Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/gPKLFo42J3iwN3jx_bZRejRnSi0.roa
File: gPKLFo42J3iwN3jx_bZRejRnSi0.roa (raw, json)
Hash identifier: Lrx+orFUNXtDsmHuhv9VHeP8VJGjAQf6GUwZSFLkqas=
Subject key identifier: 80:F2:8B:16:8E:36:27:78:B0:37:78:F1:FD:B6:51:7A:34:67:4A:2D
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019D9141C6FA70B9384641A8830F653A4B65
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/gPKLFo42J3iwN3jx_bZRejRnSi0.roa
Signing time: Wed 15 Apr 2026 13:08:20 +0000
ROA not before: Wed 15 Apr 2026 13:08:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51202
IP address blocks: 31.25.11.0/24 maxlen: 24
62.169.152.0/24 maxlen: 24
89.36.32.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
109.175.211.0/24 maxlen: 24
185.121.132.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.121.135.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
185.144.71.0/24 maxlen: 24
194.117.225.0/24 maxlen: 24
195.234.126.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
212.232.19.0/24 maxlen: 24
2a0c:2500::/29 maxlen: 48
2a0c:2501::/32 maxlen: 48
2a0c:2502::/32 maxlen: 48
2a0c:2503::/32 maxlen: 48
2a14:6781::/32 maxlen: 48
2a14:6781:305::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:41:c6:fa:70:b9:38:46:41:a8:83:0f:65:3a:4b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Apr 15 13:08:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80f28b168e362778b03778f1fdb6517a34674a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:71:fd:9a:9c:65:73:83:ba:9b:a5:cf:26:
22:39:42:c2:ea:4a:a8:12:3c:60:4a:66:2f:16:a8:
c1:a6:bd:38:f1:c3:e7:fb:fe:bf:39:95:65:9a:05:
3f:65:9b:3a:1b:44:d4:d7:04:15:25:e1:cb:d1:53:
ce:d3:2c:b3:4c:b2:88:b0:31:c1:6b:ce:cd:fd:8e:
dd:f5:3a:ab:ab:35:0d:bd:c3:c8:9f:9d:7a:e5:60:
e3:16:33:d4:4d:a0:66:93:ad:ff:d8:4e:64:8b:72:
44:f5:0f:73:b6:3f:1d:5e:08:f4:e4:50:60:6d:dd:
94:2a:1c:10:b9:53:b1:d8:53:bb:f9:17:40:e8:d3:
03:80:32:a9:5c:3a:7a:33:a4:dc:9b:67:a7:03:61:
6b:3d:3a:c7:77:4a:df:c1:09:6e:76:42:c8:23:b1:
57:41:8f:cf:b8:31:4b:5c:d6:d7:59:18:7c:0a:64:
98:87:20:8f:a3:3a:fe:2f:ba:20:76:9d:5d:a1:d9:
b6:64:e3:04:20:6f:88:22:4c:85:c0:5f:43:d4:43:
8a:b4:5e:6b:59:cd:75:23:5f:db:82:b0:11:ed:1d:
6b:f6:cd:66:6d:40:f0:ca:84:e4:c0:3a:54:bf:2a:
7a:c2:3e:0c:ab:11:a9:2e:58:3d:8f:3a:52:75:b1:
07:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F2:8B:16:8E:36:27:78:B0:37:78:F1:FD:B6:51:7A:34:67:4A:2D
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/gPKLFo42J3iwN3jx_bZRejRnSi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.11.0/24
62.169.152.0/24
89.36.32.0/24
89.36.35.0/24
109.175.211.0/24
185.121.132.0/23
185.121.135.0/24
185.144.70.0/23
194.117.225.0/24
195.234.126.0/24
212.232.18.0/23
IPv6:
2a0c:2500::/29
2a14:6781::/32
Signature Algorithm: sha256WithRSAEncryption
08:07:cc:ca:db:9e:b4:ca:71:63:b2:d5:d0:18:b8:2b:08:80:
73:90:5f:92:19:47:bd:11:f9:62:b2:d5:a9:58:8e:4c:b3:17:
6d:69:02:3c:05:2a:5c:dd:c5:5e:46:3e:1b:6e:eb:c3:53:a8:
36:23:71:d1:3c:ec:f1:27:e9:75:4f:ad:1d:fb:46:f9:e5:80:
0e:5f:58:76:ae:2d:44:36:b5:e4:03:e4:c1:85:0a:38:20:ce:
b1:66:53:cb:7a:51:3c:8f:24:b4:bf:96:9d:a3:59:2b:cd:61:
3e:88:7b:4b:5e:54:d6:02:3d:4b:ad:6b:93:c3:d1:55:27:13:
01:f8:b9:8c:75:41:89:c1:d8:c7:37:fa:67:b4:51:d5:25:18:
54:b5:ce:10:0d:67:bd:e2:44:63:88:40:ca:d7:f2:73:fb:b7:
fa:08:76:49:ca:10:f3:f0:c6:7b:6c:9d:88:a4:98:88:0b:49:
62:22:c3:07:57:68:ee:ea:ed:ec:b0:65:6f:bb:4c:ec:07:33:
fc:23:bb:0d:f8:17:25:12:a6:37:8b:0a:fc:61:d6:dd:ab:48:
ab:3e:40:75:c4:dc:88:1e:b3:73:8a:98:ea:65:7b:07:68:93:
a7:45:23:b8:06:17:a5:d6:35:74:47:0b:51:73:1b:40:cf:b1:
15:79:c4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:49 2026 by rpki-client