Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/gcc-FdNN6vti97PWBSoHsMNsu34.roa
File: gcc-FdNN6vti97PWBSoHsMNsu34.roa (raw, json)
Hash identifier: CtKuHOA67XtrsqR+tr65cCG6nxTHyUOq4FA3/7KVSO4=
Subject key identifier: 81:C7:3E:15:D3:4D:EA:FB:62:F7:B3:D6:05:2A:07:B0:C3:6C:BB:7E
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 0199576A1AEA222ADCDD9FC7811409BCA2EC
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/gcc-FdNN6vti97PWBSoHsMNsu34.roa
Signing time: Wed 17 Sep 2025 11:23:15 +0000
ROA not before: Wed 17 Sep 2025 11:23:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198414
IP address blocks: 91.228.196.0/22 maxlen: 24
91.234.146.0/24 maxlen: 24
91.237.52.0/24 maxlen: 24
91.239.66.0/23 maxlen: 24
185.5.96.0/22 maxlen: 24
185.25.148.0/22 maxlen: 24
185.140.120.0/22 maxlen: 22
185.180.204.0/22 maxlen: 24
185.193.112.0/22 maxlen: 24
185.201.112.0/22 maxlen: 24
193.17.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:6a:1a:ea:22:2a:dc:dd:9f:c7:81:14:09:bc:a2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Sep 17 11:23:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81c73e15d34deafb62f7b3d6052a07b0c36cbb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:84:82:a2:b5:50:c2:f1:76:38:cf:4a:78:
d9:6c:84:1b:2a:a0:d7:de:f9:6d:e5:ef:26:e7:12:
77:b7:e8:cf:25:b0:12:94:ed:27:59:8b:17:f1:5b:
5f:45:17:96:8f:c4:5c:5a:9c:88:56:7e:2c:71:0b:
37:39:9d:1c:fa:7a:ab:10:0a:b2:5f:df:87:80:77:
2e:ad:bc:aa:2e:0b:88:cc:ed:27:89:b4:27:31:a5:
69:bd:c3:e0:49:5b:85:a7:c8:cd:a3:f6:36:81:e4:
e5:79:b3:e2:de:69:91:8c:75:df:a3:8d:c9:5f:55:
d4:cc:08:13:9e:f3:73:d2:70:d7:f7:d4:ae:81:5d:
f4:11:00:6a:ba:8f:40:e3:4d:2d:f0:36:ab:33:69:
67:62:03:ac:68:db:35:0d:e3:41:45:74:2a:ce:d8:
a8:f5:1f:a1:ac:b6:90:9d:b3:4a:e0:1b:1f:6e:3a:
6c:64:e0:39:0d:f3:06:72:24:41:2f:68:62:d8:f3:
32:7c:1a:54:d2:70:f0:63:c4:fe:99:de:56:17:73:
78:45:de:3c:e7:12:0d:81:34:73:1b:35:84:95:9a:
7f:77:37:36:6f:b1:d8:72:4b:91:29:2d:19:e9:53:
cc:65:7f:9a:f8:bb:ae:e1:b5:ac:90:db:5e:dd:b8:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C7:3E:15:D3:4D:EA:FB:62:F7:B3:D6:05:2A:07:B0:C3:6C:BB:7E
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/gcc-FdNN6vti97PWBSoHsMNsu34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.196.0/22
91.234.146.0/24
91.237.52.0/24
91.239.66.0/23
185.5.96.0/22
185.25.148.0/22
185.140.120.0/22
185.180.204.0/22
185.193.112.0/22
185.201.112.0/22
193.17.184.0/24
