Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/GrEIHzmH1Qg0DSw0y6-H_csOy8o.roa
File: GrEIHzmH1Qg0DSw0y6-H_csOy8o.roa (raw, json)
Hash identifier: bMyh0aRxfXtkfoOLgV98fPrM8neh6wl1sP5L4rRT5nk=
Subject key identifier: 1A:B1:08:1F:39:87:D5:08:34:0D:2C:34:CB:AF:87:FD:CB:0E:CB:CA
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 01A13EB60888D10E09A8EEBEA181DA699A13
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/GrEIHzmH1Qg0DSw0y6-H_csOy8o.roa
Signing time: Thu 15 Oct 2026 08:37:59 +0000
ROA not before: Thu 15 Oct 2026 08:37:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 84.37.34.0/23 maxlen: 24
84.37.38.0/23 maxlen: 24
84.37.108.0/23 maxlen: 23
84.37.114.0/23 maxlen: 23
84.37.178.0/23 maxlen: 24
84.37.180.0/23 maxlen: 24
84.37.182.0/23 maxlen: 24
84.37.194.0/23 maxlen: 24
84.37.220.0/23 maxlen: 24
212.180.20.0/23 maxlen: 23
212.180.30.0/23 maxlen: 23
212.180.38.0/23 maxlen: 23
212.180.40.0/24 maxlen: 24
212.180.50.0/24 maxlen: 24
212.180.54.0/23 maxlen: 23
212.180.80.0/23 maxlen: 23
212.180.92.0/23 maxlen: 23
212.180.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:b6:08:88:d1:0e:09:a8:ee:be:a1:81:da:69:9a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Oct 15 08:37:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ab1081f3987d508340d2c34cbaf87fdcb0ecbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:f1:00:0a:51:31:68:f3:9b:ca:72:71:fd:
0a:aa:7c:77:ac:03:93:e6:99:ec:d3:f9:39:d1:79:
cb:92:5f:17:3c:8f:38:55:12:af:82:d5:da:be:6f:
1f:5b:fb:48:5f:84:94:eb:67:11:f7:ea:94:cf:8c:
bb:bf:95:a9:1c:86:a3:5e:eb:65:74:05:ec:1d:ea:
7b:09:1f:aa:d5:aa:bd:ff:b4:99:1e:4d:c7:1f:d3:
df:2e:29:ad:d8:61:1e:59:55:c8:42:37:72:d8:eb:
a8:86:5f:e6:39:52:ec:d6:c5:3f:f0:71:61:70:c2:
d3:70:26:11:86:5f:19:08:ec:c7:68:8e:53:86:ba:
ae:15:66:99:f3:79:ab:6e:51:a0:2c:75:41:93:fd:
65:b8:e7:90:d7:6b:d0:e9:88:9d:b1:24:81:78:6a:
43:2d:05:15:cf:5d:dc:58:85:76:57:e8:95:60:bc:
d0:82:aa:0e:a7:f2:51:e3:67:65:a5:8f:80:88:e7:
e7:95:06:7d:34:35:14:15:28:51:55:80:ef:0e:2b:
29:a6:15:f2:c1:7a:05:93:d8:09:a5:f6:c5:68:55:
27:12:a6:a8:8c:d1:2e:5b:ee:d9:cb:a8:c5:fe:1b:
43:0f:1a:ed:c2:ef:42:1a:0c:14:3c:f8:7b:01:bd:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B1:08:1F:39:87:D5:08:34:0D:2C:34:CB:AF:87:FD:CB:0E:CB:CA
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/GrEIHzmH1Qg0DSw0y6-H_csOy8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.34.0/23
84.37.38.0/23
84.37.108.0/23
84.37.114.0/23
84.37.178.0-84.37.183.255
84.37.194.0/23
84.37.220.0/23
212.180.20.0/23
212.180.30.0/23
212.180.38.0-212.180.40.255
212.180.50.0/24
212.180.54.0/23
212.180.80.0/23
212.180.92.0/23
212.180.121.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d9:01:9c:29:9d:e8:fe:e1:d4:0f:9e:b8:9d:6a:8e:8d:78:
cc:04:89:0a:47:3e:3f:e7:b8:92:3d:4c:f8:fb:92:a7:c1:28:
4a:3a:cd:ec:4d:94:9f:67:d9:85:f9:4c:ce:a7:9a:99:6b:e4:
50:ab:e0:95:7e:d3:98:ab:99:af:2d:1a:c1:6b:b3:37:d7:ed:
82:56:0a:e4:63:fa:13:43:ad:d8:38:62:cd:24:71:d6:b5:4b:
7b:fc:01:17:bc:e8:84:83:3d:30:4f:b2:39:c8:ff:5c:81:0b:
4f:5b:9d:d4:ab:51:5c:39:f8:59:52:d6:7b:28:6a:cb:8b:fa:
2e:b8:7d:eb:fd:1b:ae:40:16:b5:5b:f2:95:be:f0:a2:4f:34:
95:df:a4:8c:3c:61:ad:0e:75:59:f1:52:0d:62:b0:da:d1:ec:
15:dd:b3:3d:25:38:3d:3f:31:cb:04:04:35:ed:31:da:05:c1:
d7:88:c9:cb:a7:25:74:90:39:32:a4:67:e1:d9:a8:4c:cf:e3:
ec:7b:f3:9d:76:e8:1d:e1:c5:d9:d4:fa:ed:c4:be:dc:61:8b:
bd:12:f5:cf:2d:18:91:e8:09:92:0f:72:ee:33:08:fc:8b:44:
35:77:f2:d6:92:a2:d7:ad:70:b3:ee:f9:53:ca:84:65:9a:80:
3a:38:ab:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:26:55 2026 by rpki-client