Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/1gumHnj6OopnbaO5OKnK9usnN0c.roa
File: 1gumHnj6OopnbaO5OKnK9usnN0c.roa (raw, json)
Hash identifier: jMf0UCwwHvdR+RYZ5nO/gYyfGV7EK/TsaRPXPqyAslg=
Subject key identifier: D6:0B:A6:1E:78:FA:3A:8A:67:6D:A3:B9:38:A9:CA:F6:EB:27:37:47
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 01A09F1F0CDED076F9281EDA1139869AD08D
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/1gumHnj6OopnbaO5OKnK9usnN0c.roa
Signing time: Mon 14 Sep 2026 08:53:27 +0000
ROA not before: Mon 14 Sep 2026 08:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51468
IP address blocks: 46.30.208.0/21 maxlen: 21
77.91.212.0/22 maxlen: 22
77.111.240.0/22 maxlen: 22
91.198.169.0/24 maxlen: 24
91.221.196.0/23 maxlen: 23
104.37.32.0/21 maxlen: 21
185.10.8.0/22 maxlen: 22
185.10.8.0/23 maxlen: 23
185.10.10.0/24 maxlen: 24
185.10.11.0/24 maxlen: 24
185.164.12.0/22 maxlen: 22
193.202.110.0/24 maxlen: 24
195.47.247.0/24 maxlen: 24
195.206.121.0/24 maxlen: 24
2001:67c:3c0::/48 maxlen: 48
2001:67c:28cc::/48 maxlen: 48
2a02:2350::/32 maxlen: 32
2a03:53c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:1f:0c:de:d0:76:f9:28:1e:da:11:39:86:9a:d0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Sep 14 08:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d60ba61e78fa3a8a676da3b938a9caf6eb273747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:5c:9a:e9:57:de:4d:df:19:bb:b0:30:8e:
eb:b3:26:94:03:a9:4c:e7:62:a8:03:34:b4:64:92:
1f:ba:3b:12:c8:25:8f:c3:d3:d0:ea:ef:66:c6:74:
59:b3:07:ab:b3:14:fb:48:84:5b:09:56:3f:05:9d:
3f:0f:71:d4:ac:0b:41:76:6f:1b:46:c3:e5:37:ed:
5f:17:10:60:93:6d:12:35:62:f9:50:a4:ef:df:a9:
5b:e8:1b:92:ce:73:86:2e:91:8a:fc:da:23:e7:f8:
cb:ba:68:de:d3:58:4e:eb:5f:14:32:97:42:e5:3c:
59:ea:3f:a3:56:98:ec:4f:43:6d:c1:00:16:6f:28:
e0:ee:a6:91:28:24:22:0a:65:51:34:05:57:89:5f:
de:1f:8f:af:6d:45:06:98:d9:0d:91:7d:31:60:c6:
24:69:9d:de:27:92:12:ad:be:40:a3:45:c7:22:41:
64:f3:8d:2d:c8:cf:da:1a:b6:4b:94:7d:29:b6:0b:
92:53:7c:bc:cb:c1:9c:fa:3f:b2:5f:4b:78:2d:a6:
f7:91:17:96:4e:c9:2b:89:b9:ca:48:29:5c:2e:36:
2b:24:d1:4e:a4:d8:f6:76:e1:ef:37:6d:a3:ac:84:
69:c2:7a:8b:70:80:40:df:da:04:a9:b7:c0:24:91:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0B:A6:1E:78:FA:3A:8A:67:6D:A3:B9:38:A9:CA:F6:EB:27:37:47
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/1gumHnj6OopnbaO5OKnK9usnN0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.208.0/21
77.91.212.0/22
77.111.240.0/22
91.198.169.0/24
91.221.196.0/23
104.37.32.0/21
185.10.8.0/22
185.164.12.0/22
193.202.110.0/24
195.47.247.0/24
195.206.121.0/24
IPv6:
2001:67c:3c0::/48
2001:67c:28cc::/48
2a02:2350::/32
2a03:53c0::/32
Signature Algorithm: sha256WithRSAEncryption
82:cd:ab:71:97:33:5a:bb:05:3a:38:a4:c3:25:77:5d:9e:f6:
59:12:29:8f:e3:25:d8:c7:a4:6c:b8:40:5b:a5:7b:ca:9c:5b:
f0:81:4c:8b:2d:28:c0:b3:27:99:1c:41:00:f1:7e:01:40:e2:
c4:2a:1d:60:e0:df:a9:82:81:81:a6:8b:27:fb:bb:90:ef:d8:
8d:38:b1:b3:75:85:9b:3d:47:0e:3b:ac:fe:2e:21:9b:3c:95:
28:f0:42:a9:47:b1:09:eb:f9:16:df:e7:07:d3:50:13:43:cf:
1c:1f:b9:19:ea:26:a5:59:23:e8:bf:76:b7:bf:94:f8:d7:4a:
71:d3:3b:06:55:17:3d:40:d7:8a:61:c3:20:02:85:6e:10:34:
c0:42:b3:1b:e2:4c:f7:d9:06:f8:60:fe:71:08:70:9c:87:69:
cd:95:af:3a:57:de:8c:d8:af:61:f8:39:4e:9a:f5:bc:c8:e6:
48:5f:1a:7b:b9:f2:f9:a4:f4:4b:79:e6:c9:8f:1a:b3:5d:6d:
f9:6e:04:fb:f6:d4:c8:a1:73:30:de:1b:95:5c:b6:79:32:76:
c9:01:1c:53:aa:35:1b:f9:9c:25:b8:df:48:f6:2f:e6:36:68:
a3:af:b9:0b:ff:ba:2f:7d:05:ed:a7:cd:f4:5e:d4:07:b3:64:
31:d1:0f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:04:23 2026 by rpki-client