Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/gU4GSwT2D2o78vugUSTgV_VSsmA.roa
File: gU4GSwT2D2o78vugUSTgV_VSsmA.roa (raw, json)
Hash identifier: BYE/dGAUiA249Cmdgw7vJFcwGSGqBTzFWa7rjkQ4iyE=
Subject key identifier: 81:4E:06:4B:04:F6:0F:6A:3B:F2:FB:A0:51:24:E0:57:F5:52:B2:60
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019CB3ACBA8B4207A0A603638CE3BEF07639
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/gU4GSwT2D2o78vugUSTgV_VSsmA.roa
Signing time: Tue 03 Mar 2026 12:29:27 +0000
ROA not before: Tue 03 Mar 2026 12:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202018
IP address blocks: 201.49.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 06:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:ac:ba:8b:42:07:a0:a6:03:63:8c:e3:be:f0:76:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 3 12:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=814e064b04f60f6a3bf2fba05124e057f552b260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:e4:e4:ec:a6:40:c6:ad:63:35:6c:f4:f6:
06:2d:68:23:3f:c7:5d:d0:ba:9c:ae:bb:d9:64:73:
f2:6c:8a:ae:a0:9e:29:b4:45:3e:d9:c8:84:78:26:
14:23:fc:28:97:30:be:23:02:a6:82:2a:11:11:7b:
8a:c2:d8:5c:87:8f:92:9e:18:7f:1b:4f:89:d7:48:
73:fd:9b:c4:52:6b:85:63:56:d8:3a:fd:db:ab:be:
71:77:b1:64:4e:cf:6e:87:91:d4:52:e0:b3:d4:28:
0a:37:21:31:41:d0:18:27:1f:44:e1:d9:47:1e:2c:
0d:99:53:fc:55:ec:41:50:0b:e4:3c:07:08:fe:70:
dc:27:8e:30:44:24:50:9e:61:2b:f0:1b:0f:30:cb:
6f:24:9e:18:16:9c:78:84:af:8b:8a:08:f5:a4:70:
58:c2:fb:40:ef:2c:fd:46:ae:bf:d0:97:b2:46:f2:
99:45:e1:6d:0e:9c:c8:ce:0b:73:34:89:62:8b:e8:
54:26:b0:0b:b6:e7:17:c3:be:68:90:ab:66:b7:9f:
fb:39:e1:7c:40:9a:54:42:41:a4:4f:83:58:57:87:
70:5e:8d:5b:51:0e:bf:ae:e7:57:16:9b:2a:d2:64:
54:88:d4:4d:f2:26:6e:5e:86:5c:41:83:92:64:4d:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4E:06:4B:04:F6:0F:6A:3B:F2:FB:A0:51:24:E0:57:F5:52:B2:60
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/gU4GSwT2D2o78vugUSTgV_VSsmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.188.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c9:58:58:f4:fa:df:c5:22:16:15:ec:2c:c1:53:28:74:e0:
ad:de:a2:77:ca:5f:63:62:7a:1a:16:ad:ac:31:1e:67:25:85:
2c:c8:8b:9a:3f:14:71:31:75:d9:53:e0:a7:ac:04:b1:00:dd:
9c:1b:72:14:b8:e7:1a:8a:30:13:56:bf:f1:ff:c4:53:dc:53:
50:6f:81:a4:67:5f:b6:e8:1a:3f:f6:6b:ec:c5:a8:83:85:1e:
b0:df:a5:e6:4c:88:b9:3f:1e:3c:07:e8:47:89:2a:7e:f0:e2:
53:c7:77:cd:99:68:51:e2:a6:4d:af:4f:d7:e5:84:4e:5f:a1:
e3:7d:74:c9:9d:eb:b9:be:95:1e:48:a1:f8:3f:8a:0e:01:f1:
88:6a:87:14:5f:6f:95:b3:c4:69:07:60:71:fe:9a:82:07:87:
9c:ea:40:8d:05:e3:d2:93:96:28:04:be:a0:70:87:79:a4:80:
9d:11:6b:f7:aa:59:0e:4f:c1:93:de:a1:db:e7:b9:a4:56:37:
da:d3:60:5e:36:fa:dc:b4:b3:6f:2a:e3:de:df:57:b4:52:79:
60:72:03:10:bb:57:0a:bb:71:d2:a2:ca:16:92:b4:b1:4c:cf:
4f:74:42:a8:c4:3d:93:cb:44:51:df:fc:62:be:44:03:34:7e:
cf:82:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 13:57:53 2026 by rpki-client