Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/pGAruJ6gWhLebdEiXjEk9vdSOs0.roa
File: pGAruJ6gWhLebdEiXjEk9vdSOs0.roa (raw, json)
Hash identifier: KczR8cIeEBYjPb7gLhPmPUTXP5vVrovJilT8oAnbyP8=
Subject key identifier: A4:60:2B:B8:9E:A0:5A:12:DE:6D:D1:22:5E:31:24:F6:F7:52:3A:CD
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019EA771521FB856C49F05CF8B4643358422
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/pGAruJ6gWhLebdEiXjEk9vdSOs0.roa
Signing time: Mon 08 Jun 2026 13:34:42 +0000
ROA not before: Mon 08 Jun 2026 13:34:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59504
IP address blocks: 45.142.208.0/24 maxlen: 24
45.142.209.0/24 maxlen: 24
45.142.211.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
45.151.137.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
81.22.193.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
95.215.108.0/23 maxlen: 23
95.215.110.0/23 maxlen: 23
138.16.128.0/24 maxlen: 24
138.16.129.0/24 maxlen: 24
185.42.24.0/24 maxlen: 24
185.42.26.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.64.0/24 maxlen: 24
185.118.65.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.66.0/24 maxlen: 24
185.118.67.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
185.156.176.0/24 maxlen: 24
185.156.177.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.178.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
185.230.142.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
193.150.70.0/24 maxlen: 24
194.26.210.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.104.114/32 maxlen: 32
194.113.107.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a05:fb45::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a07:14c0:1::/48 maxlen: 48
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:d000::/36 maxlen: 36
2a07:14c1::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:5241::/32 maxlen: 32
2a0c:5245::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0d:60c0::/32 maxlen: 32
2a0d:60c1::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:71:52:1f:b8:56:c4:9f:05:cf:8b:46:43:35:84:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jun 8 13:34:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4602bb89ea05a12de6dd1225e3124f6f7523acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:de:d4:42:b3:e8:13:d9:9d:b5:0e:ac:5a:
d9:0b:01:e9:5d:00:de:ff:fa:eb:f6:9f:f6:4d:d4:
83:0a:3a:aa:2b:8a:28:10:c9:96:a4:d7:76:6f:6d:
2b:82:42:b8:8c:8d:93:39:de:ad:f1:aa:e0:bd:6f:
74:be:6b:eb:22:ee:70:87:a6:c3:98:06:48:70:97:
69:f9:59:ee:5d:4b:c8:aa:3b:6b:f7:78:50:d5:74:
8f:45:51:33:14:74:c8:77:5d:bf:ab:76:38:85:00:
46:36:c4:2b:a7:65:a0:aa:8d:0f:8f:f7:24:cf:12:
dd:2b:1a:76:d1:65:3a:14:88:49:df:c0:95:d2:4a:
a0:e1:fa:81:0a:25:1d:0c:da:f3:eb:f2:77:f1:29:
1e:2c:ce:95:df:7f:86:91:78:76:08:b9:84:aa:b7:
22:07:9a:eb:b5:ec:e6:8f:91:3f:bb:56:51:0f:fa:
74:1f:06:75:6b:4b:08:3b:0d:fb:19:53:4a:3a:ca:
e5:35:98:c8:75:cc:a9:d2:7d:f6:82:92:79:6c:70:
e5:2d:3d:47:23:4c:4d:2d:ee:05:07:36:0f:39:61:
1d:ab:2f:6f:8a:ae:2f:ad:39:71:f4:15:21:6d:15:
34:1e:72:b0:e6:ec:c6:b3:1e:72:0c:1a:27:63:12:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:60:2B:B8:9E:A0:5A:12:DE:6D:D1:22:5E:31:24:F6:F7:52:3A:CD
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/pGAruJ6gWhLebdEiXjEk9vdSOs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/23
45.142.211.0/24
45.151.136.0/22
80.76.40.0/24
81.22.193.0/24
83.171.240.0/24
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
138.16.128.0/23
185.42.24.0/24
185.42.26.0/24
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
193.150.70.0/24
194.26.210.0/24
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::-2a0a:4785:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2103::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
46:f3:3b:65:d9:be:12:21:ba:20:00:8f:e3:82:9c:71:09:9b:
40:44:4e:47:41:34:07:f5:81:15:88:99:e0:77:80:a1:23:36:
02:6b:60:02:b4:09:47:bb:17:d0:c9:33:de:6d:33:fa:8f:b7:
9a:e9:35:e5:4a:9f:bf:4a:b7:9b:5b:91:23:ba:ae:0d:d7:53:
75:b6:16:52:c4:0a:71:ad:34:c8:15:91:3f:cd:0a:65:d2:dc:
f7:db:18:2a:48:86:97:3d:bb:db:56:00:6b:3c:c5:00:37:cf:
f2:ab:f5:e9:2c:bc:7b:5c:31:d4:07:6b:c4:bc:74:2e:f5:ca:
e2:1d:29:20:bd:19:89:ab:45:e1:c7:d1:a5:92:a0:c6:b1:f3:
5e:44:15:58:82:80:bf:59:28:10:fa:31:8b:88:b3:a6:fb:12:
1a:c1:92:4d:c4:dd:ea:1c:24:ad:9c:f8:f2:1a:0f:ad:f3:98:
76:4f:9b:b6:48:38:72:7e:f3:0c:2d:2f:9d:29:2c:21:4f:32:
0c:17:3f:a9:bb:55:33:80:c0:8e:a8:f0:8f:58:76:1f:b6:ee:
40:a8:57:e4:48:c8:1d:87:5f:51:f0:a2:91:3b:35:43:00:57:
91:c7:dd:63:24:2a:e8:74:8c:aa:c8:8f:4e:87:ea:ee:44:0c:
93:28:6e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:16:54 2026 by rpki-client