Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/AuWKANhvxq9kHiTgy1f7DHg4G9Q.roa
File: AuWKANhvxq9kHiTgy1f7DHg4G9Q.roa (raw, json)
Hash identifier: d6Pp0aQuhZMtZL83upp5lwXAgjd29VSzR+vb2YU7l5s=
Subject key identifier: 02:E5:8A:00:D8:6F:C6:AF:64:1E:24:E0:CB:57:FB:0C:78:38:1B:D4
Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial: 019C93C0B92C2ECA872F0CDD78E8FB00F036
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/AuWKANhvxq9kHiTgy1f7DHg4G9Q.roa
Signing time: Wed 25 Feb 2026 07:43:26 +0000
ROA not before: Wed 25 Feb 2026 07:43:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41176
IP address blocks: 89.108.0.0/18 maxlen: 18
89.108.0.0/24 maxlen: 24
89.108.20.0/24 maxlen: 24
89.108.26.0/23 maxlen: 23
89.108.26.0/24 maxlen: 24
89.108.27.0/24 maxlen: 24
89.108.28.0/24 maxlen: 24
89.108.29.0/24 maxlen: 24
89.108.30.0/24 maxlen: 24
89.108.60.0/22 maxlen: 22
185.20.152.0/22 maxlen: 22
185.20.152.0/24 maxlen: 24
188.117.64.0/18 maxlen: 18
188.117.72.0/22 maxlen: 22
188.117.76.0/22 maxlen: 22
188.117.76.0/24 maxlen: 24
188.117.77.0/24 maxlen: 24
188.117.78.0/24 maxlen: 24
188.117.80.0/23 maxlen: 23
188.117.80.0/24 maxlen: 24
188.117.81.0/24 maxlen: 24
188.117.82.0/24 maxlen: 24
188.117.84.0/22 maxlen: 22
188.117.84.0/24 maxlen: 24
188.117.85.0/24 maxlen: 24
188.117.86.0/24 maxlen: 24
188.117.87.0/24 maxlen: 24
188.117.88.0/24 maxlen: 24
188.117.93.0/24 maxlen: 24
188.117.96.0/21 maxlen: 21
188.117.100.0/23 maxlen: 23
188.117.104.0/24 maxlen: 24
188.117.107.0/24 maxlen: 24
188.117.108.0/24 maxlen: 24
188.117.109.0/24 maxlen: 24
188.117.116.0/24 maxlen: 24
188.117.117.0/24 maxlen: 24
188.117.119.0/24 maxlen: 24
188.117.124.0/24 maxlen: 24
212.76.64.0/19 maxlen: 19
212.76.64.0/24 maxlen: 24
212.76.68.0/24 maxlen: 24
212.76.69.0/24 maxlen: 24
212.76.70.0/24 maxlen: 24
212.76.73.0/24 maxlen: 24
212.76.83.0/24 maxlen: 24
212.76.85.0/24 maxlen: 24
212.76.88.0/24 maxlen: 24
212.76.95.0/24 maxlen: 24
213.236.32.0/19 maxlen: 19
213.236.35.0/24 maxlen: 24
213.236.36.0/24 maxlen: 24
213.236.37.0/24 maxlen: 24
213.236.38.0/24 maxlen: 24
213.236.39.0/24 maxlen: 24
213.236.41.0/24 maxlen: 24
213.236.48.0/24 maxlen: 24
213.236.53.0/24 maxlen: 24
213.236.56.0/21 maxlen: 21
213.236.56.0/22 maxlen: 22
213.236.59.0/24 maxlen: 24
213.236.60.0/22 maxlen: 22
213.236.60.0/24 maxlen: 24
213.236.62.0/24 maxlen: 24
2a02:d70::/32 maxlen: 32
2a02:d70:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:c0:b9:2c:2e:ca:87:2f:0c:dd:78:e8:fb:00:f0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Validity
Not Before: Feb 25 07:43:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02e58a00d86fc6af641e24e0cb57fb0c78381bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:87:66:59:14:92:46:7c:75:4c:31:ed:50:
b0:bf:58:05:fb:32:1f:90:86:aa:21:56:27:8f:70:
1b:fb:01:e7:5d:9a:f8:a3:cc:c0:08:4a:ff:bd:83:
88:ee:b9:f3:69:27:1f:14:e6:fe:fd:d6:2d:7a:75:
ce:59:53:64:42:06:44:28:9d:98:2b:45:4b:fa:a0:
6c:54:4f:d9:3b:9d:8c:54:ea:fc:6b:16:e2:c6:2d:
86:2a:8a:4e:45:50:43:b2:2a:b3:e7:f9:51:d5:d6:
9d:38:e7:42:92:cf:fd:8f:83:0e:79:84:31:f0:51:
87:80:f3:5b:d1:c7:5d:9c:91:3a:11:50:30:78:79:
45:ce:c4:99:28:0f:3e:c8:c5:bb:f3:cc:b6:18:52:
