Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/gbzBHonlRf7ivnA5P_wp2hX0XU4.roa
File: gbzBHonlRf7ivnA5P_wp2hX0XU4.roa (raw, json)
Hash identifier: Bg4gSoBZ6ks0LuCfTWEWHJ+rDpA/oTvHgiBzwgffaf0=
Subject key identifier: 81:BC:C1:1E:89:E5:45:FE:E2:BE:70:39:3F:FC:29:DA:15:F4:5D:4E
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019FD1135EF5EEE2F4178EC79378AE6DDB5F
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/gbzBHonlRf7ivnA5P_wp2hX0XU4.roa
Signing time: Wed 05 Aug 2026 08:38:55 +0000
ROA not before: Wed 05 Aug 2026 08:38:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48014
IP address blocks: 31.41.33.0/24 maxlen: 24
45.88.89.0/24 maxlen: 24
46.183.20.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.121.60.0/24 maxlen: 24
87.121.61.0/24 maxlen: 24
93.123.113.0/24 maxlen: 24
2001:3781::/32 maxlen: 32
2001:3783::/32 maxlen: 32
2001:3787::/32 maxlen: 32
2a12:4040::/32 maxlen: 32
2a12:4043::/32 maxlen: 32
2a12:4045::/32 maxlen: 32
2a12:4047::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:13:5e:f5:ee:e2:f4:17:8e:c7:93:78:ae:6d:db:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Aug 5 08:38:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81bcc11e89e545fee2be70393ffc29da15f45d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:dc:c3:9d:88:73:f9:6e:a0:52:cd:43:b9:
47:26:3b:44:d3:58:19:c5:52:db:7a:ec:65:2b:1c:
1e:a7:09:ea:dc:64:b4:fe:73:c6:63:cb:2d:04:03:
31:1d:cb:36:a5:48:b1:25:05:64:21:58:54:e9:15:
83:1d:1a:3f:2b:b4:67:10:53:00:a7:c6:8a:3e:df:
38:53:0d:71:d5:15:76:79:a5:da:25:ed:8b:0d:51:
ec:ee:94:8b:fc:a6:0d:3d:ed:b0:5b:22:c2:e9:6e:
a3:64:db:c0:1d:e4:23:bb:47:29:09:79:e2:20:b4:
03:72:47:fa:94:0e:89:93:1d:a7:f1:8e:06:2f:e0:
c1:7e:cd:4d:13:95:3f:24:c8:70:d3:16:45:d0:03:
05:bf:e0:7a:b8:b4:11:47:76:dc:c7:20:23:b4:4a:
65:88:b0:0f:73:83:38:5b:b8:86:d1:96:3f:f7:e0:
a1:cf:5b:f9:06:d6:8a:d7:d6:36:c7:de:9a:84:6e:
dd:c5:31:ba:fd:10:da:c5:f9:4a:e3:4f:a7:e4:62:
56:3f:4a:44:86:79:7a:1f:0d:9e:31:b6:00:bf:d3:
9a:53:8e:68:8c:e5:f5:50:c5:a7:bf:38:f3:e5:81:
95:6d:93:c4:ef:44:e6:17:39:c7:7a:d3:cd:b5:3f:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BC:C1:1E:89:E5:45:FE:E2:BE:70:39:3F:FC:29:DA:15:F4:5D:4E
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/gbzBHonlRf7ivnA5P_wp2hX0XU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.33.0/24
45.88.89.0/24
46.183.20.0/24
84.54.48.0/24
87.121.60.0/23
93.123.113.0/24
IPv6:
2001:3781::/32
2001:3783::/32
2001:3787::/32
2a12:4040::/32
2a12:4043::/32
2a12:4045::/32
2a12:4047::/32
Signature Algorithm: sha256WithRSAEncryption
a6:c7:3b:45:98:b5:dd:ba:68:23:ab:f7:83:eb:2f:c1:03:99:
bd:e2:64:ed:7b:64:5d:f6:6c:69:6e:c6:76:80:5d:ae:48:d7:
67:60:13:ee:94:1f:7e:08:bb:b8:8f:23:14:65:a4:1f:d3:36:
b9:72:09:e4:d7:67:6c:30:79:c9:d7:e0:aa:87:29:f7:c3:08:
38:c3:5e:c0:69:35:6b:d2:e2:36:b5:b3:34:cc:ef:46:6a:80:
ba:d5:29:67:4c:5e:9d:af:d7:f1:b5:4f:aa:a0:9b:62:62:c6:
60:e6:d4:bb:f1:0c:31:c4:13:08:81:42:4a:ef:1a:06:37:44:
e8:dc:f6:df:51:a9:9a:50:1e:4b:5d:f0:03:ed:b6:17:b5:6c:
7b:4d:19:cd:f1:ff:ee:f9:28:d9:76:6f:b5:5a:4f:90:40:9a:
d7:75:a0:40:ef:63:6a:b5:32:63:ee:01:62:8d:d3:e5:07:e3:
e1:ea:ed:bb:17:23:06:8e:b2:31:88:73:4d:36:2e:95:05:9a:
86:05:5b:06:ab:fc:ee:5b:d1:aa:a9:ae:c9:a2:db:40:cb:a6:
b1:db:9f:da:6d:bd:4c:0c:26:83:81:90:a4:27:f3:53:f3:2c:
d8:75:11:fb:f6:bb:08:d6:2c:7a:d3:11:0e:1a:70:d8:24:16:
50:3d:8a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:17:03 2026 by rpki-client