Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/GS38DtcRNFiCDgomRRGuYwhjhtk.roa
File: GS38DtcRNFiCDgomRRGuYwhjhtk.roa (raw, json)
Hash identifier: vhy5Ct6d/4AD2NqH7XvOO/NEboMBe6M9200o1l76a98=
Subject key identifier: 19:2D:FC:0E:D7:11:34:58:82:0E:0A:26:45:11:AE:63:08:63:86:D9
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F2369120BFD08E50513E3D3FE5B4C5209
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/GS38DtcRNFiCDgomRRGuYwhjhtk.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204666
IP address blocks: 37.221.240.0/20 maxlen: 24
45.153.192.0/22 maxlen: 24
45.153.194.0/24 maxlen: 24
45.153.195.0/24 maxlen: 24
85.255.88.0/22 maxlen: 24
185.19.0.0/22 maxlen: 24
185.52.172.0/23 maxlen: 24
185.64.220.0/22 maxlen: 24
185.74.60.0/23 maxlen: 24
185.97.24.0/22 maxlen: 24
185.97.24.0/24 maxlen: 24
185.97.25.0/24 maxlen: 24
185.97.26.0/24 maxlen: 24
185.188.100.0/22 maxlen: 24
185.188.101.0/24 maxlen: 24
185.188.103.0/24 maxlen: 24
195.12.39.0/24 maxlen: 24
213.108.162.0/23 maxlen: 24
213.108.162.0/24 maxlen: 24
2a03:d840::/32 maxlen: 32
2a03:d840:fe02::/48 maxlen: 48
2a04:c740::/29 maxlen: 29
2a04:f940::/29 maxlen: 29
2a0a:10c0::/29 maxlen: 29
2a0d:3140::/29 maxlen: 29
2a0f:9300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:12:0b:fd:08:e5:05:13:e3:d3:fe:5b:4c:52:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=192dfc0ed7113458820e0a264511ae63086386d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:c4:e1:6d:0c:1d:4e:66:68:d3:66:2c:8d:
ce:11:88:72:f5:d3:c1:55:05:fc:f6:12:bc:5f:52:
92:69:4e:dd:d4:6b:c1:33:dc:ff:77:46:6d:d3:28:
31:1e:bd:68:c8:51:40:dc:40:32:f0:1b:36:7e:1e:
22:93:b9:ef:c5:84:a3:39:5d:ab:48:17:9b:d1:78:
1e:37:14:e2:1c:f4:76:fb:fa:c8:39:64:d4:14:79:
9a:b0:97:f4:04:03:ce:39:6f:c9:5b:6d:05:45:19:
5f:6f:a1:ec:a5:76:85:45:70:1c:eb:21:b4:30:aa:
58:d5:43:c3:69:65:09:51:3a:63:6f:12:b9:f0:65:
d5:b5:6a:8c:a4:df:7b:66:ca:1c:7a:1f:f3:c2:6d:
6a:74:8f:d1:b8:88:11:d9:ba:5f:94:f8:bf:98:cd:
ee:e4:ab:af:c4:8b:b0:1b:3f:cb:f3:d0:7d:bd:5e:
99:1f:2e:fd:f3:a0:c1:8c:5a:24:13:9b:06:0d:76:
8a:89:17:7d:d1:48:75:88:9c:ab:ca:91:9e:cc:0d:
2b:a0:54:c1:74:31:92:c9:a4:21:ec:30:f4:8b:61:
e9:22:e0:6f:07:5e:53:45:72:0b:0b:e9:60:92:d0:
e2:ce:65:8e:a4:12:c9:78:c3:3f:dd:3f:b7:ee:e5:
3d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2D:FC:0E:D7:11:34:58:82:0E:0A:26:45:11:AE:63:08:63:86:D9
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/GS38DtcRNFiCDgomRRGuYwhjhtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.240.0/20
45.153.192.0/22
85.255.88.0/22
185.19.0.0/22
185.52.172.0/23
185.64.220.0/22
185.74.60.0/23
185.97.24.0/22
185.188.100.0/22
195.12.39.0/24
213.108.162.0/23
IPv6:
2a03:d840::/32
2a04:c740::/29
2a04:f940::/29
2a0a:10c0::/29
2a0d:3140::/29
2a0f:9300::/29
Signature Algorithm: sha256WithRSAEncryption
6d:60:f0:ad:af:3e:1a:2e:24:e8:cb:8c:7a:df:33:a8:0d:3e:
52:af:cd:69:bb:3e:1f:a1:a9:bf:c9:87:cf:30:64:1a:80:ae:
86:07:41:b3:97:49:43:50:58:cd:d8:23:dd:f4:08:3d:34:4f:
39:3b:1c:d2:1c:ee:4a:60:82:ab:3a:5e:35:a2:07:7c:fd:aa:
bb:1e:c0:84:f3:6b:4b:62:48:ec:49:70:84:0d:e7:28:7d:5a:
10:53:04:7d:de:99:c1:3b:74:37:79:61:1a:46:4e:15:2d:02:
f6:10:cb:d7:a7:da:c1:5a:0a:90:ee:63:47:ef:ab:8b:b6:8c:
e6:31:d9:fe:f2:dc:1f:ee:9c:d6:8d:1f:35:51:24:eb:ee:0b:
6d:d4:06:05:01:3a:4c:f7:92:88:d6:a4:bf:3a:ba:d1:a0:3d:
88:1e:50:8b:45:b2:08:48:4e:c5:18:e0:e8:c3:fc:a1:ef:1a:
5b:01:ee:58:4c:94:81:76:f0:ba:90:10:d7:90:f2:8e:64:cd:
8c:75:2c:54:96:86:89:ea:9a:19:9c:d2:4f:63:4c:4e:6f:6e:
2b:a1:e9:04:b7:b1:8e:0d:97:f0:b7:66:1d:64:93:66:d6:44:
fa:d2:de:f0:62:c4:f2:24:50:d8:21:44:1d:45:31:e8:8e:40:
fe:24:05:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:26 2026 by rpki-client