Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/gOXA4eSdbH4c5IeG-4m3cjBuSN4.roa
File: gOXA4eSdbH4c5IeG-4m3cjBuSN4.roa (raw, json)
Hash identifier: /bHGxxVaR5KsscDI8PWYa4sB3JKBtwAVf/gqeJepnlg=
Subject key identifier: 80:E5:C0:E1:E4:9D:6C:7E:1C:E4:87:86:FB:89:B7:72:30:6E:48:DE
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 01A0C95775B5866BAF287386109E6A4882AB
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/gOXA4eSdbH4c5IeG-4m3cjBuSN4.roa
Signing time: Tue 22 Sep 2026 13:39:07 +0000
ROA not before: Tue 22 Sep 2026 13:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44285
IP address blocks: 5.1.43.0/24 maxlen: 24
37.32.32.0/22 maxlen: 24
37.75.243.0/24 maxlen: 24
37.75.244.0/22 maxlen: 22
37.75.244.0/24 maxlen: 24
37.75.245.0/24 maxlen: 24
37.75.246.0/24 maxlen: 24
37.75.247.0/24 maxlen: 24
45.9.252.0/22 maxlen: 24
45.9.252.0/24 maxlen: 24
45.9.253.0/24 maxlen: 24
45.9.254.0/24 maxlen: 24
45.87.4.0/23 maxlen: 24
45.140.224.0/22 maxlen: 22
45.156.180.0/22 maxlen: 24
45.156.192.0/22 maxlen: 24
46.28.72.0/21 maxlen: 24
46.28.72.0/24 maxlen: 24
46.28.73.0/24 maxlen: 24
46.28.74.0/24 maxlen: 24
78.110.120.0/22 maxlen: 24
80.249.114.0/24 maxlen: 24
84.47.224.0/21 maxlen: 21
84.47.224.0/22 maxlen: 22
84.47.224.0/24 maxlen: 24
84.47.225.0/24 maxlen: 24
84.47.226.0/24 maxlen: 24
84.47.227.0/24 maxlen: 24
84.47.228.0/22 maxlen: 22
84.47.228.0/24 maxlen: 24
84.47.229.0/24 maxlen: 24
84.47.230.0/23 maxlen: 24
84.47.231.0/24 maxlen: 24
85.198.24.0/22 maxlen: 24
85.198.48.0/20 maxlen: 24
88.135.37.0/24 maxlen: 24
88.135.38.0/24 maxlen: 24
88.135.39.0/24 maxlen: 24
91.236.168.0/23 maxlen: 23
91.236.168.0/24 maxlen: 24
91.236.169.0/24 maxlen: 24
185.18.212.0/22 maxlen: 22
185.18.212.0/24 maxlen: 24
185.18.213.0/24 maxlen: 24
185.18.214.0/24 maxlen: 24
185.18.215.0/24 maxlen: 24
185.51.200.0/24 maxlen: 24
185.51.201.0/24 maxlen: 24
185.51.202.0/24 maxlen: 24
185.51.203.0/24 maxlen: 24
185.121.128.0/22 maxlen: 24
185.121.128.0/24 maxlen: 24
185.121.129.0/24 maxlen: 24
185.121.130.0/24 maxlen: 24
185.121.131.0/24 maxlen: 24
185.128.136.0/24 maxlen: 24
185.128.137.0/24 maxlen: 24
185.128.138.0/24 maxlen: 24
185.128.139.0/24 maxlen: 24
185.141.132.0/24 maxlen: 24
185.141.133.0/24 maxlen: 24
185.141.134.0/24 maxlen: 24
185.141.135.0/24 maxlen: 24
188.209.152.0/23 maxlen: 23
195.110.38.0/23 maxlen: 23