Signature Algorithm: sha256WithRSAEncryption
39:87:90:43:20:b1:82:08:ad:7e:3d:2d:64:7f:a1:74:bc:e7:
a2:ed:d1:89:d4:9d:10:8b:79:5b:97:02:bd:ed:b6:6c:99:45:
ad:ac:53:0e:88:81:88:48:63:e4:74:d8:6d:f6:b2:88:ab:21:
b7:63:8b:27:ed:94:79:68:1f:e6:33:3c:d1:91:ad:2a:ca:7e:
84:81:4d:44:ac:c5:bc:52:e3:e3:40:96:58:69:f1:fd:55:e2:
e2:95:60:41:a9:a8:01:bb:ae:4e:6f:97:c3:31:ae:32:aa:e1:
70:9a:c9:e8:10:f9:1a:60:55:3a:df:a3:80:f6:6f:fd:51:ee:
4a:40:6a:2e:f1:51:84:01:31:73:16:30:85:04:a1:4f:ed:3d:
85:68:f8:40:4d:57:67:ee:44:3d:04:28:1c:c5:7f:cb:48:d3:
a1:1f:f0:64:dc:55:67:06:b9:80:bd:d9:f3:46:43:11:31:4c:
79:86:c2:ae:9a:8b:3e:d1:99:4c:46:2c:66:7d:2e:fb:66:9b:
7e:dc:9f:4c:3c:e1:9a:24:e7:3a:6e:10:92:5e:3a:6f:ee:f9:
0a:cd:6f:eb:e8:85:9b:cb:95:6a:f0:4d:00:03:5e:69:40:cf:
06:9a:e8:b9:d3:ef:4c:76:d8:d7:1e:95:d4:ae:49:35:b6:73:
52:dc:fb:58
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZlXahrqIirc3Z/HgRQJvKLsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTVhYTkxOGNiZmViM2UxMjk5N2YzMzg5MGZlYjI1ODkw
N2IzNDMwHhcNMjUwOTE3MTEyMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWM3M2UxNWQzNGRlYWZiNjJmN2IzZDYwNTJhMDdiMGMzNmNiYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfqEgqK1UMLxdjjPSnjZbIQbKqDX
3vlt5e8m5xJ3t+jPJbASlO0nWYsX8VtfRReWj8RcWpyIVn4scQs3OZ0c+nqrEAqy
X9+HgHcurbyqLguIzO0nibQnMaVpvcPgSVuFp8jNo/Y2geTlebPi3mmRjHXfo43J
X1XUzAgTnvNz0nDX99SugV30EQBquo9A400t8DarM2lnYgOsaNs1DeNBRXQqztio
9R+hrLaQnbNK4BsfbjpsZOA5DfMGciRBL2hi2PMyfBpU0nDwY8T+md5WF3N4Rd48
5xINgTRzGzWElZp/dzc2b7HYckuRKS0Z6VPMZX+a+Luu4bWskNte3bhW4wIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFIHHPhXTTer7Yvez1gUqB7DDbLt+MB8GA1UdIwQY
MBaAFCalqpGMv+s+Epl/M4kP6yWJB7NDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTIt
Mjk3ZTI4MmQ2NmE4LzEvZ2NjLUZkTk42dnRpOTdQV0JTb0hzTU5zdTM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTItMjk3ZTI4MmQ2NmE4
LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCW+TEAwQA
W+qSAwQAW+00AwQBW+9CAwQCuQVgAwQCuRmUAwQCuYx4AwQCubTMAwQCucFwAwQC
uclwAwQAwRG4MA0GCSqGSIb3DQEBCwUAA4IBAQA5h5BDILGCCK1+PS1kf6F0vOei
7dGJ1J0Qi3lblwK97bZsmUWtrFMOiIGISGPkdNht9rKIqyG3Y4sn7ZR5aB/mMzzR
ka0qyn6EgU1ErMW8UuPjQJZYafH9VeLilWBBqagBu65Ob5fDMa4yquFwmsnoEPka
YFU636OA9m/9Ue5KQGou8VGEATFzFjCFBKFP7T2FaPhATVdn7kQ9BCgcxX/LSNOh
H/Bk3FVnBrmAvdnzRkMRMUx5hsKumos+0ZlMRixmfS77Zpt+3J9MPOGaJOc6bhCS
Xjpv7vkKzW/r6IWby5Vq8E0AA15pQM8Gmui50+9MdtjXHpXUrkk1tnNS3PtY
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:29 2025 by rpki-client