Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/GUZm33rdGDXOsknj3HgnbWbEqN4.roa
File: GUZm33rdGDXOsknj3HgnbWbEqN4.roa (raw, json)
Hash identifier: ht80KIz0+G2nRj0q3To7maN8Ww+ni+VMigXpKAyzfeU=
Subject key identifier: 19:46:66:DF:7A:DD:18:35:CE:B2:49:E3:DC:78:27:6D:66:C4:A8:DE
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D43EA8E049F1F4975B1F1CCC27F590640
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/GUZm33rdGDXOsknj3HgnbWbEqN4.roa
Signing time: Tue 31 Mar 2026 12:42:18 +0000
ROA not before: Tue 31 Mar 2026 12:42:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212667
IP address blocks: 5.182.116.0/24 maxlen: 24
45.15.255.0/24 maxlen: 24
45.86.3.0/24 maxlen: 24
45.90.44.0/24 maxlen: 24
45.90.47.0/24 maxlen: 24
45.128.130.0/23 maxlen: 23
45.128.228.0/22 maxlen: 22
46.149.174.0/24 maxlen: 24
46.174.192.0/24 maxlen: 24
46.174.193.0/24 maxlen: 24
46.174.194.0/24 maxlen: 24
46.174.195.0/24 maxlen: 24
46.174.197.0/24 maxlen: 24
46.174.199.0/24 maxlen: 24
185.253.2.0/24 maxlen: 24
188.64.140.0/24 maxlen: 24
188.93.136.0/24 maxlen: 24
195.96.141.0/24 maxlen: 24
212.18.98.0/24 maxlen: 24
212.52.13.0/24 maxlen: 24
212.60.6.0/24 maxlen: 24
212.107.24.0/24 maxlen: 24
212.115.48.0/24 maxlen: 24
212.115.50.0/24 maxlen: 24
213.166.92.0/24 maxlen: 24
213.166.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:ea:8e:04:9f:1f:49:75:b1:f1:cc:c2:7f:59:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 31 12:42:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=194666df7add1835ceb249e3dc78276d66c4a8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:c3:4b:c4:7f:d8:1b:17:88:9d:dd:6f:00:
7e:b8:53:83:f0:b5:24:8f:b5:ab:6e:e1:6a:f9:0e:
bb:9a:66:72:71:9e:10:16:95:40:a4:9e:50:e5:10:
21:89:70:90:cc:d1:4d:a1:ab:11:2e:6a:75:3f:a3:
e8:97:7a:a7:e7:58:bc:6b:53:b7:03:c4:4e:52:bc:
fc:5f:4f:dc:77:a1:5d:fb:96:12:85:5f:b3:a4:a8:
22:12:78:3c:76:1f:e6:34:a1:ec:57:30:ca:ef:5d:
d9:81:e4:4f:86:6b:1d:fc:bf:5b:b9:be:54:c2:a3:
21:ef:90:6f:fc:37:08:fe:4f:20:12:7b:df:d4:ae:
52:7d:7e:06:0c:d7:07:f8:28:5d:f0:33:ea:3e:4e:
e5:35:3c:57:99:5f:b5:a2:f5:71:38:f0:e1:fa:ac:
f9:76:75:13:1b:ba:69:93:d5:f3:f6:a5:ce:52:da:
27:0a:98:7f:e6:2f:71:79:b7:78:af:07:6b:3e:a8:
10:4b:cf:21:f4:bf:65:ae:6e:b2:ed:70:58:7b:8a:
be:fb:f8:89:d7:25:da:bb:28:da:7b:f0:29:43:c6:
4d:5f:a0:fe:39:bd:cd:9d:a5:96:e8:ec:fd:31:93:
1f:a8:27:c8:4e:2e:9b:fd:97:00:51:e5:d4:aa:2a:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:46:66:DF:7A:DD:18:35:CE:B2:49:E3:DC:78:27:6D:66:C4:A8:DE
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/GUZm33rdGDXOsknj3HgnbWbEqN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.116.0/24
45.15.255.0/24
45.86.3.0/24
45.90.44.0/24
45.90.47.0/24
45.128.130.0/23
45.128.228.0/22
46.149.174.0/24
46.174.192.0/22
46.174.197.0/24
46.174.199.0/24
185.253.2.0/24
188.64.140.0/24
188.93.136.0/24
195.96.141.0/24
212.18.98.0/24
212.52.13.0/24
212.60.6.0/24
212.107.24.0/24
212.115.48.0/24
212.115.50.0/24
213.166.92.0/24
213.166.95.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c5:18:b6:33:0c:05:57:7c:37:71:0b:2d:86:75:f3:86:83:
c8:0d:ad:d9:43:50:bd:8f:38:c8:a7:74:17:c8:ee:3b:85:a7:
d9:54:d5:9f:b3:4f:fd:25:d4:69:52:99:6e:20:31:54:c7:f2:
55:02:fb:cc:81:c4:6b:1e:8f:9e:7a:0d:78:d6:5e:de:46:50:
19:a2:b2:09:de:52:8a:b4:3f:68:3b:94:80:12:be:6d:55:ce:
63:53:ee:b3:f2:62:06:64:9d:b5:ef:35:89:8b:b4:c8:0a:6c:
34:b5:13:02:6f:2c:5c:02:c2:c1:c0:cf:eb:95:8b:3e:f4:a9:
c4:30:44:61:88:52:29:36:f2:1d:69:f6:d0:d1:8a:cd:9a:5f:
5b:45:19:b1:cc:07:1c:88:80:77:1d:27:32:46:58:19:8c:10:
ee:a3:86:09:63:41:eb:ab:cf:54:d3:66:34:ee:9f:70:e5:f6:
6a:7e:70:cd:a9:41:96:96:25:bc:b5:f3:9c:9f:8b:79:f4:fe:
1d:38:5d:b3:14:27:d0:d4:4e:a4:da:ed:de:8b:a6:48:ca:f4:
2e:df:e0:2c:37:f6:4b:bc:24:34:96:6b:bd:be:4a:6a:69:6e:
76:b5:f3:ed:26:b3:da:52:95:f9:a8:f4:8a:11:bf:e9:b1:0e:
dc:96:54:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:25 2026 by rpki-client