Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/gpGsmzdGl23LNL8X2Aq-5iXeAzA.roa
File: gpGsmzdGl23LNL8X2Aq-5iXeAzA.roa (raw, json)
Hash identifier: iLtj4+Bdb3J8UxkSZ4/mHgKq1j4CU4BIOVKfADMle94=
Subject key identifier: 82:91:AC:9B:37:46:97:6D:CB:34:BF:17:D8:0A:BE:E6:25:DE:03:30
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 01A0C4110E86DD71135011A3F9706004BDFB
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/gpGsmzdGl23LNL8X2Aq-5iXeAzA.roa
Signing time: Mon 21 Sep 2026 13:04:07 +0000
ROA not before: Mon 21 Sep 2026 13:04:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44051
IP address blocks: 2.58.64.0/24 maxlen: 24
2.58.65.0/24 maxlen: 24
2.58.66.0/24 maxlen: 24
2.58.67.0/24 maxlen: 24
5.187.0.0/24 maxlen: 24
5.187.1.0/24 maxlen: 24
5.187.2.0/24 maxlen: 24
5.187.3.0/24 maxlen: 24
5.187.4.0/24 maxlen: 24
5.187.5.0/24 maxlen: 24
5.187.6.0/24 maxlen: 24
5.187.7.0/24 maxlen: 24
31.172.68.0/24 maxlen: 24
31.172.70.0/24 maxlen: 24
31.172.71.0/24 maxlen: 24
31.172.72.0/24 maxlen: 24
31.172.73.0/24 maxlen: 24
31.172.75.0/24 maxlen: 24
31.172.77.0/24 maxlen: 24
79.132.136.0/24 maxlen: 24
79.132.138.0/24 maxlen: 24
79.132.140.0/24 maxlen: 24
79.132.142.0/24 maxlen: 24
79.132.143.0/24 maxlen: 24
89.127.192.0/24 maxlen: 24
89.127.194.0/24 maxlen: 24
89.127.198.0/24 maxlen: 24
89.127.200.0/24 maxlen: 24
89.127.203.0/24 maxlen: 24
89.127.208.0/24 maxlen: 24
89.127.210.0/24 maxlen: 24
89.127.213.0/24 maxlen: 24
89.127.215.0/24 maxlen: 24
89.127.218.0/24 maxlen: 24
89.127.220.0/24 maxlen: 24
91.228.152.0/22 maxlen: 22
91.228.152.0/24 maxlen: 24
91.228.153.0/24 maxlen: 24
91.228.154.0/24 maxlen: 24
91.228.155.0/24 maxlen: 24
103.75.124.0/24 maxlen: 24
103.75.127.0/24 maxlen: 24
103.228.168.0/24 maxlen: 24
103.228.169.0/24 maxlen: 24
103.228.170.0/24 maxlen: 24
103.228.171.0/24 maxlen: 24
130.17.0.0/24 maxlen: 24
130.17.4.0/24 maxlen: 24
130.17.6.0/24 maxlen: 24
130.17.10.0/24 maxlen: 24
130.17.12.0/24 maxlen: 24
130.17.13.0/24 maxlen: 24
130.17.15.0/24 maxlen: 24
130.17.17.0/24 maxlen: 24
130.17.20.0/24 maxlen: 24
130.17.21.0/24 maxlen: 24
130.17.22.0/24 maxlen: 24
130.17.24.0/24 maxlen: 24
130.17.25.0/24 maxlen: 24
130.17.27.0/24 maxlen: 24
130.17.30.0/24 maxlen: 24
130.17.31.0/24 maxlen: 24
162.248.160.0/24 maxlen: 24
162.248.164.0/24 maxlen: 24
162.248.165.0/24 maxlen: 24
162.248.166.0/24 maxlen: 24
162.248.167.0/24 maxlen: 24
185.21.8.0/24 maxlen: 24
185.44.206.0/24 maxlen: 24
185.44.207.0/24 maxlen: 24
185.134.200.0/24 maxlen: 24
185.134.203.0/24 maxlen: 24
194.154.24.0/24 maxlen: 24
194.154.30.0/24 maxlen: 24
195.26.237.0/24 maxlen: 24
