Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/GqnKTDZ_mcrAatfkX8lGwoS2jzg.roa
File: GqnKTDZ_mcrAatfkX8lGwoS2jzg.roa (raw, json)
Hash identifier: eSnwS1DQ7HdrWkTutWDxFLPnFL5oEqisvoEeBtrekYo=
Subject key identifier: 1A:A9:CA:4C:36:7F:99:CA:C0:6A:D7:E4:5F:C9:46:C2:84:B6:8F:38
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01A0D82CE134BC3E67B5BE3828633E50DDF5
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/GqnKTDZ_mcrAatfkX8lGwoS2jzg.roa
Signing time: Fri 25 Sep 2026 10:46:54 +0000
ROA not before: Fri 25 Sep 2026 10:46:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5065
IP address blocks: 195.35.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:2c:e1:34:bc:3e:67:b5:be:38:28:63:3e:50:dd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Sep 25 10:46:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aa9ca4c367f99cac06ad7e45fc946c284b68f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:a9:1b:1f:99:64:7e:0d:c4:6e:ff:f5:f6:
37:12:00:ae:1e:28:b9:b1:a3:f4:51:1e:09:d5:98:
bc:e5:2f:1a:dc:ff:45:96:6d:00:57:00:6f:db:54:
18:78:24:0a:6b:2f:5d:e0:9e:3e:48:d0:fa:a8:3f:
ce:76:bd:cb:3a:50:8f:1b:00:1b:ae:3d:bf:5a:c3:
3f:38:10:0e:98:1b:55:8c:bd:a9:f0:86:ac:6e:6a:
11:66:38:9b:9f:d7:19:23:96:19:1f:a2:c7:45:fd:
5e:b2:6f:21:60:1a:79:93:90:a3:49:00:ef:fd:8c:
58:e9:a6:6e:49:dc:7c:3f:40:70:a2:d9:1e:0c:0a:
6b:73:5f:42:61:01:7c:a4:a4:50:8c:63:20:1e:de:
24:23:07:d3:97:a1:2f:94:98:e5:40:2d:75:5e:c5:
a3:21:ec:2a:9d:06:61:ba:9c:cf:61:7f:b5:82:84:
4f:06:0f:0e:90:03:1d:c7:a1:7b:3c:6c:b9:3a:3b:
7a:ba:b5:b5:7c:6c:87:2a:d7:46:00:14:45:68:e7:
10:27:d9:1c:10:e4:40:92:17:30:f0:87:7f:ce:24:
80:1d:d7:21:4e:e2:c4:f1:90:43:71:fb:2e:65:ac:
fb:56:61:72:5a:30:35:73:e6:e8:c4:67:90:0b:99:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A9:CA:4C:36:7F:99:CA:C0:6A:D7:E4:5F:C9:46:C2:84:B6:8F:38
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/GqnKTDZ_mcrAatfkX8lGwoS2jzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:8d:61:56:74:e6:b4:b8:c7:86:27:0d:e2:d9:02:9d:14:97:
94:98:6c:97:75:68:da:6b:06:ec:48:d7:96:1e:c5:65:4f:61:
b7:45:ed:42:a8:79:af:1a:e9:66:4e:dd:59:f0:2b:dc:9e:3c:
bf:4b:ff:9b:b2:6d:b7:95:50:47:72:78:77:b0:6a:d6:14:ae:
90:05:38:79:95:27:82:f2:f4:46:01:d2:d2:ac:2c:51:fc:24:
ed:fc:8d:62:55:73:73:19:4c:00:7b:96:ef:54:3d:04:dd:8e:
ee:9f:34:8e:29:a7:46:bf:65:da:eb:a1:6f:b2:a9:5c:4d:e8:
77:3d:e2:f5:79:1a:b3:e6:cb:6d:d2:06:81:b5:58:82:87:92:
7a:c9:13:18:79:e9:5b:3b:eb:47:7b:62:02:ea:91:2f:8d:27:
88:56:54:7f:4d:2a:27:73:fd:c6:94:c5:1d:bd:5e:03:f5:10:
c8:e0:6d:eb:5b:35:a2:84:bc:75:b5:e7:da:0f:14:d2:fa:32:
20:bd:4f:fe:4c:15:55:8f:27:51:4e:ce:f8:e6:09:1a:d4:c0:
9c:6b:9f:06:53:ec:90:fa:70:da:91:b9:e4:53:71:5f:a2:18:
1d:f5:d7:e1:f1:0b:70:18:83:a5:4f:10:9f:a4:b0:ff:16:b9:
27:53:cd:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDYLOE0vD5ntb44KGM+UN31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGQwN2I0NWY3ZDgzMTI0YzlmOGMwZmFjMDNiZWMwMjQ2
OGIzN2UwHhcNMjYwOTI1MTA0NjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWE5Y2E0YzM2N2Y5OWNhYzA2YWQ3ZTQ1ZmM5NDZjMjg0YjY4ZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwypGx+ZZH4NxG7/9fY3EgCuHii5
saP0UR4J1Zi85S8a3P9Flm0AVwBv21QYeCQKay9d4J4+SND6qD/Odr3LOlCPGwAb
rj2/WsM/OBAOmBtVjL2p8IasbmoRZjibn9cZI5YZH6LHRf1esm8hYBp5k5CjSQDv
/YxY6aZuSdx8P0BwotkeDAprc19CYQF8pKRQjGMgHt4kIwfTl6EvlJjlQC11XsWj
IewqnQZhupzPYX+1goRPBg8OkAMdx6F7PGy5Ojt6urW1fGyHKtdGABRFaOcQJ9kc
EORAkhcw8Id/ziSAHdchTuLE8ZBDcfsuZaz7VmFyWjA1c+boxGeQC5kUawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBqpykw2f5nKwGrX5F/JRsKEto84MB8GA1UdIwQY
MBaAFF6NB7RffYMSTJ+MD6wDvsAkaLN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQt
NmM4ZmQ4NGJiNWY1LzEvR3FuS1REWl9tY3JBYXRma1g4bEd3b1MyanpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQtNmM4ZmQ4NGJiNWY1
LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyN4MA0G
CSqGSIb3DQEBCwUAA4IBAQCNjWFWdOa0uMeGJw3i2QKdFJeUmGyXdWjaawbsSNeW
HsVlT2G3Re1CqHmvGulmTt1Z8Cvcnjy/S/+bsm23lVBHcnh3sGrWFK6QBTh5lSeC
8vRGAdLSrCxR/CTt/I1iVXNzGUwAe5bvVD0E3Y7unzSOKadGv2Xa66FvsqlcTeh3
PeL1eRqz5stt0gaBtViCh5J6yRMYeelbO+tHe2IC6pEvjSeIVlR/TSonc/3GlMUd
vV4D9RDI4G3rWzWihLx1tefaDxTS+jIgvU/+TBVVjydRTs745gka1MCca58GU+yQ
+nDakbnkU3Ffohgd9dfh8QtwGIOlTxCfpLD/FrknU81Z
-----END CERTIFICATE-----
Generated at Wed Sep 30 19:51:57 2026 by rpki-client