Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/gta_CV4VsMLNGYUcD6KeSin1qIk.roa
File: gta_CV4VsMLNGYUcD6KeSin1qIk.roa (raw, json)
Hash identifier: CqR6PCZd4+xIrIGvqQbxq/eCIMwfufZ7Ry7DhUE2Kas=
Subject key identifier: 82:D6:BF:09:5E:15:B0:C2:CD:19:85:1C:0F:A2:9E:4A:29:F5:A8:89
Certificate issuer: /CN=c34094e3236dcd1c835113791a3824da2973df9b
Certificate serial: 0199296C8D7B4D457031CD7346C69DA5080C
Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/gta_CV4VsMLNGYUcD6KeSin1qIk.roa
Signing time: Mon 08 Sep 2025 13:03:23 +0000
ROA not before: Mon 08 Sep 2025 13:03:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24812
IP address blocks: 91.196.96.0/22 maxlen: 22
176.105.192.0/22 maxlen: 22
176.105.193.0/24 maxlen: 24
176.105.194.0/23 maxlen: 23
176.105.194.0/24 maxlen: 24
176.105.196.0/24 maxlen: 24
176.105.197.0/24 maxlen: 24
176.105.198.0/24 maxlen: 24
176.105.199.0/24 maxlen: 24
176.105.200.0/22 maxlen: 22
176.105.200.0/23 maxlen: 23
176.105.204.0/23 maxlen: 23
176.105.204.0/24 maxlen: 24
176.105.206.0/23 maxlen: 23
176.105.208.0/22 maxlen: 22
176.105.208.0/24 maxlen: 24
176.105.209.0/24 maxlen: 24
176.105.210.0/23 maxlen: 23
176.105.212.0/22 maxlen: 22
176.105.216.0/23 maxlen: 23
176.105.218.0/23 maxlen: 23
176.105.218.0/24 maxlen: 24
176.105.220.0/24 maxlen: 24
176.105.221.0/24 maxlen: 24
176.105.222.0/24 maxlen: 24
176.105.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:6c:8d:7b:4d:45:70:31:cd:73:46:c6:9d:a5:08:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b
Validity
Not Before: Sep 8 13:03:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82d6bf095e15b0c2cd19851c0fa29e4a29f5a889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:6a:87:6e:10:ca:df:83:22:db:cf:cd:fc:
c3:82:93:77:05:38:a4:6a:32:bb:b5:8b:46:61:cb:
80:9e:ce:b3:69:61:c2:68:68:b8:94:89:2e:86:1f:
07:ec:a4:c5:75:9a:b5:35:de:49:21:b9:fc:dd:4a:
bf:20:0e:60:27:c5:fa:e1:72:b7:21:92:d2:9b:ef:
44:51:78:08:f0:9d:44:7d:2c:d8:1d:c1:78:57:f3:
ae:48:2f:e3:c8:ed:f3:62:01:89:e7:3a:24:84:81:
06:ab:a7:ef:f3:ad:f7:d5:58:e2:29:91:0f:51:23:
c6:9b:3f:32:4e:d0:80:03:87:e2:8f:d8:28:28:e9:
e0:64:dc:8b:9b:99:80:b6:63:62:bc:30:16:7c:4d:
e2:41:81:c1:f5:46:21:b0:5d:e4:55:a6:c1:f9:d0:
4a:33:4b:ea:ef:40:dd:ca:a9:69:9b:14:15:fc:ba:
6b:69:ad:a8:2a:f8:9c:c3:41:c1:be:49:ca:cc:99:
bc:84:e7:cb:73:49:ed:e3:ec:fb:bb:3d:b0:13:27:
97:58:2e:5f:30:46:19:82:8f:49:96:3f:2f:02:56:
2b:a7:3a:6e:32:b3:02:d5:e0:2f:1d:99:5a:d8:ab:
6b:4b:7e:31:bf:89:63:d9:0b:f2:d6:99:c9:e2:d8:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D6:BF:09:5E:15:B0:C2:CD:19:85:1C:0F:A2:9E:4A:29:F5:A8:89
X509v3 Authority Key Identifier:
keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/gta_CV4VsMLNGYUcD6KeSin1qIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.96.0/22
176.105.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:18:60:86:90:bc:8b:a4:91:85:78:7f:15:71:20:da:10:5a:
1d:79:5c:7d:5e:e4:f0:29:02:8a:8a:93:9e:5f:f2:b4:98:92:
0b:3d:27:e3:7b:a5:0d:7b:20:f2:6a:b0:5d:d2:2d:3a:52:ca:
44:a3:b0:7c:97:da:a1:79:f7:64:c4:51:17:7b:db:85:81:4d:
f4:6d:5b:1e:9a:19:d3:c5:62:0d:df:78:9b:82:01:11:71:ad:
71:04:d2:cd:e3:fb:9d:d9:3e:ff:1a:f5:52:74:0c:6a:5f:44:
54:ff:83:6a:6b:ba:03:86:f5:60:30:96:f7:8a:ec:0d:e5:3a:
f6:0f:dd:87:74:b1:f4:f3:f4:83:bc:c1:d8:79:00:01:2a:d2:
5d:29:e7:ce:43:36:f6:23:a8:3f:8c:2d:b0:30:89:88:4f:45:
f4:2a:8b:88:21:81:3b:db:2c:ac:d2:b9:78:6b:b7:6d:90:f2:
ec:7d:17:a0:24:04:6c:76:94:28:70:36:ab:42:ce:07:a4:24:
3b:cc:04:e1:32:57:77:c7:2d:66:ce:e9:b1:bb:73:f5:d7:ba:
59:82:ae:f1:e1:3e:16:66:67:3d:99:67:df:8d:49:53:f2:69:
2e:e0:00:70:c6:de:51:b7:e5:41:10:06:52:ed:5d:c9:33:f0:
8f:53:83:49
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZkpbI17TUVwMc1zRsadpQgMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNDA5NGUzMjM2ZGNkMWM4MzUxMTM3OTFhMzgyNGRhMjk3
M2RmOWIwHhcNMjUwOTA4MTMwMzIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmQ2YmYwOTVlMTViMGMyY2QxOTg1MWMwZmEyOWU0YTI5ZjVhODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLpqh24Qyt+DItvPzfzDgpN3BTik
ajK7tYtGYcuAns6zaWHCaGi4lIkuhh8H7KTFdZq1Nd5JIbn83Uq/IA5gJ8X64XK3
IZLSm+9EUXgI8J1EfSzYHcF4V/OuSC/jyO3zYgGJ5zokhIEGq6fv86331VjiKZEP
USPGmz8yTtCAA4fij9goKOngZNyLm5mAtmNivDAWfE3iQYHB9UYhsF3kVabB+dBK
M0vq70DdyqlpmxQV/Lpraa2oKvicw0HBvknKzJm8hOfLc0nt4+z7uz2wEyeXWC5f
MEYZgo9Jlj8vAlYrpzpuMrMC1eAvHZla2KtrS34xv4lj2Qvy1pnJ4thuYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFILWvwleFbDCzRmFHA+inkop9aiJMB8GA1UdIwQY
MBaAFMNAlOMjbc0cg1ETeRo4JNopc9+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzBDVTR5TnR6UnlEVVJONUdqZ2syaWx6MzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzIt
ZThhMzlkZDYwODY0LzEvZ3RhX0NWNFZzTUxOR1lVY0Q2S2VTaW4xcUlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzItZThhMzlkZDYwODY0
LzEvdzBDVTR5TnR6UnlEVVJONUdqZ2syaWx6MzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8RgAwQF
sGnAMA0GCSqGSIb3DQEBCwUAA4IBAQA/GGCGkLyLpJGFeH8VcSDaEFodeVx9XuTw
KQKKipOeX/K0mJILPSfje6UNeyDyarBd0i06UspEo7B8l9qhefdkxFEXe9uFgU30
bVsemhnTxWIN33ibggERca1xBNLN4/ud2T7/GvVSdAxqX0RU/4Nqa7oDhvVgMJb3
iuwN5Tr2D92HdLH08/SDvMHYeQABKtJdKefOQzb2I6g/jC2wMImIT0X0KouIIYE7
2yys0rl4a7dtkPLsfRegJARsdpQocDarQs4HpCQ7zAThMld3xy1mzumxu3P117pZ
gq7x4T4WZmc9mWffjUlT8mku4ABwxt5Rt+VBEAZS7V3JM/CPU4NJ
-----END CERTIFICATE-----
Generated at Fri Sep 19 16:06:39 2025 by rpki-client