Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/GxIVjDapSVdQZlCoMGPtyoGOzgo.roa
File: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (raw, json)
Hash identifier: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=
Subject key identifier: 1B:12:15:8C:36:A9:49:57:50:66:50:A8:30:63:ED:CA:81:8E:CE:0A
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019D8B12D4983EE70895BF18EB5722AAD127
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/GxIVjDapSVdQZlCoMGPtyoGOzgo.roa
Signing time: Tue 14 Apr 2026 08:19:20 +0000
ROA not before: Tue 14 Apr 2026 08:19:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57169
IP address blocks: 5.180.114.0/24 maxlen: 24
5.187.33.0/24 maxlen: 24
37.235.48.0/20 maxlen: 20
37.235.48.0/24 maxlen: 24
37.235.50.0/23 maxlen: 23
37.235.50.0/24 maxlen: 24
37.235.52.0/24 maxlen: 24
37.235.56.0/24 maxlen: 24
37.235.57.0/24 maxlen: 24
37.235.58.0/24 maxlen: 24
37.235.59.0/24 maxlen: 24
37.235.60.0/24 maxlen: 24
37.235.61.0/24 maxlen: 24
37.235.62.0/24 maxlen: 24
37.235.63.0/24 maxlen: 24
45.153.125.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
83.172.134.0/24 maxlen: 24
83.172.135.0/24 maxlen: 24
83.172.150.0/24 maxlen: 24
83.172.151.0/24 maxlen: 24
83.172.153.0/24 maxlen: 24
83.172.169.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.122.0/24 maxlen: 24
83.243.123.0/24 maxlen: 24
84.247.61.0/24 maxlen: 24
86.106.119.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.40.105.0/24 maxlen: 24
89.46.235.0/24 maxlen: 24
89.46.238.0/24 maxlen: 24
91.132.94.0/24 maxlen: 24
91.227.204.0/23 maxlen: 23
91.227.204.0/24 maxlen: 24
91.227.205.0/24 maxlen: 24
92.243.64.0/24 maxlen: 24
92.243.66.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.250.0/24 maxlen: 24
134.255.210.0/24 maxlen: 24
149.154.152.0/24 maxlen: 24
149.154.153.0/24 maxlen: 24
149.154.154.0/24 maxlen: 24
149.154.155.0/24 maxlen: 24
149.154.156.0/24 maxlen: 24
151.236.0.0/19 maxlen: 19
151.236.0.0/24 maxlen: 24
151.236.1.0/24 maxlen: 24
151.236.2.0/24 maxlen: 24
151.236.3.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.5.0/24 maxlen: 24
151.236.6.0/24 maxlen: 24
151.236.7.0/24 maxlen: 24
151.236.8.0/24 maxlen: 24
151.236.9.0/24 maxlen: 24
151.236.10.0/24 maxlen: 24
151.236.11.0/24 maxlen: 24
151.236.12.0/24 maxlen: 24
151.236.13.0/24 maxlen: 24
151.236.14.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
151.236.26.0/23 maxlen: 23
151.236.28.0/24 maxlen: 24
151.236.30.0/24 maxlen: 24
158.255.209.0/24 maxlen: 24
158.255.210.0/24 maxlen: 24
158.255.211.0/24 maxlen: 24
158.255.212.0/24 maxlen: 24
176.126.99.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.237.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
185.122.184.0/24 maxlen: 24
185.193.48.0/24 maxlen: 24
