Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/GUabI5JcklphJ9g4PLiVa7FKjS4.roa
File: GUabI5JcklphJ9g4PLiVa7FKjS4.roa (raw, json)
Hash identifier: vVjs5pg2TL4gAnTFv1Qeiqv6EfMTsBV51W/ccMMuKpw=
Subject key identifier: 19:46:9B:23:92:5C:92:5A:61:27:D8:38:3C:B8:95:6B:B1:4A:8D:2E
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019EBB8A1FA825BF6E73DA17113569FE4B68
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/GUabI5JcklphJ9g4PLiVa7FKjS4.roa
Signing time: Fri 12 Jun 2026 11:14:11 +0000
ROA not before: Fri 12 Jun 2026 11:14:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8315
IP address blocks: 5.100.224.0/21 maxlen: 24
79.99.184.0/21 maxlen: 24
83.98.128.0/19 maxlen: 24
83.98.166.0/23 maxlen: 24
83.98.168.0/21 maxlen: 24
83.98.176.0/20 maxlen: 24
83.98.200.0/22 maxlen: 24
83.98.208.0/20 maxlen: 24
85.92.128.0/19 maxlen: 24
85.92.128.0/20 maxlen: 24
85.92.144.0/22 maxlen: 24
85.158.160.0/21 maxlen: 24
85.222.192.0/21 maxlen: 24
89.18.160.0/22 maxlen: 24
89.18.168.0/21 maxlen: 24
89.18.180.0/22 maxlen: 24
89.30.128.0/18 maxlen: 24
89.30.192.0/19 maxlen: 24
89.30.208.0/20 maxlen: 24
89.30.224.0/21 maxlen: 24
91.200.48.0/23 maxlen: 24
91.200.51.0/24 maxlen: 24
91.216.113.0/24 maxlen: 24
91.216.141.0/24 maxlen: 24
93.175.176.0/20 maxlen: 24
94.198.24.0/21 maxlen: 24
134.0.88.0/21 maxlen: 24
162.248.196.0/22 maxlen: 24
162.251.32.0/21 maxlen: 24
176.62.192.0/21 maxlen: 24
178.251.192.0/21 maxlen: 24
185.12.132.0/22 maxlen: 24
185.30.236.0/22 maxlen: 24
185.38.156.0/22 maxlen: 24
185.74.76.0/24 maxlen: 24
185.74.77.0/24 maxlen: 24
185.77.120.0/22 maxlen: 24
185.113.52.0/22 maxlen: 24
185.113.196.0/22 maxlen: 24
185.113.224.0/22 maxlen: 24
185.116.72.0/22 maxlen: 24
193.34.150.0/23 maxlen: 24
194.105.128.0/23 maxlen: 24
194.165.34.0/24 maxlen: 24
195.234.173.0/24 maxlen: 24
213.171.128.0/19 maxlen: 24
213.171.144.0/20 maxlen: 24
213.189.0.0/21 maxlen: 24
213.189.16.0/20 maxlen: 24
213.214.96.0/19 maxlen: 24
213.247.32.0/21 maxlen: 24
213.247.40.0/22 maxlen: 24
213.247.48.0/23 maxlen: 24
213.247.52.0/24 maxlen: 24
217.195.112.0/20 maxlen: 24
2001:16f8::/32 maxlen: 48
2a00:1bd8::/32 maxlen: 48
2a01:40e0::/32 maxlen: 48
2a02:20b0::/32 maxlen: 32
2a02:20b1::/32 maxlen: 32
2a02:2858::/29 maxlen: 48
2a02:2858:200::/40 maxlen: 40
2a02:2858:300::/40 maxlen: 40
2a02:2858:400::/40 maxlen: 40
2a02:2858:500::/40 maxlen: 40
2a03:5500::/31 maxlen: 48
2a0d:5040::/29 maxlen: 29
2a0d:5040::/32 maxlen: 32
2a0d:5041::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:8a:1f:a8:25:bf:6e:73:da:17:11:35:69:fe:4b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jun 12 11:14:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19469b23925c925a6127d8383cb8956bb14a8d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:89:26:ca:01:86:9b:f8:be:6c:9c:99:5c:
