Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/GETZ3I-Y7gfhUPJq2CEziA6EZRk.roa
File: GETZ3I-Y7gfhUPJq2CEziA6EZRk.roa (raw, json)
Hash identifier: zAbCmCwU5AY80WArgnRA/ycYpHuSTT7S6x4xr9+RIkk=
Subject key identifier: 18:44:D9:DC:8F:98:EE:07:E1:50:F2:6A:D8:21:33:88:0E:84:65:19
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019FA8DBA4845DEB11CB30AB5B710F6377E5
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/GETZ3I-Y7gfhUPJq2CEziA6EZRk.roa
Signing time: Tue 28 Jul 2026 13:13:14 +0000
ROA not before: Tue 28 Jul 2026 13:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 45.81.139.0/24 maxlen: 24
45.87.255.0/24 maxlen: 24
45.91.239.0/24 maxlen: 24
45.93.12.0/24 maxlen: 24
45.93.14.0/24 maxlen: 24
45.93.15.0/24 maxlen: 24
45.95.28.0/24 maxlen: 24
45.128.129.0/24 maxlen: 24
45.142.254.0/24 maxlen: 24
80.242.53.0/24 maxlen: 24
84.252.71.0/24 maxlen: 24
94.154.188.0/24 maxlen: 24
94.154.189.0/24 maxlen: 24
94.154.191.0/24 maxlen: 24
130.193.26.0/24 maxlen: 24
146.19.87.0/24 maxlen: 24
146.19.129.0/24 maxlen: 24
186.243.129.0/24 maxlen: 24
186.243.130.0/24 maxlen: 24
186.243.131.0/24 maxlen: 24
186.243.132.0/24 maxlen: 24
186.243.133.0/24 maxlen: 24
186.243.134.0/24 maxlen: 24
186.243.135.0/24 maxlen: 24
186.243.136.0/24 maxlen: 24
186.243.137.0/24 maxlen: 24
186.243.138.0/24 maxlen: 24
186.243.139.0/24 maxlen: 24
186.243.140.0/24 maxlen: 24
186.243.143.0/24 maxlen: 24
186.243.146.0/24 maxlen: 24
186.243.148.0/24 maxlen: 24
186.243.152.0/24 maxlen: 24
186.243.153.0/24 maxlen: 24
186.243.154.0/24 maxlen: 24
186.243.156.0/24 maxlen: 24
186.243.157.0/24 maxlen: 24
186.243.158.0/24 maxlen: 24
186.243.159.0/24 maxlen: 24
186.243.160.0/24 maxlen: 24
186.243.161.0/24 maxlen: 24
186.243.162.0/24 maxlen: 24
186.243.163.0/24 maxlen: 24
186.243.164.0/24 maxlen: 24
186.243.165.0/24 maxlen: 24
186.243.166.0/24 maxlen: 24
186.243.167.0/24 maxlen: 24
186.243.168.0/24 maxlen: 24
186.243.169.0/24 maxlen: 24
186.243.170.0/24 maxlen: 24
186.243.171.0/24 maxlen: 24
186.243.172.0/24 maxlen: 24
186.243.173.0/24 maxlen: 24
186.243.174.0/24 maxlen: 24
186.243.175.0/24 maxlen: 24
186.243.176.0/24 maxlen: 24
186.243.177.0/24 maxlen: 24
186.243.178.0/24 maxlen: 24
186.243.179.0/24 maxlen: 24
186.243.180.0/24 maxlen: 24
186.243.181.0/24 maxlen: 24
186.243.182.0/24 maxlen: 24
186.243.183.0/24 maxlen: 24
186.243.184.0/24 maxlen: 24
186.243.187.0/24 maxlen: 24
186.243.188.0/24 maxlen: 24
186.243.190.0/24 maxlen: 24
186.243.193.0/24 maxlen: 24
186.243.195.0/24 maxlen: 24
186.243.196.0/24 maxlen: 24
186.243.197.0/24 maxlen: 24
186.243.199.0/24 maxlen: 24
186.243.200.0/24 maxlen: 24
186.243.201.0/24 maxlen: 24
186.243.202.0/24 maxlen: 24
186.243.203.0/24 maxlen: 24
