Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/gLDg5wMg6SC_pUFobFAIg1PePE8.roa
File: gLDg5wMg6SC_pUFobFAIg1PePE8.roa (raw, json)
Hash identifier: +vkIi4zezkFj5sHevBIL/3+BvZs6Qyrwqf9sfJ/UqQA=
Subject key identifier: 80:B0:E0:E7:03:20:E9:20:BF:A5:41:68:6C:50:08:83:53:DE:3C:4F
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F2368625B831E88AD243F9F87BB861934
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/gLDg5wMg6SC_pUFobFAIg1PePE8.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48219
IP address blocks: 189.74.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:62:5b:83:1e:88:ad:24:3f:9f:87:bb:86:19:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80b0e0e70320e920bfa541686c50088353de3c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:80:96:de:5c:7d:f1:39:c5:f4:da:cd:a4:70:
da:ab:f9:d4:9e:e7:ed:4b:bc:db:bc:5c:56:17:e8:
f4:64:29:0b:ae:27:0b:6e:5d:fc:fc:24:58:e1:de:
28:c3:ee:94:6f:9a:e3:93:c4:dc:71:fd:e8:3e:19:
9d:41:39:ad:ad:00:67:83:c3:3b:63:fe:dc:b1:24:
9e:b7:b0:67:6d:83:92:8c:72:29:65:74:2b:4f:93:
75:f8:d6:87:01:de:c6:9b:88:cd:ef:9a:56:af:e5:
1d:2e:05:a4:1f:b7:cc:42:53:64:8b:3d:81:56:3b:
3a:e9:28:03:de:17:d3:1c:62:c6:12:93:20:bd:dc:
28:8a:9b:fc:be:eb:13:3f:0a:bc:66:4a:e1:1d:3b:
0b:ab:2c:a6:69:21:bf:72:39:4f:25:e6:b6:36:e7:
c5:19:94:0c:f7:38:e5:43:4b:28:bb:a3:ba:d8:a5:
cd:34:80:71:a6:36:a9:13:c1:04:23:57:3c:d5:ef:
9c:d5:d5:fc:ea:53:bc:ba:15:56:ac:47:0e:d2:97:
47:5a:43:9c:44:d0:25:6d:7a:99:6f:59:bb:50:8a:
3e:08:9a:cd:6b:02:f3:8f:84:df:6c:8c:04:39:6d:
54:8a:10:2c:a2:65:94:b5:5c:82:70:9f:57:1f:fa:
c0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B0:E0:E7:03:20:E9:20:BF:A5:41:68:6C:50:08:83:53:DE:3C:4F
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/gLDg5wMg6SC_pUFobFAIg1PePE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.105.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a5:3d:f4:52:18:4f:6c:2f:c9:31:fe:b2:a6:ec:01:40:b7:
71:72:9a:67:ad:94:a9:6b:59:29:b4:22:97:c6:e0:91:e3:61:
fc:7b:b3:c5:8b:3f:c9:b5:71:90:5b:b0:0e:a6:06:87:50:e6:
7e:7a:dc:9e:7f:80:53:b6:18:65:36:4e:3e:b9:fb:41:ff:b9:
40:c7:da:92:15:30:b7:39:f1:9f:db:18:a1:34:29:6f:df:8c:
7a:52:91:d4:cc:bb:b5:98:88:33:15:5f:66:cb:d9:0b:08:ae:
0e:c7:3d:28:40:cd:94:35:2a:6c:c2:39:1b:3d:ea:26:18:6f:
2e:56:5b:7d:74:b5:c9:ae:85:ea:1a:09:82:65:4f:0e:59:ee:
af:89:59:01:52:25:ae:fb:77:de:e6:ee:c2:17:08:68:7d:64:
1a:19:3d:6c:e2:8a:3c:44:d5:36:79:7d:9b:e6:24:25:e9:ec:
6f:c3:4d:c8:d6:05:e7:fa:4b:22:66:51:f3:47:d2:97:3d:d5:
00:75:cb:5b:06:12:5a:57:8d:8f:e0:b9:b5:35:32:2a:43:de:
f0:08:14:1d:68:b9:d6:49:2f:12:05:3a:d4:c3:c1:3a:c2:fe:
e5:da:b1:c3:cd:82:11:62:66:8e:74:05:b5:02:f3:d3:62:e2:
7f:34:d3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:08 2026 by rpki-client