Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/gPVJ3frT2a_JfPP9EGZIsKgy1a0.roa
File: gPVJ3frT2a_JfPP9EGZIsKgy1a0.roa (raw, json)
Hash identifier: QLrbnotwwaeckUxd194yTQbnltlzcloRQasYTwXYSI4=
Subject key identifier: 80:F5:49:DD:FA:D3:D9:AF:C9:7C:F3:FD:10:66:48:B0:A8:32:D5:AD
Certificate issuer: /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Certificate serial: 019DDEA1A72C224C6CCFFA19A3221D78F0C8
Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/gPVJ3frT2a_JfPP9EGZIsKgy1a0.roa
Signing time: Thu 30 Apr 2026 13:43:49 +0000
ROA not before: Thu 30 Apr 2026 13:43:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6453
IP address blocks: 5.11.128.0/17 maxlen: 24
5.24.0.0/14 maxlen: 24
31.140.0.0/14 maxlen: 24
31.141.16.0/21 maxlen: 21
31.141.24.0/21 maxlen: 21
77.67.128.0/17 maxlen: 24
86.108.128.0/17 maxlen: 24
141.196.0.0/16 maxlen: 24
176.89.0.0/16 maxlen: 24
176.90.0.0/15 maxlen: 24
176.227.0.0/17 maxlen: 24
176.237.0.0/16 maxlen: 24
176.238.0.0/16 maxlen: 24
176.239.0.0/16 maxlen: 24
178.240.0.0/13 maxlen: 24
188.56.0.0/14 maxlen: 24
213.43.0.0/16 maxlen: 24
2a02:4e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:a1:a7:2c:22:4c:6c:cf:fa:19:a3:22:1d:78:f0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Validity
Not Before: Apr 30 13:43:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80f549ddfad3d9afc97cf3fd106648b0a832d5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:98:cf:95:ba:4b:c6:96:08:ac:6c:93:ef:
da:c6:54:71:2f:1b:a6:fa:42:e8:4b:14:c1:34:cc:
f7:77:f7:3e:99:40:78:48:1c:ac:c6:b1:75:22:6d:
3b:35:b4:d1:01:02:7b:22:e9:84:57:f0:c9:32:6f:
fc:b9:f3:07:0a:bb:12:f3:cd:39:64:96:49:88:4f:
bf:8e:4c:74:43:b4:7b:8a:90:df:bc:75:39:fd:55:
0f:83:c2:6a:1d:50:70:87:c6:c7:99:be:19:af:07:
1c:fa:41:4a:c3:a3:ad:14:69:1d:38:68:0c:07:c9:
b8:a0:09:93:55:6d:8b:8b:88:0f:59:21:20:c4:92:
f4:c5:85:ae:e7:d9:c7:53:75:7b:92:eb:5a:24:b5:
55:08:9a:de:7d:f6:aa:21:b5:a5:ba:9f:a1:f1:86:
3d:d4:18:7f:e4:a5:c4:60:f9:a0:06:9b:3f:e6:c5:
8b:2e:b3:ca:f9:a9:f7:e4:54:e2:ca:aa:5a:28:d7:
fc:cb:35:29:50:9c:6a:a2:22:c4:60:c6:65:61:70:
96:3d:df:8c:d1:2a:1b:ff:f4:87:f0:95:a2:1d:45:
3b:47:2b:54:4f:34:55:24:e8:26:fe:02:f8:1a:4e:
5f:49:7b:6a:1a:fc:52:88:11:47:22:4b:be:66:fb:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F5:49:DD:FA:D3:D9:AF:C9:7C:F3:FD:10:66:48:B0:A8:32:D5:AD
X509v3 Authority Key Identifier:
keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/gPVJ3frT2a_JfPP9EGZIsKgy1a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.128.0/17
5.24.0.0/14
31.140.0.0/14
77.67.128.0/17
86.108.128.0/17
141.196.0.0/16
176.89.0.0-176.91.255.255
176.227.0.0/17
176.237.0.0-176.239.255.255
178.240.0.0/13
188.56.0.0/14
