Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/GwvSuBhe9j3SRlsBolDRf2N0AMA.roa
File: GwvSuBhe9j3SRlsBolDRf2N0AMA.roa (raw, json)
Hash identifier: 9ZEJo3RSRRuK8gs7leiXlQt1JyVPC9+1EuL+tyIfk/I=
Subject key identifier: 1B:0B:D2:B8:18:5E:F6:3D:D2:46:5B:01:A2:50:D1:7F:63:74:00:C0
Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial: 01A013D882560E1986F0936221D6054743A9
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/GwvSuBhe9j3SRlsBolDRf2N0AMA.roa
Signing time: Tue 18 Aug 2026 07:49:11 +0000
ROA not before: Tue 18 Aug 2026 07:49:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50319
IP address blocks: 5.159.32.0/21 maxlen: 21
5.180.140.0/22 maxlen: 22
62.133.192.0/18 maxlen: 18
91.206.246.0/23 maxlen: 23
91.208.110.0/24 maxlen: 24
185.84.196.0/22 maxlen: 22
185.144.196.0/22 maxlen: 22
185.156.208.0/22 maxlen: 24
185.189.8.0/22 maxlen: 22
193.105.215.0/24 maxlen: 24
194.88.236.0/23 maxlen: 23
194.145.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:d8:82:56:0e:19:86:f0:93:62:21:d6:05:47:43:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Validity
Not Before: Aug 18 07:49:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b0bd2b8185ef63dd2465b01a250d17f637400c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:6d:1e:00:65:9e:6f:2a:40:ca:ee:48:09:
41:41:34:ca:1a:82:77:78:02:aa:ac:e4:81:6f:f2:
99:da:77:5f:a7:c1:83:56:3b:4a:c5:5a:a7:70:75:
22:ad:d6:80:aa:18:15:c7:2f:61:0c:e9:71:7c:b0:
07:ab:2d:cf:69:66:59:0f:ee:ab:6e:8b:88:56:88:
bf:b3:8d:ac:f6:a4:da:38:66:7a:78:88:83:3d:74:
11:1e:1d:32:67:2b:16:06:8e:38:9d:b2:9d:c3:63:
13:b4:65:61:6e:c2:e8:30:16:f1:ea:ae:62:cb:74:
af:53:03:fb:74:6d:12:5f:38:fa:60:ae:4d:9c:0e:
e0:d9:5a:bd:e8:03:4c:f7:1f:b1:01:9f:3f:42:cd:
59:c0:5c:cc:dc:a7:e6:5f:e2:06:d3:81:a0:ef:f0:
a4:55:6b:22:cc:55:c0:b3:81:ee:54:e2:eb:1f:75:
c1:d2:b5:3f:9c:0c:d7:4b:8c:98:a0:13:b2:d6:a8:
db:e5:58:d8:4e:16:04:05:f9:55:fc:96:70:12:21:
29:19:02:88:76:5c:f7:ba:26:e0:98:ba:54:6d:2a:
c7:30:63:c9:ca:6e:11:16:0a:56:fc:c0:03:67:9a:
7b:b0:43:f8:b0:be:0e:1c:48:77:1c:a6:7e:1b:00:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0B:D2:B8:18:5E:F6:3D:D2:46:5B:01:A2:50:D1:7F:63:74:00:C0
X509v3 Authority Key Identifier:
keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/GwvSuBhe9j3SRlsBolDRf2N0AMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.32.0/21
5.180.140.0/22
62.133.192.0/18
91.206.246.0/23
91.208.110.0/24
185.84.196.0/22
185.144.196.0/22
185.156.208.0/22
185.189.8.0/22
193.105.215.0/24
194.88.236.0/23
194.145.244.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:f0:f4:6b:3b:00:44:70:48:be:cb:ad:1f:88:83:de:ad:6a:
e8:06:2e:a8:46:02:db:ba:46:c9:68:71:aa:ed:d3:1f:68:90:
86:96:67:05:04:a2:94:33:7a:56:ee:34:9b:ca:22:fc:8e:83:
6b:6f:97:6b:1e:87:ce:8c:63:85:0a:f5:9f:c9:8a:88:14:3c:
63:d5:e4:c0:68:d8:1f:c8:bb:4c:98:ef:2d:cf:52:47:f3:3d:
25:92:9d:50:58:67:13:de:23:78:b2:c8:7a:81:df:e4:7b:79:
e1:b3:8e:c9:14:1b:d1:94:2f:49:37:86:74:69:ff:65:8d:a0:
cb:09:35:91:84:6a:55:3f:2d:78:69:29:70:6e:c0:1f:6c:da:
41:6f:cd:e7:38:32:52:30:bb:c7:c4:ce:59:15:d7:d0:1c:db:
00:dc:c9:de:22:da:c5:fc:a5:5e:50:71:df:96:58:c4:67:e9:
f4:69:fb:39:e9:96:a6:0c:a2:f2:ba:2d:6c:62:8a:6b:88:40:
9e:3b:f5:bc:39:01:41:38:8b:52:70:ed:58:27:1a:49:c0:51:
9a:34:b8:07:70:7a:91:92:f1:e5:3e:5a:a1:70:b2:b5:c7:c5:
64:72:ec:90:b9:4e:37:5c:62:cb:f2:56:14:e7:0f:67:ec:8d:
3c:6e:ec:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:59:18 2026 by rpki-client