Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/GGd3C-i4O4w5k88TeQkSMopvdtE.roa
File: GGd3C-i4O4w5k88TeQkSMopvdtE.roa (raw, json)
Hash identifier: uiHNYm9TeDCoG4Nf54mm75x2xdbu2qKRCRzJrNpC/qE=
Subject key identifier: 18:67:77:0B:E8:B8:3B:8C:39:93:CF:13:79:09:12:32:8A:6F:76:D1
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A154938F94B1B969C0B037BDE76469C76D
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/GGd3C-i4O4w5k88TeQkSMopvdtE.roa
Signing time: Mon 19 Oct 2026 14:31:59 +0000
ROA not before: Mon 19 Oct 2026 14:31:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 109.236.49.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:93:8f:94:b1:b9:69:c0:b0:37:bd:e7:64:69:c7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 19 14:31:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1867770be8b83b8c3993cf13790912328a6f76d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:6e:88:54:69:4a:3f:f1:e8:cf:70:23:4c:
c6:73:15:42:16:78:0c:62:94:10:05:1d:71:19:e8:
ff:c2:e0:c4:0f:b1:ef:30:f5:af:ac:e5:68:17:6b:
e8:65:ca:60:e6:7d:09:a7:a3:df:dc:22:18:b7:ae:
da:33:26:1b:a4:5d:2a:18:40:7e:67:03:12:bc:23:
80:fe:5a:8c:66:8a:cf:0b:e5:37:a4:58:fd:29:44:
96:c3:cf:7f:7d:54:96:a3:ef:46:34:22:f5:8e:2d:
ee:5f:ae:77:95:77:69:5b:27:1c:63:c1:24:ea:f3:
72:a4:e1:8b:88:31:cf:4c:6e:9e:c0:8d:bb:0a:98:
78:aa:57:7a:5a:a7:55:c7:26:38:bf:b6:5e:5f:ca:
ca:b4:9a:9b:ac:b5:66:b2:75:d8:8a:46:10:bf:98:
77:8c:56:6a:bf:02:bc:56:b8:a9:a3:66:61:cc:df:
5e:ff:bc:26:5e:6d:63:d3:b0:f3:50:37:80:2c:eb:
78:b1:11:50:84:5b:38:f5:23:c9:c4:f8:8c:90:be:
29:ba:56:51:74:41:5c:32:50:82:29:fc:a8:e0:55:
e2:c4:ff:60:28:6f:18:c6:cb:16:f9:be:0b:51:2c:
75:f6:a6:d6:2a:a3:7a:3b:a6:1e:c8:d3:29:61:20:
55:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:67:77:0B:E8:B8:3B:8C:39:93:CF:13:79:09:12:32:8A:6F:76:D1
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/GGd3C-i4O4w5k88TeQkSMopvdtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0/24
185.254.28.0/24
185.254.31.0/24
193.35.155.0/24
Signature Algorithm: sha256WithRSAEncryption
56:34:9d:59:e4:e1:3a:d3:b1:2e:ed:3c:83:68:6a:7c:60:87:
fe:a1:56:8d:26:ba:a1:2e:38:2a:64:2d:8b:71:85:5d:7e:d5:
cf:48:63:fd:0b:be:d5:cc:f1:47:37:bb:2c:b6:97:ca:a4:8c:
2e:e4:4a:dc:8b:0b:64:9c:36:c5:c4:23:22:40:29:a1:02:71:
d0:24:16:57:ce:f2:32:db:03:cd:4a:65:e5:00:21:50:f1:88:
e1:8d:e1:d5:b5:e3:83:79:3f:41:5a:f3:52:81:a1:94:89:5c:
3a:d3:29:06:74:f3:bd:d3:58:dc:29:5f:67:63:9d:18:ac:4d:
37:89:1c:48:ea:ff:89:c2:f5:3e:2a:67:7b:13:72:42:a8:9b:
6a:32:c9:db:46:a6:eb:3c:e2:29:dd:13:65:0a:db:b3:80:53:
d3:c3:da:3f:a2:20:21:f6:a5:94:71:55:47:cd:27:56:d2:5d:
73:ac:b0:78:c5:08:e7:c4:3b:ae:9a:b5:92:5a:70:3d:ef:da:
e0:66:8c:18:84:c9:9c:9c:7f:ed:43:93:52:9f:e7:80:94:7c:
ef:4e:1d:9d:0c:0a:c4:94:42:e5:9d:54:e1:c6:45:bd:0b:7f:
15:54:4f:ca:95:5b:91:0f:ac:eb:f7:49:75:85:5c:70:8b:43:
35:e9:5d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:28:43 2026 by rpki-client