Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/GspeMP674JCoxzmabdO8Nx2F6fQ.roa
File: GspeMP674JCoxzmabdO8Nx2F6fQ.roa (raw, json)
Hash identifier: VKbOH4JHpKYz0hG7SgazWoJ56gIYm3db7hsnAsPcBug=
Subject key identifier: 1A:CA:5E:30:FE:BB:E0:90:A8:C7:39:9A:6D:D3:BC:37:1D:85:E9:F4
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019F626BDC4E6B2428A9ADE661084AFF01B7
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/GspeMP674JCoxzmabdO8Nx2F6fQ.roa
Signing time: Tue 14 Jul 2026 20:57:43 +0000
ROA not before: Tue 14 Jul 2026 20:57:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 141.98.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 12:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:62:6b:dc:4e:6b:24:28:a9:ad:e6:61:08:4a:ff:01:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Jul 14 20:57:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aca5e30febbe090a8c7399a6dd3bc371d85e9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:5b:33:38:50:ba:d6:56:8a:47:47:73:f6:
16:32:70:56:1a:e9:5d:bb:f3:43:a5:a3:e2:87:f5:
51:5a:b1:11:c0:88:b5:8a:9a:49:d3:cf:75:ad:1f:
06:ad:c8:57:33:69:61:a9:18:c3:dc:bd:be:9a:43:
57:b5:d9:a8:24:08:77:93:1b:df:f9:84:7a:19:80:
b5:84:66:ae:e4:1c:78:be:42:93:b0:6d:e9:a1:9b:
64:73:74:a2:cd:ad:4a:03:64:1c:79:67:12:67:9c:
9e:83:5b:21:93:ce:23:07:1b:c9:5a:bb:0a:16:84:
08:3c:46:e0:f1:f7:fd:fa:e8:79:f5:02:cd:d5:53:
5d:cf:34:bf:b1:6a:60:68:94:0e:a6:ee:eb:e0:ab:
fb:10:02:77:9b:43:50:e3:fd:89:25:3c:4b:4c:8f:
3d:7c:c1:20:3c:33:2a:d7:da:28:42:9c:46:bc:8e:
3f:e6:0c:63:e4:fa:27:3e:7b:3d:d4:09:14:3c:4d:
7e:ce:4c:08:3b:ae:12:49:c0:29:d8:59:bd:70:6d:
30:e3:a7:93:7b:4d:2f:e2:c0:30:02:9a:d6:66:12:
54:d0:be:80:71:d2:da:58:fa:e3:c2:17:c0:b4:ae:
29:b6:4e:af:36:16:e0:11:2e:6f:11:fa:8e:67:16:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CA:5E:30:FE:BB:E0:90:A8:C7:39:9A:6D:D3:BC:37:1D:85:E9:F4
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/GspeMP674JCoxzmabdO8Nx2F6fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.151.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:9f:c2:eb:55:c1:ad:70:55:9e:d2:5a:9e:f6:e4:61:e9:9b:
89:89:59:9e:7c:8c:50:9e:5f:89:d7:71:0d:b8:47:82:6e:ff:
b1:61:6a:63:37:9d:7a:d0:d8:d9:50:47:d1:5c:17:56:93:af:
e9:7a:86:ea:d4:46:6b:50:5c:b0:48:b8:b0:7c:11:43:fd:de:
d9:94:d5:eb:3a:f5:1c:7f:8e:91:c3:bb:77:80:fc:de:df:10:
81:70:d8:ac:20:3a:13:ee:22:16:61:4d:e3:61:15:b9:2e:b3:
19:ff:cc:02:e9:08:08:8f:68:cf:23:35:be:93:b8:87:22:0e:
75:90:0d:b7:ef:59:3e:d5:b3:af:e3:96:68:13:3b:07:7c:bb:
26:d9:f9:76:a1:28:93:83:ce:92:2c:cc:1e:22:f5:88:58:45:
0a:75:70:8e:1a:7a:e6:9b:58:ed:5c:77:31:e4:a0:79:0a:0b:
0b:a3:5e:dd:9f:f4:56:db:29:ab:13:3e:be:8d:cc:f2:b8:65:
d2:48:53:1f:e6:d1:72:6f:a7:21:a9:27:db:45:23:ea:1c:86:
3c:27:6a:05:8c:99:3a:39:99:d7:f4:fe:7a:d7:07:13:5d:11:
80:8e:00:28:1b:66:3a:9f:bb:23:00:a3:96:e6:62:6a:81:d3:
13:89:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 20:27:57 2026 by rpki-client