:c1:7b:57:42:55:55:db:50:a4:
6c:32:48:ef:ef:a8:65:8f:a6:9a:c7:c8:25:c0:f0:e4:de:5d:
6c:44:4e:b0:7d:4a:d6:9c:38:a0:e9:62:69:e7:96:70:aa:d1:
65:77:24:1f:40:90:fa:c7:1a:5f:7f:fc:72:b0:03:e6:23:c4:
13:9e:eb:a8:b3:e4:42:d1:96:b4:ff:9d:1f:55:66:14:05:4d:
ca:6c:bf:be:42:0b:12:ad:be:14:f4:0c:10:e9:07:30:de:a4:
8b:3f:33:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:03:30 2026 by rpki-client