Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/gwB8EQKBkF6rAUQregKYO8DR9DM.roa
File: gwB8EQKBkF6rAUQregKYO8DR9DM.roa (raw, json)
Hash identifier: bkCyPXRCyEr0y70TR0Ql1njvG/oRBgnO+/E/e2UhPeQ=
Subject key identifier: 83:00:7C:11:02:81:90:5E:AB:01:44:2B:7A:02:98:3B:C0:D1:F4:33
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 019F1893C23A9439A77D8B06369D8509C4DA
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/gwB8EQKBkF6rAUQregKYO8DR9DM.roa
Signing time: Tue 30 Jun 2026 12:49:24 +0000
ROA not before: Tue 30 Jun 2026 12:49:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49100
IP address blocks: 5.202.0.0/16 maxlen: 24
5.202.16.0/23 maxlen: 23
5.202.22.0/23 maxlen: 23
5.202.57.0/24 maxlen: 24
5.202.76.0/24 maxlen: 24
5.202.82.0/24 maxlen: 24
5.202.100.0/24 maxlen: 24
5.202.110.0/24 maxlen: 24
5.202.166.0/23 maxlen: 23
5.202.168.0/23 maxlen: 23
5.202.208.0/20 maxlen: 20
5.202.240.0/21 maxlen: 21
77.237.160.0/19 maxlen: 19
85.9.64.0/18 maxlen: 18
85.9.68.0/24 maxlen: 24
85.9.76.0/24 maxlen: 24
91.209.242.0/24 maxlen: 24
95.215.160.0/22 maxlen: 22
109.125.160.0/19 maxlen: 19
109.125.160.0/23 maxlen: 23
109.125.162.0/23 maxlen: 23
109.125.164.0/23 maxlen: 23
109.125.168.0/21 maxlen: 21
109.125.176.0/22 maxlen: 22
109.125.182.0/23 maxlen: 23
109.125.184.0/22 maxlen: 22
109.125.184.0/24 maxlen: 24
109.125.185.0/24 maxlen: 24
109.125.186.0/24 maxlen: 24
109.125.187.0/24 maxlen: 24
109.125.188.0/24 maxlen: 24
109.125.189.0/24 maxlen: 24
109.125.190.0/24 maxlen: 24
109.125.191.0/24 maxlen: 24
109.232.5.0/24 maxlen: 24
109.232.6.0/24 maxlen: 24
109.232.7.0/24 maxlen: 24
185.72.24.0/22 maxlen: 22
185.72.27.0/24 maxlen: 24
185.83.88.0/24 maxlen: 24
185.83.89.0/24 maxlen: 24
185.83.90.0/23 maxlen: 23
185.103.128.0/22 maxlen: 22
185.125.244.0/22 maxlen: 22
185.125.248.0/21 maxlen: 21
185.125.255.0/24 maxlen: 24
185.126.0.0/20 maxlen: 20
185.126.16.0/22 maxlen: 22
185.126.16.0/23 maxlen: 23
185.126.40.0/22 maxlen: 22
185.131.28.0/22 maxlen: 22
185.131.30.0/23 maxlen: 23
185.155.8.0/21 maxlen: 21
185.169.20.0/22 maxlen: 22
185.169.36.0/22 maxlen: 22
185.169.37.0/24 maxlen: 24
185.177.232.0/22 maxlen: 22
185.180.52.0/22 maxlen: 22
188.253.32.0/19 maxlen: 24
188.253.64.0/19 maxlen: 24
193.32.80.0/23 maxlen: 23
194.33.122.0/23 maxlen: 23
2001:4c88::/32 maxlen: 32
2a02:cd80::/29 maxlen: 29
2a07:8f00::/29 maxlen: 29
2a07:8f40::/29 maxlen: 29
2a0a:4e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:93:c2:3a:94:39:a7:7d:8b:06:36:9d:85:09:c4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jun 30 12:49:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83007c110281905eab01442b7a02983bc0d1f433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:4a:ed:75:61:94:fd:02:df:49:b0:0d:69:
98:17:2e:23:91:2c:a2:e1:e5:f5:6a:65:56:7f:dd:
c9:af:44:65:70:c5:51:fc:cb:d2:c0:d8:84:2e:e1:
46:af:08:27:32:99:72:31:4e:01:91:df:e0:30:63:
20:be:04:47:2b:a2:a5:cd:c8:37:c8:2b:89:01:0f:
b8:e2:c2:8d:44:7d:e3:39:5c:35:54:e8:ce:57:86:
97:4a:74:11:4e:8a:86:fb:50:bc:9c:5b:17:9b:75:
28:b8:7d:dd:cb:9b:76:53:74:8e:c6:87:5d:19:55:
5d:27:7b:73:97:d3:53:ba:8f:dc:78:5b:37:44:2b:
6c:c3:42:64:59:54:17:5b:13:5b:fc:40:a9:61:f8:
26:4a:1d:e8:87:74:af:fb:b0:12:f6:cc:35:d1:24:
1d:53:6d:b8:ae:09:06:4c:7c:d9:0a:d0:da:a7:a3:
35:1f:33:56:ed:96:5b:8b:f6:e2:b3:58:bc:05:a2:
20:de:7c:71:1e:48:84:57:7b:4d:bd:c7:e5:8f:ee:
