Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GiB2XPgzfAZoK37GjE41zRNuwfw.roa
File: GiB2XPgzfAZoK37GjE41zRNuwfw.roa (raw, json)
Hash identifier: kt4wF2f4rJfLJ5yt1aN/zDgxy1rqy/Zyxyd2CL/+BiY=
Subject key identifier: 1A:20:76:5C:F8:33:7C:06:68:2B:7E:C6:8C:4E:35:CD:13:6E:C1:FC
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 019ECB8E2FCF26C30709AA163180B335C878
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GiB2XPgzfAZoK37GjE41zRNuwfw.roa
Signing time: Mon 15 Jun 2026 13:52:33 +0000
ROA not before: Mon 15 Jun 2026 13:52:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 91.149.194.0/24 maxlen: 24
91.149.215.0/24 maxlen: 24
91.149.227.0/24 maxlen: 24
91.149.228.0/24 maxlen: 24
91.149.244.0/22 maxlen: 22
91.149.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:8e:2f:cf:26:c3:07:09:aa:16:31:80:b3:35:c8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jun 15 13:52:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a20765cf8337c06682b7ec68c4e35cd136ec1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:fa:be:eb:c1:48:60:2d:d4:82:18:9e:2a:e1:
92:fe:38:07:53:e7:e4:07:cd:6e:30:e4:c0:d5:05:
4b:7b:92:7f:5c:7a:7b:61:0c:56:0b:b9:6b:f2:25:
4c:82:b7:e1:df:48:27:53:39:98:8c:0c:5f:b1:99:
e9:e8:b5:1a:4b:6d:4f:bc:1b:f5:37:27:60:e8:b2:
d4:61:57:b9:64:ae:4e:13:8e:15:5b:95:fb:6c:a5:
81:2d:28:5d:cd:64:cc:f8:c4:70:a4:d8:38:ac:11:
85:d5:49:93:12:2d:46:c3:b7:e9:8e:c3:fa:03:fa:
13:43:b0:59:dd:b8:ba:68:9e:42:29:1a:63:c4:91:
70:ed:c5:04:4b:8f:f8:25:eb:fa:da:e1:b8:16:6e:
4b:74:f9:13:65:88:bb:67:20:f0:ae:5c:b6:c4:51:
e7:8d:df:df:27:6a:ac:9f:87:ff:34:42:7d:2c:45:
c4:f7:fb:50:b1:63:3e:20:16:53:22:36:50:2b:fc:
fa:e3:ec:fa:27:8d:67:1f:8b:91:d1:c7:64:75:3c:
0a:77:41:34:2a:9b:ad:29:68:69:c5:94:bd:30:48:
7a:a1:3c:40:26:3e:c8:98:c0:78:15:ff:06:53:6d:
fc:8c:d2:00:56:5e:c6:d1:2f:1f:b4:e6:78:71:0a:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:20:76:5C:F8:33:7C:06:68:2B:7E:C6:8C:4E:35:CD:13:6E:C1:FC
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GiB2XPgzfAZoK37GjE41zRNuwfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.194.0/24
91.149.215.0/24
91.149.227.0-91.149.228.255
91.149.244.0-91.149.251.255
Signature Algorithm: sha256WithRSAEncryption
b1:93:ad:5e:37:38:69:1e:b2:5e:0c:3c:ce:ed:0b:10:dc:43:
a2:b9:ce:ee:aa:18:4b:8c:62:b6:ef:e9:78:7c:f9:50:c6:11:
a4:2a:08:a3:be:17:a1:3e:99:5b:1d:66:cf:86:54:a4:c2:aa:
c0:61:96:9d:ae:06:a7:97:9e:85:75:82:95:be:89:7b:9a:c8:
9c:42:9f:42:b6:fb:74:7d:df:cc:4e:e1:f0:e5:5e:9e:a0:a0:
f9:92:fd:65:70:bb:c6:a9:c6:46:da:c2:e1:7d:d3:58:ab:fe:
59:4c:30:5d:52:b8:d1:58:36:3d:1a:60:dc:fc:4b:1e:df:dd:
02:1c:39:05:6e:db:3b:23:19:3f:97:b5:af:05:89:56:84:8d:
77:38:f8:72:a5:94:e3:17:ac:03:e0:ed:e6:d4:d8:48:40:e4:
4f:65:9e:36:20:8c:14:84:87:d4:aa:47:a6:11:a6:a2:6c:6a:
c3:65:cf:cb:f6:78:23:6e:45:5f:58:ce:26:19:e7:f4:3e:ef:
16:f2:6f:e0:5c:cc:45:7b:b8:9a:e2:a9:b0:06:7a:74:2d:15:
cd:32:c9:e0:91:ec:8c:9e:da:ea:96:ca:b3:7e:7a:48:7e:73:
4b:ca:51:63:d3:f6:8c:e0:ff:2a:26:76:4c:33:fb:c8:98:3d:
56:ef:9a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 17:17:14 2026 by rpki-client