Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/GsVJulkrfu-mKKIOeJ-vURk6Vqo.roa
File: GsVJulkrfu-mKKIOeJ-vURk6Vqo.roa (raw, json)
Hash identifier: +iEM0VMVjs3W3HtXxzW6QPeG5cpz5EyhFVk89TYwy+I=
Subject key identifier: 1A:C5:49:BA:59:2B:7E:EF:A6:28:A2:0E:78:9F:AF:51:19:3A:56:AA
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 019DFD92B2B2C70CC7DC0A590BB49A1EDE56
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/GsVJulkrfu-mKKIOeJ-vURk6Vqo.roa
Signing time: Wed 06 May 2026 13:55:42 +0000
ROA not before: Wed 06 May 2026 13:55:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 84.37.20.0/23 maxlen: 23
84.37.64.0/23 maxlen: 23
84.37.70.0/23 maxlen: 23
84.37.106.0/23 maxlen: 23
84.37.132.0/23 maxlen: 23
212.180.9.0/24 maxlen: 24
212.180.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:92:b2:b2:c7:0c:c7:dc:0a:59:0b:b4:9a:1e:de:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: May 6 13:55:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ac549ba592b7eefa628a20e789faf51193a56aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:14:2e:b6:78:e8:7d:72:f6:83:a5:22:00:
0e:e7:07:db:2b:d7:b1:2b:31:77:4c:e2:74:bb:aa:
c4:80:e2:21:34:d3:43:d6:45:fe:e1:09:11:98:e7:
18:6b:6a:16:94:af:27:56:20:86:fb:6d:b8:30:55:
5b:cc:1b:5e:31:6a:65:e5:be:e4:26:08:b9:15:2b:
ea:be:0b:63:46:fd:e2:d7:11:71:7f:29:4e:9f:f4:
f5:a1:6e:ec:28:80:10:8f:cc:d9:b7:b9:86:73:85:
aa:01:c4:78:a9:3d:1f:d1:f0:54:94:69:3d:99:b1:
14:96:cc:07:93:b4:81:e7:5f:ba:0c:71:17:1b:74:
b5:9b:06:31:83:bb:d5:fa:21:10:85:df:e2:fa:bb:
6f:40:75:1a:fa:9a:15:01:05:25:a2:12:8c:65:28:
9f:3f:96:7c:ee:b9:1f:ae:3b:d9:4f:01:4d:95:0b:
da:59:4f:f9:0e:4b:5d:cf:2d:fd:70:22:58:5a:e9:
b9:2f:29:e6:17:c4:55:7c:80:3e:4d:7a:1e:aa:f5:
a6:39:2b:ba:4f:2d:93:2f:8f:f8:16:44:51:83:a1:
c0:e5:d6:fe:81:31:20:b9:7b:2e:66:0b:9b:a7:cc:
ec:74:64:28:5f:21:cf:09:aa:45:4d:2a:1f:f6:69:
74:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C5:49:BA:59:2B:7E:EF:A6:28:A2:0E:78:9F:AF:51:19:3A:56:AA
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/GsVJulkrfu-mKKIOeJ-vURk6Vqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.20.0/23
84.37.64.0/23
84.37.70.0/23
84.37.106.0/23
84.37.132.0/23
212.180.9.0/24
212.180.86.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:fe:21:33:bd:4e:5e:f8:e4:d3:07:c8:6f:c3:29:29:16:7c:
15:1c:77:dc:44:5f:b9:89:5b:ea:93:64:4a:88:ea:57:c6:ad:
eb:9e:9c:60:67:8f:e8:6a:4c:0c:eb:31:23:e2:16:3d:62:0c:
b5:ef:0c:4e:d1:ee:89:49:3a:aa:98:a6:01:b4:88:ec:84:0e:
53:91:80:b3:d1:e5:88:f6:0e:db:eb:33:f0:4d:a3:4a:c4:07:
67:a4:d4:3f:62:be:21:f1:d1:60:f7:ad:a5:57:ab:19:98:2c:
8e:a2:b1:eb:70:52:bc:90:40:d7:45:2b:3b:03:31:44:71:eb:
34:d1:2b:41:47:0f:f0:b5:e6:b6:2f:94:0b:50:33:9b:3b:99:
f3:16:87:2d:ab:92:4b:ce:73:19:74:ef:4a:1d:57:65:f8:31:
20:b6:9a:a8:e7:4d:87:10:48:24:be:a5:28:2a:9b:af:7b:ae:
d6:e7:db:53:62:ca:23:f8:d4:4b:80:50:34:8e:08:6d:a1:94:
26:0c:db:53:d2:de:1b:64:93:b5:69:a2:29:6a:98:31:91:e5:
3d:08:d7:51:ef:98:9b:a6:b9:ac:8a:53:52:dc:bd:4c:09:ce:
8e:12:47:f5:fc:37:b8:5e:d2:98:78:de:20:9f:f6:e1:c0:44:
74:c8:c5:1d
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ39krKyxwzH3ApZC7SaHt5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky
YWUzYjcwHhcNMjYwNTA2MTM1NTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWM1NDliYTU5MmI3ZWVmYTYyOGEyMGU3ODlmYWY1MTE5M2E1NmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvykULrZ46H1y9oOlIgAO5wfbK9ex
KzF3TOJ0u6rEgOIhNNND1kX+4QkRmOcYa2oWlK8nViCG+224MFVbzBteMWpl5b7k
Jgi5FSvqvgtjRv3i1xFxfylOn/T1oW7sKIAQj8zZt7mGc4WqAcR4qT0f0fBUlGk9
mbEUlswHk7SB51+6DHEXG3S1mwYxg7vV+iEQhd/i+rtvQHUa+poVAQUlohKMZSif
P5Z87rkfrjvZTwFNlQvaWU/5Dktdzy39cCJYWum5LynmF8RVfIA+TXoeqvWmOSu6
Ty2TL4/4FkRRg6HA5db+gTEguXsuZgubp8zsdGQoXyHPCapFTSof9ml0gwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFBrFSbpZK37vpiiiDnifr1EZOlaqMB8GA1UdIwQY
MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt
ZDJhZGVlZDc1NWQ4LzEvR3NWSnVsa3JmdS1tS0tJT2VKLXZVUms2VnFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4
LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBVCUUAwQB
VCVAAwQBVCVGAwQBVCVqAwQBVCWEAwQA1LQJAwQB1LRWMA0GCSqGSIb3DQEBCwUA
A4IBAQAK/iEzvU5e+OTTB8hvwykpFnwVHHfcRF+5iVvqk2RKiOpXxq3rnpxgZ4/o
akwM6zEj4hY9Ygy17wxO0e6JSTqqmKYBtIjshA5TkYCz0eWI9g7b6zPwTaNKxAdn
pNQ/Yr4h8dFg962lV6sZmCyOorHrcFK8kEDXRSs7AzFEces00StBRw/wtea2L5QL
UDObO5nzFoctq5JLznMZdO9KHVdl+DEgtpqo502HEEgkvqUoKpuve67W59tTYsoj
+NRLgFA0jghtoZQmDNtT0t4bZJO1aaIpapgxkeU9CNdR75ibprmsilNS3L1MCc6O
Ekf1/De4XtKYeN4gn/bhwER0yMUd
-----END CERTIFICATE-----
Generated at Wed May 13 02:13:00 2026 by rpki-client