Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/GsdSTdPPwI0228ECIt2r0rK9RWw.roa
File: GsdSTdPPwI0228ECIt2r0rK9RWw.roa (raw, json)
Hash identifier: X0Lt5c9WzmkCc5QBBKneyZXk9AJbwJF87NdzB2X/zUg=
Subject key identifier: 1A:C7:52:4D:D3:CF:C0:8D:36:DB:C1:02:22:DD:AB:D2:B2:BD:45:6C
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 019E2A22151CC22F33778E22717F339F9186
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/GsdSTdPPwI0228ECIt2r0rK9RWw.roa
Signing time: Fri 15 May 2026 05:35:37 +0000
ROA not before: Fri 15 May 2026 05:35:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58238
IP address blocks: 89.188.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:22:15:1c:c2:2f:33:77:8e:22:71:7f:33:9f:91:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: May 15 05:35:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ac7524dd3cfc08d36dbc10222ddabd2b2bd456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:a7:28:f6:83:c9:79:df:37:7f:0f:82:98:
e6:b2:5d:60:ac:22:7c:06:a0:0e:fe:42:d9:8c:2a:
61:d9:3f:0e:f5:f5:ba:a6:12:ae:33:d6:9b:9e:82:
37:37:c5:bb:bf:ee:13:13:de:58:48:8e:a1:02:93:
49:00:95:8e:9e:47:d2:90:80:96:96:5a:0a:7e:e6:
9e:81:01:f9:0f:66:3e:40:d8:e0:49:27:cd:a0:ea:
91:d4:ed:8f:61:c5:15:dc:b0:e1:37:96:5b:37:c8:
68:9a:0e:a6:7a:b6:ef:31:a6:2c:5c:6a:ab:3e:1d:
6d:74:9e:c5:21:30:98:f0:b1:dd:61:ce:39:bf:a1:
24:1f:54:44:bf:3c:3e:71:7d:59:c0:68:3f:05:e9:
cb:6b:2c:95:d4:a7:92:55:31:61:97:bb:c7:7c:e9:
eb:82:69:0f:83:f7:2a:28:d9:dd:31:b8:79:7d:f0:
19:f5:cb:5f:81:8a:f9:c3:b4:19:30:4f:1d:11:cc:
6b:93:84:8b:50:93:58:0e:b0:7f:bd:df:26:78:f7:
56:73:c9:98:38:bb:f9:8e:e9:e1:82:cd:58:de:f8:
4f:b4:09:72:c8:30:2c:26:9e:33:e2:d2:d0:05:b2:
48:03:f0:4e:52:17:99:14:a8:10:7e:c2:6f:8d:2a:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C7:52:4D:D3:CF:C0:8D:36:DB:C1:02:22:DD:AB:D2:B2:BD:45:6C
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/GsdSTdPPwI0228ECIt2r0rK9RWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.188.166.0/24
Signature Algorithm: sha256WithRSAEncryption
23:be:46:97:61:1b:84:4a:d4:57:c0:b8:f6:60:34:6e:f8:ab:
c1:ca:88:fc:61:ed:43:c1:f0:92:90:e8:97:44:9f:ef:1e:d9:
97:fa:88:1a:81:55:c5:f6:81:0f:50:1c:6f:50:35:ba:06:ee:
a5:08:13:3d:7c:cb:a6:bd:57:8b:9a:23:53:bf:e9:6c:aa:81:
a4:2a:ad:1d:05:55:11:13:04:1c:b6:22:e3:ac:88:20:e1:a9:
65:f1:11:4a:78:9c:b3:35:b3:c9:54:cc:06:48:92:5e:76:bb:
d0:79:35:44:2d:78:58:4e:4a:aa:13:d5:0e:af:03:1e:c3:7b:
eb:85:4f:38:bd:e6:c9:77:b9:2d:04:0c:fc:05:55:75:d9:64:
d5:56:c8:2f:7a:01:53:5b:b0:5e:9a:7d:8f:09:5c:61:3e:35:
88:be:79:9a:ad:4a:f6:15:1f:3b:b9:be:72:2a:cb:e9:81:90:
05:2f:ac:e3:ae:dd:df:82:35:b6:93:1c:ef:ef:9b:16:89:73:
a9:b3:df:99:bd:b6:24:30:bf:d8:0e:d1:85:9e:45:45:68:74:
1e:60:65:44:97:01:1b:7b:63:e9:68:58:c0:fc:d6:dd:20:c0:
c1:04:a6:70:33:c3:69:9b:36:8a:3f:d9:ea:2b:9f:42:f7:b0:
45:f4:b4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:45 2026 by rpki-client