Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/GzDfSxqDCeSPBf2y3shNBBiZXvI.roa
File: GzDfSxqDCeSPBf2y3shNBBiZXvI.roa (raw, json)
Hash identifier: /+BjohrpeY7LNc+qriITdKXkfsBB8VP8fjcOHUD3hXE=
Subject key identifier: 1B:30:DF:4B:1A:83:09:E4:8F:05:FD:B2:DE:C8:4D:04:18:99:5E:F2
Certificate issuer: /CN=e939e12ec456c5823d2f4068381e80f43332ee93
Certificate serial: 019F23683A4F14A645E307ADB342BE072B2F
Authority key identifier: E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/GzDfSxqDCeSPBf2y3shNBBiZXvI.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211588
IP address blocks: 185.229.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3a:4f:14:a6:45:e3:07:ad:b3:42:be:07:2b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939e12ec456c5823d2f4068381e80f43332ee93
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b30df4b1a8309e48f05fdb2dec84d0418995ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e1:12:2e:5b:d7:55:bc:8d:b1:ef:49:4e:d2:
af:4c:7b:0b:36:f4:d1:da:68:9a:74:b9:6b:91:d1:
07:66:9a:c6:20:4a:c9:69:a2:c9:f8:b9:b8:d0:bc:
4d:20:aa:c3:0a:4d:69:9f:4f:63:3a:3d:5a:d1:72:
f4:d5:f9:f0:e0:bb:ed:53:9c:cd:a0:dc:b2:eb:eb:
12:8d:e9:2f:d9:62:80:0e:46:f9:02:d4:6f:a8:2f:
12:e0:f4:50:ef:e6:83:a2:8a:f3:0a:e5:bd:94:0b:
ef:a6:df:e2:79:a2:82:ae:75:1f:03:37:66:cb:c1:
fc:72:15:15:fe:19:cf:cb:d1:d2:f3:0f:0f:e1:37:
1d:a3:2a:d2:42:2d:d2:7f:d8:52:75:cf:bb:1d:b2:
6b:5f:e3:6b:04:1d:a4:fb:0b:5e:b0:00:1d:2d:2f:
6f:fa:f2:d8:37:3e:d0:0e:7e:cc:85:69:62:29:78:
80:a3:01:fb:97:ae:a7:11:8e:43:f2:92:48:7e:51:
c1:f3:47:c9:75:25:15:cf:bd:c6:f5:70:6a:20:5f:
17:46:9a:99:39:95:55:2d:58:40:89:f8:fd:96:e5:
71:57:b7:2f:3e:cd:6e:3a:6e:4c:2a:bd:0b:0a:4c:
51:60:33:f2:4a:5f:94:cb:68:e9:04:8c:07:d9:59:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:30:DF:4B:1A:83:09:E4:8F:05:FD:B2:DE:C8:4D:04:18:99:5E:F2
X509v3 Authority Key Identifier:
keyid:E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/GzDfSxqDCeSPBf2y3shNBBiZXvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:46:cd:18:05:35:8c:62:e9:26:08:ac:5d:2e:0f:d5:12:04:
c6:01:91:4d:62:ae:85:32:ca:66:71:62:84:60:ba:fa:94:1e:
43:a4:99:c4:fb:74:e6:81:9a:bd:a5:0d:11:11:a9:98:5f:f7:
39:8d:b6:5c:0e:89:93:35:d1:fa:81:66:d3:47:b9:7f:08:06:
b1:fa:05:50:cc:97:99:06:01:2a:4e:a2:9b:fe:cd:a2:23:8a:
1c:ba:50:34:41:1e:c1:0d:2f:9d:9c:ce:ea:af:bb:59:75:35:
57:49:8f:a8:33:72:7f:9a:89:59:27:c7:bb:e3:98:1c:cb:36:
13:cd:59:17:b8:95:44:88:d5:7e:7a:96:dd:b2:b2:24:88:1a:
6f:d5:04:7c:f9:df:78:c1:16:b2:c4:86:0f:e9:bd:e5:e8:48:
a8:85:97:ee:b8:61:a8:92:57:58:92:56:12:a1:1d:79:25:50:
6f:94:9f:4e:55:29:37:94:3e:d0:df:a0:4d:3d:a8:11:fd:01:
3c:e8:fa:c2:79:53:5d:e6:a9:1f:25:5d:0d:ab:44:ce:11:e7:
01:91:ef:85:86:ba:3c:99:c8:7b:c6:8b:9c:fe:17:de:0b:1d:
4a:c6:13:3b:70:31:dc:91:35:e0:57:f5:c0:5a:a1:1e:05:46:
56:b0:a2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:16 2026 by rpki-client