Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Gug5FnCDjB47_b4b7SpuDZOyPmc.roa
File: Gug5FnCDjB47_b4b7SpuDZOyPmc.roa (raw, json)
Hash identifier: k9gAW6SKI0/aYjwjKLHuKj0KrVsMFyU3zgWsEogPtww=
Subject key identifier: 1A:E8:39:16:70:83:8C:1E:3B:FD:BE:1B:ED:2A:6E:0D:93:B2:3E:67
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A09A29376553B4C628221D6AF0923B48F3
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Gug5FnCDjB47_b4b7SpuDZOyPmc.roa
Signing time: Sun 13 Sep 2026 09:46:27 +0000
ROA not before: Sun 13 Sep 2026 09:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33842
IP address blocks: 185.182.65.0/24 maxlen: 24
195.170.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:29:37:65:53:b4:c6:28:22:1d:6a:f0:92:3b:48:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 13 09:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ae8391670838c1e3bfdbe1bed2a6e0d93b23e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:e4:42:2c:ca:ef:9c:b8:48:b8:31:1f:41:
ad:a7:5f:86:4c:d3:4f:03:78:9e:da:23:ec:b2:f1:
3b:61:e9:34:bc:3c:6f:a1:a3:50:07:5e:70:59:ee:
34:a4:f5:f9:90:88:1b:80:78:3c:56:8e:17:ee:47:
92:db:84:ee:4e:f6:89:f8:a9:f9:01:e9:92:4c:65:
6d:b2:9e:e2:f0:68:04:22:55:70:96:2a:4e:7d:7d:
2f:dd:19:5a:1f:91:ad:c8:62:9f:c6:80:54:16:89:
d8:ba:5f:58:4e:e6:14:72:18:1e:4d:52:9e:d7:4b:
c8:87:bf:55:ed:d4:89:00:a0:e7:86:72:4c:c5:53:
2a:95:59:82:73:cb:ab:d2:44:41:7f:cc:4f:d0:2c:
9b:70:71:da:b3:b7:06:c6:ea:ab:c0:19:9e:98:fe:
30:cb:d9:49:ab:df:94:7a:4d:b1:f3:4d:02:3b:5c:
33:6b:7f:c5:91:62:56:6e:e2:61:a4:15:e8:ac:44:
0c:42:19:5d:84:e3:33:73:bb:2a:c3:f9:3e:e3:bb:
c1:53:99:10:fc:ce:e3:4c:78:87:45:7e:51:9d:f6:
90:ab:cb:02:66:2c:de:68:69:21:3a:0e:f8:00:ee:
ee:8f:20:e5:6d:cd:3d:fc:7a:38:11:91:73:bd:32:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E8:39:16:70:83:8C:1E:3B:FD:BE:1B:ED:2A:6E:0D:93:B2:3E:67
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Gug5FnCDjB47_b4b7SpuDZOyPmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.65.0/24
195.170.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:1a:d7:20:4d:42:0a:26:49:c8:dd:43:17:f7:b1:5d:2d:f5:
f9:b5:5d:21:05:da:3c:7c:68:91:e8:7d:20:59:fc:42:9f:0f:
b9:5a:f4:d2:7d:da:00:8d:cb:1b:ef:0a:c0:ee:43:76:00:61:
ee:12:01:a2:04:72:d6:f5:09:58:bb:30:b2:0a:f8:1c:1b:f4:
6a:53:d9:12:22:13:6e:ec:d1:7c:c9:d8:cc:f7:63:68:fc:ad:
3e:ab:b9:a2:83:6e:6e:b8:20:8e:93:a8:9c:47:4f:49:00:3f:
04:30:7a:36:5f:45:d7:45:32:98:31:7a:af:26:37:42:ce:b6:
4b:6b:28:db:d6:01:13:c2:e6:af:64:26:ec:eb:7c:c6:00:96:
df:24:43:9c:e6:d4:e7:67:2a:46:56:af:59:9b:a1:e3:6f:9e:
30:72:8c:b5:69:7c:d5:65:d2:7b:3d:f8:2f:08:a6:c5:cd:fa:
ab:ce:ab:3f:fd:b6:1f:74:42:9b:5f:f4:3d:b2:29:0b:ef:d2:
70:2c:3a:ec:47:63:8b:4e:b5:52:ed:1b:61:64:34:bd:ee:83:
23:5d:32:3f:06:c1:00:13:ce:23:cc:ae:2a:d7:ce:41:b0:11:
43:08:c7:4d:34:d9:26:ab:28:f1:f2:da:6f:63:08:39:a8:3d:
42:7d:bd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:09:47 2026 by rpki-client