195.110.38.0/24 maxlen: 24
195.110.39.0/24 maxlen: 24
217.172.120.0/21 maxlen: 24
217.172.124.0/23 maxlen: 23
217.172.126.0/23 maxlen: 23
217.172.127.0/24 maxlen: 24
2a02:828::/29 maxlen: 29
2a02:828::/32 maxlen: 32
2a02:828::/48 maxlen: 48
2a02:828::/64 maxlen: 64
2a02:828:1::/48 maxlen: 48
2a02:829::/32 maxlen: 32
2a02:82a::/32 maxlen: 32
2a02:82b::/32 maxlen: 32
2a02:82c::/32 maxlen: 32
2a02:82d::/32 maxlen: 32
2a02:82e::/32 maxlen: 32
2a02:82f::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:57:75:b5:86:6b:af:28:73:86:10:9e:6a:48:82:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Sep 22 13:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80e5c0e1e49d6c7e1ce48786fb89b772306e48de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:cf:cc:b0:54:4c:22:13:72:ea:f1:9f:0f:
49:82:4c:49:d9:dd:4c:ab:16:11:19:da:60:c8:d9:
2c:e3:a5:c3:b8:51:ef:92:74:e2:27:a6:2a:63:26:
52:22:ad:e8:01:09:3f:55:f2:b8:e1:dc:13:9d:2c:
d9:e4:bd:1d:db:dc:16:35:ba:49:15:b5:94:bd:fb:
3b:6c:3d:3a:cf:eb:b6:5a:29:c1:43:2e:14:ac:c2:
22:dd:96:5c:7d:3f:6e:91:18:e5:42:85:23:49:2a:
77:64:ba:f5:8a:80:a4:44:f2:ac:1a:8e:20:5c:cf:
5a:58:bd:db:3c:2b:9c:33:13:c5:8f:9d:84:cc:e7:
d1:d5:26:9c:ad:d0:92:fe:9b:44:9b:26:eb:72:bd:
19:46:37:b3:e7:d3:1b:90:98:56:2d:ee:52:04:c8:
59:8e:1d:54:9c:0c:98:1a:dd:8e:fb:e2:96:ec:d0:
0e:43:96:74:a8:b2:e5:4a:c7:d2:aa:e2:35:d7:ff:
72:82:76:c1:2d:f1:7e:a0:f1:de:27:68:85:3e:37:
5e:4a:18:7b:9b:78:e5:ce:e4:49:11:85:80:9d:40:
0a:38:14:42:63:20:46:0a:0e:0b:20:ed:0b:57:8e:
eb:ca:99:ed:50:7a:a1:e7:7b:0a:af:f6:9c:97:ee:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E5:C0:E1:E4:9D:6C:7E:1C:E4:87:86:FB:89:B7:72:30:6E:48:DE
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/gOXA4eSdbH4c5IeG-4m3cjBuSN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.43.0/24
37.32.32.0/22
37.75.243.0-37.75.247.255
45.9.252.0/22
45.87.4.0/23
45.140.224.0/22
45.156.180.0/22
45.156.192.0/22
46.28.72.0/21
78.110.120.0/22
80.249.114.0/24
84.47.224.0/21
85.198.24.0/22
85.198.48.0/20
88.135.37.0-88.135.39.255
91.236.168.0/23
185.18.212.0/22
185.51.200.0/22
185.121.128.0/22
185.128.136.0/22
185.141.132.0/22
188.209.152.0/23
195.110.38.0/23
217.172.120.0/21
IPv6:
2a02:828::/29
Signature Algorithm: sha256WithRSAEncryption
80:78:0e:4a:16:53:0a:76:33:cc:5f:08:70:12:5a:1c:8a:54:
e1:c6:f1:f1:f0:c8:12:e1:04:26:fb:81:84:c0:70:91:99:c0:
