Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/gfNmYWuIvuunlCkfkDni5cxgfT0.roa
File: gfNmYWuIvuunlCkfkDni5cxgfT0.roa (raw, json)
Hash identifier: SnoMtTLK31p4RRjzX3gGgwCqhz+VBN/cr3/eK2n8JQ4=
Subject key identifier: 81:F3:66:61:6B:88:BE:EB:A7:94:29:1F:90:39:E2:E5:CC:60:7D:3D
Certificate issuer: /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial: 019B7EA57577883DC4CE16DCA9827C46C801
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/gfNmYWuIvuunlCkfkDni5cxgfT0.roa
Signing time: Fri 02 Jan 2026 12:18:51 +0000
ROA not before: Fri 02 Jan 2026 12:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212175
IP address blocks: 79.135.120.0/23 maxlen: 24
185.165.50.0/23 maxlen: 24
185.225.9.0/24 maxlen: 24
194.110.239.0/24 maxlen: 24
212.104.134.0/23 maxlen: 24
212.104.138.0/23 maxlen: 24
213.254.166.0/23 maxlen: 24
213.254.168.0/23 maxlen: 24
2a10:9e80::/29 maxlen: 64
2a12:df40::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:75:77:88:3d:c4:ce:16:dc:a9:82:7c:46:c8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
Validity
Not Before: Jan 2 12:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81f366616b88beeba794291f9039e2e5cc607d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:27:f7:f4:70:5e:a8:97:1e:ca:45:27:a8:bd:
ce:3b:1b:06:b7:67:85:ba:47:89:53:d7:b2:54:51:
0b:87:eb:b3:88:df:7e:0c:54:00:e0:48:fb:51:96:
4b:b2:0a:02:74:06:94:8c:d9:f1:cb:3d:6e:c7:ca:
6c:86:d4:17:38:12:cc:50:a6:2c:68:54:23:70:13:
22:13:0a:16:1c:ba:3e:ae:94:78:7c:a4:2c:e8:97:
ba:c1:e2:e5:22:69:a3:09:d5:25:2c:75:89:34:2e:
0c:2d:90:a5:e8:31:c4:35:15:c9:10:aa:fb:f4:6f:
22:c9:15:c1:37:8a:d2:41:cb:49:bd:38:c4:2b:5e:
2a:72:5f:e1:01:bc:5c:3d:9d:b2:00:a0:b9:9a:84:
4c:82:7b:db:15:66:ef:9e:cd:f1:18:d2:8d:29:16:
10:3d:5f:d6:1f:f1:08:89:1f:ec:73:ed:1a:a7:8b:
b8:f0:1f:ad:f3:8e:f6:85:2c:3d:ab:70:10:dc:b7:
1f:d3:00:87:b9:95:98:e5:37:94:09:9d:29:6d:a9:
fc:aa:d4:ee:67:37:4b:09:97:6e:d2:0f:b4:ea:6a:
aa:9b:21:90:a5:2d:22:e6:fe:de:db:fe:9e:17:ce:
57:31:67:3d:42:9a:36:ad:a5:60:d3:0a:8b:3d:e1:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F3:66:61:6B:88:BE:EB:A7:94:29:1F:90:39:E2:E5:CC:60:7D:3D
X509v3 Authority Key Identifier:
keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/gfNmYWuIvuunlCkfkDni5cxgfT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.120.0/23
185.165.50.0/23
185.225.9.0/24
194.110.239.0/24
212.104.134.0/23
212.104.138.0/23
213.254.166.0-213.254.169.255
IPv6:
2a10:9e80::/29
2a12:df40::/29
Signature Algorithm: sha256WithRSAEncryption
68:0e:0a:94:06:a5:85:1c:41:39:c6:9d:35:06:24:f9:e9:9f:
54:c9:9e:5b:62:3a:e9:b0:ae:43:86:5f:78:97:68:2a:c9:5b:
2f:fa:29:7d:f0:6d:c5:34:63:78:6c:c6:9f:35:cf:c5:35:d3:
1d:45:09:80:e9:7a:96:cf:58:14:36:fd:d3:50:fc:97:af:93:
89:f8:4a:55:8b:98:94:09:10:ac:92:31:e7:48:a2:b9:34:c5:
05:f5:16:5e:fc:a1:4e:40:23:16:88:80:be:58:08:fd:d6:ec:
f5:dc:e1:cc:6c:77:40:a9:57:55:d0:43:20:dc:22:ea:45:3c:
56:b3:77:ef:57:d0:dd:f1:e6:ba:a1:d9:88:56:bb:0f:13:5b:
e8:92:7d:c4:0e:c0:60:14:06:64:49:30:52:79:2b:d0:65:c7:
ab:ae:51:4d:b0:9b:9e:3b:41:32:dc:cd:fc:42:4b:af:f7:8e:
84:4e:7e:02:6e:3a:d5:dd:7e:5c:17:e9:f9:1d:d9:24:0d:c2:
c2:20:f7:32:86:22:29:ad:7e:22:23:ab:d1:99:59:eb:c3:b0:
db:ff:9c:3b:9c:55:e0:00:49:bc:48:5d:7b:1b:1e:ce:7f:02:
ae:8e:99:6a:cf:b9:6f:2b:5f:c4:95:38:b1:a6:7b:28:b7:27:
2d:75:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:29:02 2026 by rpki-client