Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/Gv6v2CuTYSuw1fxGRbIukftGmrE.roa
File: Gv6v2CuTYSuw1fxGRbIukftGmrE.roa (raw, json)
Hash identifier: LzIPy5gAnB2m5Fwrsrc5loi4EBJfHWamJu0+xufW+gM=
Subject key identifier: 1A:FE:AF:D8:2B:93:61:2B:B0:D5:FC:46:45:B2:2E:91:FB:46:9A:B1
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019C7CC0F72F7D82114554243130AFC9DC53
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/Gv6v2CuTYSuw1fxGRbIukftGmrE.roa
Signing time: Fri 20 Feb 2026 20:32:26 +0000
ROA not before: Fri 20 Feb 2026 20:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6700
IP address blocks: 62.108.96.0/19 maxlen: 19
62.108.103.0/24 maxlen: 24
62.108.105.0/24 maxlen: 24
62.108.107.0/24 maxlen: 24
62.193.128.0/19 maxlen: 19
91.148.64.0/18 maxlen: 18
91.148.68.0/24 maxlen: 24
91.148.72.0/24 maxlen: 24
91.223.162.0/24 maxlen: 24
178.20.205.0/24 maxlen: 24
185.47.210.0/24 maxlen: 24
194.106.160.0/19 maxlen: 19
194.106.166.0/24 maxlen: 24
194.106.170.0/24 maxlen: 24
195.252.64.0/18 maxlen: 18
213.244.232.0/21 maxlen: 21
217.26.64.0/20 maxlen: 20
2001:8c8::/32 maxlen: 32
2a02:e40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7c:c0:f7:2f:7d:82:11:45:54:24:31:30:af:c9:dc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Feb 20 20:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1afeafd82b93612bb0d5fc4645b22e91fb469ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:e0:27:8f:bc:53:37:28:70:bb:52:f0:0a:
c2:8d:16:5a:40:7b:4b:29:f6:22:69:b2:82:61:35:
f5:de:96:71:1f:39:b2:82:cd:0b:3f:8e:2e:1f:66:
27:fd:71:40:12:4b:5a:fd:79:b9:a1:a6:e0:8c:40:
90:29:6b:e8:cb:53:cd:15:ef:1b:f3:f6:38:d0:ad:
1e:ae:b1:35:a5:b6:e1:b8:7c:f3:1b:da:0a:cc:a9:
59:7c:08:bc:7b:fb:ae:7d:a9:30:3e:dd:1b:b1:08:
b7:f4:9b:b2:65:7a:06:99:33:36:f4:9a:e3:8f:ea:
19:29:7d:50:f1:c1:2f:17:03:a5:76:3b:05:01:fe:
2f:e1:03:87:7d:71:51:3c:c0:aa:f9:ac:82:b3:8d:
ee:7d:29:e1:c9:06:6a:c3:01:51:2e:81:7d:7d:cb:
97:01:f0:e0:71:29:32:91:e0:ad:50:7c:22:ac:6b:
73:db:b1:d4:d8:e0:5c:b9:d4:37:79:b8:8c:db:4b:
50:17:c3:64:53:a4:0c:08:90:c6:e5:e0:63:97:24:
b7:84:87:73:d8:da:01:b8:3a:f7:4d:89:58:28:86:
cf:25:56:b6:87:b1:1f:95:30:04:11:59:4c:37:ad:
e4:a0:fd:8b:37:93:a3:dc:86:af:c3:e4:c3:a8:30:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FE:AF:D8:2B:93:61:2B:B0:D5:FC:46:45:B2:2E:91:FB:46:9A:B1
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/Gv6v2CuTYSuw1fxGRbIukftGmrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.96.0/19
62.193.128.0/19
91.148.64.0/18
91.223.162.0/24
178.20.205.0/24
185.47.210.0/24
194.106.160.0/19
195.252.64.0/18
213.244.232.0/21
217.26.64.0/20
IPv6:
2001:8c8::/32
2a02:e40::/32
Signature Algorithm: sha256WithRSAEncryption
a4:5d:76:d7:55:f3:9c:b6:ae:b5:0f:6d:9b:58:b7:90:6f:ea:
21:14:37:d4:4e:49:3d:31:41:ba:e9:f0:08:b1:9b:45:20:41:
71:e5:9b:f6:06:39:65:54:f6:ec:a5:64:7c:89:f1:c2:a5:bc:
22:fd:3e:4d:cb:8e:f5:14:3f:7c:30:28:f9:d6:a6:86:30:ea:
59:e5:fb:e3:b1:d7:7e:c6:fa:53:4d:59:f9:8e:a3:49:f9:27:
ff:b5:55:52:5c:bc:ca:1e:89:4d:4b:71:40:4b:33:62:69:04:
47:85:9c:cb:da:5e:51:4c:80:a5:90:fc:99:d5:63:b8:d5:8e:
43:07:e2:9a:5e:9e:db:85:22:95:d8:eb:f8:4c:2b:ca:4a:d2:
d7:50:e0:e9:75:b4:d2:9f:a9:2a:5e:df:d9:5a:63:0c:18:5e:
ff:12:57:43:72:18:71:8c:12:65:0b:d8:39:27:b6:35:7b:7e:
ae:b8:1c:fc:f0:5b:32:bd:2c:b8:b1:71:6d:e4:10:34:9e:b6:
83:1f:fd:26:ee:4b:b0:d8:13:fa:b3:ff:21:17:85:21:bc:df:
d0:dc:0f:14:91:54:35:43:6f:c4:d5:4c:4f:d3:a5:1c:b3:34:
a6:35:33:87:fc:95:03:44:cc:1f:ac:ad:08:04:50:f6:d4:ab:
0d:3d:38:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:27 2026 by rpki-client