Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/gkm6rTE9F1Jbq6u1Gdul0_uIhQI.roa
File: gkm6rTE9F1Jbq6u1Gdul0_uIhQI.roa (raw, json)
Hash identifier: e17L5xzP7AyerioqF9cvfemAnnXUxd+u4XnsDKjQioc=
Subject key identifier: 82:49:BA:AD:31:3D:17:52:5B:AB:AB:B5:19:DB:A5:D3:FB:88:85:02
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01A01A860C8BB4A9B83B740EB42219EA3097
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/gkm6rTE9F1Jbq6u1Gdul0_uIhQI.roa
Signing time: Wed 19 Aug 2026 14:56:27 +0000
ROA not before: Wed 19 Aug 2026 14:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205262
IP address blocks: 37.122.216.0/22 maxlen: 24
89.40.74.0/24 maxlen: 24
185.84.204.0/22 maxlen: 24
185.205.252.0/22 maxlen: 24
185.205.252.0/24 maxlen: 24
185.205.253.0/24 maxlen: 24
185.205.254.0/24 maxlen: 24
185.205.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:86:0c:8b:b4:a9:b8:3b:74:0e:b4:22:19:ea:30:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Aug 19 14:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8249baad313d17525bababb519dba5d3fb888502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:9f:4f:cd:a7:5c:10:8f:ae:cb:d9:06:4b:
b8:c2:9d:e8:5c:c5:cc:4f:84:69:26:9e:db:e7:9b:
ef:bd:8e:14:ab:4d:a1:83:35:09:e5:eb:5a:54:7e:
76:b9:30:62:03:ea:18:d6:17:a0:09:d6:78:5a:b0:
3e:1e:9d:62:87:02:a2:54:0b:5a:0c:d4:d1:2f:23:
d6:c0:64:21:1d:f5:4e:c6:3b:f8:8f:bd:ed:27:1c:
a1:92:29:a3:22:34:54:02:ae:75:c0:bb:9d:39:a5:
76:97:9a:25:1d:78:9b:13:3c:2b:b2:df:be:66:ad:
08:e3:7f:71:62:ca:fd:df:f6:d5:3d:86:d5:9f:72:
e0:57:88:be:8a:fc:34:9c:6e:1f:aa:8a:28:7d:08:
17:b9:1a:67:27:26:4e:55:02:a7:b2:6d:e6:38:70:
70:af:29:bc:cb:25:e4:55:fb:dd:8e:f0:1f:3b:5e:
3f:0f:cc:d1:1c:39:f2:ef:11:75:7c:85:d5:fd:1b:
9a:34:3c:8f:20:42:74:1f:5e:3a:28:96:22:68:fd:
bc:d1:02:f4:38:c3:de:42:75:cb:a8:a3:2c:a0:99:
ad:03:59:01:e2:e7:84:ab:35:39:3d:09:63:06:c8:
e7:2e:01:9e:7b:ff:d4:d5:d7:74:e9:89:6b:19:f9:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:49:BA:AD:31:3D:17:52:5B:AB:AB:B5:19:DB:A5:D3:FB:88:85:02
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/gkm6rTE9F1Jbq6u1Gdul0_uIhQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.216.0/22
89.40.74.0/24
185.84.204.0/22
185.205.252.0/22
Signature Algorithm: sha256WithRSAEncryption
07:c0:fb:61:c5:d3:ee:b2:d8:03:3a:58:4c:68:7a:92:ab:59:
0d:e5:c1:fd:af:e6:58:79:1b:90:0c:8e:15:b6:8a:48:ed:bc:
47:0a:2b:90:5c:85:24:57:9a:0e:54:94:10:42:d4:3c:5f:13:
78:37:61:da:15:f3:c4:ea:ef:2b:45:b5:1f:a2:d5:4e:97:b7:
3c:3e:0e:40:d3:43:d8:6e:cb:b0:cf:22:82:0f:a5:d5:cc:79:
09:6f:b8:f9:c8:5b:10:5e:9b:4e:f3:00:23:7a:b6:79:76:77:
53:4d:88:4f:38:96:8b:a3:c4:c0:7f:eb:a8:05:16:e0:76:54:
a2:0f:ef:6b:c3:b9:f7:d2:15:17:5e:f1:d7:10:8b:09:f5:ab:
a6:73:2f:25:32:d5:8d:bb:d3:28:df:e6:62:6d:11:19:7c:57:
df:44:2e:a1:e1:e3:e2:b2:5f:d8:e3:e3:3c:9b:04:e1:7e:03:
c9:53:69:73:18:52:bd:c4:b6:b3:a5:dd:62:c1:b4:f1:c6:90:
db:14:8b:95:cc:a9:be:4d:5f:a0:44:ca:b8:70:d3:87:58:1b:
0c:7e:3d:9d:66:98:f7:a9:7c:0b:ad:d6:bc:3a:24:39:6e:cf:
21:2f:8b:8f:4c:10:c2:6a:a6:61:a4:1c:a2:6e:45:c6:6e:f7:
7e:fd:8c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:02:20 2026 by rpki-client