Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/gsmCnA76vdhDq9dif9c47tNoCP0.roa
File: gsmCnA76vdhDq9dif9c47tNoCP0.roa (raw, json)
Hash identifier: o88w+8Cu4eCNZRdY8N1qV0mPGf5pJuEUO6irzSThghA=
Subject key identifier: 82:C9:82:9C:0E:FA:BD:D8:43:AB:D7:62:7F:D7:38:EE:D3:68:08:FD
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019E55903EB8F7DF1131DF620D44FB4AD5B9
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/gsmCnA76vdhDq9dif9c47tNoCP0.roa
Signing time: Sat 23 May 2026 15:59:36 +0000
ROA not before: Sat 23 May 2026 15:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.105.0/24 maxlen: 24
46.20.108.0/24 maxlen: 24
46.20.110.0/24 maxlen: 24
185.160.193.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
2a14:80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:55:90:3e:b8:f7:df:11:31:df:62:0d:44:fb:4a:d5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: May 23 15:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82c9829c0efabdd843abd7627fd738eed36808fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:8a:1e:44:b4:ad:6e:33:fc:83:a3:42:5c:
1a:b2:c7:e3:a9:12:a6:5f:8d:84:be:b5:b3:73:9f:
01:00:92:7e:7c:bc:f5:f4:85:e5:10:5e:c7:d9:16:
5c:f1:88:cc:f1:bf:29:50:46:6a:09:32:d5:88:89:
fb:2a:b6:56:6c:c9:34:ce:fb:43:7a:ba:75:8c:cc:
db:16:30:50:20:c9:88:d0:b6:70:2f:cd:ef:ca:4a:
fd:ca:91:a2:b9:99:58:f0:a4:18:74:83:b1:f1:09:
2b:99:14:8d:64:0c:42:0c:71:42:56:c5:a0:98:9a:
29:5a:63:0a:b3:e0:36:d2:dd:52:7a:08:4d:32:e2:
3d:fc:af:2d:2e:30:83:2d:3c:71:1b:21:b5:93:68:
85:8a:32:21:41:0b:e3:c1:c1:c9:ed:b4:01:8c:d1:
41:fc:1e:ed:92:b5:e2:5d:0c:d9:a6:29:a4:47:28:
6e:f3:e7:6b:bd:fb:e7:31:3f:4a:77:3f:98:f8:14:
4b:28:94:07:0c:7f:51:9c:99:b0:8f:c5:27:d2:04:
01:c8:46:f6:bc:56:49:bd:46:97:e4:5e:63:68:53:
c7:17:93:d4:89:9b:e8:6b:66:c2:08:a8:3d:6a:d8:
b1:10:9f:9d:2d:e1:7b:fb:b3:ae:38:37:e6:91:10:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C9:82:9C:0E:FA:BD:D8:43:AB:D7:62:7F:D7:38:EE:D3:68:08:FD
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/gsmCnA76vdhDq9dif9c47tNoCP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.105.0/24
46.20.108.0/24
46.20.110.0/24
185.160.193.0-185.160.195.255
185.169.221.0-185.169.223.255
IPv6:
2a14:80::/48
Signature Algorithm: sha256WithRSAEncryption
45:4e:9e:33:5d:12:dc:d4:78:b0:d7:8e:9d:05:19:d8:61:e8:
10:43:4f:c4:af:de:05:ac:d1:8b:62:f5:06:18:b6:07:1c:94:
5b:e0:09:1a:31:c6:e6:db:be:36:9a:7f:ab:15:78:db:d6:78:
b0:e6:be:fd:65:54:00:3e:8a:3b:8f:1f:15:5f:b0:a3:bc:a1:
0c:fe:f7:01:36:ef:2a:a9:00:2a:5a:31:18:df:23:7c:46:01:
58:11:38:43:76:8f:12:c1:3a:14:70:04:75:7e:ac:2d:6d:5c:
54:ce:0b:22:df:63:ee:b5:69:e0:28:81:07:33:99:8f:c3:87:
78:df:7c:9d:a5:a6:3a:04:22:b0:af:81:74:43:af:4a:04:72:
41:7c:4a:38:c0:6f:c0:b3:47:23:11:54:ec:43:58:41:91:07:
48:2e:00:5f:a5:bc:0c:e0:90:63:07:ee:71:83:d0:5c:e8:32:
03:2b:14:ea:74:88:10:c1:f7:cc:d1:89:2a:d6:5d:36:fd:7a:
65:4a:e4:0e:34:e3:cd:0e:4d:71:58:65:a9:7a:4f:2e:17:e5:
fc:24:35:28:6b:07:29:31:7b:b6:a8:a8:9b:f6:09:f1:15:df:
bb:cb:db:3b:20:c8:22:59:ca:4f:2a:b7:57:c9:ef:e2:7e:fe:
04:6f:5d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:45 2026 by rpki-client