Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/gTG09BqBNCRtKl7PPwHMvNwT9v4.roa
File: gTG09BqBNCRtKl7PPwHMvNwT9v4.roa (raw, json)
Hash identifier: QnsEEwvJNkYYISya/CvaAzFVVMykiT5cqVoWS9QAoRo=
Subject key identifier: 81:31:B4:F4:1A:81:34:24:6D:2A:5E:CF:3F:01:CC:BC:DC:13:F6:FE
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019CED1124C7981B5C5F33D4EC8623B32B48
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/gTG09BqBNCRtKl7PPwHMvNwT9v4.roa
Signing time: Sat 14 Mar 2026 15:57:29 +0000
ROA not before: Sat 14 Mar 2026 15:57:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 89.37.136.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:11:24:c7:98:1b:5c:5f:33:d4:ec:86:23:b3:2b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Mar 14 15:57:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8131b4f41a8134246d2a5ecf3f01ccbcdc13f6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:a8:47:34:28:d7:dd:d5:80:b8:92:7d:3d:
d7:59:e6:13:5c:13:b3:4c:46:ff:1f:17:96:1a:e4:
f2:f4:c8:f9:f9:d7:79:d3:7b:15:a6:bb:65:f5:cf:
30:f5:47:86:9b:d7:3b:51:43:75:c8:7a:a6:31:e0:
6f:3e:74:18:8e:d3:86:2a:01:24:7c:f8:4c:36:b1:
c5:62:c1:1f:e9:77:b4:3c:f0:9e:fe:da:d8:4c:1d:
b0:b1:20:e3:bd:56:41:24:c7:11:fc:df:57:c5:dd:
97:49:8a:d2:7b:65:20:ef:4c:4c:7e:58:af:24:b8:
40:be:07:db:e5:d4:af:32:2d:b1:29:f3:3f:56:a6:
aa:cd:9c:11:bb:3e:31:52:3e:6a:6e:49:15:a7:c3:
ab:77:d1:d6:47:fd:71:1f:3d:9e:74:4d:d9:dd:3e:
13:23:f2:b6:41:07:d1:33:fa:7f:32:c5:8a:49:57:
dd:11:1f:af:47:f0:55:0a:4b:9d:f5:11:cd:16:d9:
d5:54:d7:a8:a5:f5:e7:7e:d0:6c:7c:e6:78:08:e2:
50:90:0a:39:00:d9:fa:09:2e:c1:60:f7:a6:5b:af:
37:e8:24:81:6c:74:53:39:18:14:1c:32:ed:6f:6d:
a8:2a:d3:0a:77:81:5b:66:6e:21:8f:e7:c2:68:ca:
20:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:31:B4:F4:1A:81:34:24:6D:2A:5E:CF:3F:01:CC:BC:DC:13:F6:FE
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/gTG09BqBNCRtKl7PPwHMvNwT9v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.136.0/24
89.45.34.0/24
93.114.55.0/24
188.215.72.0/24
Signature Algorithm: sha256WithRSAEncryption
29:58:14:35:fa:bf:e5:64:2f:a6:71:47:3d:10:c7:f8:68:cc:
31:96:40:92:2a:f0:7d:5a:4e:fa:d2:39:4b:82:ff:0b:a2:07:
13:6f:21:82:34:16:dd:60:bb:8a:35:2f:28:9a:d5:21:74:81:
16:ff:f6:b4:b4:cb:aa:b0:4c:e5:e9:15:5e:4b:d8:95:7f:7b:
31:77:78:60:91:47:34:54:2c:29:a3:6e:e9:58:7f:e0:e3:e4:
f0:d1:0f:5d:6e:6e:5d:c0:0a:ff:e5:8c:ef:a4:94:42:ec:c0:
94:30:59:14:f9:d1:13:64:c7:2a:09:22:bb:43:7c:92:df:9a:
fe:9f:07:49:62:45:0a:d6:60:8f:06:c9:41:0a:70:d4:54:3f:
74:ec:dc:d5:cd:87:cd:0f:e7:da:c2:b7:26:c1:ba:ca:b6:c1:
93:d3:14:f7:58:d0:92:c6:20:3a:c7:e1:43:ac:cf:d9:e1:51:
a6:0f:76:9b:19:98:11:f4:c1:62:e9:11:4b:25:6e:2f:f4:87:
2e:28:61:bb:bf:11:41:b5:3f:3c:6f:54:30:6b:b8:54:df:b8:
2d:dd:af:79:fc:de:e6:10:c1:fc:bf:71:b7:9f:08:f5:58:14:
82:8c:ec:c0:42:33:34:9a:75:49:d2:15:6e:d7:a4:67:da:fd:
42:d3:a5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:18:26 2026 by rpki-client