Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UT_GtBBNtuVhPxWE6vl6Vqyhj5E.roa
File: UT_GtBBNtuVhPxWE6vl6Vqyhj5E.roa (raw, json)
Hash identifier: 5qge9/ISJ9qmM66JZjw3TTjIBsh0G3J40E+t8SYzuyU=
Subject key identifier: 51:3F:C6:B4:10:4D:B6:E5:61:3F:15:84:EA:F9:7A:56:AC:A1:8F:91
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019D96045A86B288BC516C493358D95B90DE
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UT_GtBBNtuVhPxWE6vl6Vqyhj5E.roa
Signing time: Thu 16 Apr 2026 11:19:20 +0000
ROA not before: Thu 16 Apr 2026 11:19:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 62.105.200.0/22 maxlen: 22
62.192.102.0/23 maxlen: 23
62.192.113.0/24 maxlen: 24
62.192.114.0/23 maxlen: 23
62.192.126.0/23 maxlen: 23
92.71.2.0/23 maxlen: 24
92.71.4.0/23 maxlen: 24
92.71.26.0/23 maxlen: 24
92.71.28.0/22 maxlen: 24
92.71.36.0/23 maxlen: 24
92.71.48.0/21 maxlen: 24
92.71.56.0/22 maxlen: 24
92.71.62.0/23 maxlen: 24
135.196.4.0/24 maxlen: 24
135.196.24.0/23 maxlen: 24
135.196.28.0/23 maxlen: 24
135.196.88.0/23 maxlen: 24
135.196.102.0/23 maxlen: 24
135.196.108.0/22 maxlen: 24
135.196.132.0/23 maxlen: 24
135.196.144.0/22 maxlen: 24
135.196.156.0/23 maxlen: 24
135.196.164.0/23 maxlen: 24
135.196.172.0/23 maxlen: 24
135.196.176.0/23 maxlen: 24
135.196.202.0/24 maxlen: 24
135.196.204.0/24 maxlen: 24
195.86.223.0/24 maxlen: 24
213.169.204.0/23 maxlen: 23
213.169.240.0/23 maxlen: 23
213.201.140.0/24 maxlen: 24
213.201.148.0/24 maxlen: 24
213.201.154.0/23 maxlen: 24
213.201.158.0/24 maxlen: 24
213.201.163.0/24 maxlen: 24
213.201.166.0/23 maxlen: 24
213.201.171.0/24 maxlen: 24
213.201.174.0/23 maxlen: 24
213.201.179.0/24 maxlen: 24
213.201.182.0/23 maxlen: 24
213.201.186.0/23 maxlen: 24
213.201.190.0/23 maxlen: 24
213.201.194.0/23 maxlen: 24
213.201.196.0/23 maxlen: 24
213.201.198.0/24 maxlen: 24
213.201.200.0/24 maxlen: 24
213.201.202.0/24 maxlen: 24
213.201.204.0/24 maxlen: 24
213.201.208.0/23 maxlen: 24
213.201.214.0/23 maxlen: 24
213.201.218.0/23 maxlen: 24
213.201.222.0/23 maxlen: 24
213.201.226.0/23 maxlen: 24
213.201.228.0/23 maxlen: 24
213.201.234.0/23 maxlen: 24
213.201.238.0/23 maxlen: 24
217.8.218.0/24 maxlen: 24
217.8.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:04:5a:86:b2:88:bc:51:6c:49:33:58:d9:5b:90:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 16 11:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=513fc6b4104db6e5613f1584eaf97a56aca18f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:fd:f5:57:41:d8:69:9e:4c:cf:16:da:88:
