Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/GSWx0hsgl2HZ3hZKjw9zmZ1zR0c.roa
File: GSWx0hsgl2HZ3hZKjw9zmZ1zR0c.roa (raw, json)
Hash identifier: 5iJBSAVI32wYt0M+SbccAMVEuoqi4ABnZUSN/2LAKP4=
Subject key identifier: 19:25:B1:D2:1B:20:97:61:D9:DE:16:4A:8F:0F:73:99:9D:73:47:47
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 019EF675CB25FB0DB2E899A1D762E996B688
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/GSWx0hsgl2HZ3hZKjw9zmZ1zR0c.roa
Signing time: Tue 23 Jun 2026 21:49:35 +0000
ROA not before: Tue 23 Jun 2026 21:49:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211309
IP address blocks: 46.227.152.0/21 maxlen: 21
81.88.64.0/21 maxlen: 21
81.95.80.0/20 maxlen: 20
82.148.168.0/21 maxlen: 21
82.148.176.0/20 maxlen: 20
84.48.64.0/18 maxlen: 24
89.207.136.0/21 maxlen: 21
109.169.112.0/21 maxlen: 21
178.174.112.0/20 maxlen: 20
185.176.244.0/23 maxlen: 23
185.176.244.0/24 maxlen: 24
185.176.245.0/24 maxlen: 24
185.178.4.0/22 maxlen: 22
185.190.36.0/24 maxlen: 24
193.168.156.0/22 maxlen: 22
212.89.96.0/19 maxlen: 24
2a0a:2780::/31 maxlen: 31
2a0a:2780::/32 maxlen: 32
2a0a:2781::/32 maxlen: 32
2a10:d640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f6:75:cb:25:fb:0d:b2:e8:99:a1:d7:62:e9:96:b6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Jun 23 21:49:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1925b1d21b209761d9de164a8f0f73999d734747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0f:13:cc:8f:0a:e8:85:fd:0b:01:cc:0c:07:
f1:4e:7f:32:50:5b:9f:9f:06:7b:d3:ed:5e:6e:cc:
25:1f:29:5e:c7:b2:57:b1:5d:ff:df:f6:48:05:ec:
2e:bc:ae:19:f0:9a:85:4a:7a:fc:83:16:a3:4f:b2:
3e:c1:c9:ac:ad:2c:ec:1a:2e:7a:c6:5f:18:9c:df:
bf:8d:3f:66:82:c6:a1:42:be:21:d1:0e:71:49:f5:
3a:5f:32:45:4f:c4:88:e8:34:3e:4c:3e:66:6d:34:
b8:e9:af:5b:20:3f:10:a3:2d:a8:c3:03:e5:cc:fd:
03:62:90:df:38:14:17:69:f4:02:44:00:e5:2d:a3:
06:67:1f:b0:f1:da:5f:50:73:2d:b4:ae:2f:72:8f:
9c:d4:a1:51:78:26:20:65:5b:9a:a4:13:a7:dd:07:
a1:84:d2:b5:ae:8f:7f:7e:1b:43:e4:c1:aa:c8:31:
c4:e7:ad:9a:28:4c:c5:5b:64:26:5d:46:b9:fb:2d:
2c:1f:ee:53:cf:72:73:11:07:52:60:a7:79:fc:80:
f2:ce:6d:5b:5f:be:07:62:27:3f:0b:5a:8a:fa:9a:
98:82:61:6a:94:72:2d:d0:6a:24:b2:2c:6d:ea:ef:
f8:c5:ca:2a:19:57:c7:3b:df:37:7c:fd:8b:82:ef:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:25:B1:D2:1B:20:97:61:D9:DE:16:4A:8F:0F:73:99:9D:73:47:47
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/GSWx0hsgl2HZ3hZKjw9zmZ1zR0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.152.0/21
81.88.64.0/21
81.95.80.0/20
82.148.168.0-82.148.191.255
84.48.64.0/18
89.207.136.0/21
109.169.112.0/21
178.174.112.0/20
185.176.244.0/23
185.178.4.0/22
185.190.36.0/24
193.168.156.0/22
212.89.96.0/19
IPv6:
2a0a:2780::/31
2a10:d640::/29
Signature Algorithm: sha256WithRSAEncryption
57:76:c2:2a:8e:81:f9:ae:1f:41:d5:42:a2:d5:f6:b8:15:b9:
d7:98:0a:44:c3:dd:d1:51:f3:ec:c2:02:f0:40:f9:20:08:0e:
38:1b:17:b7:4f:04:bb:f4:78:79:a9:d2:d9:09:89:2a:82:53:
f9:ae:ea:62:5f:39:ce:b4:d7:b5:9f:bc:1c:e4:b4:d4:1d:80:
80:8e:94:3e:3f:47:f3:6b:a9:03:d9:88:3c:9c:5e:93:73:67:
87:53:78:42:49:ed:cc:11:3f:1d:22:53:0d:6e:a2:cf:d9:1e:
89:83:0d:67:9a:fa:83:74:24:e7:e0:ca:28:59:46:ac:3d:b1:
bf:49:f3:a2:a2:72:54:16:01:e4:bd:68:22:4c:0e:23:88:c1:
5f:bf:ae:b0:5a:4c:e3:88:f9:9e:a5:05:59:12:1f:a1:0a:10:
8b:fc:22:80:74:e1:01:8e:7d:25:ce:1b:3e:cd:da:1d:69:47:
f3:e2:a5:87:de:20:8c:fa:05:23:bf:21:3a:0a:84:8b:a9:7e:
68:a6:cb:45:a0:82:62:da:1d:f0:98:d0:a8:65:b0:bf:1d:e1:
a6:39:fc:30:f9:6b:a1:a2:20:42:b9:89:19:57:b3:d1:66:11:
98:8e:6b:06:9f:a6:00:bd:d8:28:0c:8f:b7:81:1a:80:35:75:
60:a9:6e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:40:34 2026 by rpki-client