Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/gS6k_nnCc4N6MudlJn6tRo5hiTI.roa
File: gS6k_nnCc4N6MudlJn6tRo5hiTI.roa (raw, json)
Hash identifier: DXzVDCIYX1R9dya7ifmW+W5QN3aV7N/cM9waTxTAbnY=
Subject key identifier: 81:2E:A4:FE:79:C2:73:83:7A:32:E7:65:26:7E:AD:46:8E:61:89:32
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019D9CC346CC7E1335252C5025E016EB3B35
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/gS6k_nnCc4N6MudlJn6tRo5hiTI.roa
Signing time: Fri 17 Apr 2026 18:45:36 +0000
ROA not before: Fri 17 Apr 2026 18:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 185.85.189.0/24 maxlen: 24
185.86.4.0/24 maxlen: 24
185.86.7.0/24 maxlen: 24
185.86.12.0/24 maxlen: 24
185.86.14.0/24 maxlen: 24
185.86.15.0/24 maxlen: 24
185.86.152.0/24 maxlen: 24
185.86.155.0/24 maxlen: 24
185.87.120.0/24 maxlen: 24
185.88.172.0/24 maxlen: 24
185.88.173.0/24 maxlen: 24
185.88.174.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
185.98.62.0/24 maxlen: 24
185.141.33.0/24 maxlen: 24
185.141.34.0/24 maxlen: 24
185.184.24.0/24 maxlen: 24
185.184.25.0/24 maxlen: 24
185.184.26.0/24 maxlen: 24
185.184.27.0/24 maxlen: 24
185.185.232.0/24 maxlen: 24
185.185.233.0/24 maxlen: 24
185.185.234.0/24 maxlen: 24
185.243.180.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
185.243.183.0/24 maxlen: 24
185.254.236.0/24 maxlen: 24
185.254.237.0/24 maxlen: 24
185.254.238.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
193.223.106.0/24 maxlen: 24
193.223.107.0/24 maxlen: 24
2a05:bf00::/29 maxlen: 29
2a07:e700::/29 maxlen: 29
2a0b:2780::/29 maxlen: 29
2a0d:49c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:c3:46:cc:7e:13:35:25:2c:50:25:e0:16:eb:3b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Apr 17 18:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=812ea4fe79c273837a32e765267ead468e618932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:a2:8a:e9:92:7c:4e:3e:53:2e:1b:91:6e:
d3:83:68:ae:87:9c:63:2b:1a:ab:fb:3c:42:77:43:
23:66:57:75:17:23:45:f4:31:cc:b3:7f:2e:ac:f7:
6d:a6:08:56:47:c4:b2:c7:19:fc:0c:3d:46:54:72:
fc:c2:ef:c2:0b:b6:df:48:e1:03:e4:63:f6:99:08:
af:d6:06:80:d5:bb:c6:74:ff:78:ff:36:b7:e1:5c:
78:21:02:9b:94:6a:9b:3e:55:5b:bb:c1:92:87:b3:
53:4a:07:88:34:62:04:03:81:5f:32:d1:19:78:4e:
f4:77:c9:7f:ac:5d:de:0a:77:fc:64:e5:ef:1b:58:
17:82:cb:e4:21:06:13:81:06:ac:8c:cf:ad:4b:0e:
4e:03:9d:b0:99:8e:6a:94:c4:65:8f:2d:a4:aa:5f:
3b:27:7f:34:ba:70:24:5e:4e:3c:0b:8f:7f:28:9c:
55:10:58:fa:2e:8b:63:ed:99:96:eb:8f:1d:7d:15:
a9:2b:e6:5e:ca:f4:6c:37:28:58:63:28:67:a4:c8:
c2:cc:b3:1b:ca:cc:a2:38:6f:79:48:c7:99:f9:a1:
0a:2f:91:18:21:e0:55:ca:9a:ed:83:4f:d7:d3:ea:
7d:1d:ea:e7:86:84:ad:00:2b:5d:d9:9e:1f:34:3e:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2E:A4:FE:79:C2:73:83:7A:32:E7:65:26:7E:AD:46:8E:61:89:32