213.43.0.0/16
IPv6:
2a02:4e0::/32
Signature Algorithm: sha256WithRSAEncryption
00:e1:b1:fe:43:60:d3:9f:d1:04:ac:5e:e0:40:4a:24:2e:76:
d3:26:db:2b:e8:3c:e1:60:9b:f1:56:12:d8:ea:82:0a:3c:e9:
fd:8c:2e:41:70:01:59:dc:85:fb:7a:6e:b4:1c:88:1a:49:e6:
f9:01:4a:82:f1:70:f5:f4:78:1c:51:f0:d6:ae:e1:5a:56:f3:
a3:fe:4e:29:a3:6a:3d:b7:b1:d7:87:64:bf:36:28:0e:e8:42:
27:04:1a:c8:13:cd:12:5a:a3:ca:18:e3:ae:dd:63:1e:8f:34:
54:2d:4a:67:ee:19:6a:23:61:4c:75:59:fd:96:f9:80:a7:39:
6b:7f:38:52:8b:e8:4a:ed:48:6e:a7:15:c4:26:ef:9e:ed:85:
6b:2d:2d:5c:a8:77:8b:4f:dd:14:4e:33:14:c2:70:78:6b:e4:
50:4d:21:5d:c1:3e:ce:f4:2a:0c:dc:b0:5c:c3:4d:71:8a:78:
22:e8:61:eb:d5:ed:41:41:bd:85:5d:47:26:6d:de:98:b1:00:
54:42:1e:5f:85:31:dc:c1:5f:c0:7a:bd:6e:60:ca:21:a6:91:
e0:84:3f:55:28:d7:9b:f3:46:93:9c:8d:af:6e:96:71:a1:e7:
28:1f:50:08:42:b9:b4:fb:3e:cc:04:11:ea:b8:ab:29:dc:12:
e9:bf:79:6b
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAZ3eoacsIkxsz/oZoyIdePDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzY1YTFkY2Y4MjI1ZTdmMTBiZTIwZGRkZTFlMjE2ZTgw
MGI2N2MwHhcNMjYwNDMwMTM0MzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGY1NDlkZGZhZDNkOWFmYzk3Y2YzZmQxMDY2NDhiMGE4MzJkNWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/uYz5W6S8aWCKxsk+/axlRxLxum
+kLoSxTBNMz3d/c+mUB4SBysxrF1Im07NbTRAQJ7IumEV/DJMm/8ufMHCrsS8805
ZJZJiE+/jkx0Q7R7ipDfvHU5/VUPg8JqHVBwh8bHmb4Zrwcc+kFKw6OtFGkdOGgM
B8m4oAmTVW2Li4gPWSEgxJL0xYWu59nHU3V7kutaJLVVCJreffaqIbWlup+h8YY9
1Bh/5KXEYPmgBps/5sWLLrPK+an35FTiyqpaKNf8yzUpUJxqoiLEYMZlYXCWPd+M
0Sob//SH8JWiHUU7RytUTzRVJOgm/gL4Gk5fSXtqGvxSiBFHIku+ZvvKaQIDAQAB
o4ICYDCCAlwwHQYDVR0OBBYEFID1Sd3609mvyXzz/RBmSLCoMtWtMB8GA1UdIwQY
MBaAFH7GWh3PgiXn8QviDd3h4hboALZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNaYUhjLUNKZWZ4Qy1JTjNlSGlGdWdBdG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84ZTc3ODUtOTQ1MS00NmZiLWIyNDQt
N2Q5YjgyMzA1MzdlLzEvZ1BWSjNmclQyYV9KZlBQOUVHWklzS2d5MWEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84ZTc3ODUtOTQ1MS00NmZiLWIyNDQtN2Q5YjgyMzA1Mzdl
LzEvZnNaYUhjLUNKZWZ4Qy1JTjNlSGlGdWdBdG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQHBQuAAwMC
BRgDAwIfjAMEB01DgAMEB1ZsgAMDAI3EMAoDAwCwWQMDArBYAwQHsOMAMAoDAwCw
7QMDBLDgAwMDsvADAwK8OAMDANUrMA0EAgACMAcDBQAqAgTgMA0GCSqGSIb3DQEB
CwUAA4IBAQAA4bH+Q2DTn9EErF7gQEokLnbTJtsr6DzhYJvxVhLY6oIKPOn9jC5B
cAFZ3IX7em60HIgaSeb5AUqC8XD19HgcUfDWruFaVvOj/k4po2o9t7HXh2S/NigO
6EInBBrIE80SWqPKGOOu3WMejzRULUpn7hlqI2FMdVn9lvmApzlrfzhSi+hK7Uhu
pxXEJu+e7YVrLS1cqHeLT90UTjMUwnB4a+RQTSFdwT7O9CoM3LBcw01xingi6GHr
1e1BQb2FXUcmbd6YsQBUQh5fhTHcwV/Aer1uYMohppHghD9VKNeb80aTnI2vbpZx
oecoH1AIQrm0+z7MBBHquKsp3BLpv3lr
-----END CERTIFICATE-----
Generated at Wed May 13 02:38:02 2026 by rpki-client