Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/3GEW_2CYdwm1qFiN6Bf4QkFNZf4.roa
File: 3GEW_2CYdwm1qFiN6Bf4QkFNZf4.roa (raw, json)
Hash identifier: GVD0ORdvb+m6XHIlxp5vX3KeBU6lYGT3GUkUzZadRxo=
Subject key identifier: DC:61:16:FF:60:98:77:09:B5:A8:58:8D:E8:17:F8:42:41:4D:65:FE
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 01A0B3B56EB8EA4DA8C210DF0CBD000D8FDC
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/3GEW_2CYdwm1qFiN6Bf4QkFNZf4.roa
Signing time: Fri 18 Sep 2026 08:50:07 +0000
ROA not before: Fri 18 Sep 2026 08:50:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 5.83.16.0/21 maxlen: 21
5.83.16.0/22 maxlen: 24
5.83.20.0/22 maxlen: 24
62.84.248.0/21 maxlen: 24
146.0.80.0/21 maxlen: 24
176.113.168.0/21 maxlen: 24
185.11.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:b5:6e:b8:ea:4d:a8:c2:10:df:0c:bd:00:0d:8f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Sep 18 08:50:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc6116ff60987709b5a8588de817f842414d65fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:6e:60:17:5a:c8:de:25:e6:b1:6a:36:8c:
63:ad:25:4d:35:75:6a:52:1d:1b:01:88:96:ef:f2:
3f:18:53:c5:08:49:bf:d7:38:d3:51:73:61:a4:1d:
4d:7f:99:8d:56:5f:03:24:46:2b:27:68:ba:24:3b:
82:ad:ec:25:3a:d8:7e:d4:f7:41:5f:ef:47:b8:d8:
03:4b:40:27:7d:c7:00:cb:6f:b5:29:03:2a:e4:56:
b3:81:f3:91:9f:62:3b:b9:f6:2b:c6:8d:4e:66:c6:
1f:5d:ff:66:12:80:d8:f1:ad:11:7a:c2:94:d5:b7:
65:8f:c4:66:b5:37:78:08:76:52:56:7c:33:ff:3f:
c7:ee:40:a8:31:2a:fc:6a:46:45:ab:ac:1b:49:2b:
f9:69:1b:4d:f4:54:3d:6b:46:8a:96:c1:9b:42:e8:
77:fb:3c:06:7e:84:fd:57:54:7c:e4:04:6c:98:09:
2d:5b:40:97:9b:b8:19:ae:a0:98:ae:12:17:67:f1:
3a:ff:81:5f:03:dc:dd:3b:f7:d0:23:77:6b:db:d4:
b1:49:c6:9c:ae:7c:a9:c5:40:b6:90:23:cd:01:06:
12:55:8c:6c:72:17:6e:52:2c:ba:7f:bf:e9:59:a5:
de:52:bc:41:8e:b3:fd:4c:7d:8a:e3:72:21:3d:ce:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:61:16:FF:60:98:77:09:B5:A8:58:8D:E8:17:F8:42:41:4D:65:FE
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/3GEW_2CYdwm1qFiN6Bf4QkFNZf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.16.0/21
62.84.248.0/21
146.0.80.0/21
176.113.168.0/21
185.11.28.0/22
Signature Algorithm: sha256WithRSAEncryption
19:98:e6:ce:ed:cd:41:44:15:34:60:48:05:74:f3:0d:10:eb:
3c:35:a0:08:38:a7:e4:61:60:79:69:a1:9e:6d:09:f5:87:95:
52:bf:1b:87:ae:88:3f:e8:06:e9:36:71:d1:8f:1e:7d:02:20:
f5:90:c9:05:12:51:6c:d5:3b:92:9e:f3:85:be:13:45:ef:ad:
e8:14:96:20:dd:cf:f9:34:1c:27:8e:15:92:da:54:95:b4:2b:
4b:55:2e:85:b5:3c:42:76:4c:44:2e:67:8b:0c:66:4e:04:80:
55:9e:0e:fe:ac:c7:0d:ff:6b:73:ad:72:3c:63:02:a0:b4:dd:
a6:50:f2:f0:bc:6e:1f:05:08:b7:e5:16:51:53:d1:ae:73:44:
61:ec:ca:39:a6:81:f7:94:d3:98:ee:07:e9:d4:e4:e9:f8:b0:
a6:95:30:53:6e:7f:e8:f7:cb:2c:ea:dc:f5:3f:4b:24:27:40:
a5:07:ef:67:c1:b8:24:87:ca:0a:5c:ee:a9:98:ea:87:f5:d6:
87:11:2d:66:68:1d:35:ae:f6:8f:95:88:44:67:32:20:61:6c:
2f:2f:f3:3e:77:11:bd:33:c6:42:43:23:ef:49:d4:43:71:c7:
64:c4:3c:f6:73:54:cf:6d:ad:59:45:bc:d7:44:b2:ef:e9:db:
dc:66:1c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:08:55 2026 by rpki-client