212.2.234.0/24 maxlen: 24
212.2.235.0/24 maxlen: 24
213.193.196.0/24 maxlen: 24
213.239.156.0/24 maxlen: 24
217.177.10.0/24 maxlen: 24
217.177.72.0/24 maxlen: 24
2a02:6b40::/32 maxlen: 32
2a02:6b40::/48 maxlen: 48
2a02:6b40:1::/48 maxlen: 48
2a02:6b40:1000::/48 maxlen: 48
2a02:6b40:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:11:0e:86:dd:71:13:50:11:a3:f9:70:60:04:bd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Sep 21 13:04:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8291ac9b3746976dcb34bf17d80abee625de0330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:3f:9b:1e:5a:6d:85:be:7c:ea:4c:11:84:
68:c2:0d:7d:07:93:98:09:f2:3d:a2:ce:d7:74:cc:
13:a5:f4:ed:8a:c4:9b:88:1a:31:1c:77:50:85:36:
2a:0e:b7:4a:4e:73:1d:da:b9:d9:ad:af:b7:66:d2:
e9:01:75:9d:b8:40:02:bc:65:c2:ee:64:84:d2:bd:
70:7e:f6:68:80:9a:83:09:a1:43:28:9e:9f:75:24:
9d:f6:45:fe:a9:4e:bb:ba:b8:f1:ef:94:43:7e:2a:
68:2e:b5:2e:26:55:03:61:25:1e:50:bd:51:22:26:
6f:83:9c:5b:35:fb:12:74:b9:2c:c1:69:2b:92:9b:
8c:7f:90:c5:89:95:28:b2:43:1f:29:f4:3a:0e:89:
a6:a9:b8:75:42:ae:6e:63:a0:ca:14:e0:ca:2e:20:
50:8a:fa:1e:33:46:75:f7:6d:98:21:b6:d7:b7:50:
18:74:14:db:a9:3e:b6:bd:a4:4f:6a:95:64:bb:c9:
ae:da:29:3f:b0:b5:ce:cc:7c:ec:10:38:0b:68:09:
61:da:e0:52:ae:a6:50:29:4b:62:5b:53:4c:bf:f2:
bd:51:7d:d4:18:9e:ad:2f:41:2d:b5:b0:f5:7b:f0:
9d:d7:73:d8:4f:ef:33:89:ab:79:f3:ed:f7:ea:fc:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:91:AC:9B:37:46:97:6D:CB:34:BF:17:D8:0A:BE:E6:25:DE:03:30
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/gpGsmzdGl23LNL8X2Aq-5iXeAzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.64.0/22
5.187.0.0/21
31.172.68.0/24
31.172.70.0-31.172.73.255
31.172.75.0/24
31.172.77.0/24
79.132.136.0/24
79.132.138.0/24
79.132.140.0/24
79.132.142.0/23
89.127.192.0/24
89.127.194.0/24
89.127.198.0/24
89.127.200.0/24
89.127.203.0/24
89.127.208.0/24
89.127.210.0/24
89.127.213.0/24
89.127.215.0/24
89.127.218.0/24
89.127.220.0/24
91.228.152.0/22
103.75.124.0/24
103.75.127.0/24
103.228.168.0/22
130.17.0.0/24
130.17.4.0/24
130.17.6.0/24
130.17.10.0/24
130.17.12.0/23
130.17.15.0/24
130.17.17.0/24
130.17.20.0-130.17.22.255
130.17.24.0/23
130.17.27.0/24
130.17.30.0/23
162.248.160.0/24
162.248.164.0/22
185.21.8.0/24
185.44.206.0/23
185.134.200.0/24
185.134.203.0/24
194.154.24.0/24
194.154.30.0/24
195.26.237.0/24
212.2.234.0/23
213.193.196.0/24
213.239.156.0/24
217.177.10.0/24
217.177.72.0/24
IPv6:
2a02:6b40::/32
Signature Algorithm: sha256WithRSAEncryption
5a:03:2b:49:ba:fa:96:c9:0b:c4:29:65:e2:f6:cd:9a:d6:fe:
02:ff:27:ca:3a:05:93:92:b7:81:3c:67:77:50:14:89:a5:e7:
1d:25:51:51:85:da:55:1d:02:70:ea:c1:85:71:c0:e7:c9:7c:
0f:07:20:99:6b:2d:5b:eb:e6:f6:59:d2:2e:b7:bd:85:36:ca:
1c:d4:2f:a5:f0:0c:dc:41:34:14:c5:1a:bd:48:f2:df:e9:2b:
1d:c7:b3:d7:69:5a:36:f8:bb:00:f0:b3:4c:63:21:10:eb:6e:
3d:61:a9:61:5c:11:38:23:2f:4e:7b:61:41:c6:40:27:7e:0f:
66:ab:39:92:b9:b5:41:dd:cc:9e:4a:f7:af:8b:e5:20:75:cb:
ff:e1:ec:f7:8f:17:44:98:2d:c4:5f:55:07:be:2b:75:41:e9:
29:f7:54:3f:ef:29:6b:80:4f:9d:c6:9e:0b:14:c2:25:ab:6e:
e5:9d:97:d2:43:3b:f5:02:a2:84:34:b7:57:1a:2a:96:57:45:
cd:7e:cb:11:b0:a6:35:71:e0:bb:db:22:8e:42:5c:da:05:54:
2b:92:6a:c4:7d:f2:27:74:c3:72:04:0b:16:28:10:98:3c:3d:
26:0b:61:61:3f:a8:3f:91:07:b7:7d:d0:4c:9c:e1:9d:8b:82:
40:6c:7e:51
-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgISAaDEEQ6G3XETUBGj+XBgBL37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1
ZDAwN2UwHhcNMjYwOTIxMTMwNDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjkxYWM5YjM3NDY5NzZkY2IzNGJmMTdkODBhYmVlNjI1ZGUwMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry8/mx5abYW+fOpMEYRowg19B5OY
CfI9os7XdMwTpfTtisSbiBoxHHdQhTYqDrdKTnMd2rnZra+3ZtLpAXWduEACvGXC
7mSE0r1wfvZogJqDCaFDKJ6fdSSd9kX+qU67urjx75RDfipoLrUuJlUDYSUeUL1R
IiZvg5xbNfsSdLkswWkrkpuMf5DFiZUoskMfKfQ6Dommqbh1Qq5uY6DKFODKLiBQ
ivoeM0Z1922YIbbXt1AYdBTbqT62vaRPapVku8mu2ik/sLXOzHzsEDgLaAlh2uBS
rqZQKUtiW1NMv/K9UX3UGJ6tL0EttbD1e/Cd13PYT+8ziat58+336vxwUQIDAQAB
o4IDWDCCA1QwHQYDVR0OBBYEFIKRrJs3RpdtyzS/F9gKvuYl3gMwMB8GA1UdIwQY
MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt
MWZiYzY0MWI1MGIxLzEvZ3BHc216ZEdsMjNMTkw4WDJBcS01aVhlQXpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx
LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBbAYIKwYBBQUHAQcBAf8EggFbMIIBVzCCAUQEAgABMIIB
PAMEAgI6QAMEAwW7AAMEAB+sRDAMAwQBH6xGAwQBH6xIAwQAH6xLAwQAH6xNAwQA
T4SIAwQAT4SKAwQAT4SMAwQBT4SOAwQAWX/AAwQAWX/CAwQAWX/GAwQAWX/IAwQA
WX/LAwQAWX/QAwQAWX/SAwQAWX/VAwQAWX/XAwQAWX/aAwQAWX/cAwQCW+SYAwQA
Z0t8AwQAZ0t/AwQCZ+SoAwQAghEAAwQAghEEAwQAghEGAwQAghEKAwQBghEMAwQA
ghEPAwQAghERMAwDBAKCERQDBACCERYDBAGCERgDBACCERsDBAGCER4DBACi+KAD
BAKi+KQDBAC5FQgDBAG5LM4DBAC5hsgDBAC5hssDBADCmhgDBADCmh4DBADDGu0D
BAHUAuoDBADVwcQDBADV75wDBADZsQoDBADZsUgwDQQCAAIwBwMFACoCa0AwDQYJ
KoZIhvcNAQELBQADggEBAFoDK0m6+pbJC8QpZeL2zZrW/gL/J8o6BZOSt4E8Z3dQ
FIml5x0lUVGF2lUdAnDqwYVxwOfJfA8HIJlrLVvr5vZZ0i63vYU2yhzUL6XwDNxB
NBTFGr1I8t/pKx3Hs9dpWjb4uwDws0xjIRDrbj1hqWFcETgjL057YUHGQCd+D2ar
OZK5tUHdzJ5K96+L5SB1y//h7PePF0SYLcRfVQe+K3VB6Sn3VD/vKWuAT53GngsU
wiWrbuWdl9JDO/UCooQ0t1caKpZXRc1+yxGwpjVx4LvbIo5CXNoFVCuSasR98id0
w3IECxYoEJg8PSYLYWE/qD+RB7d90Eyc4Z2LgkBsflE=
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:42:21 2026 by rpki-client