Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/GvmwU5ybeBQQwgrzkAnZjZHbldw.roa
File: GvmwU5ybeBQQwgrzkAnZjZHbldw.roa (raw, json)
Hash identifier: n0DQ3OdOkPaf8lTDpTp72e8rndz/9n9/UVG204U1n+U=
Subject key identifier: 1A:F9:B0:53:9C:9B:78:14:10:C2:0A:F3:90:09:D9:8D:91:DB:95:DC
Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Certificate serial: 01A08BDF0A2AAC026E3BB4AB0F124E50F506
Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/GvmwU5ybeBQQwgrzkAnZjZHbldw.roa
Signing time: Thu 10 Sep 2026 15:10:45 +0000
ROA not before: Thu 10 Sep 2026 15:10:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34191
IP address blocks: 5.253.8.0/22 maxlen: 24
5.253.92.0/22 maxlen: 24
185.213.32.0/22 maxlen: 22
185.213.32.0/24 maxlen: 24
185.213.33.0/24 maxlen: 24
185.213.34.0/24 maxlen: 24
194.145.239.0/24 maxlen: 24
2a0c:ed80::/29 maxlen: 29
2a0c:ed80:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:df:0a:2a:ac:02:6e:3b:b4:ab:0f:12:4e:50:f5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643
Validity
Not Before: Sep 10 15:10:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1af9b0539c9b781410c20af39009d98d91db95dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:2d:9b:5f:8b:34:69:0d:6f:e8:eb:1b:60:
21:92:6f:45:ea:b1:e2:2e:78:ec:80:ed:9e:e5:6d:
3b:c2:ad:38:c2:6e:91:fb:7f:a6:9f:e2:b2:85:e6:
60:62:c4:7c:b0:d3:17:8b:40:de:c7:8f:74:9b:ef:
5b:b7:33:2a:e7:cc:b5:17:fc:bc:54:70:11:6c:58:
1b:df:07:0a:58:a8:67:2d:11:5e:c6:8f:e4:b0:f6:
18:86:43:81:55:b6:75:14:f0:8b:39:68:40:81:35:
00:07:e5:48:2d:1a:f6:3c:02:8b:40:da:ba:10:3c:
49:26:78:34:08:3f:88:03:04:b4:34:31:df:cf:ca:
a8:d7:da:1b:d2:2e:56:22:a2:b7:ad:19:f1:ed:e6:
b3:e4:80:6a:8f:b9:b1:a8:b9:df:a9:07:45:97:16:
8d:cd:61:7a:6d:5e:99:c2:f3:da:1a:bd:d5:70:fb:
8f:93:88:81:6d:6b:6a:ed:fa:5e:82:fb:b0:af:5b:
86:96:f0:2e:79:96:4f:2c:d5:0f:db:70:b5:e5:0c:
c4:0c:19:7f:cd:6d:24:ab:41:df:43:d5:29:b8:16:
3b:d4:d8:69:f8:67:21:1a:1a:e4:23:6a:22:97:5a:
c7:ab:5c:38:f5:a4:88:9f:12:f9:78:9f:1d:5d:d7:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F9:B0:53:9C:9B:78:14:10:C2:0A:F3:90:09:D9:8D:91:DB:95:DC
X509v3 Authority Key Identifier:
keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/GvmwU5ybeBQQwgrzkAnZjZHbldw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.8.0/22
5.253.92.0/22
185.213.32.0/22
194.145.239.0/24
IPv6:
2a0c:ed80::/29
Signature Algorithm: sha256WithRSAEncryption
