Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/GlCF70ul7rKBq-xaeWWmXurI8HE.roa
File: GlCF70ul7rKBq-xaeWWmXurI8HE.roa (raw, json)
Hash identifier: 7i/n5eANl2/SepMDgsHXWxlTSFf65hx+lkVjYuUEz0s=
Subject key identifier: 1A:50:85:EF:4B:A5:EE:B2:81:AB:EC:5A:79:65:A6:5E:EA:C8:F0:71
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A11A64F760149D0F3B3C7A7A94EFDA91CF
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/GlCF70ul7rKBq-xaeWWmXurI8HE.roa
Signing time: Thu 08 Oct 2026 07:23:06 +0000
ROA not before: Thu 08 Oct 2026 07:23:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 89.23.77.0/24 maxlen: 24
178.254.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:64:f7:60:14:9d:0f:3b:3c:7a:7a:94:ef:da:91:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Oct 8 07:23:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a5085ef4ba5eeb281abec5a7965a65eeac8f071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:85:b6:b5:59:6e:50:43:1a:7d:d9:b1:3d:
87:95:cc:50:24:7a:15:80:ba:47:52:5c:ad:1d:b1:
3c:43:a8:b7:00:9b:0a:63:28:c9:e3:4c:85:15:48:
18:54:d8:91:cc:03:38:d6:41:2c:59:55:e8:c0:5a:
c5:4f:75:82:50:eb:a3:f7:0f:1b:80:75:88:cd:f9:
4b:ff:a9:37:fc:2b:1c:57:e5:60:8c:cf:e4:9d:f6:
5b:9c:e6:01:b8:fc:4f:f5:86:0a:90:8a:52:99:c7:
f1:b8:b4:85:71:5a:a1:7c:60:bc:da:92:40:09:e7:
71:ec:93:93:72:fe:8a:79:66:7e:58:cb:9f:36:08:
43:c7:83:0b:24:44:7b:a2:50:c4:38:ec:d7:bf:d2:
b4:23:a5:13:8a:12:c7:80:f0:6b:f4:3f:b4:ab:43:
1d:fa:47:b4:d1:ec:fc:08:fc:40:f0:ad:a6:a5:2f:
0d:d5:57:1b:03:78:28:45:7a:fa:41:26:f6:a8:5d:
aa:ef:11:cd:e5:78:ef:2f:42:24:93:09:0f:cc:96:
a0:f6:3a:bc:98:4e:67:ab:b2:d6:3c:d0:73:81:f3:
aa:4c:d7:f7:9c:2b:72:1f:0e:c1:af:b0:1d:f9:2e:
c1:34:66:a5:a6:f9:b6:24:8d:0f:2f:98:f9:42:15:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:50:85:EF:4B:A5:EE:B2:81:AB:EC:5A:79:65:A6:5E:EA:C8:F0:71
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/GlCF70ul7rKBq-xaeWWmXurI8HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
178.254.187.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d7:e9:76:d6:52:e7:b3:b9:f6:12:d7:33:2e:a7:33:d2:2c:
78:27:0c:10:19:4e:66:67:22:c2:d2:f5:aa:48:1f:c1:45:09:
55:a3:7b:6f:2c:17:42:cf:ee:ef:36:66:2c:92:e9:ca:dc:f1:
30:6a:4d:62:9b:63:8c:0b:4b:15:52:b8:ec:23:f0:ff:35:ab:
f9:7e:96:48:d3:ba:a9:e2:94:21:4e:4c:62:78:f2:23:15:7e:
1c:45:b0:d1:95:96:0c:94:de:3e:8c:c8:f6:ab:4b:b6:21:4f:
6a:7f:c2:36:28:aa:7c:42:60:35:53:9f:7c:a4:ef:48:e6:72:
16:e4:6b:9e:6b:a2:f9:8a:e4:93:52:7d:56:d1:06:52:25:a5:
63:94:98:3d:3f:cd:08:1c:fe:46:78:80:ad:d6:e0:0f:94:66:
35:ca:3e:4e:af:af:f9:6f:e1:db:c6:a8:0f:23:5d:55:64:c2:
75:56:e0:d0:35:55:e8:a3:c1:c0:a9:0b:cf:95:2e:ae:bd:b6:
57:4a:c0:c5:61:2b:0c:41:a9:64:28:a2:94:aa:f9:0f:58:a5:
b9:4b:af:4b:a7:ed:6f:0f:ec:c8:a1:2d:b2:54:57:d0:2d:06:
58:80:93:07:3a:e6:8b:5a:08:17:83:0d:36:2d:e9:d4:a5:09:
e1:04:8b:0e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEaZPdgFJ0POzx6epTv2pHPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk
OWNlMTYwHhcNMjYxMDA4MDcyMzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTUwODVlZjRiYTVlZWIyODFhYmVjNWE3OTY1YTY1ZWVhYzhmMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0mFtrVZblBDGn3ZsT2HlcxQJHoV
gLpHUlytHbE8Q6i3AJsKYyjJ40yFFUgYVNiRzAM41kEsWVXowFrFT3WCUOuj9w8b
gHWIzflL/6k3/CscV+VgjM/knfZbnOYBuPxP9YYKkIpSmcfxuLSFcVqhfGC82pJA
Cedx7JOTcv6KeWZ+WMufNghDx4MLJER7olDEOOzXv9K0I6UTihLHgPBr9D+0q0Md
+ke00ez8CPxA8K2mpS8N1VcbA3goRXr6QSb2qF2q7xHN5XjvL0IkkwkPzJag9jq8
mE5nq7LWPNBzgfOqTNf3nCtyHw7Br7Ad+S7BNGalpvm2JI0PL5j5QhUoBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBpQhe9Lpe6ygavsWnllpl7qyPBxMB8GA1UdIwQY
MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt
MGY2NmMxODg3OTE2LzEvR2xDRjcwdWw3cktCcS14YWVXV21YdXJJOEhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2
LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRdNAwQA
sv67MA0GCSqGSIb3DQEBCwUAA4IBAQBW1+l21lLns7n2EtczLqcz0ix4JwwQGU5m
ZyLC0vWqSB/BRQlVo3tvLBdCz+7vNmYskunK3PEwak1im2OMC0sVUrjsI/D/Nav5
fpZI07qp4pQhTkxiePIjFX4cRbDRlZYMlN4+jMj2q0u2IU9qf8I2KKp8QmA1U598
pO9I5nIW5Guea6L5iuSTUn1W0QZSJaVjlJg9P80IHP5GeICt1uAPlGY1yj5Or6/5
b+HbxqgPI11VZMJ1VuDQNVXoo8HAqQvPlS6uvbZXSsDFYSsMQalkKKKUqvkPWKW5
S69Lp+1vD+zIoS2yVFfQLQZYgJMHOuaLWggXgw02LenUpQnhBIsO
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:32 2026 by rpki-client