Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ggkS3-sUUCcm5l9pjc_mWYKDA7s.roa
File: ggkS3-sUUCcm5l9pjc_mWYKDA7s.roa (raw, json)
Hash identifier: 58TIWeMMecbaICVvx4wQl3rXTCRvPRX928qQ/4hXHnA=
Subject key identifier: 82:09:12:DF:EB:14:50:27:26:E6:5F:69:8D:CF:E6:59:82:83:03:BB
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 019E07A02824E5B94EF1144EBE6A34EDD769
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ggkS3-sUUCcm5l9pjc_mWYKDA7s.roa
Signing time: Fri 08 May 2026 12:46:37 +0000
ROA not before: Fri 08 May 2026 12:46:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50835
IP address blocks: 37.97.121.0/24 maxlen: 24
46.173.248.0/22 maxlen: 24
46.173.254.0/23 maxlen: 23
77.36.58.0/24 maxlen: 24
77.36.66.0/23 maxlen: 23
81.161.48.0/22 maxlen: 22
91.193.30.0/23 maxlen: 23
91.233.200.0/24 maxlen: 24
91.236.76.0/24 maxlen: 24
91.239.226.0/24 maxlen: 24
91.246.203.0/24 maxlen: 24
93.120.34.0/23 maxlen: 23
93.120.40.0/23 maxlen: 23
109.207.128.0/24 maxlen: 24
109.207.130.0/24 maxlen: 24
109.207.132.0/24 maxlen: 24
176.116.236.0/24 maxlen: 24
176.121.108.0/23 maxlen: 24
194.33.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:a0:28:24:e5:b9:4e:f1:14:4e:be:6a:34:ed:d7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: May 8 12:46:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=820912dfeb14502726e65f698dcfe659828303bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:b1:48:ad:95:c7:64:29:fc:5c:da:60:f0:
68:8b:15:d9:a6:93:ee:95:6d:fc:fb:96:03:f1:d2:
64:b4:65:ce:f0:c5:a0:de:0c:bf:ea:15:d2:5e:23:
a6:39:70:db:e5:7d:d9:ee:3a:b3:20:41:d5:22:3d:
35:0b:3c:d1:44:46:ce:88:c3:71:a3:5d:ec:13:f4:
58:17:65:12:3e:d9:d8:ac:82:54:ed:f0:56:3e:16:
5d:de:0b:f8:67:97:4f:5a:3e:df:a2:d4:46:6c:0d:
25:9e:98:29:47:0b:46:5d:6a:08:f7:a9:d6:8c:4e:
bd:ed:41:d7:dc:30:c3:e2:62:d3:ab:2b:0c:93:05:
f7:78:62:01:f5:92:ef:21:58:58:0b:23:5f:d0:ad:
c7:82:e5:cc:d6:b8:da:43:90:f0:0a:8f:99:94:09:
6b:94:1b:8f:60:a7:60:54:25:56:be:6e:24:da:ba:
67:f3:99:d2:a4:e5:50:a2:55:6e:c5:28:b7:cc:e1:
42:04:f8:6b:20:89:af:45:70:13:c7:7b:c3:6c:aa:
8e:4a:e8:c3:fb:82:64:e3:05:61:8f:12:5c:37:8f:
3b:22:4c:8a:53:f8:a7:29:fb:db:c2:f6:7a:a4:9d:
5c:2b:8b:dd:e1:41:31:16:80:20:8e:2d:3d:df:8b:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:09:12:DF:EB:14:50:27:26:E6:5F:69:8D:CF:E6:59:82:83:03:BB
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ggkS3-sUUCcm5l9pjc_mWYKDA7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.121.0/24
46.173.248.0/22
46.173.254.0/23
77.36.58.0/24
77.36.66.0/23
81.161.48.0/22
91.193.30.0/23
91.233.200.0/24
91.236.76.0/24
91.239.226.0/24
91.246.203.0/24
93.120.34.0/23
93.120.40.0/23
109.207.128.0/24
109.207.130.0/24
109.207.132.0/24
176.116.236.0/24
176.121.108.0/23
194.33.66.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:d1:4e:6b:6a:40:ab:d5:bb:87:32:9e:f0:c6:6c:96:72:f6:
ba:2f:f9:cf:dc:48:65:7c:da:30:86:9a:29:93:c1:fe:45:fa:
a5:d7:a3:13:25:d1:64:84:59:ac:62:91:c9:d4:70:35:c4:51:
e3:bc:ad:44:9c:8c:25:24:db:31:82:ca:7c:75:ff:80:cc:51:
e5:54:8a:f4:0d:04:a2:39:14:9f:d7:31:19:2b:d7:dc:6f:8a:
e4:d0:ad:6f:cc:ca:85:f7:98:e5:1f:d3:d2:99:01:a8:b3:0c:
46:f8:8d:77:93:de:c9:42:f1:bf:a6:1d:13:cb:2d:fc:29:ef:
4e:33:97:67:b2:06:1d:55:eb:ce:6d:45:c4:a8:b4:69:0e:39:
89:5a:68:28:e0:c6:04:39:f4:7c:60:c6:82:ff:9d:64:5a:fc:
1a:8d:57:15:01:9b:19:82:ce:eb:3d:a6:66:3b:2d:ad:18:f1:
e3:c1:e2:c3:49:1c:e7:47:1a:47:dc:79:ce:0a:67:8a:73:cb:
13:02:3d:b4:51:20:8c:c4:d8:77:62:d9:52:05:76:8c:ff:39:
65:a7:0d:66:fe:5c:41:18:15:9f:4f:19:37:c3:d3:25:1c:bf:
c8:64:f0:96:a8:a2:64:2e:a4:48:6a:c2:e6:3a:4d:cd:e4:5e:
4d:86:76:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 04:03:00 2026 by rpki-client