01:11:ee:2c:fe:89:4a:c7:cd:93:bf:ed:09:e6:8e:b8:a6:5c:
fa:0e:c4:a6:ef:9f:6e:85:e0:64:b7:ef:1d:2c:5c:09:fa:1f:
6f:3e:85:97:54:33:6f:12:57:dd:cc:28:39:e4:a4:28:9d:ae:
10:30:ed:69:c1:f1:d3:fb:e0:9b:b4:ae:9b:0c:16:22:e7:09:
1d:7a:4d:85:d6:01:a8:01:fd:3c:c6:ae:7b:16:55:68:b6:73:
dd:04:1b:4f:51:30:e1:44:35:1a:9d:16:3e:37:5e:d2:4e:f6:
4e:cb:96:23:01:26:e6:7a:f8:3f:8f:6a:1a:ba:f9:4d:29:d3:
73:6d:da:de:c2:30:1a:bc:85:de:a4:26:2d:4a:f3:40:c2:4e:
c6:86:19:99:01:52:83:3b:d5:5c:01:30:30:8a:7c:b9:a4:14:
8d:77:e7:95:cb:ab:ee:a9:b0:1b:a0:d8:e0:17:d6:2b:dd:83:
16:b6:15:6b:f0:72:2d:21:5f:49:0b:1a:0c:6f:4d:34:b6:d1:
73:49:e6:af:23:62:cd:8a:fa:f2:07:e6:22:a0:47:56:75:9d:
e4:6a:9f:95:68:36:eb:6c:2a:48:5f:91:f7:7e:0e:47:42:4f:
00:a9:1f:c6:93:3a:82:8a:45:67:1b:33:25:ca:f3:49:59:0e:
11:53:b1:b7
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAaCL3woqrAJuO7SrDxJOUPUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MTVmOWUzYzI5MDI0NzVjMjRjZDQ1YzY5Mjk5MWJjNzFm
ZjY2NDMwHhcNMjYwOTEwMTUxMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWY5YjA1MzljOWI3ODE0MTBjMjBhZjM5MDA5ZDk4ZDkxZGI5NWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPotm1+LNGkNb+jrG2Ahkm9F6rHi
LnjsgO2e5W07wq04wm6R+3+mn+KyheZgYsR8sNMXi0Dex490m+9btzMq58y1F/y8
VHARbFgb3wcKWKhnLRFexo/ksPYYhkOBVbZ1FPCLOWhAgTUAB+VILRr2PAKLQNq6
EDxJJng0CD+IAwS0NDHfz8qo19ob0i5WIqK3rRnx7eaz5IBqj7mxqLnfqQdFlxaN
zWF6bV6ZwvPaGr3VcPuPk4iBbWtq7fpegvuwr1uGlvAueZZPLNUP23C15QzEDBl/
zW0kq0HfQ9UpuBY71Nhp+GchGhrkI2oil1rHq1w49aSInxL5eJ8dXdcdKQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFBr5sFOcm3gUEMIK85AJ2Y2R25XcMB8GA1UdIwQY
MBaAFAkV+ePCkCR1wkzUXGkpkbxx/2ZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hMDgwZmMtNTQzZS00ZjYxLThmYzct
ZTMzN2JmZTAyNzliLzEvR3Ztd1U1eWJlQlFRd2dyemtBblpqWkhibGR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hMDgwZmMtNTQzZS00ZjYxLThmYzctZTMzN2JmZTAyNzli
LzEvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCBf0IAwQC
Bf1cAwQCudUgAwQAwpHvMA0EAgACMAcDBQMqDO2AMA0GCSqGSIb3DQEBCwUAA4IB
AQABEe4s/olKx82Tv+0J5o64plz6DsSm759uheBkt+8dLFwJ+h9vPoWXVDNvElfd
zCg55KQona4QMO1pwfHT++CbtK6bDBYi5wkdek2F1gGoAf08xq57FlVotnPdBBtP
UTDhRDUanRY+N17STvZOy5YjASbmevg/j2oauvlNKdNzbdrewjAavIXepCYtSvNA
wk7GhhmZAVKDO9VcATAwiny5pBSNd+eVy6vuqbAboNjgF9Yr3YMWthVr8HItIV9J
CxoMb000ttFzSeavI2LNivryB+YioEdWdZ3kap+VaDbrbCpIX5H3fg5HQk8AqR/G
kzqCikVnGzMlyvNJWQ4RU7G3
-----END CERTIFICATE-----
Generated at Wed Sep 23 15:45:00 2026 by rpki-client