Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/GP5AKId5uLYXIRe5FrRR-jdE94g.roa
File: GP5AKId5uLYXIRe5FrRR-jdE94g.roa (raw, json)
Hash identifier: r5/QGgDziEfi2XeB/+nUIZWKeSNGJHnuGJ62TUrMLi4=
Subject key identifier: 18:FE:40:28:87:79:B8:B6:17:21:17:B9:16:B4:51:FA:37:44:F7:88
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019C47E717589FFC82272C9FC642FFBBD1CA
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/GP5AKId5uLYXIRe5FrRR-jdE94g.roa
Signing time: Tue 10 Feb 2026 14:14:12 +0000
ROA not before: Tue 10 Feb 2026 14:14:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24852
IP address blocks: 79.132.160.0/20 maxlen: 20
84.55.32.0/22 maxlen: 24
84.55.32.0/24 maxlen: 24
84.55.33.0/24 maxlen: 24
84.55.34.0/23 maxlen: 23
84.55.36.0/23 maxlen: 23
84.55.48.0/20 maxlen: 24
84.55.56.0/21 maxlen: 24
84.55.56.0/23 maxlen: 23
84.55.58.0/23 maxlen: 23
84.55.60.0/23 maxlen: 23
84.55.62.0/23 maxlen: 23
88.223.0.0/20 maxlen: 20
88.223.24.0/21 maxlen: 21
88.223.32.0/21 maxlen: 24
88.223.40.0/23 maxlen: 24
88.223.48.0/20 maxlen: 24
88.223.96.0/22 maxlen: 22
88.223.104.0/21 maxlen: 21
88.223.112.0/20 maxlen: 20
88.223.128.0/22 maxlen: 22
88.223.144.0/21 maxlen: 21
88.223.152.0/23 maxlen: 24
88.223.153.0/24 maxlen: 24
88.223.160.0/22 maxlen: 22
88.223.192.0/20 maxlen: 20
95.173.32.0/23 maxlen: 24
95.173.34.0/23 maxlen: 24
185.104.176.0/22 maxlen: 22
213.164.112.0/22 maxlen: 22
213.164.116.0/23 maxlen: 23
213.164.118.0/24 maxlen: 24
217.147.34.0/23 maxlen: 24
217.147.35.0/24 maxlen: 24
217.147.36.0/23 maxlen: 23
217.147.38.0/24 maxlen: 24
217.147.40.0/23 maxlen: 24
217.147.41.0/24 maxlen: 24
217.147.44.0/22 maxlen: 24
217.147.46.0/24 maxlen: 24
217.147.47.0/24 maxlen: 24
2a01:7c80::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:e7:17:58:9f:fc:82:27:2c:9f:c6:42:ff:bb:d1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Feb 10 14:14:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18fe40288779b8b6172117b916b451fa3744f788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:03:b3:43:9e:7b:98:11:97:02:07:3c:2b:
fc:81:28:04:af:c8:61:b0:a8:7e:e8:a5:ed:c3:05:
9a:45:45:a6:f7:9c:52:7a:74:7e:9d:2c:ae:32:88:
3a:dc:64:7e:e4:37:8d:46:5e:a2:39:6d:97:ba:3d:
d2:aa:24:87:e9:bf:2d:75:bd:c3:95:0f:61:bd:96:
c1:a7:64:01:09:50:e6:41:89:b0:43:44:49:a3:4e:
c4:d4:b3:d5:93:1c:6b:17:85:69:f5:27:00:ed:75:
bf:93:9b:f4:b3:16:0b:e5:87:41:24:14:78:8a:ba:
a7:3f:9e:b5:dd:86:0e:d5:43:97:5a:94:0c:5d:72:
3f:44:d3:0a:a8:a1:20:93:44:da:08:66:fa:05:49:
65:52:ac:af:35:d5:85:2b:ec:5c:90:76:02:4c:40:
98:36:a2:95:28:6e:9f:ed:54:b7:a5:0e:9d:70:0e:
1e:0f:49:a5:26:3a:18:69:05:10:18:4d:86:72:b0:
d2:0c:34:c9:75:aa:eb:86:1c:9c:f0:32:d9:d0:4e:
5f:f3:90:29:25:a1:4b:1f:68:24:da:e6:d6:ef:b5:
3e:1a:aa:4b:f3:fc:32:78:a8:a5:54:29:12:cd:60:
ed:63:2a:7f:5f:92:f2:2c:52:33:85:20:1c:0a:c9:
3f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FE:40:28:87:79:B8:B6:17:21:17:B9:16:B4:51:FA:37:44:F7:88
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/GP5AKId5uLYXIRe5FrRR-jdE94g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.160.0/20
84.55.32.0-84.55.37.255
84.55.48.0/20
88.223.0.0/20
88.223.24.0-88.223.41.255
88.223.48.0/20
88.223.96.0/22
88.223.104.0-88.223.131.255
88.223.144.0-88.223.153.255
88.223.160.0/22
88.223.192.0/20
95.173.32.0/22
185.104.176.0/22
213.164.112.0-213.164.118.255
217.147.34.0-217.147.38.255
217.147.40.0/23
217.147.44.0/22
IPv6:
2a01:7c80::/33
Signature Algorithm: sha256WithRSAEncryption
98:21:0a:a7:85:c6:41:69:52:99:2a:7b:7f:ca:f5:99:af:84:
2d:6e:20:76:c9:3c:65:68:5b:f5:f4:ef:1a:00:50:cd:8b:19:
94:68:5d:ec:67:51:6e:21:aa:37:68:57:f0:1e:f2:f0:c2:f4:
a8:5e:08:b3:6a:fe:60:d2:f1:2a:4e:98:dc:85:aa:e4:61:6b:
61:5c:2a:a5:4e:85:85:85:6c:d3:f8:a4:d8:c6:8b:f7:d9:d0:
91:f3:b8:48:fc:c3:b1:af:12:8a:fc:22:c7:3e:29:83:6c:15:
7b:be:32:71:a5:cc:08:6e:6e:c3:07:b9:9a:aa:e8:17:ae:79:
6b:d3:e6:81:9f:a6:52:67:57:f7:cf:cd:4c:dc:1b:67:63:38:
1c:21:ae:13:2c:6c:51:16:ae:6f:f8:c9:08:38:5f:86:05:a5:
02:39:29:cf:d3:53:98:44:6f:03:c7:cd:0a:62:b6:0c:2e:dc:
48:36:52:f9:9e:83:ec:9e:ba:33:9a:59:c9:2b:4a:fd:40:86:
ea:0b:6c:b1:6d:db:7a:a3:20:12:0a:52:ac:17:1b:68:7a:a5:
c2:54:7d:96:80:44:03:c4:ec:a6:40:34:f4:6a:00:39:fc:54:
63:6e:e9:22:89:8a:fa:14:59:ff:f9:50:f4:62:74:9c:c8:36:
34:f9:09:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:04:39 2026 by rpki-client