Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/tozN0BmKxzh-d2PoS7WM5NumZUs.roa
File: tozN0BmKxzh-d2PoS7WM5NumZUs.roa (raw, json)
Hash identifier: igaxKATloUF6Wl144t7aCIytgxZ941Do3nC3+S/sCis=
Subject key identifier: B6:8C:CD:D0:19:8A:C7:38:7E:77:63:E8:4B:B5:8C:E4:DB:A6:65:4B
Certificate issuer: /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial: 019D5C204F7E3320F5BB12BD9CEEF12C28C3
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/tozN0BmKxzh-d2PoS7WM5NumZUs.roa
Signing time: Sun 05 Apr 2026 05:31:54 +0000
ROA not before: Sun 05 Apr 2026 05:31:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41176
IP address blocks: 89.108.0.0/18 maxlen: 18
89.108.0.0/22 maxlen: 22
89.108.0.0/24 maxlen: 24
89.108.20.0/22 maxlen: 22
89.108.20.0/24 maxlen: 24
89.108.26.0/23 maxlen: 23
89.108.26.0/24 maxlen: 24
89.108.27.0/24 maxlen: 24
89.108.28.0/23 maxlen: 23
89.108.28.0/24 maxlen: 24
89.108.29.0/24 maxlen: 24
89.108.30.0/24 maxlen: 24
89.108.60.0/22 maxlen: 22
185.20.152.0/22 maxlen: 22
185.20.152.0/24 maxlen: 24
188.117.64.0/18 maxlen: 18
188.117.72.0/22 maxlen: 22
188.117.76.0/22 maxlen: 22
188.117.76.0/24 maxlen: 24
188.117.77.0/24 maxlen: 24
188.117.78.0/24 maxlen: 24
188.117.80.0/23 maxlen: 23
188.117.80.0/24 maxlen: 24
188.117.81.0/24 maxlen: 24
188.117.82.0/24 maxlen: 24
188.117.84.0/22 maxlen: 22
188.117.84.0/24 maxlen: 24
188.117.85.0/24 maxlen: 24
188.117.86.0/24 maxlen: 24
188.117.87.0/24 maxlen: 24
188.117.88.0/24 maxlen: 24
188.117.93.0/24 maxlen: 24
188.117.96.0/21 maxlen: 21
188.117.100.0/23 maxlen: 23
188.117.104.0/24 maxlen: 24
188.117.107.0/24 maxlen: 24
188.117.108.0/24 maxlen: 24
188.117.109.0/24 maxlen: 24
188.117.116.0/24 maxlen: 24
188.117.117.0/24 maxlen: 24
188.117.119.0/24 maxlen: 24
188.117.124.0/24 maxlen: 24
212.76.64.0/19 maxlen: 19
212.76.64.0/24 maxlen: 24
212.76.68.0/24 maxlen: 24
212.76.69.0/24 maxlen: 24
212.76.70.0/24 maxlen: 24
212.76.73.0/24 maxlen: 24
212.76.83.0/24 maxlen: 24
212.76.85.0/24 maxlen: 24
212.76.88.0/24 maxlen: 24
212.76.95.0/24 maxlen: 24
213.236.32.0/19 maxlen: 19
213.236.35.0/24 maxlen: 24
213.236.36.0/24 maxlen: 24
213.236.37.0/24 maxlen: 24
213.236.38.0/24 maxlen: 24
213.236.39.0/24 maxlen: 24
213.236.41.0/24 maxlen: 24
213.236.48.0/24 maxlen: 24
213.236.53.0/24 maxlen: 24
213.236.56.0/21 maxlen: 21
213.236.56.0/22 maxlen: 22
213.236.59.0/24 maxlen: 24
213.236.60.0/22 maxlen: 22
213.236.60.0/24 maxlen: 24
213.236.62.0/24 maxlen: 24
