Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/goMtqeZ06_gfRxaMBYsSmQJp9A0.roa
File: goMtqeZ06_gfRxaMBYsSmQJp9A0.roa (raw, json)
Hash identifier: L0+SJN0D4g5LkzBrfZ59YxipE2RzS3w7EIiCj6QiH2c=
Subject key identifier: 82:83:2D:A9:E6:74:EB:F8:1F:47:16:8C:05:8B:12:99:02:69:F4:0D
Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial: 01A01F90067678B5DC09CAFAE7073E702E2C
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/goMtqeZ06_gfRxaMBYsSmQJp9A0.roa
Signing time: Thu 20 Aug 2026 14:25:27 +0000
ROA not before: Thu 20 Aug 2026 14:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43872
IP address blocks: 5.253.252.0/22 maxlen: 22
45.136.108.0/24 maxlen: 24
89.222.48.0/21 maxlen: 21
89.222.56.0/22 maxlen: 22
89.222.60.0/23 maxlen: 23
89.222.62.0/23 maxlen: 23
92.118.111.0/24 maxlen: 24
176.101.169.0/24 maxlen: 24
185.183.20.0/22 maxlen: 22
185.187.61.0/24 maxlen: 24
185.253.176.0/22 maxlen: 22
193.105.189.0/24 maxlen: 24
193.247.94.0/24 maxlen: 24
193.247.101.0/24 maxlen: 24
193.247.103.0/24 maxlen: 24
193.247.165.0/24 maxlen: 24
195.234.28.0/24 maxlen: 24
217.198.183.0/24 maxlen: 24
2a0b:180::/29 maxlen: 29
2a0d:1e80::/29 maxlen: 29
2a10:c740::/29 maxlen: 29
2a10:c7c0::/29 maxlen: 29
2a10:c8c0::/29 maxlen: 29
2a10:c9c0::/29 maxlen: 29
2a10:cac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:90:06:76:78:b5:dc:09:ca:fa:e7:07:3e:70:2e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Validity
Not Before: Aug 20 14:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82832da9e674ebf81f47168c058b12990269f40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:bd:04:a9:74:33:60:43:b0:c6:41:9e:c1:
36:11:1d:e6:e1:d8:32:94:cf:fb:af:63:9b:c5:a2:
e3:d3:64:bb:b3:e4:45:fc:11:43:b1:12:fa:b3:e7:
c3:a6:d3:ac:53:a3:96:d1:87:38:d0:2f:d8:e6:ef:
15:f9:38:70:a5:d0:ce:1d:95:cd:41:ee:b7:06:42:
b7:c2:ba:43:f5:86:fa:64:d7:39:51:f8:b6:71:5d:
d3:50:ad:1a:42:ce:9d:b6:99:c5:ff:60:41:93:9c:
a5:33:b7:45:82:fc:6f:51:73:9b:6f:76:37:c9:a7:
97:33:68:2a:4e:bf:7d:39:0f:04:73:40:ff:19:f0:
78:3b:35:de:b6:51:b0:1b:ba:ca:8b:41:94:c4:f7:
33:ec:8c:23:32:29:33:e0:e6:3c:9f:44:5d:e7:f3:
49:0f:dd:23:7e:9e:b5:2a:7b:b9:98:9f:78:dc:85:
e6:a4:07:cd:00:d6:32:59:71:34:3d:4d:e9:d6:68:
5d:ad:60:0f:0a:4a:04:ed:9f:58:5a:e5:27:8e:7a:
67:96:11:3e:5a:13:e3:b2:58:d0:20:c0:5a:43:c8:
e1:fc:19:07:f1:2f:17:37:39:55:2c:4b:ef:bb:e6:
d8:3e:83:87:41:3a:f8:83:cb:7e:12:6f:fa:41:10:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:83:2D:A9:E6:74:EB:F8:1F:47:16:8C:05:8B:12:99:02:69:F4:0D
X509v3 Authority Key Identifier:
keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/goMtqeZ06_gfRxaMBYsSmQJp9A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.252.0/22
45.136.108.0/24
89.222.48.0/20
92.118.111.0/24
176.101.169.0/24
185.183.20.0/22
185.187.61.0/24
185.253.176.0/22
193.105.189.0/24
193.247.94.0/24
193.247.101.0/24
193.247.103.0/24
193.247.165.0/24
195.234.28.0/24
217.198.183.0/24
IPv6:
2a0b:180::/29
2a0d:1e80::/29
2a10:c740::/29
2a10:c7c0::/29
2a10:c8c0::/29
2a10:c9c0::/29
2a10:cac0::/29
Signature Algorithm: sha256WithRSAEncryption
74:b6:a7:c3:0e:64:8d:5d:b4:4f:a5:63:35:cf:f8:42:92:05:
a7:d5:2b:d2:41:2d:d7:8c:3e:d4:fd:b2:6e:3b:fb:2a:1d:ea:
e5:6d:3d:44:35:bb:9b:2e:7f:fc:38:7b:ea:32:ea:af:12:46:
c3:78:d5:9f:c9:ad:9a:64:c6:08:8b:10:1c:07:6f:93:a9:a5:
fa:40:36:3d:4e:15:db:74:86:e2:82:5f:4d:22:6a:0b:36:ae:
c7:9d:4c:b1:3d:6a:31:aa:63:50:6e:e4:d8:e7:38:38:43:7e:
2e:51:2a:c6:54:72:d5:31:61:8b:d0:b4:29:17:91:50:31:10:
5f:37:c6:39:96:ab:b9:76:3d:2f:2a:d1:aa:4d:95:e5:67:ba:
e4:1f:e2:0e:ea:f2:14:7c:de:07:ef:ad:31:16:55:c8:5f:1f:
d7:b7:46:37:5c:7f:b0:78:b1:58:63:83:60:19:4c:76:e0:e0:
04:c7:4f:32:24:0f:ac:e9:e3:26:62:2a:93:69:f8:3b:1e:45:
86:5c:99:74:35:e6:4a:69:f8:2b:45:ca:cc:46:02:bf:f5:29:
d0:f4:44:34:e2:08:f5:db:a1:93:c2:ea:b5:9b:c9:c8:54:a7:
94:fd:0c:76:7e:6e:3f:bc:30:38:53:8d:45:65:18:c6:62:5d:
93:f1:45:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:03:19 2026 by rpki-client