Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/gl5YL9zMDU3FR9MFMjsOQG-rDQs.roa
File: gl5YL9zMDU3FR9MFMjsOQG-rDQs.roa (raw, json)
Hash identifier: EPOed2ntY1Kbyv+Yta//iDHORhaDAXrW7NqxyQwPwWs=
Subject key identifier: 82:5E:58:2F:DC:CC:0D:4D:C5:47:D3:05:32:3B:0E:40:6F:AB:0D:0B
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FCB99B3AB04B341C0089D1166DDE90378
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/gl5YL9zMDU3FR9MFMjsOQG-rDQs.roa
Signing time: Tue 04 Aug 2026 07:07:55 +0000
ROA not before: Tue 04 Aug 2026 07:07:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146871
IP address blocks: 79.182.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:99:b3:ab:04:b3:41:c0:08:9d:11:66:dd:e9:03:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 4 07:07:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=825e582fdccc0d4dc547d305323b0e406fab0d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:c8:80:76:b2:27:65:c7:9d:4b:21:b5:fc:
1d:bd:60:c0:36:1e:fa:c0:2e:ba:c2:5c:b4:e3:f9:
6d:dc:db:52:d4:c2:d2:03:23:ce:02:47:3d:c2:59:
b9:06:f9:2c:1c:6a:69:b7:0e:07:b3:b3:3a:66:b6:
fe:71:9d:13:ab:b7:96:15:6b:19:eb:fe:2c:e5:b1:
15:7c:9e:af:4d:14:bf:6a:b3:1e:dc:ee:4e:c7:c0:
08:e5:42:40:d6:34:a7:08:4d:cc:d7:a2:55:1d:e6:
f9:80:05:b4:85:db:36:7e:1b:83:32:f9:92:44:f8:
ff:f1:ad:7f:71:e8:f0:92:77:18:4b:7d:c8:04:73:
00:cf:e6:d5:9e:96:cb:2f:60:4e:e3:86:3d:a7:8e:
ba:e4:ea:d2:e6:33:b6:9f:90:61:80:3d:67:09:57:
1b:0c:1a:6b:e5:9e:13:61:08:a3:24:bc:70:07:f8:
be:8d:3b:ce:74:71:c8:1e:87:c9:00:b7:89:af:7f:
73:8d:a6:18:2e:f7:9e:58:09:c6:0a:c2:07:41:f6:
b4:84:c2:29:08:ef:37:d2:4a:14:49:33:19:4d:d5:
15:5f:42:af:18:0d:5f:24:10:45:6e:c1:33:11:3f:
eb:b8:81:f3:e6:b6:92:09:00:65:cc:29:68:b1:be:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5E:58:2F:DC:CC:0D:4D:C5:47:D3:05:32:3B:0E:40:6F:AB:0D:0B
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/gl5YL9zMDU3FR9MFMjsOQG-rDQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.24.0/24
Signature Algorithm: sha256WithRSAEncryption
20:6b:a8:74:33:9c:2f:dc:8a:35:48:a8:51:7e:2b:1a:2b:a0:
0f:7b:69:5a:1d:f0:cf:34:37:4b:84:b8:99:db:14:b6:12:6a:
ac:63:b2:dd:e9:e4:4f:67:43:e2:53:a5:1c:9c:f4:73:c7:41:
a8:62:e6:e4:67:1d:0e:3a:33:3c:46:77:94:b1:61:37:de:56:
22:ef:a6:c3:28:49:1c:ec:f2:d8:71:27:66:54:56:6f:92:23:
5c:64:b4:78:53:ce:27:45:c4:c3:c8:08:24:d0:20:ae:b3:b9:
58:24:72:8c:b6:0d:38:65:b7:7e:8b:51:2a:b1:08:67:7e:56:
69:90:7c:98:b8:69:c4:b8:f1:e3:5e:13:78:b4:6d:d1:f5:89:
c2:25:23:ce:ab:b3:9d:09:ed:aa:8e:3f:95:21:d3:df:e8:9d:
6c:74:65:6a:50:d4:ac:63:77:47:38:d7:40:d5:a4:ed:3c:74:
6d:c5:87:12:87:40:67:a7:55:aa:82:14:35:9c:26:df:1a:68:
8f:0a:2f:3a:c7:b2:69:be:e5:7f:07:df:5f:b6:2d:a5:69:a0:
4f:a5:3d:65:e8:a2:61:d8:f5:86:c4:81:7f:3b:d1:a6:06:0d:
aa:41:f3:99:b6:e5:e8:2b:f4:9d:09:4c:5e:36:b2:9b:db:7a:
04:78:1e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 13:57:49 2026 by rpki-client