Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/G3z5_riCx-9NElyDLCTzic-OHks.roa
File: G3z5_riCx-9NElyDLCTzic-OHks.roa (raw, json)
Hash identifier: KYeBiIlwwt7l/LBpmLowyxhBKROmp3JbuvO4NX9DZbc=
Subject key identifier: 1B:7C:F9:FE:B8:82:C7:EF:4D:12:5C:83:2C:24:F3:89:CF:8E:1E:4B
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FA8BE5A712D8F088D69FE93AAE5ABA0F1
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/G3z5_riCx-9NElyDLCTzic-OHks.roa
Signing time: Tue 28 Jul 2026 12:41:15 +0000
ROA not before: Tue 28 Jul 2026 12:41:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 37.252.25.0/24 maxlen: 24
81.168.20.0/24 maxlen: 24
81.168.99.0/24 maxlen: 24
81.168.120.0/24 maxlen: 24
82.152.1.0/24 maxlen: 24
82.152.3.0/24 maxlen: 24
82.152.128.0/24 maxlen: 24
82.152.136.0/24 maxlen: 24
82.152.233.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
109.176.200.0/24 maxlen: 24
213.130.155.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:be:5a:71:2d:8f:08:8d:69:fe:93:aa:e5:ab:a0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 28 12:41:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b7cf9feb882c7ef4d125c832c24f389cf8e1e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:5f:02:b0:d9:50:72:4c:22:35:a7:c9:07:
f9:9c:b2:4d:5d:64:65:bb:0b:30:37:84:34:08:ee:
77:6e:2b:d4:44:b7:4b:5e:30:1d:ad:00:c1:f1:8b:
cd:15:d6:0d:44:04:61:0d:ee:3b:11:44:ae:6e:26:
8f:a8:1e:78:bc:a0:69:33:26:df:f8:82:b2:47:fa:
b0:e6:4c:b4:f3:9a:b5:17:e5:b0:22:f3:ed:af:1d:
1e:ed:a2:b1:c6:81:13:09:82:b8:6d:f9:e8:eb:f2:
05:f4:48:8d:17:b7:dd:c8:0d:3e:a4:c5:0d:dd:a2:
c7:7e:4e:f7:46:5f:dc:62:af:93:ba:02:64:65:36:
15:6d:9c:21:a5:6b:22:93:10:34:15:88:6a:ce:8a:
e5:43:95:6e:bc:cd:12:6d:e9:8e:8b:13:3e:51:4f:
e5:3b:a4:69:4e:bd:28:cb:5e:7f:2e:ca:d7:ca:68:
7a:c2:7f:f4:c6:2e:f4:13:3a:28:98:8a:3c:f1:92:
2d:6c:ef:1b:2c:f3:f2:5b:15:8f:95:a0:33:51:f8:
18:ec:af:19:5d:ef:af:94:44:83:a9:5f:ff:b9:51:
1e:8a:fa:8c:a0:29:5f:2c:3f:c8:f9:48:ca:85:0e:
1a:72:8b:46:cc:86:74:b3:ff:25:0b:1b:6c:66:b6:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7C:F9:FE:B8:82:C7:EF:4D:12:5C:83:2C:24:F3:89:CF:8E:1E:4B
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/G3z5_riCx-9NElyDLCTzic-OHks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.25.0/24
81.168.20.0/24
81.168.99.0/24
81.168.120.0/24
82.152.1.0/24
82.152.3.0/24
82.152.128.0/24
82.152.136.0/24
82.152.233.0/24
82.153.72.0/24
109.176.200.0/24
213.130.155.0/24
213.218.213.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f7:21:63:19:1e:60:62:ed:64:b4:c8:83:e4:78:dd:f1:31:
19:66:7e:f0:86:0f:1c:c4:1a:e9:c2:71:46:ef:d8:b1:21:56:
2b:a6:a4:62:ae:4a:4c:2b:be:15:85:24:53:59:73:9b:09:f3:
ce:3e:28:46:85:22:d2:d1:d9:eb:e3:e0:9d:e1:9d:53:1d:bd:
de:07:bd:a2:51:30:78:7c:8e:95:17:bb:6b:d0:1d:c4:ff:c2:
33:c1:2c:7f:74:91:dd:9a:ea:33:e8:9e:d6:1f:e9:29:24:a1:
96:23:aa:06:a7:8d:78:de:b3:09:2e:01:22:a5:01:ed:f4:34:
b2:8c:96:38:6f:29:08:53:6f:71:8f:cc:19:cb:b1:c2:07:ed:
b9:84:a4:ef:e2:b7:4c:42:14:8a:3d:a7:1f:75:52:cb:a4:1f:
3e:9d:eb:ff:8a:90:4d:86:7d:b9:fd:42:ad:46:1f:f9:68:b3:
18:ac:33:35:a3:12:0a:53:f7:b5:5c:2d:b6:74:80:2b:b7:cb:
07:1e:2c:ab:90:16:34:de:52:bd:d5:15:ef:f3:31:e7:fe:fc:
a6:44:68:ca:74:bd:7d:47:a1:c5:2a:1d:43:73:dc:f7:ce:86:
d1:cb:eb:f6:e9:31:3f:43:3c:89:af:4b:75:35:59:f8:77:ce:
5b:f3:2c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:47 2026 by rpki-client