Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/M_GCNLKzStapvH2yawFcJFZLGzM.roa
File: M_GCNLKzStapvH2yawFcJFZLGzM.roa (raw, json)
Hash identifier: JXYexLLhTjJZCe/o/+zjf2hSfkYXeXtqQL3sMYrk700=
Subject key identifier: 33:F1:82:34:B2:B3:4A:D6:A9:BC:7D:B2:6B:01:5C:24:56:4B:1B:33
Certificate issuer: /CN=2196a1f750e63eacf677f7f3e77dc2c4a2c6c809
Certificate serial: 019B775961B08E2E138A38B0A3460CAA9009
Authority key identifier: 21:96:A1:F7:50:E6:3E:AC:F6:77:F7:F3:E7:7D:C2:C4:A2:C6:C8:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZah91DmPqz2d_fz533CxKLGyAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/M_GCNLKzStapvH2yawFcJFZLGzM.roa
Signing time: Thu 01 Jan 2026 02:18:25 +0000
ROA not before: Thu 01 Jan 2026 02:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57205
IP address blocks: 93.174.40.0/21 maxlen: 21
195.35.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZah91DmPqz2d_fz533CxKLGyAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:61:b0:8e:2e:13:8a:38:b0:a3:46:0c:aa:90:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2196a1f750e63eacf677f7f3e77dc2c4a2c6c809
Validity
Not Before: Jan 1 02:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33f18234b2b34ad6a9bc7db26b015c24564b1b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e1:55:53:8f:53:59:af:12:f0:b8:0f:22:04:
07:ba:7a:41:3e:c2:63:8e:9c:cc:66:c9:6f:01:12:
33:df:e0:ab:2a:fc:d9:53:b3:94:f1:8e:12:77:b2:
4a:aa:b3:39:7c:f9:a9:3a:4f:45:0c:fb:0d:19:20:
2a:d6:0f:49:53:8d:cb:2a:93:f5:39:ef:9f:63:6d:
14:2a:7c:b1:4b:5a:c1:1f:b0:a5:1f:35:d6:42:0f:
37:72:37:26:fd:be:de:d5:d2:b4:f4:95:c6:bf:50:
12:d4:4d:40:0a:08:be:2a:7b:12:4b:65:a9:da:3c:
27:ab:de:32:5b:9f:aa:20:d5:2e:9a:cb:d9:14:f0:
c6:62:57:7a:5c:bd:dc:a2:ef:3e:68:66:7f:f0:85:
1e:57:f8:98:9f:84:02:c4:4b:5f:bb:55:d5:81:cf:
48:59:55:8c:b0:83:ac:b8:d3:c1:f2:6c:ab:f4:11:
23:b3:e1:e3:b5:ce:3e:0e:e7:2d:eb:23:33:7b:d5:
d0:fb:7c:05:9a:f4:ec:ec:32:2f:e6:28:7a:c5:29:
81:99:01:9e:32:98:01:e5:43:59:c6:7a:fb:79:39:
e5:7d:47:57:a6:c0:48:39:a6:6d:89:67:f9:fb:bf:
41:f3:61:d5:31:54:58:9e:fb:b7:94:56:ac:7d:f0:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F1:82:34:B2:B3:4A:D6:A9:BC:7D:B2:6B:01:5C:24:56:4B:1B:33
X509v3 Authority Key Identifier:
keyid:21:96:A1:F7:50:E6:3E:AC:F6:77:F7:F3:E7:7D:C2:C4:A2:C6:C8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZah91DmPqz2d_fz533CxKLGyAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/M_GCNLKzStapvH2yawFcJFZLGzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.40.0/21
