Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/gYtsibPnBXBPb2nY_SAs-atiQiI.roa
File: gYtsibPnBXBPb2nY_SAs-atiQiI.roa (raw, json)
Hash identifier: wZHUmXk6L4SjfoRfOx34od7ZFq/bTnT1ojNinmzWm5o=
Subject key identifier: 81:8B:6C:89:B3:E7:05:70:4F:6F:69:D8:FD:20:2C:F9:AB:62:42:22
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019FD6820AED7F6D1C70155E5608C2E33CBD
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/gYtsibPnBXBPb2nY_SAs-atiQiI.roa
Signing time: Thu 06 Aug 2026 09:57:54 +0000
ROA not before: Thu 06 Aug 2026 09:57:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401709
IP address blocks: 185.141.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:82:0a:ed:7f:6d:1c:70:15:5e:56:08:c2:e3:3c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 6 09:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=818b6c89b3e705704f6f69d8fd202cf9ab624222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:13:21:3c:4c:cf:63:81:f1:51:32:67:7f:
59:21:79:4a:1b:6a:8f:74:e1:08:61:2a:45:50:8f:
07:35:ba:31:7a:fe:f9:f9:54:48:a5:39:5b:9f:cb:
3c:b4:7f:20:e7:f4:bc:8d:2d:8e:ea:69:2a:63:53:
dc:9e:36:88:d8:0b:23:6c:6e:08:5d:bf:68:26:e9:
15:a0:5b:0a:5d:69:c4:45:60:c7:85:1b:a1:3f:79:
9a:c2:5c:ac:1b:8d:a6:ba:ce:cc:7f:2b:0c:d1:63:
57:d4:78:a6:67:38:d9:2a:3d:dd:f9:53:93:3d:87:
8c:00:90:2b:9a:94:e6:86:dc:25:ca:bd:7a:24:14:
ba:c5:2b:78:f5:92:5d:e8:0d:3e:3d:0e:d6:c9:f2:
af:82:4f:1a:c5:ea:66:df:96:48:df:95:74:7f:82:
67:a4:f0:41:16:91:a7:1d:2e:87:e9:e7:d8:ca:b2:
70:b0:d2:5e:f5:bc:0e:fc:ab:02:b6:1b:39:9f:44:
4f:b2:ce:74:9c:1e:69:cc:07:c1:73:7f:11:86:cc:
73:af:ac:37:ec:81:2e:93:9b:1b:e5:fe:bf:11:b5:
ea:d6:2c:9c:08:a6:90:4d:ef:a8:23:06:68:44:49:
c7:38:87:aa:e0:1d:85:f4:3b:23:06:10:e7:94:a9:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8B:6C:89:B3:E7:05:70:4F:6F:69:D8:FD:20:2C:F9:AB:62:42:22
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/gYtsibPnBXBPb2nY_SAs-atiQiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.32.0/24
Signature Algorithm: sha256WithRSAEncryption
53:02:50:01:c2:31:42:48:6a:05:bf:c2:33:6e:37:cf:71:e8:
c6:0a:70:6f:ea:d0:b9:02:8b:da:5a:0b:59:7e:c3:b7:60:28:
6a:2a:51:97:2f:aa:59:75:38:4e:54:c5:60:b7:a6:09:92:13:
77:9d:83:9a:4b:b4:f5:de:b0:92:29:69:10:e3:e8:6a:46:e2:
2d:11:57:aa:9d:be:cf:0f:fa:9d:ad:54:f8:22:db:9a:1f:f7:
3b:9d:f7:bd:f9:8f:5a:a9:6f:f0:46:b3:5a:ed:a1:4b:e3:e6:
92:a6:db:90:06:d3:a9:85:84:58:58:ce:23:15:b7:1f:9d:8d:
b1:b2:77:14:90:94:62:be:e1:f6:ab:41:82:3b:5d:ac:8c:c3:
14:48:94:07:a5:54:90:d0:7b:03:5b:23:95:3c:d1:6f:99:d5:
7c:fd:b6:8a:52:3d:c9:c7:eb:d0:5f:0a:09:c0:25:48:23:33:
03:6c:1c:8b:a8:4b:83:d0:69:4d:2c:66:49:8e:84:aa:db:6e:
1f:b9:3c:99:f7:b4:8a:45:63:64:0d:1b:d4:bd:a1:62:b9:5f:
6c:a8:2b:8a:9d:d6:bb:ea:27:7c:dd:c0:18:ea:44:9c:cc:07:
d0:76:d2:49:86:ad:e9:ad:f1:57:45:2f:47:2e:9b:e5:f6:2f:
34:1a:cc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:48 2026 by rpki-client