Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/gmw7pLwjm6vuBLTk-rK2D36QKkA.roa
File: gmw7pLwjm6vuBLTk-rK2D36QKkA.roa (raw, json)
Hash identifier: COLQkZAyHhSJJDAy86nI3z09V/OufPhY+8kBah7bzeM=
Subject key identifier: 82:6C:3B:A4:BC:23:9B:AB:EE:04:B4:E4:FA:B2:B6:0F:7E:90:2A:40
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 019A2F312C9A93EA84E412152205E05D92A7
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/gmw7pLwjm6vuBLTk-rK2D36QKkA.roa
Signing time: Wed 29 Oct 2025 08:59:03 +0000
ROA not before: Wed 29 Oct 2025 08:59:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3170
IP address blocks: 83.97.16.0/22 maxlen: 24
83.97.16.0/24 maxlen: 32
91.240.224.0/24 maxlen: 24
103.141.24.0/23 maxlen: 32
185.17.196.0/22 maxlen: 24
185.175.90.0/24 maxlen: 24
188.64.34.0/23 maxlen: 24
188.64.36.0/22 maxlen: 24
193.35.56.0/22 maxlen: 24
193.105.188.0/24 maxlen: 24
194.0.58.0/24 maxlen: 24
194.69.165.0/24 maxlen: 24
195.74.52.0/22 maxlen: 24
195.144.8.0/24 maxlen: 24
195.191.218.0/23 maxlen: 24
195.191.219.0/24 maxlen: 32
2a03:ee40::/32 maxlen: 32
2a07:240::/29 maxlen: 48
2a10:4740::/29 maxlen: 48
2a11:2640::/32 maxlen: 32
2a11:2641::/32 maxlen: 32
2a11:2647::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:31:2c:9a:93:ea:84:e4:12:15:22:05:e0:5d:92:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: Oct 29 08:59:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=826c3ba4bc239babee04b4e4fab2b60f7e902a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:02:f0:27:dc:20:61:62:60:bf:0c:4e:93:
5f:db:73:66:52:b2:1f:eb:51:fb:7a:20:57:26:6d:
82:10:ec:40:e3:f5:c8:56:9c:74:be:19:26:e7:39:
6d:84:cc:dd:80:69:17:f5:78:5c:c3:14:d6:df:8c:
08:4b:f2:be:11:1c:c3:55:a3:1b:b0:b3:1f:23:50:
1f:33:fb:b7:c1:cd:62:10:fc:e7:df:48:3b:46:e0:
4f:dd:a7:f8:ef:bf:3c:93:1e:d6:76:6f:a8:5e:3f:
af:5e:f2:01:af:09:08:91:f2:ed:3f:ca:5e:9f:86:
e8:a0:06:e9:d8:05:f4:df:58:72:3a:51:d4:50:8a:
b9:bc:1c:b8:28:1f:30:af:0b:94:59:e8:a3:c0:f1:
0f:8e:2d:51:66:96:5e:d5:54:87:36:20:10:70:42:
d9:1e:1d:bc:3b:75:e5:eb:00:6b:f6:0b:22:03:d2:
09:e9:ab:63:5b:5c:a5:b5:96:93:5a:af:97:0d:a3:
f0:4d:b4:b9:5b:6e:0c:8d:ed:3f:f4:c3:11:e5:1f:
7a:d3:5a:96:5c:6e:1b:6a:30:f1:8a:1b:7f:37:3c:
9a:07:51:53:cb:18:01:48:61:9f:c0:6e:e1:a1:74:
93:2d:04:76:9c:f7:2b:63:34:9a:95:7b:0b:58:75:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6C:3B:A4:BC:23:9B:AB:EE:04:B4:E4:FA:B2:B6:0F:7E:90:2A:40
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/gmw7pLwjm6vuBLTk-rK2D36QKkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.16.0/22
91.240.224.0/24
103.141.24.0/23
185.17.196.0/22
185.175.90.0/24
188.64.34.0-188.64.39.255
193.35.56.0/22
193.105.188.0/24
194.0.58.0/24
194.69.165.0/24
195.74.52.0/22
195.144.8.0/24
195.191.218.0/23
IPv6:
2a03:ee40::/32
2a07:240::/29
2a10:4740::/29
2a11:2640::/31
2a11:2647::/32
Signature Algorithm: sha256WithRSAEncryption
33:05:9d:0c:cf:4c:fc:fd:f3:9c:12:17:d3:33:84:66:72:1e:
6b:06:c1:81:f6:de:ea:63:29:8e:5c:7c:b9:4b:aa:40:bb:a6:
65:2a:f3:04:54:e8:57:c0:44:f0:7f:99:35:a7:6a:ca:ec:70:
6a:66:d4:6d:ad:27:fb:81:1e:17:c2:6b:17:c1:ca:02:82:63:
ed:e8:2c:ea:20:33:e2:79:9d:6a:1a:b6:65:16:fa:2c:12:b1:
02:54:58:47:ff:4d:b9:b6:53:56:55:ce:01:ab:18:0f:1f:47:
bc:09:2a:5f:d2:f8:2c:00:01:5d:1d:fe:d1:fa:d0:f0:4e:20:
81:41:95:5d:b1:11:29:72:40:c4:60:20:79:63:88:cf:fa:1f:
18:e3:05:ee:03:79:d4:9d:0d:f6:67:be:81:03:51:74:7e:ae:
c2:74:43:78:e7:cb:3b:3d:e5:b0:51:67:ac:51:a3:29:1f:a8:
1e:9d:4a:d9:52:b6:cc:bf:f8:e8:e9:b7:b9:36:99:d8:e6:3c:
98:4c:78:3f:f6:3c:00:6d:13:41:39:ad:9f:13:ac:b8:2e:70:
91:ea:7e:50:f6:ef:c1:c1:d6:68:6d:ec:a9:23:c7:42:16:d9:
29:f9:e3:bd:6a:c8:fc:2b:b6:e0:ce:21:b5:3e:54:cc:eb:f3:
1b:ec:c6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 10:44:47 2025 by rpki-client