186.243.204.0/24 maxlen: 24
186.243.205.0/24 maxlen: 24
186.243.206.0/24 maxlen: 24
186.243.207.0/24 maxlen: 24
186.243.208.0/24 maxlen: 24
186.243.209.0/24 maxlen: 24
186.243.210.0/24 maxlen: 24
186.243.211.0/24 maxlen: 24
186.243.212.0/24 maxlen: 24
186.243.213.0/24 maxlen: 24
186.243.214.0/24 maxlen: 24
186.243.215.0/24 maxlen: 24
186.243.216.0/24 maxlen: 24
186.243.217.0/24 maxlen: 24
186.243.218.0/24 maxlen: 24
186.243.219.0/24 maxlen: 24
186.243.220.0/24 maxlen: 24
186.243.221.0/24 maxlen: 24
186.243.222.0/24 maxlen: 24
186.243.223.0/24 maxlen: 24
186.243.224.0/24 maxlen: 24
186.243.225.0/24 maxlen: 24
186.243.226.0/24 maxlen: 24
186.243.227.0/24 maxlen: 24
186.243.229.0/24 maxlen: 24
186.243.230.0/24 maxlen: 24
186.243.231.0/24 maxlen: 24
186.243.232.0/24 maxlen: 24
186.243.236.0/24 maxlen: 24
186.243.238.0/24 maxlen: 24
186.243.241.0/24 maxlen: 24
186.243.243.0/24 maxlen: 24
186.243.244.0/24 maxlen: 24
186.243.245.0/24 maxlen: 24
186.243.246.0/24 maxlen: 24
186.243.247.0/24 maxlen: 24
186.243.248.0/24 maxlen: 24
186.243.249.0/24 maxlen: 24
186.243.250.0/24 maxlen: 24
186.243.251.0/24 maxlen: 24
186.243.252.0/24 maxlen: 24
186.243.253.0/24 maxlen: 24
186.246.58.0/24 maxlen: 24
186.246.59.0/24 maxlen: 24
186.246.61.0/24 maxlen: 24
186.246.62.0/24 maxlen: 24
186.246.63.0/24 maxlen: 24
186.246.64.0/24 maxlen: 24
186.246.65.0/24 maxlen: 24
186.246.66.0/24 maxlen: 24
186.246.67.0/24 maxlen: 24
186.246.68.0/24 maxlen: 24
186.246.69.0/24 maxlen: 24
186.246.70.0/24 maxlen: 24
186.246.71.0/24 maxlen: 24
186.246.72.0/24 maxlen: 24
186.246.73.0/24 maxlen: 24
186.246.74.0/24 maxlen: 24
186.246.75.0/24 maxlen: 24
186.246.76.0/24 maxlen: 24
186.246.77.0/24 maxlen: 24
186.246.78.0/24 maxlen: 24
186.246.79.0/24 maxlen: 24
186.246.81.0/24 maxlen: 24
186.246.82.0/24 maxlen: 24
186.246.83.0/24 maxlen: 24
186.246.84.0/24 maxlen: 24
186.246.85.0/24 maxlen: 24
186.246.86.0/24 maxlen: 24
186.246.87.0/24 maxlen: 24
186.246.88.0/24 maxlen: 24
186.246.89.0/24 maxlen: 24
186.246.90.0/24 maxlen: 24
186.246.91.0/24 maxlen: 24
186.246.92.0/24 maxlen: 24
186.246.93.0/24 maxlen: 24
186.246.94.0/24 maxlen: 24
186.246.95.0/24 maxlen: 24
186.246.96.0/24 maxlen: 24
186.246.97.0/24 maxlen: 24
186.246.98.0/24 maxlen: 24
186.246.99.0/24 maxlen: 24
186.246.101.0/24 maxlen: 24
186.246.102.0/24 maxlen: 24
186.246.105.0/24 maxlen: 24
186.246.106.0/24 maxlen: 24
186.246.107.0/24 maxlen: 24
186.246.108.0/24 maxlen: 24
186.246.109.0/24 maxlen: 24
186.246.110.0/24 maxlen: 24
186.246.111.0/24 maxlen: 24
186.246.112.0/24 maxlen: 24
186.246.113.0/24 maxlen: 24
186.246.114.0/24 maxlen: 24
186.246.115.0/24 maxlen: 24
186.246.116.0/24 maxlen: 24
186.246.117.0/24 maxlen: 24
186.246.118.0/24 maxlen: 24
