Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/_GZsTaYtf6eqAppmdh6ZDxD7Hkk.roa
File: _GZsTaYtf6eqAppmdh6ZDxD7Hkk.roa (raw, json)
Hash identifier: DIdXsDDv58Wrc/uyJjH4ZMd/VEHNxyJG9yJsNZC5inA=
Subject key identifier: FC:66:6C:4D:A6:2D:7F:A7:AA:02:9A:66:76:1E:99:0F:10:FB:1E:49
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 019F75720469934B4DC824B262212AFCAB14
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/_GZsTaYtf6eqAppmdh6ZDxD7Hkk.roa
Signing time: Sat 18 Jul 2026 13:37:14 +0000
ROA not before: Sat 18 Jul 2026 13:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 89.36.174.0/24 maxlen: 24
89.44.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:72:04:69:93:4b:4d:c8:24:b2:62:21:2a:fc:ab:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jul 18 13:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc666c4da62d7fa7aa029a66761e990f10fb1e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:9d:3d:ad:05:11:d4:52:52:f4:a1:25:ba:
66:38:c5:5f:59:aa:e5:b9:ab:cc:8d:d6:67:6a:83:
ad:48:22:4e:98:1e:92:96:24:35:80:98:17:5d:6c:
41:7c:5c:9d:00:c6:34:1c:bd:57:8c:e0:f1:cb:df:
87:75:69:ba:9f:95:d2:9a:11:63:10:1f:2e:ff:fe:
d3:93:af:7e:67:a6:f5:b7:78:72:f0:cf:31:3b:9a:
eb:c5:ea:5b:f7:29:57:2c:55:a5:15:0e:1b:8e:ec:
aa:29:bd:1c:0f:a0:59:72:d3:3f:72:c1:2d:8f:b3:
9a:7e:bb:5a:ec:36:dd:12:68:18:e9:2e:88:27:a3:
e3:0f:90:1f:2b:f6:e3:63:6c:3b:e8:a2:b7:46:79:
74:a3:18:2b:a6:d0:b0:44:d2:a5:92:fe:46:f1:55:
ab:17:b9:09:91:af:18:1a:e0:36:85:15:91:55:1a:
61:4d:f6:29:84:a1:7f:d7:4f:d4:d0:3b:90:bf:90:
14:bc:da:37:58:64:f3:a4:56:b5:6b:25:26:08:ab:
69:4e:03:52:cd:f3:e6:a9:66:f0:76:9b:da:c7:ad:
cb:c9:1d:2d:3c:44:e1:db:05:84:38:d7:09:6e:5c:
04:91:62:d3:f2:70:ea:27:97:0d:f7:3d:99:74:db:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:66:6C:4D:A6:2D:7F:A7:AA:02:9A:66:76:1E:99:0F:10:FB:1E:49
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/_GZsTaYtf6eqAppmdh6ZDxD7Hkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.174.0/24
89.44.81.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b6:cf:c7:aa:6d:20:60:b7:34:e2:87:5c:26:ff:66:b3:ff:
34:a1:62:e7:bb:e7:ec:fd:8d:a7:cd:33:df:9e:5a:89:7b:c5:
a1:19:3b:0d:85:cb:04:f8:8d:6b:6d:9f:a7:ac:82:64:d9:30:
10:a2:14:9b:6c:34:05:7f:34:b5:fa:2d:78:a6:9a:30:b5:69:
8a:80:95:06:96:59:85:fe:12:23:51:47:e4:3c:d5:47:de:7c:
41:c9:94:e3:28:f6:03:e2:cc:3d:66:8f:f6:8d:1e:1d:48:e7:
9a:a7:ee:9c:1c:46:14:74:b2:a9:9c:31:78:c2:d2:2f:98:e8:
f4:f7:3a:48:be:91:07:17:a7:b6:0c:b1:ac:27:28:3c:8a:96:
c5:14:7c:d5:83:16:47:9b:3e:61:b2:92:21:f3:30:c1:9e:24:
b1:e5:f2:97:22:c6:be:b4:5c:f3:7a:50:a3:da:36:9b:35:55:
3c:e8:13:b2:bd:d0:01:f2:de:fa:4e:7b:b7:38:4f:8b:fc:76:
da:94:50:70:e8:b8:b3:97:e3:ec:83:bb:30:fb:25:c5:71:74:
16:d0:66:9b:7b:9b:74:6f:e6:2c:84:93:3b:c8:3e:36:c6:30:
a1:1b:38:81:5a:17:bf:3d:01:cc:47:90:c0:9c:15:3c:7c:63:
d5:3c:87:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:38 2026 by rpki-client