Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/GAcb3_GTi9es4ti94Ex9da8Yuuo.roa
File: GAcb3_GTi9es4ti94Ex9da8Yuuo.roa (raw, json)
Hash identifier: hXt1K6MNNmm3FVbMZur0tZVjSZe1csXYHc6pvZG31yI=
Subject key identifier: 18:07:1B:DF:F1:93:8B:D7:AC:E2:D8:BD:E0:4C:7D:75:AF:18:BA:EA
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 0199ED38613C8F2AC54BFAB1082307DE0ADB
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/GAcb3_GTi9es4ti94Ex9da8Yuuo.roa
Signing time: Thu 16 Oct 2025 13:31:58 +0000
ROA not before: Thu 16 Oct 2025 13:31:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6799
IP address blocks: 2.84.0.0/14 maxlen: 14
2.84.0.0/16 maxlen: 16
2.84.64.0/19 maxlen: 19
2.85.0.0/16 maxlen: 16
2.86.0.0/16 maxlen: 16
2.86.64.0/19 maxlen: 19
2.87.0.0/16 maxlen: 16
31.217.160.0/19 maxlen: 19
45.139.212.0/22 maxlen: 22
45.139.212.0/23 maxlen: 23
45.139.214.0/23 maxlen: 23
62.103.0.0/16 maxlen: 16
62.103.0.0/24 maxlen: 24
62.103.146.0/24 maxlen: 24
62.103.147.0/24 maxlen: 24
62.103.163.0/24 maxlen: 24
62.103.228.0/24 maxlen: 24
79.128.0.0/14 maxlen: 14
79.128.0.0/16 maxlen: 16
79.128.176.0/24 maxlen: 24
79.128.177.0/24 maxlen: 24
79.128.178.0/24 maxlen: 24
79.128.179.0/24 maxlen: 24
79.128.180.0/24 maxlen: 24
79.128.181.0/24 maxlen: 24
79.128.182.0/24 maxlen: 24
79.128.183.0/24 maxlen: 24
79.128.184.0/24 maxlen: 24
79.128.185.0/24 maxlen: 24
79.128.186.0/24 maxlen: 24
79.128.187.0/24 maxlen: 24
79.128.188.0/24 maxlen: 24
79.128.190.0/24 maxlen: 24
79.128.191.0/24 maxlen: 24
79.128.192.0/24 maxlen: 24
79.128.193.0/24 maxlen: 24
79.128.194.0/24 maxlen: 24
79.128.195.0/24 maxlen: 24
79.128.196.0/24 maxlen: 24
79.128.197.0/24 maxlen: 24
79.128.198.0/24 maxlen: 24
79.128.199.0/24 maxlen: 24
79.128.200.0/24 maxlen: 24
79.128.201.0/24 maxlen: 24
79.128.202.0/24 maxlen: 24
79.128.203.0/24 maxlen: 24
79.129.0.0/16 maxlen: 16
79.130.0.0/16 maxlen: 16
79.130.0.0/19 maxlen: 19
79.130.64.0/19 maxlen: 19
79.131.0.0/16 maxlen: 16
79.131.32.0/19 maxlen: 19
80.106.0.0/15 maxlen: 15
80.106.0.0/16 maxlen: 16
80.106.4.0/23 maxlen: 23
80.106.6.0/24 maxlen: 24
80.106.217.0/24 maxlen: 24
80.106.237.0/24 maxlen: 24
80.107.0.0/16 maxlen: 24
80.107.91.0/24 maxlen: 24
80.107.116.0/22 maxlen: 22
80.107.204.0/24 maxlen: 24
83.235.0.0/16 maxlen: 16
83.235.64.0/24 maxlen: 24
83.235.67.0/24 maxlen: 24
83.235.70.0/24 maxlen: 24
83.235.71.0/24 maxlen: 24
83.235.72.0/24 maxlen: 24
83.235.73.0/24 maxlen: 24
83.235.74.0/24 maxlen: 24