66:41:a9:41:5e:79:46:92:92:08:b2:4a:f3:b5:30:
92:84:25:df:a0:67:fa:e3:d8:f6:eb:41:5c:f3:80:
2c:f9:8c:6a:d8:2b:f9:39:a1:cc:0b:11:8b:83:78:
dc:f3:2f:2a:3f:8b:4f:4b:a9:2b:b8:5f:f0:a8:af:
ce:36:90:42:39:53:8e:23:74:ce:58:12:18:04:d8:
4e:e7:d1:cf:27:96:73:7f:c7:f2:2d:68:14:15:7d:
00:dc:4f:d3:2b:33:33:07:07:e2:59:10:1e:15:c8:
31:8d:a1:6d:9c:b8:a0:44:2d:a5:e1:ed:32:fb:1e:
24:cc:9f:c4:82:fd:7c:b8:05:45:3b:2e:fe:ba:56:
2b:cd:5b:d9:58:bd:43:01:68:6b:11:18:b4:f1:a9:
f2:86:b2:33:84:a9:ac:f7:1b:74:2b:0c:88:2a:99:
0b:02:96:dc:6b:37:c8:35:d4:59:e7:53:14:d0:b2:
cf:dc:1e:58:0f:ed:b0:a3:92:5c:63:04:dc:31:50:
9e:5f:8d:39:20:ab:c4:d1:36:18:ba:0c:c8:08:36:
e7:8b:80:c8:e9:30:2e:b8:89:04:03:c4:73:c3:cc:
9f:bc:7f:f4:0f:cd:30:b4:c8:40:8c:89:3d:38:86:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3F:C6:B4:10:4D:B6:E5:61:3F:15:84:EA:F9:7A:56:AC:A1:8F:91
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UT_GtBBNtuVhPxWE6vl6Vqyhj5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.200.0/22
62.192.102.0/23
62.192.113.0-62.192.115.255
62.192.126.0/23
92.71.2.0-92.71.5.255
92.71.26.0-92.71.31.255
92.71.36.0/23
92.71.48.0-92.71.59.255
92.71.62.0/23
135.196.4.0/24
135.196.24.0/23
135.196.28.0/23
135.196.88.0/23
135.196.102.0/23
135.196.108.0/22
135.196.132.0/23
135.196.144.0/22
135.196.156.0/23
135.196.164.0/23
135.196.172.0/23
135.196.176.0/23
135.196.202.0/24
135.196.204.0/24
195.86.223.0/24
213.169.204.0/23
213.169.240.0/23
213.201.140.0/24
213.201.148.0/24
213.201.154.0/23
213.201.158.0/24
213.201.163.0/24
213.201.166.0/23
213.201.171.0/24
213.201.174.0/23
213.201.179.0/24
213.201.182.0/23
213.201.186.0/23
213.201.190.0/23
213.201.194.0-213.201.198.255
213.201.200.0/24
213.201.202.0/24
213.201.204.0/24
213.201.208.0/23
213.201.214.0/23
213.201.218.0/23
213.201.222.0/23
213.201.226.0-213.201.229.255
213.201.234.0/23
213.201.238.0/23
217.8.218.0/24
217.8.222.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:4c:ae:e0:86:f5:a3:54:12:af:d9:37:5e:58:5b:70:e7:09:
4c:a2:53:c4:5c:e7:a5:f5:72:ee:62:63:36:43:05:6c:59:2f:
56:99:29:df:04:b1:f3:48:6b:32:45:98:52:89:51:c1:ce:4b:
04:a8:9c:a8:7d:46:47:0f:a6:f3:c7:d8:ec:78:46:c1:e6:e0:
3a:10:6d:f3:7c:7f:db:75:28:bb:ca:10:a3:a8:74:ab:6c:71:
