Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/gzFffy0UFuAtfYIJyYz6bMPGu8E.roa
File: gzFffy0UFuAtfYIJyYz6bMPGu8E.roa (raw, json)
Hash identifier: YZ3gzvJlpzvXJs6xmk8MoAD+xCOjeprCTezveiZLpn8=
Subject key identifier: 83:31:5F:7F:2D:14:16:E0:2D:7D:82:09:C9:8C:FA:6C:C3:C6:BB:C1
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019CE21CA0F520E60D40C980BD31A02419B3
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/gzFffy0UFuAtfYIJyYz6bMPGu8E.roa
Signing time: Thu 12 Mar 2026 12:54:12 +0000
ROA not before: Thu 12 Mar 2026 12:54:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209489
IP address blocks: 85.132.4.0/24 maxlen: 24
85.132.5.0/24 maxlen: 24
85.132.13.0/24 maxlen: 24
85.132.29.0/24 maxlen: 24
85.132.30.0/24 maxlen: 24
85.132.31.0/24 maxlen: 24
85.132.36.0/24 maxlen: 24
85.132.37.0/24 maxlen: 24
85.132.63.0/24 maxlen: 24
85.132.64.0/24 maxlen: 24
85.132.113.0/24 maxlen: 24
85.132.114.0/24 maxlen: 24
85.132.118.0/24 maxlen: 24
94.20.35.0/24 maxlen: 24
94.20.36.0/24 maxlen: 24
94.20.37.0/24 maxlen: 24
94.20.38.0/24 maxlen: 24
94.20.39.0/24 maxlen: 24
94.20.48.0/24 maxlen: 24
94.20.61.0/24 maxlen: 24
94.20.82.0/24 maxlen: 24
94.20.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:1c:a0:f5:20:e6:0d:40:c9:80:bd:31:a0:24:19:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Mar 12 12:54:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83315f7f2d1416e02d7d8209c98cfa6cc3c6bbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:8c:1e:b5:58:e0:9f:4d:45:a7:27:39:ff:
8f:5a:8d:37:0a:be:35:7e:be:d8:47:50:e3:c1:dc:
2d:c7:a2:98:61:64:cc:6a:5b:ef:72:6d:70:0d:11:
e2:b3:c3:b6:32:50:b3:e2:ce:aa:ad:16:a5:fa:25:
d9:61:d7:f1:dd:15:66:24:7d:cd:8a:65:ab:2d:73:
98:89:e7:4f:2b:4c:ee:9f:45:56:8a:d2:3b:27:7f:
13:8f:c0:c0:c3:23:80:16:c6:78:6e:20:35:30:fb:
a1:37:9a:48:7f:92:ed:50:6d:c7:64:90:61:d0:e6:
06:b5:d5:1b:88:8b:e0:94:1c:f8:f1:77:73:a5:1b:
1c:19:d2:5d:3a:dc:53:91:43:fc:bd:0c:a3:5c:75:
60:68:93:1f:5b:35:e6:e9:87:b7:c1:30:45:c0:d0:
2f:d7:19:c6:c2:63:2d:80:50:c3:fb:36:9a:16:e0:
56:ba:88:cb:1b:20:6a:0b:f3:51:f3:b5:76:b5:8a:
77:3e:47:2e:1d:ab:d6:23:5d:e0:fb:e1:a1:23:90:
99:8b:f9:68:ff:c4:0f:c9:ca:17:93:27:e2:13:00:
fc:57:1a:b9:52:50:e6:c9:58:34:17:0e:4d:99:9b:
d7:86:d4:29:21:fb:cc:22:89:11:f4:82:f2:03:c5:
12:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:31:5F:7F:2D:14:16:E0:2D:7D:82:09:C9:8C:FA:6C:C3:C6:BB:C1
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/gzFffy0UFuAtfYIJyYz6bMPGu8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.132.4.0/23
85.132.13.0/24
85.132.29.0-85.132.31.255
85.132.36.0/23
85.132.63.0-85.132.64.255
85.132.113.0-85.132.114.255
85.132.118.0/24
94.20.35.0-94.20.39.255
94.20.48.0/24
94.20.61.0/24
94.20.82.0/24
94.20.189.0/24
Signature Algorithm: sha256WithRSAEncryption
41:22:d2:cd:22:50:f7:1d:78:47:3a:a3:93:48:19:74:ab:86:
77:13:ef:62:e6:ea:97:65:28:7f:05:4e:2a:3a:f4:8e:7e:8e:
57:30:6c:94:3e:ae:d9:44:cf:1e:a9:6b:5a:cb:ee:a5:08:ae:
67:78:5e:4d:3c:8a:de:f1:0f:d1:2f:d0:f3:08:22:e6:b6:b7:
47:c7:d3:42:04:7a:63:68:ed:e9:6c:e8:a4:1e:c2:4e:c7:df:
81:02:fc:fd:b4:e4:44:4c:55:1a:6b:03:28:98:a4:32:84:28:
9a:18:3b:12:de:4b:13:67:3d:7a:c6:57:fd:27:30:32:81:97:
89:5a:cb:7a:53:a0:46:96:3e:97:bf:16:4c:19:b6:44:ae:c0:
89:5a:a1:df:e6:7d:60:b1:c2:46:df:08:d3:e0:38:e8:ed:d2:
ad:79:6a:42:3e:89:31:39:50:3d:79:93:39:4a:c2:c6:57:50:
cd:f4:44:43:f6:5a:c9:45:55:67:c9:73:f2:3b:ee:f1:ef:ca:
28:d8:88:f2:0a:e7:09:6a:47:91:91:4e:32:cf:71:af:a0:c8:
b7:66:f8:af:3e:c9:7b:9f:0d:05:7f:90:0f:40:20:51:f5:8a:
a4:bb:b1:24:09:51:58:21:09:03:38:ca:bd:99:d7:34:c1:34:
c9:16:1a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:05 2026 by rpki-client