Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/guQk2_AmnXnrbydwZ_1NYFOLLdc.roa
File: guQk2_AmnXnrbydwZ_1NYFOLLdc.roa (raw, json)
Hash identifier: P0zl7DUn0tIOspi9Tj42iu88q7ORqZVPECXA4/R7cBs=
Subject key identifier: 82:E4:24:DB:F0:26:9D:79:EB:6F:27:70:67:FD:4D:60:53:8B:2D:D7
Certificate issuer: /CN=2effa6b5712554310a0f4ce5409ce76a9ab044ff
Certificate serial: 019F2368885A37FDF88FC08108FFB89D640A
Authority key identifier: 2E:FF:A6:B5:71:25:54:31:0A:0F:4C:E5:40:9C:E7:6A:9A:B0:44:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lv-mtXElVDEKD0zlQJznapqwRP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/guQk2_AmnXnrbydwZ_1NYFOLLdc.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30742
IP address blocks: 185.48.220.0/22 maxlen: 22
2a01:9ba0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/Lv-mtXElVDEKD0zlQJznapqwRP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/Lv-mtXElVDEKD0zlQJznapqwRP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lv-mtXElVDEKD0zlQJznapqwRP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:88:5a:37:fd:f8:8f:c0:81:08:ff:b8:9d:64:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2effa6b5712554310a0f4ce5409ce76a9ab044ff
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82e424dbf0269d79eb6f277067fd4d60538b2dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:67:fe:a0:11:3c:dc:48:10:d6:7a:ad:ee:
a9:65:0b:1a:92:35:6d:00:eb:d4:8d:2b:8f:40:8b:
cf:0e:18:45:40:01:68:06:e1:c4:c4:b7:5c:bc:1b:
c5:51:47:5d:9c:75:e8:9e:46:67:fd:2a:88:f8:b7:
34:83:88:10:e6:58:31:ad:d1:fa:37:db:9e:7f:15:
0b:b0:03:13:dd:29:50:7d:b0:ad:db:69:b3:b0:26:
d7:c8:58:98:32:8a:ec:9f:51:8c:5c:1e:52:a7:be:
5f:81:39:17:4d:7f:fe:da:ef:ff:b4:56:82:6c:58:
7e:a7:12:94:22:65:bb:be:f6:ab:6b:0b:97:cb:41:
40:b6:3e:9a:4e:ad:5a:3f:2b:8b:10:64:da:3f:72:
4c:a5:a6:d4:91:8e:b1:28:1e:a9:cf:d0:88:fa:25:
bb:ef:ec:4e:ec:e9:46:a3:28:03:71:f1:3a:98:62:
25:4f:c6:29:ec:6c:e6:d4:df:a4:05:d6:7d:a7:6d:
f8:9f:ac:75:04:81:8d:24:88:cf:94:20:90:6d:98:
82:5b:de:95:c0:fb:39:73:ff:58:2e:24:a7:94:47:
c1:f4:ae:d8:bf:9a:c5:62:85:40:f3:bc:fa:9e:91:
ec:0f:69:09:89:cd:bf:f2:c5:d1:b1:9a:b2:6c:29:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E4:24:DB:F0:26:9D:79:EB:6F:27:70:67:FD:4D:60:53:8B:2D:D7
X509v3 Authority Key Identifier:
keyid:2E:FF:A6:B5:71:25:54:31:0A:0F:4C:E5:40:9C:E7:6A:9A:B0:44:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lv-mtXElVDEKD0zlQJznapqwRP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/guQk2_AmnXnrbydwZ_1NYFOLLdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/Lv-mtXElVDEKD0zlQJznapqwRP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.220.0/22