195.35.81.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:6e:79:d1:12:10:24:bc:97:d5:14:a9:8a:72:40:60:0b:31:
99:41:9b:bf:8e:cc:20:45:12:5a:7f:b4:b9:a9:ac:20:c8:72:
98:8c:88:33:4c:e1:5e:bf:ff:98:1e:b2:f2:98:cb:52:b0:b7:
18:04:fe:81:04:1a:8d:b2:9e:19:41:ce:5a:e0:8b:84:ab:7a:
f4:b9:c0:b4:e7:33:91:51:46:db:09:c8:34:b5:89:de:e4:32:
bb:70:76:a6:b4:98:8b:cb:3c:f3:7f:80:95:e6:27:ab:fc:11:
4f:39:b6:d5:18:f0:f2:70:96:d8:2d:7d:0f:82:8d:35:f0:f0:
62:b4:e7:83:c9:a8:6e:fa:6b:99:46:bc:8d:92:a9:ba:dc:ed:
2a:68:41:d9:06:4a:e1:8f:96:20:d9:1d:bc:e6:8e:1f:fc:fd:
99:20:a4:42:1a:08:ac:2b:82:08:03:fb:cf:18:2f:ac:44:70:
bd:d8:a5:41:a4:24:6c:50:87:c6:aa:78:fa:b0:d4:44:23:0e:
7e:80:3f:c8:f2:92:fb:3d:08:70:d9:2b:ca:ab:14:da:fb:c7:
04:d1:2b:e2:1e:3b:d2:5a:50:58:10:48:9f:80:e4:f5:6f:67:
32:d1:51:df:d1:43:72:6b:2c:dc:79:9d:46:19:44:86:9f:cc:
24:c5:4f:05
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt3WWGwji4Tijiwo0YMqpAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOTZhMWY3NTBlNjNlYWNmNjc3ZjdmM2U3N2RjMmM0YTJj
NmM4MDkwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2YxODIzNGIyYjM0YWQ2YTliYzdkYjI2YjAxNWMyNDU2NGIxYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOFVU49TWa8S8LgPIgQHunpBPsJj
jpzMZslvARIz3+CrKvzZU7OU8Y4Sd7JKqrM5fPmpOk9FDPsNGSAq1g9JU43LKpP1
Oe+fY20UKnyxS1rBH7ClHzXWQg83cjcm/b7e1dK09JXGv1AS1E1ACgi+KnsSS2Wp
2jwnq94yW5+qINUumsvZFPDGYld6XL3cou8+aGZ/8IUeV/iYn4QCxEtfu1XVgc9I
WVWMsIOsuNPB8myr9BEjs+Hjtc4+Duct6yMze9XQ+3wFmvTs7DIv5ih6xSmBmQGe
MpgB5UNZxnr7eTnlfUdXpsBIOaZtiWf5+79B82HVMVRYnvu3lFasffDd8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDPxgjSys0rWqbx9smsBXCRWSxszMB8GA1UdIwQY
MBaAFCGWofdQ5j6s9nf38+d9wsSixsgJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVphaDkxRG1QcXoyZF9mejUzM0N4S0xHeUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80ZTVkMDgtNDI2Ny00Yzc4LTg2MmIt
MGNiNTYyZjk4YTUyLzEvTV9HQ05MS3pTdGFwdkgyeWF3RmNKRlpMR3pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC80ZTVkMDgtNDI2Ny00Yzc4LTg2MmItMGNiNTYyZjk4YTUy
LzEvSVphaDkxRG1QcXoyZF9mejUzM0N4S0xHeUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXa4oAwQA
wyNRMA0GCSqGSIb3DQEBCwUAA4IBAQBKbnnREhAkvJfVFKmKckBgCzGZQZu/jswg
RRJaf7S5qawgyHKYjIgzTOFev/+YHrLymMtSsLcYBP6BBBqNsp4ZQc5a4IuEq3r0
ucC05zORUUbbCcg0tYne5DK7cHamtJiLyzzzf4CV5ier/BFPObbVGPDycJbYLX0P
go018PBitOeDyahu+muZRryNkqm63O0qaEHZBkrhj5Yg2R285o4f/P2ZIKRCGgis
K4IIA/vPGC+sRHC92KVBpCRsUIfGqnj6sNREIw5+gD/I8pL7PQhw2SvKqxTa+8cE
0SviHjvSWlBYEEifgOT1b2cy0VHf0UNyayzceZ1GGUSGn8wkxU8F
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:11:39 2026 by rpki-client