Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/2GJBZKsIm3jc4Z15-3kXAAPem8A.roa
File: 2GJBZKsIm3jc4Z15-3kXAAPem8A.roa (raw, json)
Hash identifier: jTvDg98QyTQnWxiM6YIXTY0rLTQHghhXeVF09n/3SKQ=
Subject key identifier: D8:62:41:64:AB:08:9B:78:DC:E1:9D:79:FB:79:17:00:03:DE:9B:C0
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A0D1A4568BE00743244085FBB363F8B0EF
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/2GJBZKsIm3jc4Z15-3kXAAPem8A.roa
Signing time: Thu 24 Sep 2026 04:20:03 +0000
ROA not before: Thu 24 Sep 2026 04:20:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 5.182.184.0/24 maxlen: 24
5.182.196.0/24 maxlen: 24
5.182.197.0/24 maxlen: 24
79.98.183.0/24 maxlen: 24
92.249.30.0/24 maxlen: 24
103.111.32.0/24 maxlen: 24
103.130.179.0/24 maxlen: 24
103.210.13.0/24 maxlen: 24
147.78.204.0/24 maxlen: 24
147.78.207.0/24 maxlen: 24
149.126.13.0/24 maxlen: 24
185.52.138.0/24 maxlen: 24
185.161.191.0/24 maxlen: 24
185.187.213.0/24 maxlen: 24
185.187.214.0/24 maxlen: 24
185.187.215.0/24 maxlen: 24
185.205.207.0/24 maxlen: 24
185.208.153.0/24 maxlen: 24
185.208.154.0/24 maxlen: 24
185.208.155.0/24 maxlen: 24
185.230.120.0/24 maxlen: 24
185.230.121.0/24 maxlen: 24
185.230.123.0/24 maxlen: 24
192.145.69.0/24 maxlen: 24
212.60.13.0/24 maxlen: 24
2a0a:8f40:1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:a4:56:8b:e0:07:43:24:40:85:fb:b3:63:f8:b0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Sep 24 04:20:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8624164ab089b78dce19d79fb79170003de9bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:e9:0e:f9:e4:d6:0a:0a:2b:05:37:90:2c:
5d:6c:b9:e4:fc:d6:c2:0a:b3:1c:9b:dc:02:ba:c9:
5d:c0:f4:a0:fb:23:ad:ae:dd:ec:18:cf:d2:e5:9d:
8a:ad:3b:51:a2:7e:5c:b2:8b:64:11:0f:94:60:23:
bd:6e:f2:09:a5:9c:45:7b:04:36:fd:c0:e5:5c:c9:
4b:8d:11:5a:e2:a0:9e:ff:03:4a:46:6e:97:b9:bf:
a7:e5:dd:f3:5b:60:2a:69:c1:94:e4:25:2f:68:86:
da:ba:b4:23:8d:e9:57:b7:3b:ae:5b:97:f7:74:01:
57:c6:4b:a3:70:c7:36:5d:e9:39:ab:df:a7:b1:fa:
8c:98:9c:09:b0:01:16:f3:53:1d:d3:b1:65:71:ec:
1a:14:b9:d1:3d:6d:90:a3:6e:d8:c1:94:14:e4:45:
01:c7:53:06:f7:3d:48:35:99:ce:30:b5:13:7e:46:
8e:c2:63:d3:05:31:35:bf:04:ab:24:9f:f7:7c:68:
c7:49:82:65:16:2c:2d:bb:33:12:a7:18:34:33:79:
10:ae:66:ac:ec:f7:06:c9:36:aa:eb:89:cd:bb:6f:
6b:66:f0:d9:99:f3:f4:33:8d:98:97:e1:b5:47:f7:
b6:ad:0b:e1:1e:a7:1d:3c:fe:94:09:95:15:0d:ca:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:62:41:64:AB:08:9B:78:DC:E1:9D:79:FB:79:17:00:03:DE:9B:C0
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/2GJBZKsIm3jc4Z15-3kXAAPem8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.184.0/24
5.182.196.0/23
79.98.183.0/24
92.249.30.0/24
103.111.32.0/24
103.130.179.0/24
103.210.13.0/24
147.78.204.0/24
147.78.207.0/24
149.126.13.0/24
185.52.138.0/24
185.161.191.0/24
185.187.213.0-185.187.215.255
185.205.207.0/24
185.208.153.0-185.208.155.255
185.230.120.0/23
185.230.123.0/24
192.145.69.0/24
212.60.13.0/24
IPv6:
2a0a:8f40:1c::/48
Signature Algorithm: sha256WithRSAEncryption
98:bd:27:98:3c:4c:27:f4:b6:b8:a1:a4:10:ec:a3:44:87:64:
30:e8:b7:40:d7:50:be:cc:02:21:e0:7c:42:dd:8d:cf:9c:23:
50:2b:ff:6b:88:de:e0:00:48:43:0a:30:5a:b4:e4:79:34:4d:
fb:37:93:31:4b:2c:e0:51:42:7a:58:a8:c9:59:a4:da:c2:7e:
82:1d:31:75:2c:aa:f9:a5:db:4a:02:ad:00:c3:d9:ee:6b:ee:
d4:76:0d:e3:e9:60:27:b2:3c:ab:53:c7:e4:a3:61:b4:12:87:
b2:41:d8:79:3c:dd:10:27:ee:94:e0:40:6e:9c:f3:75:28:ba:
4d:f3:33:09:24:28:17:67:e6:01:61:73:88:c1:03:c0:b8:1b:
11:70:02:c6:0a:4d:ad:8f:f4:2a:e3:7c:5b:34:64:b1:c4:93:
4f:05:17:53:79:6b:3a:48:27:8c:ec:82:4b:a9:7c:92:12:01:
70:6e:88:d7:09:cf:f7:b9:7c:cf:fe:94:89:b3:cd:ed:ab:56:
ec:1e:43:be:a2:fd:00:04:7b:f4:51:88:5d:0e:37:86:9d:69:
33:f1:ee:cb:b5:13:6c:6b:87:06:db:40:ea:af:87:fb:5e:3b:
24:68:b8:ff:fe:c0:a3:06:9f:d6:ca:c7:18:24:0d:1e:4f:d1:
1f:9a:27:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:34:55 2026 by rpki-client