Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Gdg99ZnA9Ovx9ypmBTymGPWa_08.roa
File: Gdg99ZnA9Ovx9ypmBTymGPWa_08.roa (raw, json)
Hash identifier: r06k0TVu42jGp/2FKaHvf8Ab/+hOxzxY8LHRQv5091k=
Subject key identifier: 19:D8:3D:F5:99:C0:F4:EB:F1:F7:2A:66:05:3C:A6:18:F5:9A:FF:4F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F233D819653BC0D2A14FE72CEE7247E0A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Gdg99ZnA9Ovx9ypmBTymGPWa_08.roa
Signing time: Thu 02 Jul 2026 14:31:01 +0000
ROA not before: Thu 02 Jul 2026 14:31:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 89.149.148.0/24 maxlen: 24
194.77.235.0/24 maxlen: 24
212.189.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:3d:81:96:53:bc:0d:2a:14:fe:72:ce:e7:24:7e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 2 14:31:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19d83df599c0f4ebf1f72a66053ca618f59aff4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:31:17:ac:4b:67:f6:b8:da:8c:7a:65:08:
3e:65:91:ed:2b:d5:07:42:34:6a:c1:3a:b9:e0:64:
09:c1:4b:31:25:a2:69:5b:38:a3:55:2f:87:27:2b:
5a:1f:4e:bb:88:d7:1f:38:cd:fe:23:b1:30:b6:5d:
01:52:bd:73:db:8b:28:be:a0:da:64:ac:97:54:96:
b2:4c:2e:87:9a:dc:1f:0a:b3:a4:ab:df:49:c8:10:
10:23:e3:15:60:5e:a2:ae:27:5c:86:78:1c:55:2c:
28:51:ea:34:7a:3e:7b:56:ff:ea:b9:2e:59:1a:39:
fc:a3:28:45:ab:b7:67:07:9c:d1:f2:0c:20:87:95:
63:6e:a3:d6:f4:e0:77:7e:3e:ba:6e:86:07:3c:fb:
04:1d:8b:cb:3c:18:5c:54:8d:0b:c6:d2:15:fe:c4:
43:99:ba:6a:24:28:49:08:e4:12:4a:49:83:f7:36:
60:91:a0:88:33:e9:f2:9d:0a:2a:c6:76:13:76:20:
2a:54:ea:bb:d1:f3:aa:76:89:c2:67:52:82:c2:94:
f5:6c:aa:98:46:84:69:3d:6f:eb:17:fc:8d:fc:1f:
74:6c:87:28:5b:6d:7e:aa:8e:0a:48:f0:1e:55:b9:
31:f6:11:61:ba:fd:44:6f:bf:f4:f6:68:6d:09:83:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D8:3D:F5:99:C0:F4:EB:F1:F7:2A:66:05:3C:A6:18:F5:9A:FF:4F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Gdg99ZnA9Ovx9ypmBTymGPWa_08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.149.148.0/24
194.77.235.0/24
212.189.62.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:a6:4b:74:1a:e3:50:1d:27:14:8b:ad:0f:03:64:e5:7c:1a:
8c:74:92:fa:c3:01:34:ca:40:a5:76:48:38:00:98:2a:be:66:
ad:c5:d0:28:fc:d7:a6:b2:a8:a5:31:6b:1a:ba:17:21:7b:90:
3f:29:60:ae:d0:fc:7e:6f:79:54:8a:2c:d1:46:ca:a9:7b:c2:
53:ee:b1:39:a3:02:1f:01:4b:1d:d9:6e:f5:cc:bb:3d:92:53:
e0:93:00:20:38:7d:03:32:c7:f7:36:9f:eb:9a:71:9a:4f:5b:
79:d5:a4:24:91:8e:3e:b1:43:f6:c0:dc:8f:4e:9a:36:a0:00:
9b:0e:b7:a7:b0:c5:5c:08:f5:b3:b5:78:b9:f4:72:47:9a:9a:
29:52:f3:4e:12:a8:1f:b6:9d:b2:9e:a4:ea:59:b7:60:c0:ec:
3c:ad:71:db:6b:87:51:00:26:7c:90:fe:03:ea:92:f0:33:fc:
e9:eb:f3:ba:b7:7b:d7:3f:e8:42:1b:13:80:92:5b:7b:d0:5c:
bb:e3:c1:10:9e:21:ff:0e:4d:68:8b:06:b7:58:e8:87:66:f7:
05:73:f3:67:e9:f5:4b:39:83:19:d9:21:21:68:7b:51:86:2b:
af:8d:fd:26:aa:69:2e:db:d3:a9:4e:07:bb:38:22:9c:58:9e:
bb:d4:48:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:49 2026 by rpki-client