Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/rguuKu0JocggKCL3qQF5U1vu6P0.roa
File: rguuKu0JocggKCL3qQF5U1vu6P0.roa (raw, json)
Hash identifier: 6Ae1aACirOJ8duoAp8UtLd/ooRChADVPUXnqoj0mDb0=
Subject key identifier: AE:0B:AE:2A:ED:09:A1:C8:20:28:22:F7:A9:01:79:53:5B:EE:E8:FD
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 019EFC26621157FC2AD89DF35DBC86A20959
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/rguuKu0JocggKCL3qQF5U1vu6P0.roa
Signing time: Thu 25 Jun 2026 00:20:34 +0000
ROA not before: Thu 25 Jun 2026 00:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 83.229.113.0/24 maxlen: 24
185.90.220.0/24 maxlen: 24
185.90.221.0/24 maxlen: 24
185.90.222.0/24 maxlen: 24
185.90.223.0/24 maxlen: 24
193.57.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:26:62:11:57:fc:2a:d8:9d:f3:5d:bc:86:a2:09:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jun 25 00:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae0bae2aed09a1c8202822f7a90179535beee8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:63:75:df:1a:f6:84:29:ab:aa:33:26:c6:
c0:4a:b0:42:b0:0b:9e:63:0e:6b:d1:89:87:db:30:
ae:1a:1e:30:9e:8c:2e:1b:76:fa:b8:f0:e9:67:87:
74:ff:03:0d:11:3d:36:fc:7d:70:56:5c:bf:a2:7d:
a5:30:d4:38:ad:ad:42:b0:5f:54:e1:14:12:b6:54:
cd:88:ec:33:43:ed:94:d2:c9:83:61:b1:42:49:2e:
31:0c:52:ad:b0:8d:87:99:bf:30:14:c6:a3:3f:3a:
77:a0:50:e4:ec:95:77:db:cd:0e:47:81:42:33:75:
e6:a2:b4:82:76:ac:96:f5:4b:99:ff:55:12:d0:2e:
bc:86:17:97:1d:1e:a2:a4:73:95:48:74:5d:af:d1:
29:b5:24:e4:82:0d:d5:c6:45:4f:cb:52:be:7f:c5:
e9:50:42:29:53:b5:7d:e5:64:f9:19:0a:45:ca:66:
fa:51:59:44:ac:82:b8:5d:79:fb:2a:80:81:bd:0e:
d7:4f:81:1b:a8:c9:18:12:f7:e1:f4:80:f8:62:4a:
4c:15:58:c6:c8:38:bb:67:41:f3:e3:9e:70:9d:89:
1a:a3:91:40:82:5f:38:7e:38:20:68:fa:ec:68:4f:
d3:65:e7:28:e6:f7:dc:91:24:ce:80:6b:c5:29:6e:
98:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0B:AE:2A:ED:09:A1:C8:20:28:22:F7:A9:01:79:53:5B:EE:E8:FD
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/rguuKu0JocggKCL3qQF5U1vu6P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.113.0/24
185.90.220.0/22
193.57.94.0/23
Signature Algorithm: sha256WithRSAEncryption
11:52:63:37:25:c2:af:d1:a2:5b:c6:54:d3:c0:3a:5b:15:7a:
33:b5:27:8f:26:bd:c1:5b:fb:82:22:98:23:95:18:22:e4:3d:
d1:1f:8e:dc:df:c0:e6:6e:22:03:d3:f1:cc:15:76:f7:f8:80:
b8:a1:6e:ff:8d:0a:43:62:49:09:a4:23:2e:da:bf:50:f3:f5:
e4:ba:ae:5b:6c:fc:1d:05:c2:ab:09:d8:e5:3d:2c:f9:76:7f:
56:c5:c3:64:e3:10:b2:69:4c:1f:f1:76:cd:7d:28:4a:78:5f:
1d:8f:f5:71:9c:77:10:96:12:37:58:7b:e1:36:1e:44:f3:cd:
48:09:9c:98:ba:c8:d6:da:df:d8:6a:20:3c:89:af:b4:da:11:
82:d9:8e:d7:b7:b9:aa:ca:82:86:08:50:e8:88:81:b9:30:19:
21:db:e5:bd:d8:d3:4d:9b:5e:f5:bb:7a:7e:cf:99:42:1f:10:
b6:a5:20:b5:48:5b:4f:f4:25:da:9d:44:76:08:11:3e:85:52:
7d:7c:6b:2e:ff:1f:b2:c8:1d:d7:3d:ed:08:9a:cf:53:95:68:
3f:76:44:d7:61:65:c0:ab:9b:ab:2c:18:4b:0b:5c:9e:36:c8:
9e:0c:d1:59:a4:cd:e0:03:ee:2e:2f:3c:67:bf:d0:44:ca:db:
82:4b:a9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:33 2026 by rpki-client