Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/GNlA9Djc01_DIxMgMXZBVVZA1yU.roa
File: GNlA9Djc01_DIxMgMXZBVVZA1yU.roa (raw, json)
Hash identifier: 7/jOmr8/wXHfFoWsgICU+xbOKLK7NXJAz5aYH9GIqUg=
Subject key identifier: 18:D9:40:F4:38:DC:D3:5F:C3:23:13:20:31:76:41:55:56:40:D7:25
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 019ECBE096486D56D4E743AF86D035411A5D
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/GNlA9Djc01_DIxMgMXZBVVZA1yU.roa
Signing time: Mon 15 Jun 2026 15:22:33 +0000
ROA not before: Mon 15 Jun 2026 15:22:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46475
IP address blocks: 77.243.88.0/23 maxlen: 24
77.243.90.0/24 maxlen: 24
77.243.91.0/24 maxlen: 24
83.143.106.0/24 maxlen: 24
178.20.213.0/24 maxlen: 24
178.20.214.0/24 maxlen: 24
178.20.215.0/24 maxlen: 24
185.101.20.0/23 maxlen: 24
194.26.129.0/24 maxlen: 24
194.104.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:e0:96:48:6d:56:d4:e7:43:af:86:d0:35:41:1a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Jun 15 15:22:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18d940f438dcd35fc3231320317641555640d725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:46:f7:0e:2d:3c:f6:57:b4:2a:f1:c4:36:
ed:7f:b3:f6:91:24:91:f8:09:73:8a:05:de:09:8a:
ea:b1:e9:38:ea:e1:82:5a:2c:bb:10:82:93:21:c8:
b9:2c:f7:6a:47:65:af:43:cb:3a:cb:79:42:fe:ea:
45:76:d0:a2:14:2e:d5:32:54:25:19:11:10:a6:fc:
fb:72:75:f1:9b:15:c5:b3:82:8a:b8:99:a0:9b:c2:
78:9e:5a:13:48:f1:1f:c7:67:a0:46:a3:ee:49:64:
94:bc:58:8b:55:bd:8e:dc:4d:54:f8:fa:35:2e:cb:
8b:4c:3b:77:71:cb:05:84:99:21:0f:1d:02:b1:9f:
d6:6e:30:de:37:bd:e9:66:12:9b:a7:36:d6:47:7a:
a7:01:fa:4f:e1:27:ce:f5:40:e9:58:b8:2d:4d:c2:
55:cd:26:51:44:84:d9:32:a4:46:b8:56:49:7f:d1:
2d:6d:f2:23:ff:ce:6f:20:cd:07:04:70:78:f6:5a:
a2:27:bb:f0:ee:ee:c9:14:08:c7:1c:4c:89:71:90:
7b:8b:ed:d1:f6:0e:06:58:f2:c2:de:b4:b9:db:bd:
7e:8f:4b:13:98:7b:81:b5:25:75:47:e0:78:22:67:
a6:93:8e:14:24:4b:20:5d:e3:13:59:9e:c9:af:5b:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D9:40:F4:38:DC:D3:5F:C3:23:13:20:31:76:41:55:56:40:D7:25
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/GNlA9Djc01_DIxMgMXZBVVZA1yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.88.0/22
83.143.106.0/24
178.20.213.0-178.20.215.255
185.101.20.0/23
194.26.129.0/24
194.104.128.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:78:53:c2:51:dc:15:3b:1e:87:b2:6d:94:fc:98:98:e2:14:
56:c4:c5:88:e9:37:5c:cf:8e:50:cb:56:35:23:ef:21:3f:d1:
2c:25:f3:36:31:26:d0:d2:12:a9:1b:73:ec:f4:c2:dd:d1:e9:
7c:91:67:79:44:06:db:30:7e:94:d2:2f:27:46:f5:7f:13:3f:
07:0b:b6:c0:32:55:04:44:b9:9f:62:62:fd:4e:22:eb:58:65:
4a:99:85:1c:e0:45:20:85:65:5c:16:80:97:5e:25:c0:c6:74:
be:36:c4:ea:ab:e9:1f:6f:b7:7d:b1:bc:da:62:77:ff:83:ae:
53:db:30:09:15:3a:aa:26:68:bf:3e:d8:64:63:fc:76:c5:28:
33:d5:9c:ec:e5:fe:85:8d:0c:5e:ae:8f:c9:ed:b0:f0:a1:4f:
2b:10:e2:7d:65:a5:5b:04:68:3c:14:ed:7b:50:d7:28:8a:4c:
f9:37:ac:9e:15:3d:44:ac:12:80:09:66:ad:46:ec:69:57:7f:
06:da:68:e8:1b:47:0a:44:af:a1:e8:1f:05:d7:5c:bb:da:06:
52:de:b5:dd:22:d2:a6:bd:31:7c:af:ae:65:b7:96:06:07:b2:
7f:e7:d5:64:62:48:68:71:02:24:c3:59:ae:35:5b:57:bc:cb:
1f:5f:32:a8
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZ7L4JZIbVbU50OvhtA1QRpdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy
ZmY0MTQwHhcNMjYwNjE1MTUyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGQ5NDBmNDM4ZGNkMzVmYzMyMzEzMjAzMTc2NDE1NTU2NDBkNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaRG9w4tPPZXtCrxxDbtf7P2kSSR
+AlzigXeCYrqsek46uGCWiy7EIKTIci5LPdqR2WvQ8s6y3lC/upFdtCiFC7VMlQl
GREQpvz7cnXxmxXFs4KKuJmgm8J4nloTSPEfx2egRqPuSWSUvFiLVb2O3E1U+Po1
LsuLTDt3ccsFhJkhDx0CsZ/WbjDeN73pZhKbpzbWR3qnAfpP4SfO9UDpWLgtTcJV
zSZRRITZMqRGuFZJf9EtbfIj/85vIM0HBHB49lqiJ7vw7u7JFAjHHEyJcZB7i+3R
9g4GWPLC3rS5271+j0sTmHuBtSV1R+B4Imemk44UJEsgXeMTWZ7Jr1tq1wIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFBjZQPQ43NNfwyMTIDF2QVVWQNclMB8GA1UdIwQY
MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt
Y2ZjNDZhNzZlYzc4LzEvR05sQTlEamMwMV9ESXhNZ01YWkJWVlpBMXlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4
LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQCTfNYAwQA
U49qMAwDBACyFNUDBAOyFNADBAG5ZRQDBADCGoEDBADCaIAwDQYJKoZIhvcNAQEL
BQADggEBAKJ4U8JR3BU7HoeybZT8mJjiFFbExYjpN1zPjlDLVjUj7yE/0Swl8zYx
JtDSEqkbc+z0wt3R6XyRZ3lEBtswfpTSLydG9X8TPwcLtsAyVQREuZ9iYv1OIutY
ZUqZhRzgRSCFZVwWgJdeJcDGdL42xOqr6R9vt32xvNpid/+DrlPbMAkVOqomaL8+
2GRj/HbFKDPVnOzl/oWNDF6uj8ntsPChTysQ4n1lpVsEaDwU7XtQ1yiKTPk3rJ4V
PUSsEoAJZq1G7GlXfwbaaOgbRwpEr6HoHwXXXLvaBlLetd0i0qa9MXyvrmW3lgYH
sn/n1WRiSGhxAiTDWa41W1e8yx9fMqg=
-----END CERTIFICATE-----
Generated at Sat Jul 11 16:07:35 2026 by rpki-client