Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/gTtUHuAbAVNRdNoLuCsea2rCewQ.roa
File: gTtUHuAbAVNRdNoLuCsea2rCewQ.roa (raw, json)
Hash identifier: KFx9ZwsybGaJs1c7S9ushLUhbd0Pa2NdRnZ63vIrBQY=
Subject key identifier: 81:3B:54:1E:E0:1B:01:53:51:74:DA:0B:B8:2B:1E:6B:6A:C2:7B:04
Certificate issuer: /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial: 01A0423DE52D1CC957B385302ED4DE6C3249
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/gTtUHuAbAVNRdNoLuCsea2rCewQ.roa
Signing time: Thu 27 Aug 2026 08:02:27 +0000
ROA not before: Thu 27 Aug 2026 08:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51840
IP address blocks: 91.220.139.0/24 maxlen: 24
185.27.56.0/22 maxlen: 22
185.27.56.0/24 maxlen: 24
185.27.57.0/24 maxlen: 24
185.27.58.0/24 maxlen: 24
185.27.59.0/24 maxlen: 24
185.64.56.0/22 maxlen: 22
185.64.56.0/24 maxlen: 24
185.64.57.0/24 maxlen: 24
185.64.58.0/24 maxlen: 24
185.64.59.0/24 maxlen: 24
185.176.196.0/24 maxlen: 24
185.176.197.0/24 maxlen: 24
185.176.198.0/23 maxlen: 23
185.176.198.0/24 maxlen: 24
185.176.199.0/24 maxlen: 24
185.177.48.0/22 maxlen: 22
185.177.48.0/24 maxlen: 24
185.177.49.0/24 maxlen: 24
185.177.50.0/24 maxlen: 24
185.177.51.0/24 maxlen: 24
185.218.148.0/22 maxlen: 22
185.218.148.0/24 maxlen: 24
185.218.149.0/24 maxlen: 24
185.218.150.0/24 maxlen: 24
185.218.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:3d:e5:2d:1c:c9:57:b3:85:30:2e:d4:de:6c:32:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Validity
Not Before: Aug 27 08:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=813b541ee01b01535174da0bb82b1e6b6ac27b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:2d:64:c0:6c:d1:c7:52:48:a1:fc:0f:f3:
35:11:80:09:a0:ca:61:79:80:f6:a8:ca:6c:ed:f7:
68:74:3f:ab:58:73:00:0d:21:e7:7c:c4:ae:f9:5a:
c4:af:93:ff:9f:39:23:a0:bf:a0:4b:11:e5:e3:7a:
d4:0a:aa:32:ae:ba:59:4b:f5:f1:08:30:d6:19:55:
93:e7:1a:b9:0a:f1:a2:5d:31:44:c4:10:46:bc:04:
e3:94:d7:64:35:91:61:5d:f7:3a:1d:6d:f2:ac:52:
44:94:0c:39:e5:f0:77:1b:74:74:b2:b5:f6:9d:03:
5c:36:31:ec:40:d0:01:84:78:f6:e6:75:4a:af:5f:
0d:17:26:7d:13:22:53:78:8a:8c:fa:01:11:b6:8f:
f1:7a:69:d0:74:86:1f:60:72:a2:35:9f:20:fa:78:
68:9c:48:56:51:af:21:a4:b7:97:ed:22:97:c7:70:
eb:3f:9f:64:c9:2b:00:ee:ac:24:b3:80:dd:8d:9d:
f5:42:66:d6:9f:a0:98:86:a6:40:25:1f:64:76:06:
2f:2e:40:50:34:6f:19:ba:f9:97:2f:51:ce:01:e2:
e3:da:a2:83:d3:b9:64:5a:1d:36:bb:14:b8:8d:0f:
ab:bd:bd:b1:e0:c5:b9:1f:54:26:bb:27:77:1c:57:
07:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3B:54:1E:E0:1B:01:53:51:74:DA:0B:B8:2B:1E:6B:6A:C2:7B:04
X509v3 Authority Key Identifier:
keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/gTtUHuAbAVNRdNoLuCsea2rCewQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.139.0/24
185.27.56.0/22
185.64.56.0/22
185.176.196.0/22
185.177.48.0/22
185.218.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:99:5e:79:ee:ea:a5:dd:f2:2c:f3:3a:56:c4:b0:db:33:e1:
4c:e6:09:b7:9f:14:4b:af:2e:56:9f:b0:a7:f9:47:3c:9d:8f:
f9:96:ca:6d:a1:30:82:a9:7a:17:ff:47:9e:d4:c8:cd:49:21:
87:54:a3:a3:ec:ce:16:20:cc:66:99:13:d3:b5:d2:ca:f4:e2:
ce:18:24:7f:57:df:7d:27:51:3b:45:6c:ac:4c:07:02:24:fc:
d4:f1:1d:2c:e3:3c:ac:e3:c9:37:90:82:99:c2:ea:26:d6:5a:
8a:06:a6:fc:db:61:65:b7:da:26:94:84:44:2c:14:92:af:c9:
79:83:2f:50:7e:92:fc:73:a3:be:2f:fe:c7:1b:fb:28:eb:3e:
65:45:84:aa:26:87:16:9f:0b:2c:41:12:6a:64:a1:a0:8c:08:
fb:88:ec:bc:db:1d:26:cd:61:b6:56:85:6a:aa:b4:72:fa:c4:
26:bc:39:69:1c:44:22:35:ee:43:43:ff:a2:c9:95:c1:9d:f3:
b3:13:4f:0d:a6:5b:67:81:2b:8a:61:dd:e5:c8:8e:de:0e:7b:
4a:d0:0d:2d:bf:ea:33:cc:62:d3:9b:e1:03:09:a3:2e:d0:25:
cf:bc:77:85:69:ae:59:d3:a8:ea:45:cc:b0:9a:30:62:36:c8:
4f:56:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:07:37 2026 by rpki-client