186.246.119.0/24 maxlen: 24
186.246.120.0/24 maxlen: 24
186.246.121.0/24 maxlen: 24
186.246.122.0/24 maxlen: 24
186.246.126.0/24 maxlen: 24
193.176.20.0/24 maxlen: 24
193.176.22.0/24 maxlen: 24
193.187.106.0/24 maxlen: 24
193.201.9.0/24 maxlen: 24
194.50.73.0/24 maxlen: 24
194.105.158.0/24 maxlen: 24
194.105.159.0/24 maxlen: 24
194.156.104.0/24 maxlen: 24
194.156.105.0/24 maxlen: 24
194.156.106.0/24 maxlen: 24
194.156.107.0/24 maxlen: 24
194.156.126.0/24 maxlen: 24
212.60.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:db:a4:84:5d:eb:11:cb:30:ab:5b:71:0f:63:77:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 28 13:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1844d9dc8f98ee07e150f26ad82133880e846519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3b:95:3e:79:70:81:d5:f5:a1:bc:81:92:47:
d0:e5:cb:ed:01:1f:37:86:94:43:2d:ed:a6:d2:0c:
2f:16:df:d2:e2:2c:12:17:50:cf:9c:d5:c7:e8:f0:
4b:c8:8c:4b:cf:2b:ea:a1:66:10:bf:95:7e:4a:5e:
76:1f:8e:e8:5b:43:ce:3f:0c:c4:e6:3c:95:de:19:
94:38:c6:c4:68:8f:47:1b:b3:90:c1:ae:7c:54:5b:
ba:e1:96:27:9e:d4:57:f9:c9:f3:a5:3e:a0:e6:54:
7f:9c:75:e0:6b:a5:51:5b:3b:38:0e:1d:e8:d7:ef:
ee:16:d6:42:5d:cb:1a:da:74:85:75:01:a0:94:bc:
20:a8:50:40:14:d1:04:5c:3b:4f:db:86:6e:86:c9:
c4:76:9c:90:c5:a7:9e:1e:94:43:74:dc:56:d6:86:
e8:26:a1:97:a9:1f:08:64:f8:b6:51:30:0f:14:3e:
cb:27:5c:6b:1b:01:08:c6:14:78:fc:6a:c9:23:00:
36:04:a3:d1:d8:71:68:cd:be:58:c5:4a:12:b5:56:
a4:01:ba:c6:81:b4:91:28:03:cf:fe:b7:c0:26:06:
9e:f2:b8:b7:bb:a7:d8:82:5c:8d:9a:c1:a9:06:b6:
0c:34:73:b1:61:0e:0a:52:f4:61:fd:d4:a6:ca:f1:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:44:D9:DC:8F:98:EE:07:E1:50:F2:6A:D8:21:33:88:0E:84:65:19
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/GETZ3I-Y7gfhUPJq2CEziA6EZRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.139.0/24
45.87.255.0/24
45.91.239.0/24
45.93.12.0/24
45.93.14.0/23
45.95.28.0/24
45.128.129.0/24
45.142.254.0/24
80.242.53.0/24
84.252.71.0/24
94.154.188.0/23
94.154.191.0/24
130.193.26.0/24
146.19.87.0/24
146.19.129.0/24
186.243.129.0-186.243.140.255
186.243.143.0/24
186.243.146.0/24
186.243.148.0/24
186.243.152.0-186.243.154.255
186.243.156.0-186.243.184.255
186.243.187.0-186.243.188.255
186.243.190.0/24
186.243.193.0/24
186.243.195.0-186.243.197.255
186.243.199.0-186.243.227.255
186.243.229.0-186.243.232.255
186.243.236.0/24
186.243.238.0/24
186.243.241.0/24
186.243.243.0-186.243.253.255
186.246.58.0/23
186.246.61.0-186.246.79.255
186.246.81.0-186.246.99.255
186.246.101.0-186.246.102.255
186.246.105.0-186.246.122.255
186.246.126.0/24
193.176.20.0/24
193.176.22.0/24
193.187.106.0/24
193.201.9.0/24
194.50.73.0/24
194.105.158.0/23
194.156.104.0/22
194.156.126.0/24