2a02:d70::/32 maxlen: 32
2a02:d70:5::/48 maxlen: 48
2a02:d70:20::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5c:20:4f:7e:33:20:f5:bb:12:bd:9c:ee:f1:2c:28:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Validity
Not Before: Apr 5 05:31:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b68ccdd0198ac7387e7763e84bb58ce4dba6654b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:0f:dc:af:db:3f:8c:04:a9:d6:55:36:d1:
11:b5:c8:33:a4:43:74:36:da:55:48:e0:7c:2d:5c:
af:a3:24:c4:27:b1:42:52:97:9b:14:57:bb:9b:4b:
14:f8:43:4e:ea:58:dd:1d:4e:5c:58:bc:cc:e7:38:
cb:71:77:de:38:7d:d6:aa:e7:94:35:ca:ce:b8:f5:
af:90:2b:4e:1b:78:dc:75:3a:6d:1e:ca:e7:d8:a7:
00:57:60:72:f5:ba:8d:d3:d7:fc:19:ec:7a:b1:fc:
08:15:67:31:28:fa:6a:75:d9:b1:e5:df:ec:ed:09:
13:ff:62:7f:52:97:25:c1:c9:02:d9:40:07:ab:e4:
e9:fc:ef:ab:db:47:f4:aa:e1:b2:50:9c:a1:ab:27:
7b:f8:2f:f5:87:13:0d:83:c8:ec:94:56:53:df:eb:
0f:26:e4:55:46:b5:4e:d5:b2:f1:97:ef:38:eb:d2:
27:7e:58:75:01:25:55:92:5c:fd:be:ef:d8:2c:d4:
d5:49:f1:5d:50:e0:51:cd:9b:fd:3f:6f:97:70:98:
45:84:2a:12:ad:ad:0e:23:03:3d:65:b0:0b:b0:fb:
87:9d:0d:40:0b:8a:d2:f7:fd:82:18:ba:39:15:fa:
2f:a0:7d:85:4f:67:14:2b:55:b8:16:4a:6a:e7:6e:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8C:CD:D0:19:8A:C7:38:7E:77:63:E8:4B:B5:8C:E4:DB:A6:65:4B
X509v3 Authority Key Identifier:
keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/tozN0BmKxzh-d2PoS7WM5NumZUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.108.0.0/18
185.20.152.0/22
188.117.64.0/18
212.76.64.0/19
213.236.32.0/19
IPv6:
2a02:d70::/32
Signature Algorithm: sha256WithRSAEncryption
7e:c8:53:45:5d:16:ed:60:36:3e:3e:7c:21:fc:24:b1:9e:ea:
9d:c6:d6:5c:69:52:e8:69:54:b3:10:4e:96:e9:2c:81:d9:96:
f3:5e:04:31:60:cf:a7:c8:33:ac:68:33:71:ac:78:8d:16:38:
9c:55:f1:d3:a0:6d:52:cb:40:66:6c:dd:6b:08:d0:5f:96:35:
61:b8:c3:e7:cb:a3:8e:8b:73:37:68:fa:7e:4b:8a:a3:a6:02:
78:47:0c:13:98:7f:c6:2b:04:e8:83:0a:81:2f:27:5d:92:9e:
5d:d3:ce:a4:86:51:86:d1:d4:45:9a:48:6e:04:de:aa:5f:74:
94:07:2b:e1:e8:f0:d2:07:b6:79:25:70:65:fd:5f:60:aa:62:
84:9a:02:e5:48:79:9a:51:c3:1e:4f:cd:4a:95:18:ff:02:25:
e2:fc:17:96:8a:45:b0:d8:fe:7c:41:6c:38:fd:b4:b2:1c:27:
f9:cc:32:df:a8:2f:12:36:6c:a7:7e:ec:b3:7a:fe:95:df:e7:
25:6c:45:5f:07:6c:ce:7e:9c:f9:a6:15:ed:41:df:76:ca:01:
08:d4:25:59:81:9e:4f:05:8f:5f:64:4e:44:77:da:a6:02:32:
fb:f1:85:94:38:69:9b:c8:63:6d:ed:d9:8a:c7:d6:2a:7f:b5:
11:41:a8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:57:17 2026 by rpki-client