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/gS6k_nnCc4N6MudlJn6tRo5hiTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.189.0/24
185.86.4.0/24
185.86.7.0/24
185.86.12.0/24
185.86.14.0/23
185.86.152.0/24
185.86.155.0/24
185.87.120.0/24
185.88.172.0/22
185.98.62.0/24
185.141.33.0-185.141.34.255
185.184.24.0/22
185.185.232.0-185.185.234.255
185.243.180.0/22
185.254.236.0/22
193.160.140.0/22
193.223.104.0/22
IPv6:
2a05:bf00::/29
2a07:e700::/29
2a0b:2780::/29
2a0d:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
3d:6b:35:1c:b7:4f:fe:6a:0b:cd:77:20:4f:66:03:89:ed:99:
96:d6:bb:26:23:a6:c3:40:26:e9:e0:5b:42:01:59:3b:58:ee:
ca:ba:f9:4f:95:77:ca:bc:3b:a0:87:46:1b:99:a0:45:61:ea:
0f:f3:4a:73:13:a4:4f:05:83:1d:8b:12:42:20:12:8f:f2:47:
3d:61:8b:f4:8b:fb:89:2c:5e:45:25:28:71:88:84:f6:a1:14:
00:52:ab:1d:84:2a:de:5d:4f:4e:ba:11:5d:9b:28:b9:30:83:
8c:90:20:6e:97:fe:45:cd:fa:be:d1:92:17:0c:8a:3c:3b:9c:
5d:cb:82:42:4a:8e:a7:89:24:fd:ae:bf:7e:75:f5:89:52:12:
1a:a6:af:ae:e1:4e:e3:6c:08:67:81:5b:cf:50:39:aa:80:3e:
96:79:31:27:23:3b:f9:76:c9:3a:58:ad:d8:27:07:9a:f5:22:
20:ea:45:a9:2d:2a:c5:f9:14:9f:24:22:41:61:f3:55:5b:3e:
39:a7:1d:50:63:30:ce:5d:e2:b8:e5:bd:99:61:26:17:e9:9d:
1a:83:3d:af:e8:17:4b:de:95:db:eb:18:d4:17:db:fd:2e:97:
6d:d5:85:0b:e1:c9:b6:3b:e5:ae:46:2a:0b:24:19:d6:10:2f:
8f:a0:29:fd
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZ2cw0bMfhM1JSxQJeAW6zs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYwNDE3MTg0NTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTJlYTRmZTc5YzI3MzgzN2EzMmU3NjUyNjdlYWQ0NjhlNjE4OTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3SiiumSfE4+Uy4bkW7Tg2iuh5xj
Kxqr+zxCd0MjZld1FyNF9DHMs38urPdtpghWR8Syxxn8DD1GVHL8wu/CC7bfSOED
5GP2mQiv1gaA1bvGdP94/za34Vx4IQKblGqbPlVbu8GSh7NTSgeINGIEA4FfMtEZ
eE70d8l/rF3eCnf8ZOXvG1gXgsvkIQYTgQasjM+tSw5OA52wmY5qlMRljy2kql87
J380unAkXk48C49/KJxVEFj6Lotj7ZmW648dfRWpK+ZeyvRsNyhYYyhnpMjCzLMb
ysyiOG95SMeZ+aEKL5EYIeBVyprtg0/X0+p9HernhoStACtd2Z4fND7xpQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFIEupP55wnODejLnZSZ+rUaOYYkyMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvZ1M2a19ubkNjNE42TXVkbEpuNnRSbzVoaVRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojB8BAIAATB2AwQAuVW9
AwQAuVYEAwQAuVYHAwQAuVYMAwQBuVYOAwQAuVaYAwQAuVabAwQAuVd4AwQCuVis
AwQAuWI+MAwDBAC5jSEDBAC5jSIDBAK5uBgwDAMEA7m56AMEALm56gMEArnztAME
Arn+7AMEAsGgjAMEAsHfaDAiBAIAAjAcAwUDKgW/AAMFAyoH5wADBQMqCyeAAwUD
Kg1JwDANBgkqhkiG9w0BAQsFAAOCAQEAPWs1HLdP/moLzXcgT2YDie2Zlta7JiOm
w0Am6eBbQgFZO1juyrr5T5V3yrw7oIdGG5mgRWHqD/NKcxOkTwWDHYsSQiASj/JH
PWGL9Iv7iSxeRSUocYiE9qEUAFKrHYQq3l1PTroRXZsouTCDjJAgbpf+Rc36vtGS
FwyKPDucXcuCQkqOp4kk/a6/fnX1iVISGqavruFO42wIZ4Fbz1A5qoA+lnkxJyM7
+XbJOlit2CcHmvUiIOpFqS0qxfkUnyQiQWHzVVs+OacdUGMwzl3iuOW9mWEmF+md
GoM9r+gXS96V2+sY1Bfb/S6XbdWFC+HJtjvlrkYqCyQZ1hAvj6Ap/Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:25:20 2026 by rpki-client