Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/rkGZV4Qnp_rmucLGw9KrdvXLe68.roa
File: rkGZV4Qnp_rmucLGw9KrdvXLe68.roa (raw, json)
Hash identifier: iIGYKiUcnap8PqHM3XlpEUcM909IFmKnSSgddSSr2Uw=
Subject key identifier: AE:41:99:57:84:27:A7:FA:E6:B9:C2:C6:C3:D2:AB:76:F5:CB:7B:AF
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 019F23AFADA243798BA9527D6656636EFC3D
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/rkGZV4Qnp_rmucLGw9KrdvXLe68.roa
Signing time: Thu 02 Jul 2026 16:35:43 +0000
ROA not before: Thu 02 Jul 2026 16:35:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207713
IP address blocks: 5.44.42.0/24 maxlen: 24
130.49.213.0/24 maxlen: 24
157.22.241.0/24 maxlen: 24
2a05:541:102::/48 maxlen: 48
2a05:541:103::/48 maxlen: 48
2a05:541:104::/48 maxlen: 48
2a05:541:105::/48 maxlen: 48
2a05:541:106::/48 maxlen: 48
2a05:541:107::/48 maxlen: 48
2a05:541:108::/48 maxlen: 48
2a05:541:109::/48 maxlen: 48
2a05:541:110::/48 maxlen: 48
2a05:541:111::/48 maxlen: 48
2a05:541:112::/48 maxlen: 48
2a05:541:113::/48 maxlen: 48
2a05:541:114::/48 maxlen: 48
2a05:541:115::/48 maxlen: 48
2a05:541:116::/48 maxlen: 48
2a05:541:117::/48 maxlen: 48
2a05:541:118::/48 maxlen: 48
2a05:541:119::/48 maxlen: 48
2a05:541:121::/48 maxlen: 48
2a05:541:122::/48 maxlen: 48
2a05:541:123::/48 maxlen: 48
2a05:541:124::/48 maxlen: 48
2a05:541:125::/48 maxlen: 48
2a05:541:126::/48 maxlen: 48
2a05:541:127::/48 maxlen: 48
2a05:541:131::/48 maxlen: 48
2a05:541:132::/48 maxlen: 48
2a05:541:133::/48 maxlen: 48
2a05:541:134::/48 maxlen: 48
2a05:541:135::/48 maxlen: 48
2a05:541:136::/48 maxlen: 48
2a05:541:137::/48 maxlen: 48
2a05:541:138::/48 maxlen: 48
2a05:541:139::/48 maxlen: 48
2a05:541:140::/48 maxlen: 48
2a05:541:141::/48 maxlen: 48
2a05:544::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:af:ad:a2:43:79:8b:a9:52:7d:66:56:63:6e:fc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Jul 2 16:35:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae4199578427a7fae6b9c2c6c3d2ab76f5cb7baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:db:11:d0:c3:cc:6d:7e:3b:fe:f3:00:5b:
cd:d9:fd:ef:99:38:5c:b8:f6:a2:03:b1:d2:fd:08:
bc:ac:88:6d:81:6d:e4:6e:f0:58:10:d5:5e:07:24:
15:d3:21:38:5f:cc:75:0b:22:89:48:1a:a2:1d:d7:
7e:f2:6d:bf:74:60:60:6c:a1:33:ea:2d:54:58:f5:
1f:52:a6:a2:fe:f1:8a:64:bd:a9:03:ad:ee:e5:49:
86:8a:86:13:3f:5f:09:7d:52:4d:78:e3:b6:f2:1b:
1a:9e:e3:1b:50:fd:86:3b:5e:ce:cc:f7:bb:4c:51:
76:cf:35:89:54:c1:ac:9a:72:ab:85:b2:fe:a4:0f:
2d:13:11:fc:da:a9:c3:b7:7a:92:69:7a:52:10:ab:
33:a1:26:71:a2:4a:e5:89:a6:1a:d0:90:05:97:27:
58:0b:86:4e:db:61:f4:f2:63:01:8d:0a:45:01:d2:
ce:4a:fd:fc:2a:29:04:db:ed:38:f8:92:bc:d8:fd:
9a:66:5d:ea:4c:d4:fc:ed:ce:3c:33:a6:88:b3:14:
99:dd:e4:b0:45:d0:07:fe:7b:94:85:76:19:03:fd:
4d:b2:8d:ea:16:51:c0:04:16:ef:ed:62:75:dc:a3:
9d:61:1c:de:10:04:07:bd:3a:d8:06:06:5a:04:4b:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:41:99:57:84:27:A7:FA:E6:B9:C2:C6:C3:D2:AB:76:F5:CB:7B:AF
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/rkGZV4Qnp_rmucLGw9KrdvXLe68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.42.0/24
130.49.213.0/24
157.22.241.0/24
IPv6:
2a05:541:102::-2a05:541:109:ffff:ffff:ffff:ffff:ffff
2a05:541:110::-2a05:541:119:ffff:ffff:ffff:ffff:ffff
2a05:541:121::-2a05:541:127:ffff:ffff:ffff:ffff:ffff
2a05:541:131::-2a05:541:139:ffff:ffff:ffff:ffff:ffff
2a05:541:140::/47
2a05:544::/32
Signature Algorithm: sha256WithRSAEncryption
7c:79:ea:15:2a:39:e2:b3:e1:67:36:27:2d:fe:94:3c:fb:8e:
23:78:3d:2b:0c:d6:0b:5a:7b:67:08:9a:76:f7:7e:71:33:38:
18:6e:ad:43:8e:72:91:a8:1b:c7:ad:55:83:f4:0d:fd:cd:71:
e8:5b:ac:df:d1:6a:ee:c3:27:17:02:5a:c1:4e:77:84:ff:a6:
1c:c0:af:5c:42:0a:91:5a:ba:16:7e:bd:15:c3:ff:fe:4c:8a:
ef:b1:b3:64:15:50:06:8b:ab:0c:f1:a0:db:c7:e1:43:08:2e:
0a:9a:a7:51:81:50:3f:ab:63:db:e9:45:b6:8d:d2:c5:f7:cd:
fb:b5:e2:28:94:cc:7f:7f:29:9c:e8:89:64:2d:e7:c2:a3:1a:
af:03:53:80:df:ce:7d:95:71:eb:81:75:44:e1:9b:5f:23:fe:
06:3e:cc:67:41:22:4c:33:9e:32:d9:9d:3c:27:da:5a:4c:57:
13:fa:a9:f5:a2:78:b4:62:d5:41:a8:92:84:ae:ba:08:ed:cd:
bb:36:a3:e0:de:d2:d1:bd:38:c7:f3:30:46:4f:a6:c0:d6:ad:
66:40:ea:99:1c:52:33:95:1f:5d:f0:71:53:16:fd:1b:0d:46:
44:82:aa:27:4c:50:8e:ba:6f:8a:1b:70:df:cb:77:b6:43:77:
34:d6:38:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 01:19:17 2026 by rpki-client