83.235.75.0/24 maxlen: 24
83.235.76.0/24 maxlen: 24
83.235.77.0/24 maxlen: 24
85.72.0.0/14 maxlen: 14
85.72.0.0/16 maxlen: 16
85.73.0.0/16 maxlen: 16
85.73.128.0/18 maxlen: 18
85.73.192.0/18 maxlen: 18
85.74.0.0/16 maxlen: 16
85.74.160.0/20 maxlen: 20
85.74.192.0/19 maxlen: 19
85.75.0.0/16 maxlen: 16
85.75.0.0/18 maxlen: 18
85.75.80.0/21 maxlen: 21
85.75.112.0/21 maxlen: 21
85.75.224.0/20 maxlen: 20
87.202.0.0/15 maxlen: 15
87.202.0.0/16 maxlen: 16
87.202.96.0/19 maxlen: 19
87.202.128.0/18 maxlen: 18
87.203.0.0/16 maxlen: 16
87.203.64.0/18 maxlen: 18
94.64.0.0/13 maxlen: 13
94.64.0.0/16 maxlen: 16
94.65.0.0/16 maxlen: 16
94.66.0.0/16 maxlen: 16
94.66.56.0/22 maxlen: 22
94.66.96.0/20 maxlen: 20
94.66.96.0/22 maxlen: 22
94.66.128.0/18 maxlen: 18
94.66.220.0/22 maxlen: 22
94.67.0.0/16 maxlen: 16
94.67.128.0/17 maxlen: 17
94.68.0.0/16 maxlen: 16
94.69.0.0/16 maxlen: 16
94.69.64.0/19 maxlen: 19
94.70.0.0/16 maxlen: 16
94.70.0.0/19 maxlen: 20
94.71.0.0/16 maxlen: 16
178.146.0.0/15 maxlen: 15
178.146.0.0/16 maxlen: 16
178.147.0.0/16 maxlen: 16
185.44.144.0/22 maxlen: 22
185.44.144.0/23 maxlen: 23
185.44.146.0/23 maxlen: 23
193.218.96.0/24 maxlen: 24
193.218.97.0/24 maxlen: 24
195.22.154.0/23 maxlen: 23
195.167.0.0/17 maxlen: 17
195.167.92.0/24 maxlen: 24
195.170.0.0/19 maxlen: 19
195.170.0.0/24 maxlen: 24
195.170.2.0/24 maxlen: 24
212.205.0.0/16 maxlen: 16
212.205.221.0/24 maxlen: 24
217.195.128.0/20 maxlen: 20
217.195.128.0/21 maxlen: 21
217.195.128.0/22 maxlen: 22
2a02:580::/29 maxlen: 29
2a02:582:1800::/38 maxlen: 38
2a02:582:4800::/38 maxlen: 38
2a02:582:5800::/38 maxlen: 38
2a02:582:7000::/38 maxlen: 38
2a02:586::/35 maxlen: 35
2a02:586:2000::/36 maxlen: 36
2a02:586:3000::/36 maxlen: 36
2a02:586:4000::/34 maxlen: 34
2a02:586:8000::/34 maxlen: 34
2a02:586:c000::/34 maxlen: 34
2a02:587::/35 maxlen: 35
2a02:587:1800::/38 maxlen: 38
2a02:587:2000::/36 maxlen: 36
2a02:587:3000::/36 maxlen: 36
2a02:587:4000::/34 maxlen: 34
2a02:587:4800::/38 maxlen: 38
2a02:587:4c00::/38 maxlen: 38
2a02:587:501a::/48 maxlen: 48
2a02:587:501d::/48 maxlen: 48
2a02:587:501e::/48 maxlen: 48
2a02:587:50da::/48 maxlen: 48
2a02:587:50f7::/48 maxlen: 48
2a02:587:50fa::/48 maxlen: 48
2a02:587:5400::/38 maxlen: 38
2a02:587:5800::/38 maxlen: 38
2a02:587:5c00::/38 maxlen: 38
2a02:587:6000::/38 maxlen: 38
2a02:587:6400::/38 maxlen: 38
2a02:587:8000::/34 maxlen: 34
2a02:587:8400::/40 maxlen: 40
