Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/GtNPLSqRjUfiSLxRi-Ce9sVuTGQ.roa
File: GtNPLSqRjUfiSLxRi-Ce9sVuTGQ.roa (raw, json)
Hash identifier: JB1pYw57Yr1bAJrz8smCssS+SCyFT5zXYqbhByC3w8s=
Subject key identifier: 1A:D3:4F:2D:2A:91:8D:47:E2:48:BC:51:8B:E0:9E:F6:C5:6E:4C:64
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 019EC7D035186620B7513FD3BC628D4F85DB
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/GtNPLSqRjUfiSLxRi-Ce9sVuTGQ.roa
Signing time: Sun 14 Jun 2026 20:26:11 +0000
ROA not before: Sun 14 Jun 2026 20:26:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21100
IP address blocks: 5.34.180.0/23 maxlen: 23
46.28.65.0/24 maxlen: 24
46.28.66.0/24 maxlen: 24
46.28.68.0/24 maxlen: 24
46.28.69.0/24 maxlen: 24
82.118.16.0/24 maxlen: 24
82.118.19.0/24 maxlen: 24
185.14.28.0/22 maxlen: 22
195.123.216.0/21 maxlen: 21
195.123.236.0/24 maxlen: 24
195.123.237.0/24 maxlen: 24
217.12.200.0/23 maxlen: 23
217.12.208.0/23 maxlen: 23
217.12.215.0/24 maxlen: 24
217.12.218.0/24 maxlen: 24
217.12.219.0/24 maxlen: 24
217.12.220.0/24 maxlen: 24
2a02:27a9::/32 maxlen: 32
2a02:27ab::/32 maxlen: 32
2a02:27ae::/32 maxlen: 32
2a02:27af::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c7:d0:35:18:66:20:b7:51:3f:d3:bc:62:8d:4f:85:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Jun 14 20:26:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ad34f2d2a918d47e248bc518be09ef6c56e4c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:bf:73:65:77:49:13:22:52:95:80:a1:d0:
a7:20:29:6f:7d:51:d5:88:48:ba:72:38:e8:61:c8:
f8:5d:f9:a0:b5:97:14:93:f4:96:b4:e3:df:3f:c9:
dc:e3:eb:3d:f9:db:bc:14:5c:bc:92:04:3d:ab:1e:
dc:53:ba:2b:57:23:7f:cc:9d:01:1f:84:2f:8b:69:
03:18:79:8b:34:fd:44:40:13:3c:de:3c:28:5c:a9:
99:88:6e:0d:46:fe:9b:c1:cf:02:98:ae:a3:f6:12:
61:3c:92:17:a0:26:0b:ab:6a:4f:25:29:62:b6:b2:
0d:93:c6:8a:82:4f:e7:90:76:d5:a2:3b:a0:13:c5:
b2:eb:1e:fb:ba:f1:38:3c:68:25:ec:0a:5f:a7:35:
3e:70:ce:1f:9c:74:5c:33:82:d5:e0:7b:c8:33:98:
93:54:94:81:c9:a2:27:5e:fd:59:38:51:eb:e2:d0:
98:f3:92:eb:fb:42:98:a0:9f:e6:e7:0b:36:e1:10:
30:66:21:ad:0f:86:97:b9:49:38:08:32:99:26:7e:
f2:75:b9:26:18:53:ec:ea:5b:eb:b1:62:16:1b:cf:
4b:8a:6f:21:d9:f1:5d:a3:f4:86:ad:59:97:83:af:
41:be:94:f5:50:56:e5:4e:48:48:08:c0:b8:d6:6d:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D3:4F:2D:2A:91:8D:47:E2:48:BC:51:8B:E0:9E:F6:C5:6E:4C:64
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/GtNPLSqRjUfiSLxRi-Ce9sVuTGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.180.0/23
46.28.65.0-46.28.66.255
46.28.68.0/23
82.118.16.0/24
82.118.19.0/24
185.14.28.0/22
195.123.216.0/21
195.123.236.0/23
217.12.200.0/23
217.12.208.0/23
217.12.215.0/24
217.12.218.0-217.12.220.255
IPv6:
2a02:27a9::/32
2a02:27ab::/32
2a02:27ae::/31
Signature Algorithm: sha256WithRSAEncryption
50:0c:3a:e1:22:7a:8f:88:eb:70:87:58:85:bb:57:08:44:c1:
04:fe:08:f1:04:c9:65:a9:ec:6d:26:c1:84:d1:71:44:0f:7a:
87:ad:9f:23:24:f8:d0:d8:72:c5:2c:fd:75:12:99:e5:1e:46:
95:cf:bb:67:61:1d:29:30:df:6a:67:a0:f2:68:a3:ab:a2:a9:
b4:65:6a:d5:fd:01:33:e0:55:3c:b0:63:c6:4a:f0:2d:da:6d:
57:86:a6:83:24:bd:7d:b8:02:5d:ab:67:86:12:ba:1e:f2:13:
4a:91:ab:f1:55:f6:b0:5d:04:9f:6f:61:e0:7d:45:fa:e7:6d:
9d:60:a6:8d:a6:64:71:0c:20:06:67:d8:4c:6e:aa:30:44:48:
bd:a3:12:ca:0b:7b:8b:e4:61:a3:4f:40:3a:24:f0:45:ca:64:
38:7b:52:38:2f:71:e1:33:17:de:01:03:3e:0f:5b:f2:8c:b8:
a6:96:3a:b3:01:13:bd:b5:79:4b:8b:cb:8d:24:61:10:7b:10:
fa:0b:ee:ca:f1:97:9f:5f:24:84:a2:85:04:91:f0:a9:e5:06:
4b:4f:0f:56:f3:50:b0:11:73:ee:e0:d7:f7:00:3a:f3:1f:a4:
9c:54:81:98:07:2a:03:d2:fb:6c:7e:af:71:8b:1e:f6:c8:66:
39:3f:d9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:49 2026 by rpki-client