Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/gqwIfeOwcdN5zJF3BMDK2dzYhXw.roa
File: gqwIfeOwcdN5zJF3BMDK2dzYhXw.roa (raw, json)
Hash identifier: 7iUUJHU3Ro9I2PuHJdPsxHdUPMeo4KXSStQJ1AA6gPo=
Subject key identifier: 82:AC:08:7D:E3:B0:71:D3:79:CC:91:77:04:C0:CA:D9:DC:D8:85:7C
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 01A0AFE74FC85D33CCB44D6F2B647CEE019A
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/gqwIfeOwcdN5zJF3BMDK2dzYhXw.roa
Signing time: Thu 17 Sep 2026 15:06:07 +0000
ROA not before: Thu 17 Sep 2026 15:06:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35199
IP address blocks: 178.219.16.0/22 maxlen: 22
185.214.67.0/24 maxlen: 24
185.226.98.0/24 maxlen: 24
193.19.164.0/22 maxlen: 22
193.19.164.0/24 maxlen: 24
193.19.165.0/24 maxlen: 24
193.19.166.0/24 maxlen: 24
193.19.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:e7:4f:c8:5d:33:cc:b4:4d:6f:2b:64:7c:ee:01:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Sep 17 15:06:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82ac087de3b071d379cc917704c0cad9dcd8857c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:83:f7:27:2c:5b:5e:55:ed:da:39:8f:74:
20:e6:bd:67:e2:d5:65:47:6e:b7:3a:e1:8d:0b:85:
ad:58:17:cf:57:b4:d0:d7:d1:34:57:3e:e2:95:1d:
82:60:a0:30:06:fd:6a:7c:14:ad:44:f4:be:9b:11:
c3:38:ee:75:f4:1f:1e:d5:97:12:32:32:5b:42:34:
46:0d:8d:86:b9:24:16:8d:f4:c5:79:64:e6:f0:dc:
82:2f:e2:95:37:4c:ca:51:72:1a:1c:a2:68:57:e5:
fb:1d:e5:67:dc:e1:43:67:5d:25:14:e2:ec:e3:f5:
77:20:da:d8:5c:7b:a4:53:bc:52:08:cb:db:63:fe:
ff:c9:ed:dc:a5:ac:82:b9:33:83:2a:2f:4d:9d:4c:
50:f3:60:de:d8:63:58:d5:ef:7b:e3:f2:29:97:52:
00:a1:cc:1b:ac:24:4e:a3:19:dd:37:30:16:33:c4:
69:df:27:34:4f:4a:fe:bd:a5:6a:8d:d0:77:ca:6b:
0f:ff:27:17:6f:7b:b6:28:fb:38:4f:60:72:0a:cd:
a7:db:f7:68:0a:0d:32:0f:72:8a:58:4c:5b:ef:6a:
4e:67:ec:dc:06:47:3c:1e:17:0c:da:f9:d1:66:da:
40:c8:dc:c2:3c:ac:ca:84:14:2e:ec:1c:6d:3c:16:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AC:08:7D:E3:B0:71:D3:79:CC:91:77:04:C0:CA:D9:DC:D8:85:7C
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/gqwIfeOwcdN5zJF3BMDK2dzYhXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.16.0/22
185.214.67.0/24
185.226.98.0/24
193.19.164.0/22
Signature Algorithm: sha256WithRSAEncryption
99:55:18:9e:8e:1b:93:2f:27:05:ef:43:68:c4:f3:bd:4b:57:
76:a1:20:da:df:e3:22:23:c9:70:60:05:b6:fa:20:57:3c:b5:
9f:92:74:4e:91:5f:15:10:55:fc:fe:b5:40:f7:57:bf:8d:8c:
5e:7d:5b:fa:39:cc:9f:30:d0:88:e6:68:5d:20:72:10:6e:21:
9d:b8:f4:e5:0b:60:8e:32:6f:ef:af:a2:3b:b0:25:54:75:fa:
49:14:01:56:41:ba:2b:b2:19:cf:02:fd:e5:90:29:a6:64:f6:
40:b1:44:ce:c4:0d:71:98:52:da:f1:56:ad:fd:e4:ce:e1:31:
7c:f4:82:b1:3c:24:4b:48:6d:a7:f5:97:df:a2:fd:db:45:81:
68:50:2f:69:60:5a:2f:ee:5e:2a:3a:50:ba:aa:04:8b:b4:12:
d9:71:47:a2:54:7f:bd:3b:ad:04:c2:e6:26:da:3c:5f:44:a6:
cf:de:0f:9f:25:78:98:2c:52:7a:48:62:43:9d:20:3b:da:ad:
69:4b:db:a5:ce:27:ee:90:bb:1c:84:35:28:31:25:f3:25:78:
9c:ad:18:79:cb:b2:36:71:9b:9c:c5:15:65:e8:9a:1c:87:ed:
b5:46:e3:7f:6d:87:1b:77:f4:ad:7d:46:58:1e:5c:35:f8:93:
a3:63:d9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:39:02 2026 by rpki-client