2a02:587:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:38:61:3c:8f:2a:c5:4b:fa:b1:08:23:07:de:0a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Oct 16 13:31:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18071bdff1938bd7ace2d8bde04c7d75af18baea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:02:15:42:61:8a:ba:f2:c4:73:84:5d:ed:
0f:aa:87:b7:7c:5b:a3:2a:66:8f:db:62:a2:a0:23:
15:d5:07:1b:f5:fe:27:7f:61:5b:8d:da:18:08:5e:
1b:2a:9d:50:55:4e:f6:4d:4f:da:df:2e:18:e4:b1:
0c:2d:38:66:e8:b9:2e:9b:82:c5:eb:7c:f4:3a:f6:
90:77:4e:6c:22:21:64:57:fc:ec:49:f1:5c:52:b4:
41:d6:4a:db:07:02:bc:ae:70:13:5e:f1:29:84:b2:
af:b4:49:15:9c:b1:b2:11:06:b0:2b:39:55:c4:34:
86:fe:e5:01:2b:82:67:0d:16:c3:b8:fc:36:70:c6:
4f:23:73:68:10:66:27:aa:09:75:20:0e:19:48:bb:
d2:a5:bf:c7:a9:39:41:0f:c8:20:74:50:c2:c6:98:
fb:40:cb:bd:d3:5a:be:36:cd:97:84:f9:22:87:c8:
ff:20:95:33:85:46:15:71:85:c4:76:e8:46:e5:9e:
69:e4:db:c1:3d:78:24:a2:4a:4a:30:58:c7:a7:71:
8d:a2:c4:d1:66:e4:4c:7c:2f:c0:b9:cd:dc:7c:73:
d2:a6:e8:b3:e3:1a:6e:4c:8a:c5:de:42:5a:5f:66:
f8:e3:31:9e:ea:90:43:65:fe:f6:67:df:79:ae:8f:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:07:1B:DF:F1:93:8B:D7:AC:E2:D8:BD:E0:4C:7D:75:AF:18:BA:EA
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/GAcb3_GTi9es4ti94Ex9da8Yuuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.84.0.0/14
31.217.160.0/19
45.139.212.0/22
62.103.0.0/16
79.128.0.0/14
80.106.0.0/15
83.235.0.0/16
85.72.0.0/14
87.202.0.0/15
94.64.0.0/13
178.146.0.0/15
185.44.144.0/22
193.218.96.0/23
195.22.154.0/23
195.167.0.0/17
195.170.0.0/19
212.205.0.0/16
217.195.128.0/20
IPv6:
2a02:580::/29
Signature Algorithm: sha256WithRSAEncryption
28:b1:4a:fa:6b:fc:4a:1a:89:9e:a7:cb:38:5a:05:bc:19:54:
b2:f3:68:92:e9:83:a2:5b:1c:a4:b3:dc:e8:73:51:09:73:a9:
d5:a7:8a:44:af:85:b9:db:bb:84:b2:b5:b0:80:c5:b8:be:c9:
22:4a:40:47:1b:4e:e4:cb:6c:98:9a:0f:24:93:95:df:05:49:
4e:b1:98:34:f6:59:18:f6:48:90:39:52:02:7d:94:fd:71:f7:
71:d5:d4:38:f7:a4:ac:f4:a4:e0:a0:2b:ff:db:6c:95:55:7b:
99:c3:de:fb:23:44:47:06:44:23:1a:c6:8c:05:f8:73:50:10:
fb:e8:89:42:0b:13:21:5e:20:c4:77:17:71:65:01:9d:85:9e:
b8:bb:57:85:1d:ab:71:e7:45:d7:8d:2e:6d:8f:c6:4b:7d:55:
ee:dd:57:1f:4e:e3:29:a9:a5:37:80:5f:b4:72:fb:a2:80:d4:
db:01:d5:67:25:08:bc:e7:9f:62:28:16:f3:d2:bb:6b:4e:75:
07:d9:51:c6:4e:71:46:96:61:5d:90:24:56:d0:95:32:93:16:
ba:41:40:d9:e7:72:62:7d:c5:a4:cb:06:f9:67:fe:fe:31:66:
17:b1:32:af:a9:18:fc:8b:6a:16:60:cc:9c:5a:9c:dc:1c:fa:
2e:06:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:43:12 2025 by rpki-client