Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/GarD_CcyC8vH0Ew6FZexXJqsz3o.roa
File: GarD_CcyC8vH0Ew6FZexXJqsz3o.roa (raw, json)
Hash identifier: +xW0rSQLKtAW1Hp3b5Pv8qHOc3WB4PYX3/XibxiP1hA=
Subject key identifier: 19:AA:C3:FC:27:32:0B:CB:C7:D0:4C:3A:15:97:B1:5C:9A:AC:CF:7A
Certificate issuer: /CN=4ed0d1e9db70387b47910b02166c151554799e8c
Certificate serial: 019F236872E3EB7BCA0117FF56E246C63C47
Authority key identifier: 4E:D0:D1:E9:DB:70:38:7B:47:91:0B:02:16:6C:15:15:54:79:9E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/GarD_CcyC8vH0Ew6FZexXJqsz3o.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44946
IP address blocks: 93.94.128.0/21 maxlen: 24
93.94.135.0/24 maxlen: 24
185.59.200.0/22 maxlen: 24
194.187.64.0/22 maxlen: 24
195.49.152.0/22 maxlen: 24
2a02:158::/32 maxlen: 64
2a02:158:600::/39 maxlen: 39
2a02:158:aa00::/39 maxlen: 39
2a02:158:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:72:e3:eb:7b:ca:01:17:ff:56:e2:46:c6:3c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed0d1e9db70387b47910b02166c151554799e8c
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19aac3fc27320bcbc7d04c3a1597b15c9aaccf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:95:e0:ba:18:ad:08:e4:d6:83:93:35:1a:62:
96:16:b7:de:65:a6:c4:58:cb:d6:1b:38:9a:e9:ca:
2e:0b:a5:94:27:65:2a:26:3a:15:06:00:2d:60:b7:
37:9e:74:06:68:e9:1b:51:dc:b9:44:94:46:c0:3c:
00:eb:fd:b5:1a:f2:9b:10:eb:46:ae:d7:48:b3:d0:
b8:fb:40:60:d9:3f:f3:49:8b:fb:a5:2c:c8:17:fb:
5e:9f:e6:d6:3c:be:07:b7:7b:38:10:93:f8:aa:4f:
16:31:09:19:4d:21:cc:c4:c5:03:c4:1d:e1:75:9a:
79:24:c8:b8:81:e1:6e:b2:42:61:71:ad:b0:96:01:
b7:18:fe:c9:40:6b:92:3a:05:34:1d:75:89:ce:2c:
40:5c:07:4c:31:39:e8:e0:14:1e:1d:1e:ea:6f:b1:
05:d7:76:41:ba:21:30:66:99:41:95:f8:d1:54:f7:
f3:ea:16:b1:72:a6:3f:6c:2f:c3:10:73:4d:f8:64:
62:a5:ec:f2:46:ef:5f:c0:02:d8:ae:2d:f6:42:df:
1c:49:02:91:da:11:13:4d:5e:2e:88:f1:ca:4e:88:
ad:2e:ef:ec:67:00:36:81:f9:6d:63:4e:fc:1d:d0:
5c:1b:a3:7c:fd:50:ed:48:b3:27:b9:4a:6a:36:ed:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AA:C3:FC:27:32:0B:CB:C7:D0:4C:3A:15:97:B1:5C:9A:AC:CF:7A
X509v3 Authority Key Identifier:
keyid:4E:D0:D1:E9:DB:70:38:7B:47:91:0B:02:16:6C:15:15:54:79:9E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/GarD_CcyC8vH0Ew6FZexXJqsz3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.128.0/21
185.59.200.0/22
194.187.64.0/22
195.49.152.0/22
IPv6:
2a02:158::/32
Signature Algorithm: sha256WithRSAEncryption
16:55:99:82:6f:8c:2d:8f:29:b0:a8:a4:50:74:e6:bf:aa:5a:
9a:4e:94:83:29:95:36:a2:d9:21:d1:e1:31:3d:61:23:38:e9:
66:92:7e:6a:78:9f:b7:da:68:cf:97:99:b5:88:5a:ff:09:04:
b0:08:40:41:8a:de:af:28:5a:75:ed:c0:c9:e0:03:bd:71:bd:
f5:b5:0c:37:e6:93:62:73:21:75:f4:81:ea:00:0a:b2:24:2e:
7b:b2:7f:0e:8b:73:24:8c:a7:71:5e:9c:b5:f8:b9:51:aa:7d:
7c:f3:58:1d:71:0e:c2:45:61:d7:ca:e8:2c:b1:20:c9:b8:3a:
d4:5b:ac:9d:e7:e8:a1:59:2b:2b:f0:a6:46:bd:9b:ac:81:0d:
35:db:91:e0:35:69:99:a0:a4:0e:84:be:53:35:2c:e8:aa:07:
b0:73:ee:8c:41:3f:03:e8:f1:76:50:54:0f:9a:73:7a:a5:3c:
3d:fd:9c:a3:ea:88:2b:b1:50:8a:41:e7:89:3e:4d:ac:8e:7f:
e2:ac:c2:3a:a7:83:9a:25:97:cf:b4:ed:e4:7c:9d:19:a2:36:
28:84:44:ad:ad:4b:4e:8b:12:19:76:d1:55:35:0d:58:1a:16:
21:c3:0d:a3:ee:ab:0a:d1:b5:ff:5a:78:f5:e8:a0:b9:8e:dc:
5b:2c:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 21:28:39 2026 by rpki-client