Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/gstfN1CdXYKHRvNJY7OLvMoj95I.roa
File: gstfN1CdXYKHRvNJY7OLvMoj95I.roa (raw, json)
Hash identifier: RsGc6ily3XWO8+UVCnb7HtnGAhllPeS8XhbvQTQW7ko=
Subject key identifier: 82:CB:5F:37:50:9D:5D:82:87:46:F3:49:63:B3:8B:BC:CA:23:F7:92
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 019D48CFFE9FC5CF7CA0BBA1F0B16EBDC150
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/gstfN1CdXYKHRvNJY7OLvMoj95I.roa
Signing time: Wed 01 Apr 2026 11:31:23 +0000
ROA not before: Wed 01 Apr 2026 11:31:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 212.180.3.0/24 maxlen: 24
212.180.4.0/24 maxlen: 24
212.180.12.0/22 maxlen: 22
212.180.22.0/24 maxlen: 24
212.180.26.0/24 maxlen: 24
212.180.29.0/24 maxlen: 24
212.180.37.0/24 maxlen: 24
212.180.44.0/24 maxlen: 24
212.180.46.0/23 maxlen: 23
212.180.64.0/20 maxlen: 20
212.180.84.0/24 maxlen: 24
212.180.94.0/24 maxlen: 24
212.180.96.0/22 maxlen: 22
212.180.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:cf:fe:9f:c5:cf:7c:a0:bb:a1:f0:b1:6e:bd:c1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Apr 1 11:31:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82cb5f37509d5d828746f34963b38bbcca23f792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:55:a4:37:cc:80:ce:6c:e3:e7:eb:f9:c3:
b0:41:12:9d:52:89:1b:2b:a2:2f:61:03:05:a0:5a:
46:67:7f:30:db:8c:00:96:bf:58:d1:d5:eb:00:d9:
f6:06:33:19:19:ee:ed:1c:d8:4d:94:03:f2:0c:b2:
35:89:73:f2:dd:c6:51:c6:9b:84:44:e9:fd:ab:65:
59:fc:5e:38:f5:01:1e:b1:13:8f:e5:32:0a:7e:06:
58:a8:40:b8:f9:00:4b:c7:89:16:58:6d:91:40:03:
0c:a3:b0:f7:7b:64:3a:cc:10:c4:1e:38:e2:a3:e8:
b8:9c:aa:24:b9:74:b1:a5:f7:3a:f6:72:07:28:12:
8b:c6:87:14:88:84:82:e4:32:d5:b1:28:66:85:32:
e8:79:61:85:b2:49:9c:0f:f9:ab:d8:2e:9b:66:23:
1d:ee:5a:7f:07:23:36:1a:1f:00:79:15:56:3e:9a:
8b:fe:5d:4a:65:89:c4:01:fe:0f:47:78:7e:d2:00:
24:af:d3:14:64:36:9e:7c:b0:8e:11:29:ee:fa:2b:
d9:cf:6f:1d:13:64:cd:ea:29:1b:50:71:f5:6d:2b:
dc:3b:39:37:84:d4:1e:ec:1b:a3:cd:fb:29:d2:72:
da:4c:4c:f1:9d:58:02:26:f2:c1:d6:dc:d9:68:49:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CB:5F:37:50:9D:5D:82:87:46:F3:49:63:B3:8B:BC:CA:23:F7:92
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/gstfN1CdXYKHRvNJY7OLvMoj95I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.180.3.0-212.180.4.255
212.180.12.0/22
212.180.22.0/24
212.180.26.0/24
212.180.29.0/24
212.180.37.0/24
212.180.44.0/24
212.180.46.0/23
212.180.64.0/20
212.180.84.0/24
212.180.94.0/24
212.180.96.0/22
212.180.101.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a2:1f:e9:f7:e4:49:fc:21:6e:47:ac:d2:5b:05:6b:41:ae:
79:be:13:f1:30:33:f2:64:a8:58:ac:8e:10:4c:f8:56:9c:6a:
5e:43:0c:e4:2a:54:3e:36:92:ca:d6:50:d0:d9:df:f8:43:fd:
b3:26:f1:ee:5d:1c:97:dd:42:e0:28:ca:92:6d:95:4a:bd:b4:
b7:ef:bb:0c:2f:72:5d:0c:ca:55:98:42:3f:cd:30:56:4e:97:
0d:58:58:b4:df:83:6f:b0:3d:76:8d:89:b8:f2:f2:2b:72:b6:
f8:b9:79:09:6b:11:53:a9:21:ee:8a:67:97:61:9b:e0:fb:05:
4b:85:68:ed:57:15:e1:96:a2:89:d9:4c:43:e6:69:23:0f:af:
71:15:cc:c5:20:83:ff:08:d4:3e:94:6d:44:09:e0:06:14:e8:
f9:e6:dd:42:a4:9f:fe:c5:9b:fb:f1:9f:c6:52:fb:12:a3:ed:
6e:c4:6a:3b:e9:73:92:eb:a5:18:8e:c2:dc:5d:90:47:bd:9f:
5e:f2:be:93:a2:1b:13:03:9a:9a:65:be:e4:94:f0:54:b9:b3:
b4:12:eb:6f:43:27:1b:15:2d:58:1f:65:4b:e5:45:9f:11:90:
6a:10:5f:79:9e:1e:2e:e1:12:68:07:57:2e:30:12:57:54:73:
90:a0:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:55 2026 by rpki-client