Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/gR2LIMs8WBieOmDX2G87FSy4ukA.roa
File: gR2LIMs8WBieOmDX2G87FSy4ukA.roa (raw, json)
Hash identifier: VVK3o6W1lujFw4qXvOpOtwOe6Lz78s4pIxVQ3DpiyXU=
Subject key identifier: 81:1D:8B:20:CB:3C:58:18:9E:3A:60:D7:D8:6F:3B:15:2C:B8:BA:40
Certificate issuer: /CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Certificate serial: 019F2368DC92DE76455E8F9345962641DC14
Authority key identifier: 94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/gR2LIMs8WBieOmDX2G87FSy4ukA.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 147.189.20.0/24 maxlen: 24
147.189.237.0/24 maxlen: 24
147.189.238.0/24 maxlen: 24
147.189.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dc:92:de:76:45:5e:8f:93:45:96:26:41:dc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=811d8b20cb3c58189e3a60d7d86f3b152cb8ba40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:b9:68:49:c5:a3:45:4a:0e:65:b7:28:c0:
34:e8:bf:f0:ca:c7:62:e9:e3:52:e8:4f:06:3d:8f:
e4:51:7c:56:7b:fb:8b:0e:f3:b8:a2:37:bb:7b:6c:
87:4e:59:b5:33:f4:47:9b:29:dc:8a:3f:e6:f9:18:
50:73:c0:30:38:37:da:3a:26:b9:b9:45:23:8e:6e:
95:5c:e4:fb:58:74:2a:9c:ec:0e:03:e5:7a:8f:39:
87:40:e0:89:f3:99:f4:6f:cf:5a:4f:03:37:95:6c:
02:c1:88:7c:61:35:e6:ee:32:41:60:27:c4:a4:2f:
a5:93:30:a0:6f:5c:c6:f4:df:c5:7c:0f:01:57:ca:
27:c5:a4:bc:4b:a3:92:6f:8f:32:a2:a4:fd:ac:06:
42:b8:86:13:4a:13:5f:31:48:c7:4b:50:02:7b:e2:
09:e3:9e:4c:0d:a4:19:c7:72:f7:14:d4:d2:36:1b:
03:a2:04:dd:dc:08:1e:e7:f8:1b:aa:3b:88:cb:fb:
a5:6e:f7:7b:7d:5c:6a:9f:a9:ce:6c:e2:9c:6c:7c:
48:76:7d:67:e5:1a:6b:f5:e0:91:2f:06:68:f2:6e:
f6:cb:7d:9f:c4:fc:88:d8:a3:50:95:d8:84:43:d5:
64:06:13:6d:3f:a3:e6:3d:66:ff:9f:1f:d0:6f:5d:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1D:8B:20:CB:3C:58:18:9E:3A:60:D7:D8:6F:3B:15:2C:B8:BA:40
X509v3 Authority Key Identifier:
keyid:94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/gR2LIMs8WBieOmDX2G87FSy4ukA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.20.0/24
147.189.237.0-147.189.239.255
Signature Algorithm: sha256WithRSAEncryption
39:8f:16:40:43:a1:e0:d5:93:40:09:b2:35:30:36:43:2d:10:
6b:31:73:bc:2e:80:ac:c8:9e:c3:ac:80:ac:72:09:82:c2:4a:
3f:54:04:9e:14:c1:e2:d8:19:38:01:22:be:55:08:b7:5f:36:
06:f2:a9:e6:57:c2:6e:7b:b7:63:50:fe:1a:ff:37:21:0c:63:
f8:79:20:ca:3b:13:a0:c9:a8:2a:10:3b:7e:7c:e8:77:a2:9b:
5f:6e:88:c5:0e:3c:f7:fa:c5:2a:c5:e1:eb:fd:8a:bb:32:89:
db:ad:f9:76:ce:12:cb:e4:f6:8d:04:9f:50:bd:6a:08:08:f7:
7f:fa:b2:86:1b:f8:80:bb:ca:df:f8:4e:e5:1c:a5:f8:5e:7d:
9b:99:45:1a:35:9c:44:16:f8:3a:02:12:05:00:10:8f:e9:ad:
2c:4f:80:e9:f7:da:39:cc:12:16:03:ad:3b:f7:4e:e3:5e:8f:
e0:c3:cb:80:51:b9:ce:5c:cf:84:8f:71:68:fc:b5:69:4b:2d:
29:9a:d6:31:6d:d1:43:34:eb:5e:e6:c8:cc:f2:6c:80:88:b3:
89:79:7f:0a:64:06:fa:e4:8f:83:9e:0d:93:3e:17:6f:a8:c7:
bd:6e:4c:b9:6d:67:e8:57:e0:38:e7:02:cd:76:c0:11:6d:c8:
b1:15:63:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:03:15 2026 by rpki-client