Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/G0Ups39E4GFR56ol0su_IFACNi8.roa
File: G0Ups39E4GFR56ol0su_IFACNi8.roa (raw, json)
Hash identifier: gCerBkKlsxwbO7J0Er3ShvR4lHnv061n+i6flOqdmI8=
Subject key identifier: 1B:45:29:B3:7F:44:E0:61:51:E7:AA:25:D2:CB:BF:20:50:02:36:2F
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 01A1304FCF6665F8553D0EE3969C04B86579
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/G0Ups39E4GFR56ol0su_IFACNi8.roa
Signing time: Mon 12 Oct 2026 13:31:39 +0000
ROA not before: Mon 12 Oct 2026 13:31:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50973
IP address blocks: 79.171.48.0/21 maxlen: 21
79.171.48.0/24 maxlen: 24
79.171.49.0/24 maxlen: 24
79.171.50.0/24 maxlen: 24
79.171.52.0/24 maxlen: 24
79.171.55.0/24 maxlen: 24
95.133.132.0/22 maxlen: 23
188.172.96.0/24 maxlen: 24
188.172.97.0/24 maxlen: 24
188.172.98.0/24 maxlen: 24
188.172.99.0/24 maxlen: 24
188.172.100.0/24 maxlen: 24
188.172.101.0/24 maxlen: 24
188.172.102.0/24 maxlen: 24
188.172.103.0/24 maxlen: 24
188.172.104.0/22 maxlen: 22
188.172.104.0/24 maxlen: 24
188.172.108.0/24 maxlen: 24
188.172.109.0/24 maxlen: 24
188.172.110.0/24 maxlen: 24
188.172.111.0/24 maxlen: 24
2a0a:a0c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:4f:cf:66:65:f8:55:3d:0e:e3:96:9c:04:b8:65:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Oct 12 13:31:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b4529b37f44e06151e7aa25d2cbbf205002362f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:81:e7:9c:4e:2c:f4:7f:10:b4:ab:63:5b:6f:
16:a9:27:ff:4c:04:75:b4:ee:79:91:47:6a:82:19:
49:28:90:1d:da:ac:e5:4a:02:cf:96:73:da:0d:5e:
7b:99:ce:c6:6b:58:ad:5c:2e:31:f4:48:0b:31:4e:
71:dd:24:0c:46:2d:9a:dc:13:5e:dc:da:97:36:27:
d1:0a:26:05:e7:56:35:24:98:a1:5d:09:78:65:82:
9a:0a:f0:c5:ee:ee:f6:ec:5c:6e:9a:f3:53:67:c4:
55:4b:e1:d8:2a:ed:c6:f6:b4:ee:2f:7f:40:f0:73:
3b:68:ae:ba:00:ac:95:75:45:3e:53:88:10:36:58:
4f:c8:b5:c2:40:c0:b1:ac:a2:95:d4:9f:b7:f2:00:
27:81:91:18:af:79:0f:33:e8:d2:b3:8f:66:ee:10:
c8:98:6c:de:e9:66:57:52:71:13:7c:ec:a4:54:af:
f1:e1:ed:60:91:f1:a6:de:ce:33:6f:22:b3:82:c0:
92:34:1d:28:27:74:60:28:f9:d3:58:24:dc:78:aa:
91:37:65:ce:d8:b1:1f:b8:ae:51:f1:d3:14:09:f2:
2d:ca:ec:41:76:13:01:b0:04:37:dc:00:c1:71:43:
eb:73:da:e8:3c:c7:24:57:cf:55:82:3b:16:b3:3b:
c5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:45:29:B3:7F:44:E0:61:51:E7:AA:25:D2:CB:BF:20:50:02:36:2F
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/G0Ups39E4GFR56ol0su_IFACNi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.48.0/21
95.133.132.0/22
188.172.96.0/20
IPv6:
2a0a:a0c0::/29
Signature Algorithm: sha256WithRSAEncryption
2e:e6:dc:04:78:5b:9b:f2:58:c1:e0:4a:94:12:5d:61:39:f6:
44:23:08:cd:15:53:28:13:3f:44:00:75:15:ea:a2:cb:e4:91:
c3:a3:4a:0f:ac:73:c5:e6:c2:31:de:77:92:29:9c:83:ca:a6:
e8:ec:fc:4f:6c:43:62:9a:fc:37:fa:ed:bb:a3:42:8c:71:c2:
68:ad:92:89:b7:e1:95:9e:c7:46:6a:bf:39:62:92:37:e9:14:
25:2b:f6:e9:c1:12:46:fc:08:28:38:51:28:c5:28:94:f8:6e:
4c:02:a1:6d:7e:74:58:26:ce:42:18:15:28:db:8a:bc:0b:43:
bd:35:ad:01:10:3c:54:63:6b:da:1c:0b:69:b3:19:f7:1a:6b:
8e:24:30:83:ee:23:da:3a:b1:bb:c5:57:cc:bd:50:ad:ef:7f:
7e:b9:c7:01:6f:c4:3c:02:bc:ad:f3:83:5b:55:57:a9:7f:e6:
c7:68:da:8d:dd:49:67:34:53:89:75:1e:13:82:ea:63:19:d0:
76:99:c7:36:ab:fe:0b:cd:85:43:89:8d:de:75:0e:a0:bb:1b:
d7:9b:75:05:72:33:83:7f:ef:e7:d6:34:04:69:1b:af:a7:3f:
a9:9b:f4:72:cb:5e:1d:07:60:8f:2b:54:e7:0d:40:00:f0:25:
04:d2:ab:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 02:06:20 2026 by rpki-client