185.193.51.0/24 maxlen: 24
185.195.65.0/24 maxlen: 24
188.190.1.0/24 maxlen: 24
188.190.3.0/24 maxlen: 24
188.190.6.0/24 maxlen: 24
188.190.7.0/24 maxlen: 24
188.190.8.0/24 maxlen: 24
188.190.9.0/24 maxlen: 24
188.190.10.0/24 maxlen: 24
188.190.11.0/24 maxlen: 24
188.190.14.0/24 maxlen: 24
188.190.15.0/24 maxlen: 24
188.190.16.0/24 maxlen: 24
188.190.17.0/24 maxlen: 24
188.190.19.0/24 maxlen: 24
188.190.20.0/24 maxlen: 24
188.190.21.0/24 maxlen: 24
188.190.22.0/24 maxlen: 24
188.190.23.0/24 maxlen: 24
188.190.26.0/24 maxlen: 24
188.190.27.0/24 maxlen: 24
188.190.28.0/24 maxlen: 24
188.190.29.0/24 maxlen: 24
188.211.166.0/24 maxlen: 24
188.214.33.0/24 maxlen: 24
188.214.34.0/24 maxlen: 24
188.214.38.0/24 maxlen: 24
188.214.39.0/24 maxlen: 24
193.3.55.0/24 maxlen: 24
213.111.177.0/24 maxlen: 24
213.111.180.0/24 maxlen: 24
213.111.182.0/24 maxlen: 24
213.111.183.0/24 maxlen: 24
213.111.184.0/24 maxlen: 24
213.111.186.0/24 maxlen: 24
213.111.187.0/24 maxlen: 24
213.111.188.0/24 maxlen: 24
213.111.191.0/24 maxlen: 24
213.183.54.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
213.183.56.0/24 maxlen: 24
213.183.57.0/24 maxlen: 24
2a03:f80:7::/48 maxlen: 48
2a03:f80:31::/48 maxlen: 48
2a03:f80:32::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:56::/48 maxlen: 48
2a03:f80:57::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:70::/48 maxlen: 48
2a03:f80:354::/48 maxlen: 48
2a03:f80:357::/48 maxlen: 48
2a03:f80:358::/48 maxlen: 48
2a03:f80:359::/48 maxlen: 48
2a03:f80:370::/48 maxlen: 48
2a03:f80:371::/48 maxlen: 48
2a03:f80:491::/48 maxlen: 48
2a03:f80:3991::/48 maxlen: 48
2a03:f80:ad15::/48 maxlen: 48
2a03:f80:ed15::/48 maxlen: 48
2a03:f80:ed16::/48 maxlen: 48
2a03:f80:ed17::/48 maxlen: 48
2a03:f80:ed31::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
2a03:f80:ed91::/48 maxlen: 48
2a03:f82:abcd::/48 maxlen: 48
2a03:f82:abcd:43::/64 maxlen: 64
2a03:f87:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:12:d4:98:3e:e7:08:95:bf:18:eb:57:22:aa:d1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Apr 14 08:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b12158c36a94957506650a83063edca818ece0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:60:05:fc:17:f3:1f:5f:f4:6d:4c:4b:a2:cf:
e0:01:a9:65:c5:57:06:05:53:98:92:b1:da:65:72:
71:06:9d:94:8c:e1:05:02:91:d7:83:a0:9e:af:ae:
3e:7c:57:2c:e8:0b:92:53:27:90:4f:85:96:2d:b3:
e4:14:d8:fa:c5:e7:61:eb:2b:82:51:06:2b:11:c7:
26:f4:89:54:54:fc:18:9f:0d:df:77:17:f3:5c:b3:
bb:65:50:bf:02:b9:3d:f8:e5:62:9a:76:e5:ab:c9:
45:72:0f:4a:14:c0:8e:cb:0d:21:c4:3f:c1:a7:e0:
5b:73:06:cb:d7:4f:57:86:f3:af:f3:15:1b:f9:e0:
00:a4:64:dc:34:0e:24:03:ee:51:9a:e6:f2:e5:c3:
25:23:3e:51:30:20:44:c3:2a:b2:ef:2f:7a:f6:6f:
ce:27:5f:24:9b:b1:ce:8c:da:2c:06:fa:49:07:ef:
32:82:f3:40:09:d4:46:70:5b:25:f2:af:85:5c:f9:
f1:eb:9f:1d:2e:e1:6a:6f:16:ef:20:f2:e4:88:76:
5b:50:38:c8:2f:38:6c:1e:31:1f:5a:57:cc:cc:83:
7e:d4:a5:8b:5e:a7:f8:ea:37:50:33:71:9d:f1:fe:
2b:c9:83:99:9f:16:94:07:c1:45:0f:da:e4:ec:b2:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:12:15:8C:36:A9:49:57:50:66:50:A8:30:63:ED:CA:81:8E:CE:0A
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/GxIVjDapSVdQZlCoMGPtyoGOzgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.114.0/24
5.187.33.0/24
37.235.48.0/20
45.153.125.0/24
46.183.187.0/24
83.172.134.0/23
83.172.150.0/23
83.172.153.0/24
83.172.169.0/24
83.243.120.0/24
83.243.122.0/23
84.247.61.0/24
86.106.119.0/24
89.31.123.0/24
89.40.105.0/24
89.46.235.0/24
89.46.238.0/24
91.132.94.0/24
91.227.204.0/23
92.243.64.0/24
92.243.66.0/24
95.156.204.0/23
103.57.249.0-103.57.250.255
134.255.210.0/24
149.154.152.0-149.154.156.255
151.236.0.0/19
158.255.209.0-158.255.212.255
176.126.99.0/24
185.26.236.0-185.26.238.255
185.76.79.0/24
185.122.184.0/24
185.193.48.0/24
185.193.51.0/24
185.195.65.0/24
188.190.1.0/24
188.190.3.0/24
188.190.6.0-188.190.11.255
188.190.14.0-188.190.17.255
188.190.19.0-188.190.23.255
188.190.26.0-188.190.29.255
188.211.166.0/24
188.214.33.0-188.214.34.255
188.214.38.0/23
193.3.55.0/24
213.111.177.0/24
213.111.180.0/24
213.111.182.0-213.111.184.255
213.111.186.0-213.111.188.255
213.111.191.0/24
213.183.54.0-213.183.57.255
IPv6:
2a03:f80:7::/48
2a03:f80:31::-2a03:f80:32:ffff:ffff:ffff:ffff:ffff
2a03:f80:48::/48
2a03:f80:56::/47
2a03:f80:61::/48
2a03:f80:70::/48
2a03:f80:354::/48
2a03:f80:357::-2a03:f80:359:ffff:ffff:ffff:ffff:ffff
2a03:f80:370::/47
2a03:f80:491::/48
2a03:f80:3991::/48
2a03:f80:ad15::/48
2a03:f80:ed15::-2a03:f80:ed17:ffff:ffff:ffff:ffff:ffff
2a03:f80:ed31::/48
2a03:f80:ed51::/48
2a03:f80:ed91::/48
2a03:f82:abcd::/48
2a03:f87:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
70:3f:bb:c5:47:ad:0a:cb:d1:66:95:c9:57:11:05:f3:60:c1:
4e:b0:09:c1:72:7b:95:7d:14:a3:62:bb:a9:62:88:cc:07:ad:
d5:f8:e2:43:bc:2d:0c:d3:2f:53:0f:af:4e:e9:01:b1:c8:e3:
b7:8b:9e:63:cf:38:eb:dc:94:b0:89:6d:a0:d3:25:f4:c4:52:
9f:e9:1e:32:d5:19:37:f6:cb:55:6c:3a:85:2d:4d:df:19:6b:
0a:d6:43:75:a3:b4:08:20:d6:94:07:16:50:82:eb:10:d6:92:
82:13:70:6f:41:3c:b0:f8:ba:7b:51:9c:2c:26:62:99:4c:00:
fe:a3:47:a7:36:a4:ba:6a:39:0f:54:b7:51:e3:ce:06:cc:2c:
1a:d1:e1:89:2a:d5:08:c3:b1:99:e6:9b:19:28:f3:65:cc:a1:
9b:c8:80:d9:45:ba:23:b8:da:a1:f1:40:66:23:d7:d2:7b:99:
30:7a:3f:6c:fa:89:be:53:aa:c0:df:99:c7:0e:79:1c:95:e9:
e1:72:40:30:a4:74:c4:26:c1:32:03:d2:83:b8:2e:a3:e9:72:
26:83:fa:18:24:fb:b4:97:c1:83:63:f5:ec:9b:6b:f8:dd:bf:
c8:ce:0f:a0:73:03:9b:27:ed:d1:e9:4e:6a:d1:ec:d5:d0:81:
e4:31:2a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:25 2026 by rpki-client