dc:38:22:45:4b:11:5f:59:10:35:f7:08:ee:f9:6c:
30:df:e5:f4:38:b0:9b:34:a0:ec:12:e5:c6:15:c1:
78:ab:06:16:0a:73:62:59:4e:5a:cf:f3:d6:e4:91:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:00:7C:11:02:81:90:5E:AB:01:44:2B:7A:02:98:3B:C0:D1:F4:33
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/gwB8EQKBkF6rAUQregKYO8DR9DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.0.0/16
77.237.160.0/19
85.9.64.0/18
91.209.242.0/24
95.215.160.0/22
109.125.160.0/19
109.232.5.0-109.232.7.255
185.72.24.0/22
185.83.88.0/22
185.103.128.0/22
185.125.244.0-185.126.19.255
185.126.40.0/22
185.131.28.0/22
185.155.8.0/21
185.169.20.0/22
185.169.36.0/22
185.177.232.0/22
185.180.52.0/22
188.253.32.0-188.253.95.255
193.32.80.0/23
194.33.122.0/23
IPv6:
2001:4c88::/32
2a02:cd80::/29
2a07:8f00::/29
2a07:8f40::/29
2a0a:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
61:ba:28:1b:cb:82:b5:0d:60:ca:52:31:41:a4:85:49:f1:4b:
3a:4f:54:44:06:ee:db:36:bc:31:42:ff:fd:c8:a2:d1:9a:83:
1f:b6:41:5d:1f:70:32:5d:e2:8e:7d:2d:e7:4d:01:6d:f0:34:
a8:80:d7:6c:d7:9c:21:ec:75:0a:dc:88:24:4f:b9:1b:f7:40:
4f:04:c5:99:41:49:cd:36:0a:ba:d0:ae:33:ee:86:9e:3c:77:
8a:2c:dd:0e:35:8d:92:83:52:fe:f8:93:b1:52:2e:4e:bd:aa:
dd:29:d8:2f:26:81:88:f5:3b:56:a8:92:bb:1e:14:71:2d:c8:
45:fd:53:4e:64:90:68:c0:67:45:3f:28:4b:f9:dd:1a:f9:09:
95:5f:1d:ec:06:e0:f2:1e:1b:8b:07:19:c8:a5:6c:71:70:da:
e8:0a:1b:b1:1b:17:57:79:d5:18:e4:b8:9c:21:9d:52:ab:0f:
fe:98:3b:d7:6a:d9:21:94:17:6c:01:4a:5a:4e:26:d5:5e:f9:
98:37:c7:dc:02:16:84:60:04:43:ef:d6:b4:d6:17:2c:97:8a:
0d:a2:fe:b9:1a:9e:51:3e:a5:fb:47:f9:4b:9e:1b:a3:9f:7b:
27:84:eb:9d:45:71:b6:b2:0b:d1:5a:50:d8:76:a6:b7:a2:12:
69:be:7a:f8
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAZ8Yk8I6lDmnfYsGNp2FCcTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1
OTVlYmEwHhcNMjYwNjMwMTI0OTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzAwN2MxMTAyODE5MDVlYWIwMTQ0MmI3YTAyOTgzYmMwZDFmNDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpRK7XVhlP0C30mwDWmYFy4jkSyi
4eX1amVWf93Jr0RlcMVR/MvSwNiELuFGrwgnMplyMU4Bkd/gMGMgvgRHK6Klzcg3
yCuJAQ+44sKNRH3jOVw1VOjOV4aXSnQRToqG+1C8nFsXm3UouH3dy5t2U3SOxodd
GVVdJ3tzl9NTuo/ceFs3RCtsw0JkWVQXWxNb/ECpYfgmSh3oh3Sv+7AS9sw10SQd
U224rgkGTHzZCtDap6M1HzNW7ZZbi/bis1i8BaIg3nxxHkiEV3tNvcflj+7cOCJF
SxFfWRA19wju+Www3+X0OLCbNKDsEuXGFcF4qwYWCnNiWU5az/PW5JExMwIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFIMAfBECgZBeqwFEK3oCmDvA0fQzMB8GA1UdIwQY
MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt
MTA5ODJlMDQwZDUzLzEvZ3dCOEVRS0JrRjZyQVVRcmVnS1lPOERSOURNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz
LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHdBggrBgEFBQcBBwEB/wSBzTCByjCBnAQCAAEwgZUDAwAF
ygMEBU3toAMEBlUJQAMEAFvR8gMEAl/XoAMEBW19oDAMAwQAbegFAwQDbegAAwQC
uUgYAwQCuVNYAwQCuWeAMAwDBAK5ffQDBAK5fhADBAK5figDBAK5gxwDBAO5mwgD
BAK5qRQDBAK5qSQDBAK5segDBAK5tDQwDAMEBbz9IAMEBbz9QAMEAcEgUAMEAcIh
ejApBAIAAjAjAwUAIAFMiAMFAyoCzYADBQMqB48AAwUDKgePQAMFAyoKTgAwDQYJ
KoZIhvcNAQELBQADggEBAGG6KBvLgrUNYMpSMUGkhUnxSzpPVEQG7ts2vDFC//3I
otGagx+2QV0fcDJd4o59LedNAW3wNKiA12zXnCHsdQrciCRPuRv3QE8ExZlBSc02
CrrQrjPuhp48d4os3Q41jZKDUv74k7FSLk69qt0p2C8mgYj1O1aokrseFHEtyEX9
U05kkGjAZ0U/KEv53Rr5CZVfHewG4PIeG4sHGcilbHFw2ugKG7EbF1d51RjkuJwh
nVKrD/6YO9dq2SGUF2wBSlpOJtVe+Zg3x9wCFoRgBEPv1rTWFyyXig2i/rkanlE+
pftH+UueG6OfeyeE651FcbayC9FaUNh2preiEmm+evg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:57 2026 by rpki-client