Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gov_GueVnb-BFLJkB7gcZXF7V5o.roa
File: gov_GueVnb-BFLJkB7gcZXF7V5o.roa (raw, json)
Hash identifier: GssMgFuPTqTRsedPdR9LN00VK+sH8+Ef5HCucKmKRN4=
Subject key identifier: 82:8B:FF:1A:E7:95:9D:BF:81:14:B2:64:07:B8:1C:65:71:7B:57:9A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A0EB89F74EF16453E03E8F6E80DB9C22C5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gov_GueVnb-BFLJkB7gcZXF7V5o.roa
Signing time: Tue 29 Sep 2026 05:01:22 +0000
ROA not before: Tue 29 Sep 2026 05:01:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218656
IP address blocks: 45.131.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:89:f7:4e:f1:64:53:e0:3e:8f:6e:80:db:9c:22:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 29 05:01:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=828bff1ae7959dbf8114b26407b81c65717b579a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:c4:aa:e4:c1:78:62:d7:fe:71:3e:db:61:
43:53:95:8e:1a:78:4b:28:5b:38:b8:c0:7e:db:49:
d8:30:05:bd:5a:81:77:2e:dd:03:dd:b0:1c:75:48:
2e:e1:ed:82:6d:89:b2:90:cc:d1:7f:ac:b6:ca:a2:
9f:63:32:b2:4a:76:a0:52:ce:82:e7:df:d0:dc:78:
49:29:fd:2e:b0:dc:f0:b4:bb:ad:1b:cf:cd:de:f0:
68:cb:df:03:29:ba:cd:1c:c1:af:b1:08:34:e7:92:
7b:32:7e:10:2c:43:b8:10:cf:54:d6:d5:7b:07:57:
1e:a8:65:d8:bb:e1:c3:49:d1:d4:a3:a2:13:98:d1:
04:84:93:e8:b8:e0:63:06:73:13:01:23:c8:4a:df:
67:a0:0b:79:c0:77:82:57:5f:24:3c:b5:14:da:33:
85:3f:ae:8e:31:45:6c:64:f7:5c:55:66:49:9f:d4:
e6:0f:50:08:50:fd:c7:18:89:5b:b6:52:d3:c5:29:
5c:0c:91:85:90:fd:fe:7d:eb:87:8d:66:3a:14:c3:
1f:f1:f1:9c:da:1c:1e:4f:20:15:31:bb:bc:28:91:
3d:38:0b:55:89:1d:f2:f8:b6:1d:db:c5:7d:39:3e:
88:62:84:d4:76:96:8c:55:5b:47:49:80:42:83:37:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8B:FF:1A:E7:95:9D:BF:81:14:B2:64:07:B8:1C:65:71:7B:57:9A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gov_GueVnb-BFLJkB7gcZXF7V5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.184.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:8e:b7:97:b5:6b:25:6e:45:79:fc:21:89:39:a9:3c:f9:ac:
c5:23:bd:3e:76:a1:9a:fd:c7:a3:a0:0e:21:50:e6:c1:47:f8:
95:fb:df:fc:8b:68:98:85:c0:ae:3a:af:e0:a5:53:47:06:0b:
f9:64:6c:33:d1:8d:27:ba:14:e1:83:70:93:80:de:23:90:67:
ee:34:07:22:6b:1d:43:fb:35:a8:a0:03:d7:52:21:4f:c1:ef:
6a:21:55:02:dc:63:ed:d7:84:f9:b3:26:2c:8f:9a:93:5f:75:
1d:a2:a2:08:5a:99:bc:0a:b5:16:af:5f:1d:42:74:6f:3e:f6:
af:27:16:07:c6:5c:b8:29:c6:74:73:f9:da:29:4d:9a:20:76:
6d:2a:bf:a9:00:28:9c:d6:b4:7c:d5:d8:be:cb:08:fb:20:7d:
84:10:8e:07:cf:ea:53:e5:b6:ea:78:e9:a5:aa:51:d6:7b:58:
7f:d1:a8:95:69:93:cf:70:16:ad:cf:d9:03:41:10:6d:db:6b:
2d:98:60:21:c6:d9:35:fd:a4:9a:2d:2b:2b:30:37:a3:e5:a7:
14:9c:6f:e4:c6:e4:37:a7:4b:01:62:10:01:bd:fb:6c:bb:69:
e0:1f:9b:cd:7a:f9:e6:aa:d8:bf:d4:23:56:cc:46:22:54:8d:
2a:bc:f8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:19:07 2026 by rpki-client