aa:48:bb:36:84:43:39:de:6b:31:d8:15:95:aa:2e:
67:b9:d5:88:4a:07:ec:d5:78:46:12:bd:1a:c5:ff:
b2:ca:c4:3a:62:5a:8f:d2:d2:ac:de:40:22:b5:5e:
2c:c4:6d:e0:d0:e5:75:8c:48:3e:83:6c:7d:cb:aa:
e9:d3:c9:8a:00:99:14:84:8b:00:dc:48:ad:ce:7c:
06:d9:6f:bf:1d:ad:43:07:f3:f6:dc:c2:83:f1:7e:
e4:99:f6:ce:36:5b:c5:2c:d4:5b:13:10:bb:80:c7:
1d:f1:77:79:fd:84:22:33:ac:36:b6:03:59:e0:42:
04:9e:3b:d0:5f:1e:b4:3d:0c:60:c7:0c:bc:b9:7e:
88:c8:93:59:d4:22:37:96:05:92:bf:8f:a6:86:e4:
42:bd:a2:8a:47:bb:6a:b8:eb:03:7d:c2:1e:ec:60:
9f:c2:ec:3f:3d:fb:76:19:36:36:b3:f6:48:ef:c7:
9a:91:c1:87:b4:58:98:7b:db:3f:3b:55:d8:f3:c4:
fe:2e:42:87:50:ea:65:a6:7a:bd:70:72:41:47:b8:
91:93:06:0b:a7:46:1e:46:65:dd:bd:4d:12:a7:d4:
6c:ac:a3:d9:26:47:92:25:55:9f:53:cf:72:fc:2c:
e0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:46:9B:23:92:5C:92:5A:61:27:D8:38:3C:B8:95:6B:B1:4A:8D:2E
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/GUabI5JcklphJ9g4PLiVa7FKjS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.224.0/21
79.99.184.0/21
83.98.128.0/19
83.98.166.0-83.98.191.255
83.98.200.0/22
83.98.208.0/20
85.92.128.0/19
85.158.160.0/21
85.222.192.0/21
89.18.160.0/22
89.18.168.0/21
89.18.180.0/22
89.30.128.0-89.30.231.255
91.200.48.0/23
91.200.51.0/24
91.216.113.0/24
91.216.141.0/24
93.175.176.0/20
94.198.24.0/21
134.0.88.0/21
162.248.196.0/22
162.251.32.0/21
176.62.192.0/21
178.251.192.0/21
185.12.132.0/22
185.30.236.0/22
185.38.156.0/22
185.74.76.0/23
185.77.120.0/22
185.113.52.0/22
185.113.196.0/22
185.113.224.0/22
185.116.72.0/22
193.34.150.0/23
194.105.128.0/23
194.165.34.0/24
195.234.173.0/24
213.171.128.0/19
213.189.0.0/21
213.189.16.0/20
213.214.96.0/19
213.247.32.0-213.247.43.255
213.247.48.0/23
213.247.52.0/24
217.195.112.0/20
IPv6:
2001:16f8::/32
2a00:1bd8::/32
2a01:40e0::/32
2a02:20b0::/31
2a02:2858::/29
2a03:5500::/31
2a0d:5040::/29
Signature Algorithm: sha256WithRSAEncryption
2f:17:0a:59:04:24:3b:f3:d9:45:96:57:d2:29:05:4f:4a:89:
aa:93:a0:44:27:7a:57:69:e4:5c:32:eb:d2:5c:a1:ea:f3:ca:
e4:53:de:f1:06:2b:9e:d6:6c:65:ed:ac:22:da:a8:a0:78:26:
b0:99:e5:7c:0f:5c:af:e1:06:51:b5:4f:99:ea:47:99:74:85:
49:60:88:1e:a9:30:0b:73:ac:97:51:c5:48:51:f5:4b:74:11:
97:20:6a:a2:07:eb:19:57:2e:ca:7f:99:9f:19:22:c9:01:66:
f3:e8:29:38:26:70:35:a3:aa:ad:e8:5c:09:e5:c7:83:60:cd:
81:38:07:2a:ed:3b:72:b1:2d:74:a4:0b:d9:51:c9:c9:6d:61:
44:ec:ca:23:e5:5f:f9:aa:83:98:34:ba:5f:dd:c3:90:6c:63:
02:db:7b:7b:9f:11:ae:68:8f:6c:93:6c:e9:e3:5b:7f:e0:74:
13:04:13:ec:eb:51:47:84:19:58:a7:be:26:57:c5:23:c3:4e:
c3:40:1e:57:9f:48:b1:a8:b4:6f:fb:f8:a5:c5:8e:1f:dc:37:
6c:2d:c4:b8:8f:3e:19:cb:3c:89:e6:c9:59:f3:2e:1e:d0:37:
5e:72:2d:84:47:02:f0:17:9c:3f:e0:f7:94:27:4f:4f:e1:be:
fa:ba:ce:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:38:50 2026 by rpki-client