Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/gnh1zYL6wx1xcKb00TMKT1XK17I.roa
File: gnh1zYL6wx1xcKb00TMKT1XK17I.roa (raw, json)
Hash identifier: n5cBdFBfRyFsHuUBfMSJwZdgK+vDhyUv1vuErWIVc/s=
Subject key identifier: 82:78:75:CD:82:FA:C3:1D:71:70:A6:F4:D1:33:0A:4F:55:CA:D7:B2
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A03DE70BA0F4D714BA84064FFB0BF2420F
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/gnh1zYL6wx1xcKb00TMKT1XK17I.roa
Signing time: Wed 26 Aug 2026 11:49:07 +0000
ROA not before: Wed 26 Aug 2026 11:49:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 91.201.87.0/24 maxlen: 24
91.227.114.0/24 maxlen: 24
160.19.94.0/24 maxlen: 24
2a10:3c83::/32 maxlen: 32
2a10:3c85::/32 maxlen: 32
2a10:3c86::/32 maxlen: 32
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:e7:0b:a0:f4:d7:14:ba:84:06:4f:fb:0b:f2:42:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 26 11:49:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=827875cd82fac31d7170a6f4d1330a4f55cad7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:50:28:b5:33:0d:e1:d1:bc:82:d3:0e:39:
b8:58:8e:2f:a1:77:95:61:88:4e:3a:73:18:e4:b9:
9a:80:fe:ed:56:1d:4b:4a:cf:98:3d:03:d1:db:11:
f9:94:b3:2c:cf:8e:82:ac:b4:92:a6:c7:53:32:4b:
34:a1:1d:ab:c1:4c:de:40:28:43:74:21:45:68:8d:
24:83:76:12:2f:ed:75:f8:8d:b5:6f:e8:51:72:7f:
ab:aa:e1:71:e5:66:6e:de:c6:1d:a8:7d:f9:ef:b0:
33:34:cf:80:d5:f5:ee:f0:44:08:3c:23:06:79:cf:
c6:69:5e:70:ae:22:fd:ad:c1:44:df:01:d8:a3:93:
3d:11:37:b0:50:af:a2:46:e4:5d:a9:a4:dc:87:7d:
a3:aa:7e:75:4c:bb:e0:db:ba:2e:52:12:16:45:59:
36:92:b1:2d:b8:9d:5d:4e:02:76:1f:cb:82:f5:9e:
1e:ab:14:0e:8a:fb:75:6c:0e:c7:fa:bf:00:76:39:
db:bb:46:97:0e:62:6f:db:92:3f:16:71:fc:e6:01:
8f:2a:17:fb:0c:aa:a6:bc:2c:21:7b:f1:6e:6c:e7:
45:c8:43:aa:bb:b0:19:97:bc:92:d5:05:af:39:ad:
59:23:94:37:dc:6a:b6:55:75:22:01:ae:08:ad:e6:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:78:75:CD:82:FA:C3:1D:71:70:A6:F4:D1:33:0A:4F:55:CA:D7:B2
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/gnh1zYL6wx1xcKb00TMKT1XK17I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.87.0/24
91.227.114.0/24
160.19.94.0/24
IPv6:
2a10:3c83::/32
2a10:3c85::-2a10:3c86:ffff:ffff:ffff:ffff:ffff:ffff
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c0::/29
2a13:bb40::/29
2a13:c340::/29
2a14:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
46:01:c4:49:e6:eb:cd:1b:71:11:35:64:4c:a6:28:76:45:cd:
6e:6b:01:06:cb:f1:68:29:91:03:9f:67:c2:3c:30:7f:57:1b:
f6:ca:77:ca:85:c9:c9:ff:e5:75:81:6a:af:67:2d:6b:2b:8f:
9c:46:75:71:f7:b7:ce:bd:4e:3c:18:90:14:ff:46:ed:83:ec:
06:83:08:6f:9e:64:86:a2:ec:ba:6b:c1:1a:a2:89:64:b7:36:
01:d1:c4:dd:93:e6:0a:c1:4d:8e:d4:83:89:4a:cc:63:e3:29:
85:c6:a5:da:5f:bf:c0:ba:4d:ff:37:83:a6:45:17:63:70:46:
da:a8:c8:d8:b2:4b:9a:6d:7b:6f:58:50:93:d3:ec:dc:1a:7b:
10:59:cb:02:bd:e8:0c:9a:42:4c:c4:5f:e9:d4:58:33:fc:be:
a0:e4:d3:cb:df:99:88:cc:3e:e9:1d:4c:2b:e9:64:a2:3c:6e:
38:40:0c:d0:18:c7:b2:b3:7b:a1:1a:42:e7:10:00:cd:38:24:
52:fe:fd:45:20:18:20:44:51:b6:3e:7c:d2:8d:f9:9a:18:68:
d5:ea:e2:8e:a2:b3:34:92:99:b7:0c:9e:68:20:1a:af:e5:9d:
94:0f:1f:9a:a9:f6:e1:8b:30:12:bb:df:6c:84:31:7a:40:e5:
c5:8d:6e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:25:25 2026 by rpki-client