Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/gFSeIE8RfD29-XeFVWV7LZwgaBs.roa
File: gFSeIE8RfD29-XeFVWV7LZwgaBs.roa (raw, json)
Hash identifier: mJAnl2luIMfyFCce8fHzBb1+b8q7GBI6xpdUtTEqAdo=
Subject key identifier: 80:54:9E:20:4F:11:7C:3D:BD:F9:77:85:55:65:7B:2D:9C:20:68:1B
Certificate issuer: /CN=7b48945b9d716cd47fbde2860d8100fcda987496
Certificate serial: 019F3D72391478B71E4F4EC81FD6F2AB79FA
Authority key identifier: 7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/gFSeIE8RfD29-XeFVWV7LZwgaBs.roa
Signing time: Tue 07 Jul 2026 16:38:43 +0000
ROA not before: Tue 07 Jul 2026 16:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13246
IP address blocks: 95.130.16.0/21 maxlen: 24
95.130.16.0/24 maxlen: 24
95.130.17.0/24 maxlen: 24
95.130.20.0/24 maxlen: 24
95.130.22.0/24 maxlen: 24
185.181.192.0/22 maxlen: 22
185.181.195.0/24 maxlen: 24
2a02:2940::/32 maxlen: 32
2a02:2940:3::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:72:39:14:78:b7:1e:4f:4e:c8:1f:d6:f2:ab:79:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b48945b9d716cd47fbde2860d8100fcda987496
Validity
Not Before: Jul 7 16:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80549e204f117c3dbdf9778555657b2d9c20681b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:47:ee:4e:7e:b7:f0:74:4f:d5:09:d4:6c:6f:
2d:24:1f:e8:5d:c1:4b:50:f5:05:78:c1:da:17:09:
ea:19:cd:b6:86:76:8b:75:da:7a:d2:5a:58:01:bc:
f8:cf:f1:51:d3:10:2e:81:af:b1:da:b2:38:a1:20:
c1:d2:ce:bb:11:d4:a3:31:24:de:75:08:b9:c3:a4:
18:c8:85:53:08:d7:ff:13:67:8c:54:81:86:0d:4f:
7c:66:4a:4c:da:d0:80:1c:42:67:05:40:6a:6c:04:
36:c8:f5:c6:f4:63:3c:61:0f:15:4e:6e:33:a5:0c:
94:ee:9f:34:f3:3b:53:67:29:22:c6:02:b6:13:db:
de:a9:53:79:bd:8b:8b:a1:18:26:a6:93:38:48:5e:
18:8b:80:2b:4a:61:7d:cc:ca:6c:c9:94:43:1e:b5:
4f:0a:1f:8d:3d:5d:1c:b2:19:3d:fc:a1:2d:b4:7e:
d9:95:79:c8:70:25:36:65:fd:6c:51:fb:49:cd:a3:
25:cb:3c:e9:2d:ae:9b:38:a4:ed:63:70:eb:35:0b:
de:a9:e6:fd:df:b2:f6:62:64:84:ee:cc:0f:3c:e5:
4d:0f:f4:18:3d:8a:17:b5:60:85:39:bc:e9:dd:f1:
31:6a:eb:e0:61:81:18:c4:a4:92:73:36:6e:e3:91:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:54:9E:20:4F:11:7C:3D:BD:F9:77:85:55:65:7B:2D:9C:20:68:1B
X509v3 Authority Key Identifier:
keyid:7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/gFSeIE8RfD29-XeFVWV7LZwgaBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.16.0/21
185.181.192.0/22
IPv6:
2a02:2940::/32
Signature Algorithm: sha256WithRSAEncryption
45:44:04:be:2a:5a:03:2d:24:f8:86:57:2b:12:65:01:ae:b9:
ed:60:2e:21:db:68:b1:1c:33:1b:3d:1d:a7:2d:07:c0:3d:a3:
df:37:51:b4:47:bf:3c:52:d9:a5:5e:46:eb:8d:fa:8b:8b:6d:
b0:98:dd:d6:95:9f:05:3a:3a:c0:2c:f9:b8:29:83:53:4a:53:
76:42:0c:8c:f0:4b:e8:cb:94:d7:b6:91:c0:3f:69:4f:1a:ed:
64:f4:33:01:a7:fd:9a:b4:5d:f4:ee:73:be:33:24:0d:16:22:
c8:a2:e1:88:6a:89:22:b0:92:08:4e:b3:eb:0b:6e:59:e0:b8:
68:3a:e3:a9:4e:7f:22:ee:b4:48:fe:16:cc:71:24:80:d1:5d:
b3:5d:a7:49:08:a3:93:30:e5:b9:e8:34:56:97:ff:e5:f0:14:
72:bf:0c:28:c5:21:01:b9:18:7b:31:23:24:87:91:71:95:0a:
14:a9:df:02:ff:05:22:50:8f:d1:17:e4:16:bc:53:68:54:93:
1b:c2:aa:2c:9e:78:87:b5:de:2b:73:a9:96:ae:c5:b7:ea:a6:
76:c1:0a:f9:f4:09:b7:ca:04:49:ef:fb:49:ed:b6:81:c6:f4:
52:50:5e:6b:6f:de:06:dc:74:d3:53:5a:07:ec:d1:d8:bd:a1:
54:72:bb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:57 2026 by rpki-client