Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/gsyHDTvDlBa-a40MXp20PVO09Co.roa
File: gsyHDTvDlBa-a40MXp20PVO09Co.roa (raw, json)
Hash identifier: 5C4vpTeb+IFoiSfHdto5LBRKgr/ild5E9ccV5XfEhYU=
Subject key identifier: 82:CC:87:0D:3B:C3:94:16:BE:6B:8D:0C:5E:9D:B4:3D:53:B4:F4:2A
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 019EB31225BD62C7C235904F4139B86F2651
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/gsyHDTvDlBa-a40MXp20PVO09Co.roa
Signing time: Wed 10 Jun 2026 19:46:11 +0000
ROA not before: Wed 10 Jun 2026 19:46:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59651
IP address blocks: 77.243.88.0/23 maxlen: 24
77.243.91.0/24 maxlen: 24
83.143.106.0/24 maxlen: 24
178.20.213.0/24 maxlen: 24
178.20.214.0/24 maxlen: 24
185.101.20.0/23 maxlen: 24
194.26.129.0/24 maxlen: 24
194.104.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b3:12:25:bd:62:c7:c2:35:90:4f:41:39:b8:6f:26:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Jun 10 19:46:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82cc870d3bc39416be6b8d0c5e9db43d53b4f42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:9c:e4:44:7a:b3:3c:da:9a:f0:cd:88:24:
f2:8d:02:13:29:17:b5:e1:4d:a7:59:ab:45:1d:a1:
49:ac:ea:5d:06:98:a5:d7:19:72:59:8f:cb:4b:37:
b6:d8:70:cf:58:03:c2:97:6d:37:c2:9a:99:03:72:
2a:a8:7f:33:1c:d6:bc:04:e4:3c:8b:a3:88:55:3e:
ef:88:b7:e9:f9:72:8b:23:3a:4d:25:e4:41:9c:5e:
3d:47:6c:00:56:5a:9b:94:c3:95:c1:7e:13:05:61:
88:cf:87:4c:38:a6:b2:71:b6:85:18:1c:04:e0:af:
15:f3:3e:fe:9a:6b:41:7b:86:6c:29:eb:ff:4b:b6:
49:0e:1b:c8:f7:71:a8:8d:83:90:64:24:ad:5a:46:
05:00:9f:e8:a3:63:08:c0:ff:39:0e:6c:0d:e5:57:
5a:ba:bd:c1:5e:aa:48:24:69:6d:0f:a4:3c:7d:97:
ce:a6:6f:64:e8:f8:7c:e0:41:bc:bb:09:05:b0:fd:
31:ed:1f:0b:e5:4f:a6:09:f9:86:e7:93:6c:96:82:
e7:d1:81:e4:cb:6e:9d:b8:f6:58:14:9b:33:87:ed:
8d:b0:97:4f:38:4e:45:71:b8:23:e3:2d:b3:b8:b0:
be:8a:6a:c1:7f:28:0e:44:8a:e1:38:e7:c4:0f:14:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CC:87:0D:3B:C3:94:16:BE:6B:8D:0C:5E:9D:B4:3D:53:B4:F4:2A
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/gsyHDTvDlBa-a40MXp20PVO09Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.88.0/23
77.243.91.0/24
83.143.106.0/24
178.20.213.0-178.20.214.255
185.101.20.0/23
194.26.129.0/24
194.104.128.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b9:9f:02:3e:58:b2:96:84:af:b2:e3:bf:7a:f8:9b:d9:37:
cc:1f:68:e8:c4:23:00:cc:fc:1a:57:6e:4c:2f:d8:92:15:fa:
cb:30:77:47:6c:63:fd:37:e9:cd:c2:c6:56:bd:d4:1d:71:23:
cd:5a:ff:93:5e:a7:70:8f:ca:db:97:b6:99:01:ed:71:39:74:
43:ef:6a:95:d1:7c:df:c6:16:58:a5:ca:b1:68:c9:1d:82:89:
0e:49:ae:1f:61:cf:b4:66:6e:c6:81:ff:50:80:42:14:34:ff:
18:9f:88:10:4a:ac:7a:34:94:3e:c4:41:95:96:fb:d9:c9:f9:
df:9d:c8:97:82:b7:12:d7:16:25:8a:4b:d2:7e:0a:49:2e:67:
92:f5:ff:0a:df:e9:6e:90:b7:d7:30:0a:f6:c1:89:05:8f:30:
ca:ac:d2:19:e5:b9:8d:8d:d5:25:be:3b:6e:a9:df:9d:22:1f:
49:ca:c6:34:37:a7:35:22:e4:71:45:b5:86:f7:d9:1d:f9:ab:
6b:2b:b4:29:c1:77:17:fb:74:10:15:8c:04:10:0d:1f:f2:4a:
50:29:f5:e5:c6:2e:c4:18:12:cc:c6:33:4c:47:c6:d4:82:3e:
11:b7:f9:20:4d:b5:5e:5b:89:9a:2b:b8:da:ba:bc:4a:ee:7e:
83:8e:de:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:42:50 2026 by rpki-client