Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/gzC5cDg-uB1dPX3dGsiEhW7fD00.roa
File: gzC5cDg-uB1dPX3dGsiEhW7fD00.roa (raw, json)
Hash identifier: vQbqEGTq2U/QqR6/EYIM8eMnRGnw756aRoerxRFX+wM=
Subject key identifier: 83:30:B9:70:38:3E:B8:1D:5D:3D:7D:DD:1A:C8:84:85:6E:DF:0F:4D
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368FD57E6DDC79F8523811AF9E7FAFF
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/gzC5cDg-uB1dPX3dGsiEhW7fD00.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203004
IP address blocks: 89.223.100.0/24 maxlen: 24
92.255.99.0/24 maxlen: 24
2a04:ac00:2::/48 maxlen: 48
2a04:ac00:9::/48 maxlen: 48
2a04:ac00:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fd:57:e6:dd:c7:9f:85:23:81:1a:f9:e7:fa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8330b970383eb81d5d3d7ddd1ac884856edf0f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:8f:0e:90:e0:cd:d9:dc:c3:b8:83:c0:13:
e4:13:5e:a2:77:4e:5f:74:ca:a2:90:b0:45:c9:1f:
82:d6:18:bb:09:51:f8:54:eb:a0:61:98:b9:8b:90:
d2:b0:43:a1:78:cf:b5:6c:22:a7:66:94:ca:cb:0d:
f8:36:0d:42:40:5c:e9:a4:33:e5:a6:fc:bc:cf:09:
5d:85:7a:13:4a:ba:21:d8:4e:d0:f0:ff:85:0b:09:
80:dc:3b:fe:43:dd:87:d0:66:f5:20:e5:a8:3f:ac:
82:0f:8d:e2:c2:1b:d9:74:43:a2:b0:d2:87:0e:ff:
41:ae:cf:da:43:dd:5b:c8:58:eb:88:7a:1b:00:b4:
07:06:16:8c:07:7e:8f:f4:b6:9e:a5:ba:16:57:ef:
64:d9:5d:37:f2:a8:0d:07:d0:2d:38:af:bf:bb:bc:
d6:81:10:c0:d5:9a:22:af:9e:75:79:47:8b:b1:4d:
35:c5:e3:78:f7:a6:51:36:36:f9:4d:5c:2a:27:07:
b4:9d:c2:2e:38:99:af:ea:80:ca:92:b4:a5:76:23:
51:fc:20:92:fe:71:f0:11:33:1d:64:d3:e5:5f:6a:
cd:f7:fa:08:8a:53:d6:fc:30:40:c9:ca:8f:8a:07:
a6:e1:3c:bc:bb:8d:d9:dd:38:72:57:48:6f:c4:4f:
f0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:30:B9:70:38:3E:B8:1D:5D:3D:7D:DD:1A:C8:84:85:6E:DF:0F:4D
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/gzC5cDg-uB1dPX3dGsiEhW7fD00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.100.0/24
92.255.99.0/24
IPv6:
2a04:ac00:2::/48
2a04:ac00:9::-2a04:ac00:a:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
50:ed:a1:11:49:9e:56:4e:c8:4c:5c:21:2b:65:d9:15:2d:6b:
2c:d8:b1:7a:93:8a:7d:77:c9:12:43:8e:b6:56:6b:26:71:b6:
e0:15:49:0f:65:9e:22:bf:02:34:63:64:98:da:fb:62:1a:f2:
3a:8a:6b:0e:a7:a0:ba:89:0f:d5:ff:64:8a:f4:27:87:07:46:
e1:2a:cb:22:dc:dc:49:e8:81:b8:20:97:1f:a9:85:38:78:b3:
85:48:db:bc:62:11:9c:d0:44:c5:44:50:cb:5f:7a:9a:f4:15:
3a:5d:8b:85:90:3f:8e:40:c8:6f:9f:66:50:14:40:de:c8:43:
72:dd:fc:33:ca:02:ae:d8:de:c2:fc:4f:a4:e0:13:4a:3a:db:
a8:dc:66:3a:63:17:db:15:ad:ba:2d:16:81:10:7c:c4:a3:30:
b7:8a:a8:49:1b:ee:9d:b7:c8:2b:c5:26:63:be:da:05:42:7d:
ef:e6:99:37:58:5f:17:ed:e0:b3:dd:f4:eb:a8:8c:8c:33:76:
70:a3:d7:4b:2e:9e:21:b1:c1:44:1c:a1:f3:aa:a3:7b:96:7c:
9c:8b:45:5d:cb:d8:06:9d:95:4f:5b:71:18:2e:f7:55:36:4e:
73:32:6a:ed:87:2f:f7:4d:b1:a8:f6:b6:02:91:5e:31:08:9b:
9e:b9:d6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:42:08 2026 by rpki-client