Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/Gl6nscEbuwxlhw6IyHzvgXxRljA.roa
File: Gl6nscEbuwxlhw6IyHzvgXxRljA.roa (raw, json)
Hash identifier: AA68brDB6Rz3mYLHYI9epwbmVOwfLXw3fS9hyfIcyJM=
Subject key identifier: 1A:5E:A7:B1:C1:1B:BB:0C:65:87:0E:88:C8:7C:EF:81:7C:51:96:30
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 019FCB9D5D9555860F2CCA49C6EA15DCF7D3
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/Gl6nscEbuwxlhw6IyHzvgXxRljA.roa
Signing time: Tue 04 Aug 2026 07:11:55 +0000
ROA not before: Tue 04 Aug 2026 07:11:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35725
IP address blocks: 89.33.32.0/21 maxlen: 21
89.33.48.0/21 maxlen: 21
178.138.1.0/24 maxlen: 24
178.138.32.0/22 maxlen: 22
178.138.36.0/24 maxlen: 24
178.138.38.0/24 maxlen: 24
178.138.39.0/24 maxlen: 24
178.138.40.0/23 maxlen: 23
178.138.42.0/24 maxlen: 24
178.138.43.0/24 maxlen: 24
178.138.62.0/24 maxlen: 24
178.138.63.0/24 maxlen: 24
178.138.96.0/22 maxlen: 22
178.138.126.0/23 maxlen: 23
178.138.192.0/23 maxlen: 23
178.138.194.0/23 maxlen: 23
193.104.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:9d:5d:95:55:86:0f:2c:ca:49:c6:ea:15:dc:f7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Aug 4 07:11:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a5ea7b1c11bbb0c65870e88c87cef817c519630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f9:e2:72:de:98:ef:77:7c:f3:b8:aa:d0:bd:
a8:86:9b:89:50:4a:e4:b0:e6:80:bc:7d:16:f8:dc:
6c:5d:7f:f7:84:07:8a:11:2a:e0:9c:3c:13:a6:77:
58:45:ca:91:c4:45:39:96:27:9c:45:e6:5c:2b:0c:
ee:4b:0f:32:ab:49:d4:d3:75:9d:73:3f:a8:6e:c7:
4c:01:1a:6c:e1:cc:d1:4b:62:a1:5b:5e:57:6a:ed:
4d:97:fa:02:b7:46:12:f8:1d:13:8c:d6:9d:15:41:
b2:38:9e:e2:87:29:75:41:d8:96:ad:4c:36:2d:18:
7d:f7:b2:d1:7e:6e:70:0c:29:19:e3:64:43:5d:45:
18:ac:85:09:2c:5a:dc:a1:02:5a:41:c1:b0:73:d4:
e4:a9:9a:58:b4:d2:d4:81:4e:d0:e0:22:d9:60:31:
77:87:07:ef:e7:23:8d:24:68:d3:cb:cc:11:bd:c7:
2a:48:36:e2:fe:11:d4:24:f4:5f:9e:3f:6d:3e:fd:
5d:cd:52:84:6a:a5:47:8b:4e:70:56:31:44:b8:d9:
84:ae:c3:a6:b2:63:e6:64:f8:80:5d:1c:b4:08:54:
0e:67:49:02:3c:3b:63:18:c2:46:61:3c:c8:f2:52:
7d:82:29:c9:da:45:0b:59:fb:4e:87:ae:05:4d:ba:
c7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5E:A7:B1:C1:1B:BB:0C:65:87:0E:88:C8:7C:EF:81:7C:51:96:30
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/Gl6nscEbuwxlhw6IyHzvgXxRljA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.32.0/21
89.33.48.0/21
178.138.1.0/24
178.138.32.0-178.138.36.255
178.138.38.0-178.138.43.255
178.138.62.0/23
178.138.96.0/22
178.138.126.0/23
178.138.192.0/22
193.104.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e6:1f:0f:68:fb:eb:09:b2:d4:ca:2e:57:95:7b:69:34:51:
29:a5:b3:1e:5d:62:69:83:75:9c:e6:1f:0b:9b:5d:dd:68:46:
76:96:d4:d6:d3:58:03:d2:9d:73:f3:b7:93:d8:44:28:e3:c8:
18:4a:d4:bd:3a:4d:03:15:9a:99:99:ff:36:45:3b:10:7f:1f:
8a:98:f4:4f:7f:87:43:c3:77:da:5e:be:3f:f7:92:b8:c7:92:
48:f1:a1:8e:e4:7c:a8:4b:30:90:12:c1:04:de:2b:80:19:71:
9b:31:8d:0a:68:d9:fb:a6:25:e7:ac:77:c5:37:34:58:1e:7d:
2c:90:c0:8e:6a:91:5f:30:79:15:6b:8f:9a:af:b5:9d:8d:ff:
d5:6a:cd:21:1b:2b:22:73:3b:20:84:b7:e3:9e:42:d6:ea:95:
5c:5a:aa:a8:01:53:32:d6:e7:48:e1:ef:40:a8:3b:b1:9f:0f:
21:59:75:c5:cf:c9:ad:67:35:ce:19:1e:cd:49:1d:89:aa:01:
4d:85:80:e3:80:98:d0:e6:b6:68:50:ed:15:b1:5a:d6:5a:d3:
61:01:78:f8:77:66:9f:14:28:91:70:a3:de:b9:1e:b2:c6:0e:
10:d9:a0:83:da:af:70:cc:37:bd:ae:c7:93:f2:cb:f3:8f:86:
f0:40:6f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:59:46 2026 by rpki-client