IPv6:
2a01:9ba0::/32
Signature Algorithm: sha256WithRSAEncryption
04:c5:5f:4f:67:b3:d8:f4:9f:0b:a4:ae:27:8a:2c:4b:19:2d:
46:46:ef:a0:60:bb:fe:26:ff:9e:a1:08:0b:c7:05:3c:f0:84:
a9:0c:3b:6b:b0:f3:50:92:99:98:69:8d:f9:54:a5:7d:4c:45:
71:78:b4:eb:e4:70:2f:8c:97:04:fe:c8:87:8d:7d:49:43:31:
57:14:83:0e:c8:ae:e4:88:51:10:7a:03:6b:ea:70:55:9d:ad:
2a:f3:c3:6a:59:03:f0:5c:7b:85:d8:04:41:1c:27:d3:98:6a:
a6:25:bb:bf:0b:2c:8b:c6:10:1b:8b:fa:87:5a:cf:da:58:3f:
22:dd:98:f6:65:57:da:43:9d:b7:aa:34:67:6d:ff:9e:6d:22:
18:79:2b:29:15:1d:df:32:e1:0a:47:b2:c2:37:3f:88:58:65:
55:f1:5e:17:83:98:f3:63:22:cf:e8:34:2a:ed:4c:cd:41:03:
67:50:e0:80:75:67:82:89:74:84:5a:64:1b:ac:14:3c:35:87:
28:56:5b:c5:dc:fd:dd:a7:81:36:bc:8b:4b:68:5f:f6:55:2d:
32:26:44:42:ae:21:23:ec:b0:a0:05:c6:52:3e:31:8b:a8:c0:
aa:47:16:ca:b0:35:76:ff:a0:96:06:ad:0c:28:83:b3:86:05:
c8:b7:f2:43
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaIhaN/34j8CBCP+4nWQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZmZhNmI1NzEyNTU0MzEwYTBmNGNlNTQwOWNlNzZhOWFi
MDQ0ZmYwHhcNMjYwNzAyMTUxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmU0MjRkYmYwMjY5ZDc5ZWI2ZjI3NzA2N2ZkNGQ2MDUzOGIyZGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwepn/qARPNxIENZ6re6pZQsakjVt
AOvUjSuPQIvPDhhFQAFoBuHExLdcvBvFUUddnHXonkZn/SqI+Lc0g4gQ5lgxrdH6
N9uefxULsAMT3SlQfbCt22mzsCbXyFiYMorsn1GMXB5Sp75fgTkXTX/+2u//tFaC
bFh+pxKUImW7vvarawuXy0FAtj6aTq1aPyuLEGTaP3JMpabUkY6xKB6pz9CI+iW7
7+xO7OlGoygDcfE6mGIlT8Yp7Gzm1N+kBdZ9p234n6x1BIGNJIjPlCCQbZiCW96V
wPs5c/9YLiSnlEfB9K7Yv5rFYoVA87z6npHsD2kJic2/8sXRsZqybCkwVwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFILkJNvwJp15628ncGf9TWBTiy3XMB8GA1UdIwQY
MBaAFC7/prVxJVQxCg9M5UCc52qasET/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHYtbXRYRWxWREVLRDB6bFFKem5hcHF3UlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEt
NzBlN2QwNTdmZjJkLzEvZ3VRazJfQW1uWG5yYnlkd1pfMU5ZRk9MTGRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEtNzBlN2QwNTdmZjJk
LzEvTHYtbXRYRWxWREVLRDB6bFFKem5hcHF3UlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTDcMA0E
AgACMAcDBQAqAZugMA0GCSqGSIb3DQEBCwUAA4IBAQAExV9PZ7PY9J8LpK4niixL
GS1GRu+gYLv+Jv+eoQgLxwU88ISpDDtrsPNQkpmYaY35VKV9TEVxeLTr5HAvjJcE
/siHjX1JQzFXFIMOyK7kiFEQegNr6nBVna0q88NqWQPwXHuF2ARBHCfTmGqmJbu/
CyyLxhAbi/qHWs/aWD8i3Zj2ZVfaQ523qjRnbf+ebSIYeSspFR3fMuEKR7LCNz+I
WGVV8V4Xg5jzYyLP6DQq7UzNQQNnUOCAdWeCiXSEWmQbrBQ8NYcoVlvF3P3dp4E2
vItLaF/2VS0yJkRCriEj7LCgBcZSPjGLqMCqRxbKsDV2/6CWBq0MKIOzhgXIt/JD
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:26 2026 by rpki-client