Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/GmucsYsgUg_nXvMuWLdLqSzQHJY.roa
File: GmucsYsgUg_nXvMuWLdLqSzQHJY.roa (raw, json)
Hash identifier: CFKTcDyjMYXscYD1tZ1HguJEq1D5bBH8Z9Z5x4buLFk=
Subject key identifier: 1A:6B:9C:B1:8B:20:52:0F:E7:5E:F3:2E:58:B7:4B:A9:2C:D0:1C:96
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E44C4024BE8064BACA8CFA9B85E62298F
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/GmucsYsgUg_nXvMuWLdLqSzQHJY.roa
Signing time: Wed 20 May 2026 09:42:36 +0000
ROA not before: Wed 20 May 2026 09:42:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 192.109.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:c4:02:4b:e8:06:4b:ac:a8:cf:a9:b8:5e:62:29:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 20 09:42:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a6b9cb18b20520fe75ef32e58b74ba92cd01c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:61:b2:73:a6:75:4c:6e:2a:0f:0e:98:e3:
26:5e:7e:9d:49:03:f2:91:c8:ec:66:9d:e2:b0:7d:
e4:4b:b3:b7:76:43:04:17:67:00:31:5a:63:d3:8e:
f7:c0:56:02:0a:23:1e:4e:bb:16:af:ad:08:48:39:
d7:7a:d6:20:6d:3a:ac:2a:8b:e0:97:a2:87:82:06:
d1:f8:25:1c:6d:fc:ca:22:fc:4e:52:ff:30:cb:99:
c6:8d:4b:dc:ab:38:d0:d6:c6:a5:92:92:a2:88:cd:
f7:77:bd:1f:f2:da:bb:38:0e:cc:ba:d0:00:e9:2c:
6e:5e:8a:f0:39:29:27:93:63:ed:0e:b8:6e:5b:ca:
0c:2b:52:70:86:06:f2:6f:02:7d:37:4e:0e:1c:92:
17:27:f3:e3:1f:37:80:9e:71:8b:9d:80:29:1c:55:
82:1f:b8:81:06:25:f5:92:70:e3:0e:2d:36:7d:6d:
2c:17:de:fd:18:1f:9b:3f:11:40:51:2b:8a:6c:50:
51:c7:69:07:43:3c:fb:2d:6e:f3:4f:dd:b2:41:f2:
62:d5:ff:89:9a:54:1e:9c:b3:2e:c3:06:49:84:2c:
29:2d:80:00:9a:a7:2d:47:fa:9a:07:a9:70:4a:44:
4d:ac:b0:bb:b6:83:a8:58:9b:31:a5:fc:c4:e9:ac:
c8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6B:9C:B1:8B:20:52:0F:E7:5E:F3:2E:58:B7:4B:A9:2C:D0:1C:96
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/GmucsYsgUg_nXvMuWLdLqSzQHJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.206.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:74:c5:ed:97:d5:f0:ca:6b:11:9d:26:21:aa:a3:24:e1:43:
ab:9d:04:4b:0a:d5:47:05:0f:85:54:50:b7:70:c6:fe:a4:3c:
c2:06:02:9d:d4:cb:a6:15:f3:4d:ab:8e:61:f1:c8:f3:65:4c:
7d:e8:6a:2d:10:35:e9:55:d5:fb:aa:6a:2d:3b:cb:d6:ce:43:
6e:32:58:22:7e:ad:51:cc:75:82:bb:96:e2:76:aa:0a:09:6a:
4c:70:ec:8f:20:09:81:43:5f:31:d8:8b:00:c2:57:9e:da:be:
c2:f1:b5:1e:d1:c8:ff:c8:87:b8:1e:59:90:8c:f7:d1:66:75:
9f:27:96:fe:8d:58:a2:4f:a0:cc:fa:7f:04:53:e4:89:be:9f:
95:7d:be:4c:9f:47:5f:81:8e:7d:8f:29:75:19:8b:b4:95:74:
5d:61:6b:e9:50:f5:c7:9c:1c:cf:03:ad:c9:30:67:5c:bd:17:
e4:bd:6a:d4:43:94:a6:0d:1c:42:7f:91:d1:d3:51:22:54:8c:
9c:44:f9:16:d9:03:27:e6:37:56:5c:74:96:0f:6d:76:b2:85:
4a:92:47:83:22:cc:e6:dc:63:39:ae:8a:c8:58:29:59:93:45:
53:f5:cf:dd:27:0b:33:59:73:87:72:66:0e:de:31:85:19:87:
20:e3:b8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 01:34:24 2026 by rpki-client