bf:54:88:4c:7a:13:67:69:17:89:d7:e7:9d:d2:4e:db:4a:a4:
d8:6a:b4:d2:32:64:87:41:dc:68:c6:83:fd:24:36:a6:d9:48:
f7:ae:c8:fa:d9:08:21:91:a1:7e:0d:ac:b1:22:1c:c9:c3:8b:
ad:82:87:bb:5c:c1:bb:ba:47:48:31:d0:ff:0f:f9:c0:20:75:
6b:e0:fc:3d:63:a1:73:b7:94:11:79:c6:cb:77:97:61:26:87:
46:54:f7:d9:90:89:5b:7d:47:60:29:d0:e9:37:b7:b0:30:60:
ed:31:d2:61:9a:cb:48:4f:c5:5e:04:62:4b:36:f4:3c:a5:cc:
2d:28:1c:c6:49:07:41:51:b0:ec:e0:3d:b1:68:4c:35:95:89:
8a:94:25:6c:f6:6f:e8:04:76:b3:7c:26:77:4b:c6:c7:fc:48:
8b:00:1a:30:1f:8b:d3:49:4b:f8:07:02:da:3e:39:ec:b3:6a:
ca:a9:e1:9e:a7:43:25:2f:f0:1a:de:23:7d:9b:73:9f:8a:42:
54:6b:57:2f:f4:3a:83:14:98:09:9c:e2:06:70:97:ec:77:9e:
4b:02:5c:8c
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgISAaDJV3W1hmuvKHOGEJ5qSIKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk
OGYwNjUwHhcNMjYwOTIyMTMzOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGU1YzBlMWU0OWQ2YzdlMWNlNDg3ODZmYjg5Yjc3MjMwNmU0OGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XjPzLBUTCITcurxnw9JgkxJ2d1M
qxYRGdpgyNks46XDuFHvknTiJ6YqYyZSIq3oAQk/VfK44dwTnSzZ5L0d29wWNbpJ
FbWUvfs7bD06z+u2WinBQy4UrMIi3ZZcfT9ukRjlQoUjSSp3ZLr1ioCkRPKsGo4g
XM9aWL3bPCucMxPFj52EzOfR1SacrdCS/ptEmybrcr0ZRjez59MbkJhWLe5SBMhZ
jh1UnAyYGt2O++KW7NAOQ5Z0qLLlSsfSquI11/9ygnbBLfF+oPHeJ2iFPjdeShh7
m3jlzuRJEYWAnUAKOBRCYyBGCg4LIO0LV47rypntUHqh53sKr/acl+6kNQIDAQAB
o4ICtzCCArMwHQYDVR0OBBYEFIDlwOHknWx+HOSHhvuJt3IwbkjeMB8GA1UdIwQY
MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt
MDM2NzI2OGZmODcxLzEvZ09YQTRlU2RiSDRjNUllRy00bTNjakJ1U040LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx
LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHMBggrBgEFBQcBBwEB/wSBvDCBuTCBpwQCAAEwgaADBAAF
ASsDBAIlICAwDAMEACVL8wMEAyVL8AMEAi0J/AMEAS1XBAMEAi2M4AMEAi2ctAME
Ai2cwAMEAy4cSAMEAk5ueAMEAFD5cgMEA1Qv4AMEAlXGGAMEBFXGMDAMAwQAWIcl
AwQDWIcgAwQBW+yoAwQCuRLUAwQCuTPIAwQCuXmAAwQCuYCIAwQCuY2EAwQBvNGY
AwQBw24mAwQD2ax4MA0EAgACMAcDBQMqAggoMA0GCSqGSIb3DQEBCwUAA4IBAQCA
eA5KFlMKdjPMXwhwElocilThxvHx8MgS4QQm+4GEwHCRmcC/VIhMehNnaReJ1+ed
0k7bSqTYarTSMmSHQdxoxoP9JDam2Uj3rsj62QghkaF+DayxIhzJw4utgoe7XMG7
ukdIMdD/D/nAIHVr4Pw9Y6Fzt5QRecbLd5dhJodGVPfZkIlbfUdgKdDpN7ewMGDt
MdJhmstIT8VeBGJLNvQ8pcwtKBzGSQdBUbDs4D2xaEw1lYmKlCVs9m/oBHazfCZ3
S8bH/EiLABowH4vTSUv4BwLaPjnss2rKqeGep0MlL/Aa3iN9m3OfikJUa1cv9DqD
FJgJnOIGcJfsd55LAlyM
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:45:11 2026 by rpki-client