Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ggW9AqJ9Rpkl__HkDy_mqDrHQpY.roa
File: ggW9AqJ9Rpkl__HkDy_mqDrHQpY.roa (raw, json)
Hash identifier: EVrS8tIy8ZxaEnkaIt5Jdwc+23x2snRJLtwQx4+9/ck=
Subject key identifier: 82:05:BD:02:A2:7D:46:99:25:FF:F1:E4:0F:2F:E6:A8:3A:C7:42:96
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A09C523483722696EAE275176CEDDFDA7D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ggW9AqJ9Rpkl__HkDy_mqDrHQpY.roa
Signing time: Sun 13 Sep 2026 19:50:28 +0000
ROA not before: Sun 13 Sep 2026 19:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 80.253.249.0/24 maxlen: 24
84.21.189.0/24 maxlen: 24
85.209.129.0/24 maxlen: 24
195.66.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:52:34:83:72:26:96:ea:e2:75:17:6c:ed:df:da:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 13 19:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8205bd02a27d469925fff1e40f2fe6a83ac74296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:89:58:76:0c:6a:b2:6b:87:3f:a9:30:cc:
31:de:04:a8:a4:59:68:ba:97:88:aa:8e:20:05:51:
d9:b2:ce:16:1a:9e:ff:2c:6c:54:c0:b0:f5:fa:3c:
7a:30:66:c7:f3:72:19:8d:b1:7d:41:23:f7:61:c2:
03:c6:4d:e4:24:bc:7c:b6:dc:d4:8d:f9:f5:2c:3e:
dd:fb:15:c8:1b:0c:7a:f5:3b:4c:56:3b:8c:9d:96:
ea:e8:18:e6:6c:58:aa:0e:3b:bf:99:90:89:d7:c4:
26:3f:0d:77:4b:a6:18:ff:df:66:0c:d9:5d:e8:01:
6e:19:65:8f:0a:d1:46:0b:5e:fc:25:f8:89:f3:19:
40:74:b0:aa:f0:be:f7:dd:e7:43:ea:85:d0:d5:1b:
96:55:40:a5:f6:b1:cf:87:30:64:14:78:5b:a5:1f:
a3:69:50:ea:aa:b1:71:54:85:ac:0f:40:68:4f:c7:
4a:06:4b:e2:99:c1:89:08:5b:75:c8:ad:a4:1a:de:
ed:ca:3d:b0:ba:e8:29:b6:e5:09:54:1b:97:e5:b4:
c6:3b:a4:f4:30:0c:bd:83:03:2b:e9:7e:ea:6b:24:
c0:c3:93:84:1b:fa:4b:e5:e7:f0:94:57:a9:f4:3f:
a6:06:8e:2b:ce:3e:28:ed:17:c2:fd:d5:6a:d3:c7:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:05:BD:02:A2:7D:46:99:25:FF:F1:E4:0F:2F:E6:A8:3A:C7:42:96
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ggW9AqJ9Rpkl__HkDy_mqDrHQpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.249.0/24
84.21.189.0/24
85.209.129.0/24
195.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:fa:f9:bf:a6:99:cc:40:0b:67:c3:a2:d2:89:fc:4b:1e:8c:
c6:1d:7f:c8:2d:83:6b:11:93:4b:b1:0e:e1:5c:46:f6:a4:46:
3b:4f:e8:96:f4:31:11:80:4b:c0:7b:af:22:b6:74:7e:e8:1c:
26:60:7e:35:74:fc:d8:b3:19:a3:b4:e8:36:66:7c:21:a1:f9:
67:67:f3:1b:21:f4:58:4d:33:df:b9:97:04:1a:74:0f:3f:5c:
7b:97:63:5d:a3:98:30:4b:55:46:ed:fa:59:f0:a4:9f:ec:bb:
f2:c8:bb:c8:0a:30:e4:1a:2f:2c:2c:fe:b6:4f:a9:00:61:d6:
4c:22:77:86:87:e1:7a:60:9b:23:95:85:9c:56:cc:ea:91:71:
d1:ee:f2:ed:54:5b:5f:7a:2d:85:b5:95:4d:b7:cc:52:6e:72:
f5:eb:05:48:8e:61:6b:71:1a:7c:17:d0:20:a8:45:76:51:48:
ee:72:b2:fd:18:43:22:f8:31:1d:c2:47:68:ff:23:45:b3:fc:
27:64:8e:42:64:b8:25:c8:a6:d0:04:ae:48:c2:a1:db:4f:7b:
00:a1:9f:e4:bb:61:15:64:a8:aa:fb:cf:bf:37:93:bf:ae:9c:
e6:f7:9c:d8:c6:53:4a:43:ed:b1:09:da:73:22:0c:0c:b7:4b:
a4:0a:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:22:11 2026 by rpki-client