Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/GKx6pWFFR6ynkRwRMvEa8ymtSck.roa
File: GKx6pWFFR6ynkRwRMvEa8ymtSck.roa (raw, json)
Hash identifier: UUTrb1cnbmQBVbeZGxQxxcoBpaGuJQQk8XKIOt0C/8k=
Subject key identifier: 18:AC:7A:A5:61:45:47:AC:A7:91:1C:11:32:F1:1A:F3:29:AD:49:C9
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 01A0E7A486924264639456230B193A20B8A8
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/GKx6pWFFR6ynkRwRMvEa8ymtSck.roa
Signing time: Mon 28 Sep 2026 10:51:54 +0000
ROA not before: Mon 28 Sep 2026 10:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202799
IP address blocks: 91.220.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:a4:86:92:42:64:63:94:56:23:0b:19:3a:20:b8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Sep 28 10:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18ac7aa5614547aca7911c1132f11af329ad49c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:3d:2f:40:60:61:ca:43:f7:f1:da:97:5e:
08:c9:dd:4d:69:59:ae:61:c6:f3:0c:ff:bd:61:67:
dd:b2:97:47:d8:5d:4c:0a:67:ab:e5:72:e5:f1:fb:
8e:6a:15:a4:2f:ed:c4:b8:9a:3e:13:94:34:54:96:
47:86:ab:43:da:d8:b4:d4:14:f4:c1:3d:62:4d:66:
c8:16:aa:39:de:07:e8:17:db:89:d1:50:14:09:48:
dc:79:90:74:a1:28:8b:cf:6b:7f:53:84:5f:b0:12:
2e:16:39:9a:35:50:d2:60:53:de:b8:67:eb:e3:1a:
b6:c9:93:0a:0d:c4:e7:15:9f:db:3c:52:87:0e:c1:
a8:f2:4b:17:95:0a:35:59:7c:9e:3a:3e:97:01:d2:
cb:23:de:21:c4:c1:b9:c2:5e:af:9b:97:52:2b:47:
02:64:cb:9b:6c:b9:f0:ae:ca:f6:78:14:d1:bb:c1:
7a:a8:b9:b6:42:88:f6:48:82:61:31:1b:b9:48:d8:
22:ae:83:9e:d9:fc:80:1c:83:c5:3c:f6:1a:d0:01:
37:4c:bb:47:0f:ad:13:39:96:77:78:60:a9:ea:af:
3b:f1:56:24:a5:ee:f9:43:5c:71:96:fb:a2:06:9b:
b7:86:ce:22:0a:ae:1f:ff:89:8e:8c:05:69:3c:45:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AC:7A:A5:61:45:47:AC:A7:91:1C:11:32:F1:1A:F3:29:AD:49:C9
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/GKx6pWFFR6ynkRwRMvEa8ymtSck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.163.0/24
Signature Algorithm: sha256WithRSAEncryption
33:da:fa:70:08:c3:b6:eb:f8:47:2b:8f:54:f8:90:06:55:97:
c5:3e:f4:69:26:67:2c:b9:ff:26:b5:c2:61:c2:85:90:e9:2d:
22:df:36:63:8f:f0:53:b7:0a:33:a4:b7:5d:8d:28:f9:6e:89:
7e:1c:66:a1:9b:71:9a:6a:48:60:94:38:30:25:b8:12:e4:90:
d8:26:03:11:93:6d:9c:e5:fe:fe:58:c3:7c:3c:4f:ba:ad:56:
e6:1a:d2:a1:85:0a:d8:5b:67:9c:6f:3e:6f:bb:f6:62:77:52:
f8:b9:52:b5:13:82:cb:93:2d:20:59:79:6b:fd:43:11:ba:ea:
d5:e8:c7:d5:9c:16:a1:bc:14:c2:6d:3c:ee:6e:df:88:00:f5:
af:0a:66:b5:04:e7:87:03:1e:3b:2d:74:e3:0d:d5:a7:47:92:
97:01:54:27:fd:91:9e:a5:ae:bb:43:62:33:34:f5:a6:c7:a6:
d2:2a:66:92:56:ea:ad:78:a0:4e:9b:f8:0f:ab:f4:9d:50:bb:
f8:e7:bd:4c:2a:6f:46:87:44:07:e5:f3:2f:4d:66:88:10:7b:
3c:8b:cc:96:07:81:ca:76:69:a9:0e:be:72:37:88:fb:16:62:
cb:54:cc:dc:f7:02:0d:a9:f6:90:84:6c:74:f5:78:5f:6c:c3:
77:b6:ae:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 21:02:06 2026 by rpki-client