Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gCs8gM__JW0eusB80zI9LmIAD_k.roa
File: gCs8gM__JW0eusB80zI9LmIAD_k.roa (raw, json)
Hash identifier: fipVvyBDApZmNpHUpj8ep12TuE+IZkIoDInPNpduJw0=
Subject key identifier: 80:2B:3C:80:CF:FF:25:6D:1E:BA:C0:7C:D3:32:3D:2E:62:00:0F:F9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019E2C16E0762966F702A5E3EA923CD8F307
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gCs8gM__JW0eusB80zI9LmIAD_k.roa
Signing time: Fri 15 May 2026 14:42:37 +0000
ROA not before: Fri 15 May 2026 14:42:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 192.124.191.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
194.87.150.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.42.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:16:e0:76:29:66:f7:02:a5:e3:ea:92:3c:d8:f3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 15 14:42:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=802b3c80cfff256d1ebac07cd3323d2e62000ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:bc:0d:36:95:ce:fb:c8:58:7a:a6:f9:ba:
b2:80:c8:95:67:e9:82:c3:bd:5e:b5:96:b2:3b:8b:
7c:62:26:4c:cb:9b:2e:1e:91:05:24:bf:37:99:b1:
01:cb:1c:17:6d:9f:7d:81:45:43:4d:46:ac:66:a9:
63:42:15:0f:09:ed:88:ca:91:18:91:46:79:d6:b6:
4e:13:8c:05:a2:66:be:bd:e8:29:b2:6a:cc:fe:0b:
3d:56:a8:46:39:4d:79:3a:43:42:00:08:fd:39:e4:
73:96:01:8d:0d:6b:a1:34:43:d4:68:31:45:5a:31:
4c:11:8a:cd:a0:ae:a1:4e:d2:aa:cb:6a:39:0a:79:
85:ed:a5:95:99:49:b3:a2:61:be:9c:6c:54:ac:0c:
72:98:ae:98:5f:12:64:54:f5:ad:61:b8:57:b6:8f:
fe:14:0e:b0:81:79:47:04:24:75:9d:a6:8c:72:b7:
47:69:de:40:21:34:0a:77:9f:e6:a2:fd:a8:21:c1:
62:4d:dd:dc:4e:ea:87:ef:15:96:d7:a2:d2:07:ec:
52:cc:a2:a5:67:19:24:de:ce:d8:e2:0a:7b:d1:9d:
d4:bd:e0:80:8f:df:d6:b2:73:9a:6c:ca:e3:68:7e:
b2:2b:23:72:d5:4f:f6:d7:61:7c:01:3f:0a:4b:7c:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2B:3C:80:CF:FF:25:6D:1E:BA:C0:7C:D3:32:3D:2E:62:00:0F:F9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gCs8gM__JW0eusB80zI9LmIAD_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.191.0/24
194.87.12.0/24
194.87.22.0/24
194.87.40.0/24
194.87.124.0/24
194.87.142.0/24
194.87.150.0/24
195.133.6.0/24
195.133.42.0/24
195.133.85.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
76:18:bf:b6:18:81:ab:9f:71:a8:40:1e:49:54:46:a1:f8:70:
9a:44:42:d7:18:9f:24:fe:72:02:41:2b:7d:8a:d2:4e:1f:e0:
9e:e4:54:93:fa:d5:3a:37:ae:03:bd:b3:61:f2:a3:fe:3d:3d:
5d:67:08:0f:50:38:28:89:6e:1d:b6:e9:a4:35:3c:3b:e3:32:
7c:d1:b7:1c:6d:80:a8:37:43:7f:8d:01:60:9d:9a:c8:79:82:
b5:c2:1f:ae:71:2d:d3:98:2c:60:8b:c9:ca:66:ab:64:30:3b:
6b:6f:bd:c6:d3:08:55:81:40:72:61:d4:c9:ba:a6:9a:0c:02:
39:78:30:7e:e1:fe:8a:d2:a8:02:ca:e6:c7:0c:52:82:67:8a:
5e:d0:0a:45:b5:c6:4d:7b:3c:46:63:36:72:38:10:27:2e:73:
73:1c:c4:2a:11:a3:7a:9e:f1:80:20:84:35:79:8e:05:00:fc:
f0:5d:ad:89:7d:a9:0f:38:11:f3:48:c6:a8:c9:b5:84:97:d0:
91:9d:fa:f1:3f:3d:70:1c:d9:60:a3:e7:78:1d:23:30:db:f0:
be:f5:e3:16:af:1a:27:54:f7:e5:8a:56:5b:c6:b1:81:10:2b:
d7:0a:b4:6b:b4:a8:64:c8:35:f3:45:52:ee:88:6f:99:a1:31:
e4:1b:c3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:07 2026 by rpki-client