Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/GzPJnqIG6A5EWQF6v7XbXinIuO4.roa
File: GzPJnqIG6A5EWQF6v7XbXinIuO4.roa (raw, json)
Hash identifier: ry+kZtQi5+vrbk5NOXxNrEiG2sBCXq7s1qmrG+0XYu4=
Subject key identifier: 1B:33:C9:9E:A2:06:E8:0E:44:59:01:7A:BF:B5:DB:5E:29:C8:B8:EE
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0D86ECAA816BA879317D482121FDFC797
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/GzPJnqIG6A5EWQF6v7XbXinIuO4.roa
Signing time: Fri 25 Sep 2026 11:58:54 +0000
ROA not before: Fri 25 Sep 2026 11:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29262
IP address blocks: 62.182.32.0/24 maxlen: 24
62.182.33.0/24 maxlen: 24
62.182.34.0/24 maxlen: 24
62.182.35.0/24 maxlen: 24
77.241.72.0/24 maxlen: 24
77.241.73.0/24 maxlen: 24
77.241.74.0/24 maxlen: 24
77.241.75.0/24 maxlen: 24
85.8.156.0/24 maxlen: 24
85.8.157.0/24 maxlen: 24
85.8.158.0/24 maxlen: 24
85.8.159.0/24 maxlen: 24
85.8.160.0/24 maxlen: 24
85.8.161.0/24 maxlen: 24
85.8.162.0/24 maxlen: 24
85.8.163.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
139.28.32.0/24 maxlen: 24
139.28.33.0/24 maxlen: 24
139.28.34.0/24 maxlen: 24
139.28.35.0/24 maxlen: 24
141.98.112.0/24 maxlen: 24
193.17.4.0/24 maxlen: 24
193.17.7.0/24 maxlen: 24
194.169.92.0/24 maxlen: 24
194.169.93.0/24 maxlen: 24
194.169.94.0/24 maxlen: 24
194.169.95.0/24 maxlen: 24
2a02:f240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:6e:ca:a8:16:ba:87:93:17:d4:82:12:1f:df:c7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 25 11:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b33c99ea206e80e4459017abfb5db5e29c8b8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:88:c5:7b:89:78:a9:d2:67:c3:da:94:df:
62:7c:3b:ef:db:ab:ac:ea:c1:17:42:09:17:6c:30:
c2:e4:9c:9d:e8:9a:91:8b:d1:1b:79:30:b5:30:53:
9a:ee:e2:68:4f:ea:6f:66:c9:37:ed:25:00:e3:a2:
37:a3:a6:89:b0:56:5e:9c:0c:62:4e:a4:f1:b7:2c:
9d:ae:60:b3:ac:ce:c4:ba:e5:81:69:22:7e:e9:83:
cc:0f:0b:43:c6:b4:2c:02:c5:14:1c:2c:25:7c:4d:
bc:18:c7:82:4f:7c:e0:fd:1c:ef:07:32:d1:29:07:
7f:2a:cc:56:85:75:44:6c:2b:9a:27:bf:f1:a4:bb:
e2:68:13:34:72:4f:6e:80:52:65:be:87:55:c5:69:
09:d5:f1:6f:d5:57:56:8c:38:3b:71:d7:47:d8:34:
d1:a1:45:de:d6:d9:23:bf:f5:0b:5a:36:c7:4d:77:
82:58:1c:e2:a2:df:4e:7c:f5:16:32:17:91:ec:4e:
83:49:ba:31:d9:73:c6:f2:6a:66:05:35:4a:b0:b5:
da:1f:9e:66:71:2c:48:83:92:74:cc:d1:f6:2c:b3:
67:b2:c1:44:9c:87:fa:c3:58:d5:a5:a3:f3:3f:ac:
be:b9:0f:d4:d1:05:ac:0b:3a:30:c1:08:7b:76:8e:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:33:C9:9E:A2:06:E8:0E:44:59:01:7A:BF:B5:DB:5E:29:C8:B8:EE
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/GzPJnqIG6A5EWQF6v7XbXinIuO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.32.0/22
77.241.72.0/22
85.8.156.0-85.8.163.255
93.190.10.0/23
139.28.32.0/22
141.98.112.0/24
193.17.4.0/24
193.17.7.0/24
194.169.92.0/22
IPv6:
2a02:f240::/29
Signature Algorithm: sha256WithRSAEncryption
01:c3:b5:58:72:28:32:f5:b7:96:57:f0:e4:d5:3d:84:6e:5e:
be:6e:c6:6a:15:b9:86:4a:be:cb:91:56:55:b4:4b:f4:a4:18:
fc:e2:6d:a6:fc:3d:95:d3:99:45:a7:60:51:b9:94:d3:74:9e:
37:21:5f:d4:b2:f1:63:92:68:ae:b4:48:67:94:11:80:fe:10:
cc:7d:5f:c8:72:6d:e9:a5:f9:85:60:80:09:0e:51:94:21:04:
73:8d:04:f7:ca:9a:4e:a1:a9:54:a2:23:1f:17:d4:e7:e6:77:
3d:a9:6f:6c:f6:f1:73:40:49:e3:b3:55:2a:9a:ec:f6:bc:16:
de:e2:f8:da:ff:73:69:bc:76:12:0b:41:00:8f:10:ae:73:d5:
5a:71:03:a0:5f:f8:6f:27:47:c0:74:a3:8e:95:74:5c:21:76:
5d:f3:d6:61:34:3d:f0:65:30:f9:ed:6f:14:17:cd:90:36:69:
e3:db:2c:66:b9:aa:2f:57:81:67:5f:25:6b:11:40:0f:8d:4a:
7c:a9:8f:a9:25:45:2c:33:5c:18:51:cd:da:04:8f:2f:dd:ce:
ba:52:82:53:60:70:c2:f6:2f:f9:e0:b8:a2:a1:32:89:3c:9e:
bf:61:d7:d5:7b:cd:e2:ef:1f:0a:0d:40:96:a8:fe:07:9b:2d:
7d:6b:f0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:19:48 2026 by rpki-client