Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gNUzC-8S-ahlTGiVuV-SsxN8eiQ.roa
File: gNUzC-8S-ahlTGiVuV-SsxN8eiQ.roa (raw, json)
Hash identifier: 2TyES+M+Id3HW0dLNRyVMDRy5XXee8zrFr+BD3blNCM=
Subject key identifier: 80:D5:33:0B:EF:12:F9:A8:65:4C:68:95:B9:5F:92:B3:13:7C:7A:24
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019CD26970A69C848C90BBB2BB9C493A649F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gNUzC-8S-ahlTGiVuV-SsxN8eiQ.roa
Signing time: Mon 09 Mar 2026 11:44:11 +0000
ROA not before: Mon 09 Mar 2026 11:44:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6718
IP address blocks: 80.96.42.0/24 maxlen: 24
80.97.49.0/24 maxlen: 24
81.180.207.0/24 maxlen: 24
85.120.222.0/24 maxlen: 24
85.120.223.0/24 maxlen: 24
85.120.228.0/24 maxlen: 24
85.120.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:69:70:a6:9c:84:8c:90:bb:b2:bb:9c:49:3a:64:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 9 11:44:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80d5330bef12f9a8654c6895b95f92b3137c7a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4e:7d:47:c0:a5:90:cd:9d:32:d2:a2:6f:7b:
0d:18:b1:8a:6a:94:c0:4e:ca:13:69:28:1e:78:6d:
37:a5:13:9b:42:5c:65:35:b7:b1:36:82:c0:0b:18:
78:e2:d4:7d:75:59:9e:52:28:4b:f8:d1:6d:03:d1:
a1:67:a8:70:91:2d:31:1e:6b:a8:13:af:c6:ff:93:
35:47:2c:74:4e:3c:63:0c:f4:0a:2b:84:8a:a6:42:
9c:52:e0:d5:9f:a9:d8:1c:96:67:ee:fe:84:e0:5a:
7e:e6:f8:cd:b7:b1:6b:c5:0d:d4:65:24:13:98:90:
0e:fd:b9:ff:bc:fa:53:a8:36:d9:78:e0:59:55:d4:
79:5e:fc:6a:5a:93:29:ac:ae:b9:68:41:c5:5e:d7:
9c:63:8d:11:b1:9c:ce:0e:6f:39:63:b2:fd:c1:ae:
4d:6d:65:3f:53:aa:ad:23:4c:2a:c9:f7:7b:8a:21:
42:61:56:fc:9d:67:57:dd:91:14:6e:fd:46:41:4a:
45:c1:59:e8:09:35:03:6e:98:45:e9:e7:a2:62:ea:
d8:d1:6d:1c:88:e9:5d:ee:05:ea:b9:2f:42:91:60:
2b:b4:98:21:f6:6f:ad:ee:3e:e4:c2:70:e5:6f:7e:
fd:47:95:f2:d7:df:82:86:7e:da:c2:ce:c1:84:82:
25:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D5:33:0B:EF:12:F9:A8:65:4C:68:95:B9:5F:92:B3:13:7C:7A:24
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gNUzC-8S-ahlTGiVuV-SsxN8eiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.42.0/24
80.97.49.0/24
81.180.207.0/24
85.120.222.0/23
85.120.228.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:29:f8:09:98:ce:50:92:51:25:62:d4:f8:23:5b:68:e0:84:
ef:17:ca:01:3c:95:2e:3d:86:a0:02:a5:77:76:65:c2:b4:ca:
18:f4:d0:46:36:3c:0e:18:4c:0c:03:8d:8a:ac:36:2f:0b:b5:
79:d2:32:66:3a:33:9f:7f:15:a3:81:36:fc:72:6c:25:8a:47:
88:68:cf:1c:9d:3d:79:a7:23:70:81:1f:d1:44:58:46:23:43:
41:70:16:77:29:7c:3e:86:c5:8f:04:82:ad:b5:a2:7b:43:98:
71:e6:61:12:2a:be:92:f8:cb:9c:32:2a:79:c3:a1:5d:f6:dc:
e9:26:1f:93:56:73:e0:be:c8:f2:6a:0e:9f:75:76:54:f5:86:
4c:61:a2:32:a3:10:2b:67:88:dc:2b:b1:25:4b:2a:c5:8b:2d:
98:f7:33:5e:6a:4d:4f:7c:99:56:f9:3b:a2:6c:91:d8:8a:40:
66:d0:8b:40:13:bc:41:0f:74:08:4c:14:57:50:5a:92:ac:0e:
a7:08:cb:a3:59:4c:6a:ea:d3:8c:8b:3c:e3:e4:70:91:4c:95:
c4:06:b5:55:83:98:6b:20:1a:e3:26:fa:c7:e3:ac:4a:00:35:
e7:e2:0f:b6:fa:3f:d7:c8:3a:98:c6:b2:87:08:c8:76:81:cc:
ec:e9:e6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:19:36 2026 by rpki-client