Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/gDzhjRCZK_FApJYIWCYUq-55Q2U.roa
File: gDzhjRCZK_FApJYIWCYUq-55Q2U.roa (raw, json)
Hash identifier: cqVkcQFspksV97CWkorGKdmXrskou3R0TD9pkV2DUcA=
Subject key identifier: 80:3C:E1:8D:10:99:2B:F1:40:A4:96:08:58:26:14:AB:EE:79:43:65
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 019EFC3D45FA1A1DA69F0971C6C66E680F6E
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/gDzhjRCZK_FApJYIWCYUq-55Q2U.roa
Signing time: Thu 25 Jun 2026 00:45:34 +0000
ROA not before: Thu 25 Jun 2026 00:45:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39521
IP address blocks: 5.22.204.0/22 maxlen: 22
45.10.16.0/23 maxlen: 24
45.10.16.0/24 maxlen: 24
45.10.17.0/24 maxlen: 24
45.10.18.0/24 maxlen: 24
45.88.5.0/24 maxlen: 24
45.88.6.0/24 maxlen: 24
45.88.7.0/24 maxlen: 24
45.95.40.0/24 maxlen: 24
45.95.41.0/24 maxlen: 24
45.130.100.0/22 maxlen: 22
83.229.34.0/24 maxlen: 24
95.178.107.0/24 maxlen: 24
185.144.56.0/22 maxlen: 24
188.191.49.0/24 maxlen: 24
188.191.50.0/24 maxlen: 24
188.191.51.0/24 maxlen: 24
217.194.153.0/24 maxlen: 24
2a05:e4c0::/32 maxlen: 32
2a05:e4c1::/32 maxlen: 32
2a05:e4c7::/36 maxlen: 36
2a07:3bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:3d:45:fa:1a:1d:a6:9f:09:71:c6:c6:6e:68:0f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jun 25 00:45:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=803ce18d10992bf140a49608582614abee794365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3d:53:9c:bf:21:8f:ba:ad:c0:e1:4b:6d:1a:
dd:88:3e:7b:f0:0c:fd:d4:27:f3:6a:8e:de:57:ae:
fd:5d:98:18:e7:82:71:74:f7:8f:dd:0a:92:d1:23:
52:54:d4:23:a5:a6:21:ec:47:09:49:4e:09:2c:06:
46:be:bb:ea:ff:3e:90:41:ec:c3:1d:9d:61:08:f3:
6b:12:74:9e:8e:6f:fd:a1:8a:ca:43:be:db:e3:42:
26:07:dc:66:66:83:b1:1b:b4:b4:90:e1:b2:c1:18:
01:0e:23:f5:81:b0:47:12:1a:99:59:bb:bd:e9:37:
0e:e2:b0:17:8f:5d:99:bf:3a:5d:74:31:e9:97:82:
97:3b:47:9a:1a:87:45:94:64:a6:7d:af:13:e2:55:
62:69:a7:1f:31:5c:e8:9a:2a:bf:9a:b6:59:8c:a5:
cb:26:c1:7c:b7:c2:69:50:ae:cd:fe:e9:50:7d:c9:
d9:5b:51:93:56:9a:0b:61:84:55:d3:72:1a:ab:fa:
45:a9:0b:ed:e1:a0:28:07:a8:c6:75:4d:cf:47:00:
3e:34:4d:0e:aa:6e:ba:c2:77:fa:d8:72:34:ab:a3:
97:7e:43:47:28:75:f0:54:1a:4d:31:9c:05:6e:20:
3d:a5:e8:b2:ae:73:13:f7:05:2b:bb:f2:82:15:b6:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3C:E1:8D:10:99:2B:F1:40:A4:96:08:58:26:14:AB:EE:79:43:65
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/gDzhjRCZK_FApJYIWCYUq-55Q2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.204.0/22
45.10.16.0-45.10.18.255
45.88.5.0-45.88.7.255
45.95.40.0/23
45.130.100.0/22
83.229.34.0/24
95.178.107.0/24
185.144.56.0/22
188.191.49.0-188.191.51.255
217.194.153.0/24
IPv6:
2a05:e4c0::/31
2a05:e4c7::/36
2a07:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
37:1c:e1:3d:25:fb:0e:b6:ca:72:f7:79:e6:6f:75:4b:10:30:
37:8c:96:d4:a2:af:42:97:2d:eb:ad:c3:03:7b:8c:b9:bc:17:
39:dd:aa:6c:bf:78:5e:8f:45:ee:dc:32:19:b1:04:db:61:53:
22:d1:9c:61:e2:e9:88:20:78:23:b3:55:05:ec:f3:62:b3:fd:
d1:b6:91:6a:b1:66:63:65:65:a1:25:b5:59:23:f9:d8:33:09:
54:7a:72:b5:aa:78:1d:2e:a0:86:77:5d:71:38:d9:b7:4a:f3:
90:3f:a0:01:10:ac:58:2f:42:34:f6:b3:f7:79:55:81:be:b2:
2e:6e:a2:14:1c:18:a7:8e:5f:fe:37:2e:8a:48:b8:96:35:67:
5f:c1:7a:ce:b4:fa:65:d7:a0:f1:d9:c3:4e:0e:db:f1:05:90:
ad:a7:73:a6:10:cd:fb:a6:62:01:ca:b9:11:55:3b:bf:60:88:
e9:46:6b:db:16:1b:66:9c:bd:b9:f3:fb:89:77:bb:dc:81:ec:
c2:0a:e2:92:9e:5d:d5:14:22:9d:0f:1b:af:1e:29:87:98:f7:
8b:d2:af:aa:c5:ef:2f:a4:9c:b4:c5:20:19:87:aa:ec:4c:c1:
c0:25:57:ad:5f:7e:ad:a2:fe:4d:4b:9c:38:51:d4:7c:47:0e:
2c:fe:8f:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 27 22:29:55 2026 by rpki-client