8b:88:d4:21:45:0a:57:1d:99:0c:b4:99:06:62:02:
e4:e4:cc:cb:7a:98:43:30:a8:6e:9d:00:2f:c2:33:
24:bd:16:9f:fe:73:c7:22:e2:0a:38:77:66:8f:44:
f0:b9:02:de:c5:13:f7:39:f5:c4:71:9a:d4:92:10:
d0:21:78:23:19:01:02:cb:a6:be:44:b8:81:67:53:
f3:66:3f:84:1c:bf:86:96:ab:cc:1c:1d:e1:57:5d:
22:4d:a4:ec:32:d9:f7:48:7f:98:d9:44:a9:c3:65:
2d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E5:8A:00:D8:6F:C6:AF:64:1E:24:E0:CB:57:FB:0C:78:38:1B:D4
X509v3 Authority Key Identifier:
keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/AuWKANhvxq9kHiTgy1f7DHg4G9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.0.0/18
185.20.152.0/22
188.117.64.0/18
212.76.64.0/19
213.236.32.0/19
IPv6:
2a02:d70::/32
Signature Algorithm: sha256WithRSAEncryption
14:69:e0:42:57:7e:6c:d7:6a:4d:3f:1a:47:d6:e8:35:83:88:
02:6d:73:9b:70:db:a4:16:8b:04:eb:30:25:7c:44:b3:e9:d1:
c8:91:cf:f4:3b:d9:4e:8d:67:60:6a:2e:e6:0e:0d:16:a6:20:
20:a0:13:b6:b8:a6:9c:06:2a:46:6f:fc:d2:b8:c1:44:bf:0f:
de:e4:df:2f:b0:ed:c8:3f:6d:84:6c:37:31:da:7e:6e:11:d3:
ea:f0:a9:83:ba:2f:7c:0a:b3:28:2c:82:b2:88:9f:7d:34:cb:
44:ca:ad:e9:f0:14:19:73:e6:ce:9d:ef:4a:5c:22:61:29:1c:
05:29:c4:97:68:d1:06:e4:d0:99:f0:9d:47:6c:4f:1d:a0:2f:
db:25:99:36:e4:9a:7d:05:a8:04:f1:8e:1a:0f:70:58:1f:ab:
dc:40:ac:0b:ff:94:6d:b2:e6:be:f0:da:bc:92:c7:fb:ea:cc:
32:66:a9:d9:79:30:c0:d4:33:35:d7:74:01:de:a8:1b:ee:b2:
50:1f:7a:ce:37:0a:a4:9c:7b:a7:1d:66:51:3d:30:7c:8e:e6:
96:44:16:2c:cf:81:11:05:df:4a:b1:2b:50:94:82:cd:29:8e:
f5:c2:08:fd:9b:c5:45:d6:58:ee:dc:02:48:7a:54:45:ec:a0:
02:61:37:d9
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZyTwLksLsqHLwzdeOj7APA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMmE0YmZkMmMwYzY5NzY1YTgyOTllZjc0OTY1Zjg2MmE3
MTQ4YjcwHhcNMjYwMjI1MDc0MzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmU1OGEwMGQ4NmZjNmFmNjQxZTI0ZTBjYjU3ZmIwYzc4MzgxYmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskCHZlkUkkZ8dUwx7VCwv1gF+zIf
kIaqIVYnj3Ab+wHnXZr4o8zACEr/vYOI7rnzaScfFOb+/dYtenXOWVNkQgZEKJ2Y
K0VL+qBsVE/ZO52MVOr8axbixi2GKopORVBDsiqz5/lR1dadOOdCks/9j4MOeYQx
8FGHgPNb0cddnJE6EVAweHlFzsSZKA8+yMW788y2GFKLiNQhRQpXHZkMtJkGYgLk
5MzLephDMKhunQAvwjMkvRaf/nPHIuIKOHdmj0TwuQLexRP3OfXEcZrUkhDQIXgj
GQECy6a+RLiBZ1PzZj+EHL+GlqvMHB3hV10iTaTsMtn3SH+Y2USpw2UtmwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFALligDYb8avZB4k4MtX+wx4OBvUMB8GA1UdIwQY
MBaAFBoqS/0sDGl2WoKZ73SWX4YqcUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUt
YmI3MDgwMGMyYTY1LzEvQXVXS0FOaHZ4cTlrSGlUZ3kxZjdESGc0RzlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82NzdhZjgtODUzZS00OTNiLThiODUtYmI3MDgwMGMyYTY1
LzEvR2lwTF9Td01hWFphZ3BudmRKWmZoaXB4U0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQGWWwAAwQC
uRSYAwQGvHVAAwQF1ExAAwQF1ewgMA0EAgACMAcDBQAqAg1wMA0GCSqGSIb3DQEB
CwUAA4IBAQAUaeBCV35s12pNPxpH1ug1g4gCbXObcNukFosE6zAlfESz6dHIkc/0
O9lOjWdgai7mDg0WpiAgoBO2uKacBipGb/zSuMFEvw/e5N8vsO3IP22EbDcx2n5u
EdPq8KmDui98CrMoLIKyiJ99NMtEyq3p8BQZc+bOne9KXCJhKRwFKcSXaNEG5NCZ
8J1HbE8doC/bJZk25Jp9BagE8Y4aD3BYH6vcQKwL/5Rtsua+8Nq8ksf76swyZqnZ
eTDA1DM113QB3qgb7rJQH3rONwqknHunHWZRPTB8juaWRBYsz4ERBd9KsStQlILN
KY71wgj9m8VF1lju3AJIelRF7KACYTfZ
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:58:20 2026 by rpki-client