212.60.7.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c3:11:df:44:a7:d2:fd:43:60:a6:94:bf:93:8c:af:63:51:
9d:58:96:e2:9c:81:f8:c6:90:55:a7:87:ea:22:68:9c:c0:c1:
af:4b:31:8e:26:fc:51:e6:33:72:6e:23:8c:d3:0b:f6:b8:94:
7f:02:65:47:67:d3:fb:78:16:c5:b7:fe:22:0e:bf:20:59:9f:
ec:56:8e:03:4b:b8:a1:1f:c4:c9:d7:57:16:aa:ae:c2:67:bc:
e9:17:b4:96:d6:cb:98:b4:55:0e:c9:f9:41:b2:3b:e2:68:f8:
d6:7b:66:96:00:48:25:f6:e9:42:b7:ac:d2:46:c1:f0:f3:0d:
59:8d:96:95:f3:a4:d1:e7:ac:93:63:3e:ed:48:60:79:89:7b:
06:22:7c:20:d2:e4:97:67:d6:33:c2:05:eb:9b:6c:83:6c:d2:
b5:f9:f3:9f:f1:cc:f4:7e:68:d7:db:bb:99:81:0c:57:98:42:
ae:4b:99:ea:1b:1a:22:82:ea:cc:50:02:51:77:12:72:ee:b7:
f8:9a:7c:66:74:ec:78:b6:ac:55:e8:bc:12:f2:73:87:8e:85:
28:55:8c:a3:d7:4f:94:9a:07:b6:6a:e1:be:66:be:a7:0a:61:
84:aa:b7:f1:6e:9f:be:a5:82:fc:c7:86:0a:f9:da:da:bf:96:
aa:f0:0e:c7
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgISAZ+o26SEXesRyzCrW3EPY3flMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwNzI4MTMxMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODQ0ZDlkYzhmOThlZTA3ZTE1MGYyNmFkODIxMzM4ODBlODQ2NTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DuVPnlwgdX1obyBkkfQ5cvtAR83
hpRDLe2m0gwvFt/S4iwSF1DPnNXH6PBLyIxLzyvqoWYQv5V+Sl52H47oW0POPwzE
5jyV3hmUOMbEaI9HG7OQwa58VFu64ZYnntRX+cnzpT6g5lR/nHXga6VRWzs4Dh3o
1+/uFtZCXcsa2nSFdQGglLwgqFBAFNEEXDtP24ZuhsnEdpyQxaeeHpRDdNxW1obo
JqGXqR8IZPi2UTAPFD7LJ1xrGwEIxhR4/GrJIwA2BKPR2HFozb5YxUoStVakAbrG
gbSRKAPP/rfAJgae8ri3u6fYglyNmsGpBrYMNHOxYQ4KUvRh/dSmyvEaewIDAQAB
o4IDgTCCA30wHQYDVR0OBBYEFBhE2dyPmO4H4VDyatghM4gOhGUZMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvR0VUWjNJLVk3Z2ZoVVBKcTJDRXppQTZFWlJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBlQYIKwYBBQUHAQcBAf8EggGEMIIBgDCCAXwEAgABMIIB
dAMEAC1RiwMEAC1X/wMEAC1b7wMEAC1dDAMEAS1dDgMEAC1fHAMEAC2AgQMEAC2O
/gMEAFDyNQMEAFT8RwMEAV6avAMEAF6avwMEAILBGgMEAJITVwMEAJITgTAMAwQA
uvOBAwQAuvOMAwQAuvOPAwQAuvOSAwQAuvOUMAwDBAO685gDBAC685owDAMEArrz
nAMEALrzuDAMAwQAuvO7AwQAuvO8AwQAuvO+AwQAuvPBMAwDBAC688MDBAG688Qw
DAMEALrzxwMEArrz4DAMAwQAuvPlAwQAuvPoAwQAuvPsAwQAuvPuAwQAuvPxMAwD
BAC68/MDBAG68/wDBAG69jowDAMEALr2PQMEBLr2QDAMAwQAuvZRAwQCuvZgMAwD
BAC69mUDBAC69mYwDAMEALr2aQMEALr2egMEALr2fgMEAMGwFAMEAMGwFgMEAMG7
agMEAMHJCQMEAMIySQMEAcJpngMEAsKcaAMEAMKcfgMEANQ8BzANBgkqhkiG9w0B
AQsFAAOCAQEAX8MR30Sn0v1DYKaUv5OMr2NRnViW4pyB+MaQVaeH6iJonMDBr0sx
jib8UeYzcm4jjNML9riUfwJlR2fT+3gWxbf+Ig6/IFmf7FaOA0u4oR/EyddXFqqu
wme86Re0ltbLmLRVDsn5QbI74mj41ntmlgBIJfbpQres0kbB8PMNWY2WlfOk0ees
k2M+7UhgeYl7BiJ8INLkl2fWM8IF65tsg2zStfnzn/HM9H5o19u7mYEMV5hCrkuZ
6hsaIoLqzFACUXcScu63+Jp8ZnTseLasVei8EvJzh46FKFWMo9dPlJoHtmrhvma+
pwphhKq38W6fvqWC/MeGCvna2r+WqvAOxw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:36 2026 by rpki-client