1c:45:43:83:61:e9:a2:e1:e6:ea:95:21:2a:c0:b4:ec:91:93:
f0:25:86:9d:9a:a4:e8:0b:61:00:e8:4d:bb:ec:2a:4e:68:98:
98:0e:00:c5:34:1f:ca:63:6d:d4:8d:71:1a:6e:32:d8:b6:07:
d1:ec:53:c8:19:c0:ab:c8:92:d5:86:40:66:4e:91:4a:b0:f9:
25:5d:80:aa:d7:ba:c4:db:ad:25:d5:d0:88:c8:f1:b3:07:5f:
7b:5c:eb:6f:c5:ee:d3:55:d1:5b:e7:16:86:49:a5:81:ef:d0:
11:8a:07:21:85:11:77:ef:cc:e2:87:2d:b8:ae:9d:db:b6:c0:
01:b1:e6:21:c3:a0:09:62:0a:96:00:23:0f:c4:4f:a7:1b:f0:
29:bf:46:31:c5:8c:71:26:bd:d2:0b:48:b5:49:ee:1b:77:a5:
cb:e6:2e:28
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgISAZ2WBFqGsoi8UWxJM1jZW5DeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNDE2MTExOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTNmYzZiNDEwNGRiNmU1NjEzZjE1ODRlYWY5N2E1NmFjYTE4ZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRr99VdB2GmeTM8W2ohmQalBXnlG
kpIIskrztTCShCXfoGf649j260Fc84As+Yxq2Cv5OaHMCxGLg3jc8y8qP4tPS6kr
uF/wqK/ONpBCOVOOI3TOWBIYBNhO59HPJ5Zzf8fyLWgUFX0A3E/TKzMzBwfiWRAe
FcgxjaFtnLigRC2l4e0y+x4kzJ/Egv18uAVFOy7+ulYrzVvZWL1DAWhrERi08any
hrIzhKms9xt0KwyIKpkLApbcazfINdRZ51MU0LLP3B5YD+2wo5JcYwTcMVCeX405
IKvE0TYYugzICDbni4DI6TAuuIkEA8Rzw8yfvH/0D80wtMhAjIk9OIYU5QIDAQAB
o4IDbzCCA2swHQYDVR0OBBYEFFE/xrQQTbblYT8VhOr5elasoY+RMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvVVRfR3RCQk50dVZoUHhXRTZ2bDZWcXloajVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBgwYIKwYBBQUHAQcBAf8EggFyMIIBbjCCAWoEAgABMIIB
YgMEAj5pyAMEAT7AZjAMAwQAPsBxAwQCPsBwAwQBPsB+MAwDBAFcRwIDBAFcRwQw
DAMEAVxHGgMEBVxHAAMEAVxHJDAMAwQEXEcwAwQCXEc4AwQBXEc+AwQAh8QEAwQB
h8QYAwQBh8QcAwQBh8RYAwQBh8RmAwQCh8RsAwQBh8SEAwQCh8SQAwQBh8ScAwQB
h8SkAwQBh8SsAwQBh8SwAwQAh8TKAwQAh8TMAwQAw1bfAwQB1anMAwQB1anwAwQA
1cmMAwQA1cmUAwQB1cmaAwQA1cmeAwQA1cmjAwQB1cmmAwQA1cmrAwQB1cmuAwQA
1cmzAwQB1cm2AwQB1cm6AwQB1cm+MAwDBAHVycIDBADVycYDBADVycgDBADVycoD
BADVycwDBAHVydADBAHVydYDBAHVydoDBAHVyd4wDAMEAdXJ4gMEAdXJ5AMEAdXJ
6gMEAdXJ7gMEANkI2gMEAdkI3jANBgkqhkiG9w0BAQsFAAOCAQEAW0yu4Ib1o1QS
r9k3XlhbcOcJTKJTxFznpfVy7mJjNkMFbFkvVpkp3wSx80hrMkWYUolRwc5LBKic
qH1GRw+m88fY7HhGwebgOhBt83x/23Uou8oQo6h0q2xxHEVDg2HpouHm6pUhKsC0
7JGT8CWGnZqk6AthAOhNu+wqTmiYmA4AxTQfymNt1I1xGm4y2LYH0exTyBnAq8iS
1YZAZk6RSrD5JV2Aqte6xNutJdXQiMjxswdfe1zrb8Xu01XRW+cWhkmlge/QEYoH
IYURd+/M4octuK6d27bAAbHmIcOgCWIKlgAjD8RPpxvwKb9GMcWMcSa90gtItUnu
G3ely+YuKA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:02:01 2026 by rpki-client