Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/gSlaPw018DNPuMxCsveqA8oQUsY.roa
File: gSlaPw018DNPuMxCsveqA8oQUsY.roa (raw, json)
Hash identifier: 0+yjCTwe2aAK7n4AkPNcQnffX1JuMjM0FZBSULYc1vQ=
Subject key identifier: 81:29:5A:3F:0D:35:F0:33:4F:B8:CC:42:B2:F7:AA:03:CA:10:52:C6
Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial: 019E1BE646DF7E08EA813B40E1E77B6C7B77
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/gSlaPw018DNPuMxCsveqA8oQUsY.roa
Signing time: Tue 12 May 2026 11:15:36 +0000
ROA not before: Tue 12 May 2026 11:15:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51200
IP address blocks: 83.219.236.0/24 maxlen: 24
83.219.237.0/24 maxlen: 24
83.219.252.0/22 maxlen: 22
83.219.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:e6:46:df:7e:08:ea:81:3b:40:e1:e7:7b:6c:7b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Validity
Not Before: May 12 11:15:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81295a3f0d35f0334fb8cc42b2f7aa03ca1052c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:bd:4f:66:06:2c:cc:3e:39:0e:76:1a:72:
6b:44:27:05:61:ab:34:22:50:70:a3:18:27:56:94:
68:95:fc:7f:33:f8:42:4d:80:ae:9a:68:ca:74:96:
1d:68:a0:69:dc:9e:7d:07:bb:5c:06:ca:f1:49:d0:
e3:ab:3b:b6:77:fd:84:c1:df:09:61:66:3a:5c:56:
de:9b:af:80:b0:c8:5a:7c:d0:93:be:50:a6:4a:12:
25:57:77:87:bb:4f:4a:6a:64:8c:24:8e:aa:66:c2:
0e:29:c5:8c:3b:62:92:5f:e8:77:d5:3d:d0:99:75:
d8:f6:a6:de:96:02:be:f0:bf:e3:5a:2d:59:86:77:
df:59:e5:74:7f:3e:91:28:24:42:2e:c7:ee:bf:f6:
5f:a0:6e:17:ad:76:69:f3:38:06:9b:34:2c:4d:4a:
9d:84:85:78:c9:15:70:54:8e:a7:74:b7:15:eb:e9:
fd:92:00:f8:fe:64:4c:07:ad:a9:f3:0e:b1:3e:ae:
71:3c:2a:9a:ac:7e:44:7d:58:64:b0:e8:47:36:9f:
bc:0f:c4:2c:0c:2b:95:ec:2b:55:8e:42:c7:ea:35:
36:eb:71:3b:4f:22:d0:a2:21:bc:c3:21:d8:37:ca:
7e:c8:57:95:31:16:47:50:b3:08:da:62:bf:31:f3:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:29:5A:3F:0D:35:F0:33:4F:B8:CC:42:B2:F7:AA:03:CA:10:52:C6
X509v3 Authority Key Identifier:
keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/gSlaPw018DNPuMxCsveqA8oQUsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.236.0/23
83.219.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:a5:43:35:55:c1:a1:ed:f4:64:d5:5b:fe:ba:b1:f6:ff:5c:
62:66:ff:62:d1:ed:2d:fb:cd:e9:c6:6c:0c:3f:13:e9:83:81:
fc:ae:60:11:c1:f6:7a:08:7b:bf:3b:bf:ed:e2:4a:e9:22:b5:
d5:c5:7a:61:18:13:94:cc:60:a0:0a:70:56:08:18:33:d7:b6:
c0:b6:31:1b:14:d8:45:b0:58:8c:bc:c9:3d:e6:36:a4:c5:2d:
76:f8:8e:36:bd:5c:fa:d5:c3:be:f9:8e:e3:bb:4e:f5:66:ba:
87:6e:4d:8a:5e:bc:44:36:68:c4:b7:64:3f:ff:ee:94:70:f5:
71:ba:df:a9:f5:8b:a6:aa:2d:07:68:d4:ae:8f:43:86:7b:aa:
c0:a9:ca:fd:0e:b0:01:8f:91:b1:8a:dc:60:5f:50:1f:71:4a:
68:80:d2:7b:46:44:7a:bf:6b:c5:67:21:c0:eb:54:80:90:3b:
3a:f7:68:ae:17:3d:59:f2:53:0d:2d:6c:e9:34:b0:ba:3f:9f:
d8:43:56:51:87:6f:42:56:27:c9:ca:12:7f:76:ea:ab:83:a7:
23:4f:bc:f5:30:8b:8a:a0:67:4a:2c:88:5f:f1:09:82:ad:b0:
21:55:c5:51:c8:7f:9e:90:6a:ae:81:28:17:f3:8f:26:98:18:
14:e7:c3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:39 2026 by rpki-client