Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/g2ubiOV97MEyakPWWOn3CaYCiKc.roa
File: g2ubiOV97MEyakPWWOn3CaYCiKc.roa (raw, json)
Hash identifier: eesr31OswSeleNqijB9yuQ4LNDEcPxPgNR7jteKPoS0=
Subject key identifier: 83:6B:9B:88:E5:7D:EC:C1:32:6A:43:D6:58:E9:F7:09:A6:02:88:A7
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019F8A559F97EEBBE12C9D21CA75789AEB91
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/g2ubiOV97MEyakPWWOn3CaYCiKc.roa
Signing time: Wed 22 Jul 2026 14:58:14 +0000
ROA not before: Wed 22 Jul 2026 14:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31479
IP address blocks: 80.66.116.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
185.28.48.0/23 maxlen: 23
201.77.58.0/24 maxlen: 24
206.203.0.0/19 maxlen: 19
206.203.16.0/21 maxlen: 21
206.203.32.0/19 maxlen: 19
2001:4030::/32 maxlen: 32
2001:4030:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:55:9f:97:ee:bb:e1:2c:9d:21:ca:75:78:9a:eb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 22 14:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=836b9b88e57decc1326a43d658e9f709a60288a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:30:1c:8e:87:78:0a:10:c4:89:30:23:fd:
8d:0e:9b:39:9b:84:58:f4:55:4b:10:65:06:97:e3:
4b:8c:b5:5d:20:e1:76:b7:54:25:32:14:bd:33:71:
c1:30:6e:4e:e9:90:2e:3e:c0:d8:d0:29:bd:d8:71:
ae:64:2a:e0:8c:d4:b1:48:95:11:8f:15:72:9e:27:
6c:55:67:7d:16:91:c5:a8:b8:ed:d7:22:65:81:a4:
da:19:6f:44:e3:c1:57:bb:4a:50:82:05:75:32:64:
d5:02:31:76:64:f6:3a:3c:12:f5:40:ab:a8:81:c6:
cc:6f:5f:21:33:d0:61:a9:28:61:0f:4e:29:b7:fc:
18:87:84:6e:de:1e:6d:e6:9d:68:59:23:14:5c:f7:
47:af:ba:84:68:0e:b4:f1:84:f3:42:7a:0e:c5:37:
36:98:a7:5f:46:dd:56:cf:34:42:f3:28:5e:d8:51:
a7:9f:14:cb:f1:33:b8:57:55:5b:b6:8e:c6:f7:ac:
6a:0d:f9:f1:6c:c6:a9:78:dc:05:4a:66:f1:33:7e:
38:f4:89:d8:aa:6f:3a:73:b0:04:3c:e1:0d:48:cd:
f2:45:6c:8c:a5:3e:ee:59:e2:f8:7d:96:e2:a4:52:
48:12:f3:76:c8:11:aa:89:f1:81:eb:c1:25:81:79:
7a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6B:9B:88:E5:7D:EC:C1:32:6A:43:D6:58:E9:F7:09:A6:02:88:A7
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/g2ubiOV97MEyakPWWOn3CaYCiKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.116.0/24
94.198.46.0/24
178.19.32.0/23
185.28.48.0/23
201.77.58.0/24
206.203.0.0/18
IPv6:
2001:4030::/32
Signature Algorithm: sha256WithRSAEncryption
b7:49:ae:bc:5a:62:e3:d1:77:70:4c:6e:6d:ce:02:39:19:da:
f1:b6:ee:a1:6e:fa:f7:ef:11:c3:56:63:c4:23:b1:de:3e:bf:
70:48:f7:a3:70:c6:7c:06:95:32:22:f8:d7:a0:bb:1e:09:5d:
79:02:7e:58:32:fc:28:c0:19:93:ea:b3:2e:a2:a9:9d:93:22:
c3:46:a7:e6:d6:12:4e:0d:e7:59:24:3d:57:9a:93:68:b9:1f:
13:f3:42:05:28:29:e0:46:d1:1b:aa:ad:92:64:12:e9:4a:c6:
ee:60:1a:cc:8f:17:a3:27:17:6f:c3:3b:77:52:da:e1:e4:66:
3e:82:e9:78:0d:76:f7:38:1c:3d:83:90:ac:eb:cd:23:d1:c7:
7a:64:14:18:69:f0:9a:cb:f1:18:5a:e2:91:18:ff:ba:c5:0e:
63:ac:0d:b2:06:92:23:e7:cf:fe:9c:58:c1:50:a4:e2:21:9b:
20:11:dc:2e:cb:07:8d:3a:2d:53:a9:6e:21:9b:ad:42:64:81:
c1:2b:06:23:99:10:09:26:05:e7:6f:8a:bd:2e:bc:8d:c8:7b:
86:f0:0c:46:06:a2:fe:20:0f:55:56:eb:7a:d2:e9:d3:5c:90:
91:e8:85:33:f2:c7:97:a2:08:39:bc:8a:2a:81:af:57:29:9a:
a1:b4:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:37 2026 by rpki-client