Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/gsNdue7w67U6BW2VvlBnaz2cOf4.roa
File: gsNdue7w67U6BW2VvlBnaz2cOf4.roa (raw, json)
Hash identifier: 5ztGLAJGEusyrtg9bznWIWeJA+BoCMFkYqr/QvMk9Bk=
Subject key identifier: 82:C3:5D:B9:EE:F0:EB:B5:3A:05:6D:95:BE:50:67:6B:3D:9C:39:FE
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019F708816A1DC87FCCF0B0A0C6FE55C3B9B
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/gsNdue7w67U6BW2VvlBnaz2cOf4.roa
Signing time: Fri 17 Jul 2026 14:43:14 +0000
ROA not before: Fri 17 Jul 2026 14:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 5.182.28.0/22 maxlen: 22
45.67.117.0/24 maxlen: 24
89.40.161.0/24 maxlen: 24
185.180.145.0/24 maxlen: 24
193.31.104.0/22 maxlen: 22
195.138.103.0/24 maxlen: 24
195.138.109.0/24 maxlen: 24
195.138.110.0/24 maxlen: 24
195.138.111.0/24 maxlen: 24
195.138.113.0/24 maxlen: 24
195.138.115.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
195.138.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:88:16:a1:dc:87:fc:cf:0b:0a:0c:6f:e5:5c:3b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 17 14:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82c35db9eef0ebb53a056d95be50676b3d9c39fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:c0:9b:58:ce:79:a3:80:3a:e3:15:1e:c2:
a7:f7:cd:43:d7:24:83:df:46:4d:be:1b:64:52:9d:
23:f5:06:93:c0:0e:5a:cb:35:f4:c0:6c:9b:9c:94:
46:80:61:58:24:d3:be:46:ea:88:de:30:3e:2b:20:
e5:0a:16:6b:53:46:fa:f3:44:f7:1a:41:08:2c:4a:
72:98:1b:96:32:93:d5:cd:2d:15:ed:64:ea:ba:37:
4a:54:d8:b9:5e:e3:6c:fc:54:ec:a5:39:80:50:56:
1c:50:96:6b:f2:d2:49:2a:5c:a4:b2:35:17:20:0f:
d1:cc:a1:7a:77:2e:78:34:64:bf:62:e6:47:07:f8:
89:dd:50:e1:fd:eb:35:d6:93:71:74:ed:f6:a9:27:
e9:9f:de:5c:08:4a:45:4e:56:20:0f:3d:d3:fe:10:
b7:8a:df:17:b3:e4:54:ff:26:d9:cd:f8:4f:fa:e3:
79:73:c1:ef:28:1b:aa:df:65:17:34:be:ed:45:86:
89:f6:e0:18:8b:4a:5f:bd:3c:f9:96:cd:cd:1a:5d:
39:56:43:45:55:66:0d:fb:03:75:63:7d:83:93:aa:
51:65:fd:4a:b0:12:11:a0:3e:ef:04:d4:5e:c3:60:
f2:e7:1a:ed:2e:c5:d5:d2:2c:69:54:6a:87:99:4e:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C3:5D:B9:EE:F0:EB:B5:3A:05:6D:95:BE:50:67:6B:3D:9C:39:FE
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/gsNdue7w67U6BW2VvlBnaz2cOf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.28.0/22
45.67.117.0/24
89.40.161.0/24
185.180.145.0/24
193.31.104.0/22
195.138.103.0/24
195.138.109.0-195.138.111.255
195.138.113.0/24
195.138.115.0/24
195.138.120.0/24
195.138.124.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:43:c5:b1:9b:07:d8:b9:4b:e2:d2:be:1d:26:5c:ff:95:22:
01:e1:4c:32:39:01:0c:85:17:02:9d:2f:00:ff:05:97:6b:7d:
02:81:c8:74:e0:51:14:51:8a:72:85:c4:9e:79:f7:a8:ba:07:
78:e8:e5:97:e0:2a:a5:39:7e:8e:cf:e5:10:90:3d:5a:02:11:
08:3d:9b:a3:d0:b4:cf:63:06:a3:f6:f6:d4:ad:3c:57:95:c6:
33:ab:3f:6f:42:b6:92:67:ad:f1:19:34:39:50:f8:55:f7:85:
53:96:04:42:8a:87:70:bd:09:d6:e9:0b:9c:1d:2c:8f:ba:40:
c0:77:90:97:c0:9a:99:96:43:5c:01:55:03:c0:c8:33:58:82:
9b:b1:a2:25:f4:f5:20:1f:18:cf:90:ca:0b:b5:02:00:f1:81:
cc:2d:03:6b:5a:58:de:6a:c4:62:64:71:79:40:a2:12:b9:04:
53:11:7f:bc:53:e2:4f:8b:90:34:ae:be:4c:4f:0c:02:7c:a0:
36:b0:91:1e:2a:79:bd:f8:a1:0f:de:79:82:4c:0f:04:0c:8a:
55:bf:e2:9d:a2:e5:d5:19:f3:f1:83:87:07:55:e3:35:ba:36:
c0:ba:b6:16:d2:72:b3:f5:b3:ec:c6:16:56:e0:9e:f8:c5:ba:
fa:15:92:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:14:56 2026 by rpki-client