Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/fGGjLVgPA4LKzeQccN40Sqp57_M.roa
File: fGGjLVgPA4LKzeQccN40Sqp57_M.roa (raw, json)
Hash identifier: FQZQxdVxTubVpPk55UZw5AIOaDT8fpk0qYAYzWlOgeA=
Subject key identifier: 7C:61:A3:2D:58:0F:03:82:CA:CD:E4:1C:70:DE:34:4A:AA:79:EF:F3
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 01A0C9A0CFE69BAC3A7B3EAFAC1103853CFB
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/fGGjLVgPA4LKzeQccN40Sqp57_M.roa
Signing time: Tue 22 Sep 2026 14:59:14 +0000
ROA not before: Tue 22 Sep 2026 14:59:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13213
IP address blocks: 31.24.224.0/21 maxlen: 24
37.123.112.0/21 maxlen: 24
37.123.112.0/24 maxlen: 24
46.23.64.0/21 maxlen: 21
46.23.72.0/22 maxlen: 22
46.23.76.0/22 maxlen: 24
77.92.64.0/21 maxlen: 21
77.92.72.0/22 maxlen: 22
77.92.76.0/23 maxlen: 23
77.92.78.0/23 maxlen: 23
77.92.80.0/20 maxlen: 20
82.163.72.0/21 maxlen: 24
83.170.64.0/18 maxlen: 18
83.170.69.0/24 maxlen: 24
83.170.124.0/24 maxlen: 24
88.202.176.0/23 maxlen: 23
88.202.177.0/24 maxlen: 24
88.202.178.0/24 maxlen: 24
88.202.179.0/24 maxlen: 24
88.202.180.0/22 maxlen: 22
88.202.184.0/24 maxlen: 24
88.202.185.0/24 maxlen: 24
88.202.186.0/23 maxlen: 23
88.202.188.0/22 maxlen: 22
88.202.224.0/21 maxlen: 24
91.109.240.0/21 maxlen: 21
109.123.64.0/19 maxlen: 24
109.123.96.0/20 maxlen: 24
109.123.112.0/20 maxlen: 20
176.67.160.0/21 maxlen: 21
176.67.169.0/24 maxlen: 24
176.67.171.0/24 maxlen: 24
176.67.172.0/22 maxlen: 24
2a02:2498::/47 maxlen: 47
2a02:2498:4::/48 maxlen: 48
2a02:2498:5::/48 maxlen: 48
2a02:2498:16::/48 maxlen: 48
2a02:2498:257b::/48 maxlen: 48
2a02:2498:6d7b::/48 maxlen: 48
2a02:2498:8000::/36 maxlen: 36
2a02:2498:9000::/36 maxlen: 36
2a02:2498:b000::/36 maxlen: 36
2a02:2498:e000::/36 maxlen: 36
2a02:2498:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a0:cf:e6:9b:ac:3a:7b:3e:af:ac:11:03:85:3c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Sep 22 14:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c61a32d580f0382cacde41c70de344aaa79eff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:85:55:af:9a:da:da:29:f2:3c:04:b8:c6:
e2:f8:8c:d6:80:0b:e9:af:85:75:84:2d:e9:85:56:
ce:5f:42:27:89:0b:23:2a:9a:05:15:99:5f:77:00:
91:d8:b6:2f:e9:8b:08:b5:0c:95:a9:9f:5a:66:24:
2e:67:2b:c9:5e:1c:01:ed:16:03:d7:29:63:0d:22:
ec:39:53:2a:f0:b3:00:fa:bb:f4:f2:1a:b9:01:2d:
58:c6:03:41:4f:3d:06:b3:d2:fd:16:64:c4:42:75:
ff:7b:bb:e5:f2:95:06:f6:f9:ad:04:8e:92:d9:3d:
ce:06:6c:da:99:a5:21:87:72:02:5a:26:70:49:33:
bd:62:33:26:8d:f4:9a:79:80:6c:62:b7:cc:fa:e1:
7c:e1:f0:98:36:99:62:ab:89:cb:13:1d:80:39:3d:
2a:77:7d:b8:e6:27:55:7f:89:01:c6:40:a5:7a:37:
5c:f6:09:1d:85:5e:1b:96:3f:5a:68:2d:0f:11:a9:
85:b8:8a:df:e0:f1:7e:8f:e0:b7:b7:88:85:3b:45:
07:b2:37:e9:d4:80:61:fe:c3:df:d3:ce:71:27:27:
7b:e5:bf:18:56:96:b0:46:d8:85:56:59:21:3a:96:
7e:f9:4f:73:66:59:d1:22:73:0e:3b:0e:ce:5a:3d:
49:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:61:A3:2D:58:0F:03:82:CA:CD:E4:1C:70:DE:34:4A:AA:79:EF:F3
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/fGGjLVgPA4LKzeQccN40Sqp57_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.224.0/21
37.123.112.0/21
46.23.64.0/20
77.92.64.0/19
82.163.72.0/21
83.170.64.0/18
88.202.176.0/20
88.202.224.0/21
91.109.240.0/21
109.123.64.0/18
176.67.160.0/21
176.67.169.0/24
176.67.171.0-176.67.175.255
IPv6:
2a02:2498::/47
2a02:2498:4::/47
2a02:2498:16::/48
2a02:2498:257b::/48
2a02:2498:6d7b::/48
2a02:2498:8000::/35
2a02:2498:b000::/36
2a02:2498:e000::/35
Signature Algorithm: sha256WithRSAEncryption
a4:3c:e0:50:42:e9:60:01:cf:ad:68:5b:d3:6c:84:37:a5:b0:
9d:00:72:32:1c:bb:79:19:52:a0:d7:e8:a3:01:95:e7:e5:25:
b7:41:ba:99:b5:52:b4:6f:22:39:03:5e:44:32:b2:38:95:62:
aa:2f:64:f1:ca:af:3f:b6:ec:ee:48:79:f1:5c:f7:44:da:af:
2b:9c:8b:b4:7b:3b:04:6a:b2:68:4b:00:d0:b7:1c:26:e9:07:
01:14:49:fd:9f:1e:ac:15:27:29:ea:c0:1c:82:87:39:00:fb:
ab:87:01:8d:67:77:2f:4d:75:19:30:8e:d8:69:8a:12:fe:a3:
05:8a:b5:29:69:5c:17:28:33:b0:a5:2d:52:fd:fe:7f:74:c0:
80:d4:d2:20:c1:7f:de:13:4b:0b:22:49:dd:8d:a6:54:ae:1d:
31:5a:07:33:ca:93:44:3e:b6:eb:1a:2e:5d:f7:f8:02:0e:68:
f8:fc:c1:ef:9c:11:d6:03:78:8b:db:c7:6c:2b:a1:c3:73:c5:
c0:57:1b:1b:6b:cd:55:70:f4:b2:29:b1:59:0b:2e:64:84:ab:
0b:c0:65:28:d0:28:c1:fa:02:dd:d2:88:fd:17:03:78:ea:9b:
11:7c:8d:42:e8:af:ff:7a:15:9e:51:2c:a9:cb:d1:a5:51:2d:
57:d8:76:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:54:35 2026 by rpki-client