Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/glzgkwZylfRsndKgZJ2KYakfBL8.roa
File: glzgkwZylfRsndKgZJ2KYakfBL8.roa (raw, json)
Hash identifier: S0qWQ1u2x5kgmb4OJ1zWbvE5PadyvZ01sbhLzCQQIig=
Subject key identifier: 82:5C:E0:93:06:72:95:F4:6C:9D:D2:A0:64:9D:8A:61:A9:1F:04:BF
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019DAC40467F173F370363BFBEE65A1321FC
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/glzgkwZylfRsndKgZJ2KYakfBL8.roa
Signing time: Mon 20 Apr 2026 18:56:26 +0000
ROA not before: Mon 20 Apr 2026 18:56:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12687
IP address blocks: 212.111.192.0/19 maxlen: 24
212.111.192.0/20 maxlen: 24
212.111.192.0/21 maxlen: 24
212.111.198.0/24 maxlen: 24
212.111.199.0/24 maxlen: 24
212.111.201.0/24 maxlen: 24
212.111.202.0/23 maxlen: 24
212.111.203.0/24 maxlen: 24
212.111.205.0/24 maxlen: 24
212.111.206.0/24 maxlen: 24
212.111.208.0/22 maxlen: 22
212.111.212.0/23 maxlen: 23
212.111.213.0/24 maxlen: 24
2a01:5c40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ac:40:46:7f:17:3f:37:03:63:bf:be:e6:5a:13:21:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Apr 20 18:56:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=825ce093067295f46c9dd2a0649d8a61a91f04bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:e2:e9:8b:e5:26:d2:55:ed:93:c0:91:f4:
4e:65:24:d5:a1:79:80:0f:73:05:0c:43:a0:a7:5e:
53:3f:a9:a2:37:6f:40:61:17:59:c2:12:08:43:43:
d0:ea:d7:13:1d:ff:aa:cd:4b:ae:1b:c0:b7:37:dd:
32:dd:9d:b5:78:e6:58:09:17:4b:68:75:e4:34:08:
5b:6e:d6:54:41:e3:6c:ef:b0:20:b4:54:f6:34:14:
40:b2:ed:46:9e:3c:bc:c7:ef:56:b7:b6:25:55:2b:
88:f9:7f:95:a3:9a:e3:1a:19:48:9a:e3:3a:47:2b:
06:24:ae:e2:2d:5d:56:9d:81:b5:30:6c:7f:c5:24:
81:25:17:1b:1c:fa:fb:05:f8:8e:31:93:e2:52:7e:
18:1b:bc:8d:35:0c:65:0b:1c:3a:14:fd:76:3b:3c:
0b:dd:5b:f8:80:a0:7c:93:bc:27:3c:e9:f0:3e:de:
ac:54:18:01:1e:68:5b:3d:45:6f:a2:a6:49:ab:1a:
9f:39:0f:d4:ec:b8:cd:84:0d:66:7e:89:77:83:f8:
03:b3:83:21:b2:e3:18:d5:0d:0b:43:69:7f:c5:a0:
32:a4:2a:38:c5:1c:a1:1c:ac:a4:5c:6d:14:89:a1:
3d:9e:45:01:25:dd:a2:8a:51:47:cc:87:a9:41:1c:
da:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5C:E0:93:06:72:95:F4:6C:9D:D2:A0:64:9D:8A:61:A9:1F:04:BF
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/glzgkwZylfRsndKgZJ2KYakfBL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.192.0/19
IPv6:
2a01:5c40::/32
Signature Algorithm: sha256WithRSAEncryption
85:eb:7b:57:22:93:fe:4f:f6:e9:25:8f:c3:15:13:f0:f2:5f:
36:9d:6d:00:c1:89:6d:9a:eb:37:ee:e3:0d:26:ea:bf:ad:87:
33:6a:8b:81:2b:7c:f5:47:89:b5:2a:21:68:5f:a3:2f:7b:47:
4b:94:88:d7:30:a5:47:66:19:5b:05:71:a2:0c:f8:2e:01:bd:
76:52:6a:3e:db:0f:1b:75:33:3c:92:b3:88:8d:f4:7f:2d:1f:
3a:45:20:b9:7c:f0:58:9e:a5:7e:9f:ab:8f:0e:bb:0e:5a:c2:
28:cc:35:c1:35:af:15:1b:01:d1:47:be:1c:c0:5d:3c:57:98:
6e:bf:32:1b:59:0a:f8:06:2d:f7:12:d6:a5:3e:9d:1d:6d:93:
5e:0b:33:71:4b:1c:7f:63:51:fe:d0:69:84:59:09:47:8f:ad:
24:35:d4:9a:5c:3d:a9:1a:da:66:6b:06:92:4b:b2:91:76:f6:
06:d4:62:c0:06:18:72:26:bf:76:a5:fd:9c:1e:ce:f1:09:9e:
9d:af:ac:2b:5c:28:4c:73:c7:ac:7b:88:92:8b:5d:22:73:b3:
bc:18:dc:cc:d3:4b:28:67:21:1d:81:16:ff:c0:ce:79:fc:9f:
93:59:a6:2f:58:74:35:7b:e7:7b:76:e7:6f:fe:03:3e:48:25:
a9:a1:fc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:44:37 2026 by rpki-client