Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/GlG-MP85D-u8YgOexykB_xa-8o0.roa
File: GlG-MP85D-u8YgOexykB_xa-8o0.roa (raw, json)
Hash identifier: pN+h7BXZ5iVQuxbgsGDQK97ZLpWrVV1LaQKuI/gqb88=
Subject key identifier: 1A:51:BE:30:FF:39:0F:EB:BC:62:03:9E:C7:29:01:FF:16:BE:F2:8D
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0580BA3A8388755896BBE72BA30F203EB
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/GlG-MP85D-u8YgOexykB_xa-8o0.roa
Signing time: Mon 31 Aug 2026 13:39:12 +0000
ROA not before: Mon 31 Aug 2026 13:39:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 45.87.254.0/24 maxlen: 24
45.91.9.0/24 maxlen: 24
77.83.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:0b:a3:a8:38:87:55:89:6b:be:72:ba:30:f2:03:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 31 13:39:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a51be30ff390febbc62039ec72901ff16bef28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:f7:d3:7c:d7:ca:07:0c:41:b6:b9:3c:ab:
45:c7:e5:ac:71:37:b8:7d:df:a8:fd:f2:2c:6b:88:
98:e9:05:7e:37:eb:f6:bd:0b:bc:0e:5b:8c:73:c5:
8e:1a:f1:f1:27:f6:ee:19:bf:f2:49:40:41:1b:15:
5e:0e:81:1e:15:cf:2c:07:a3:18:4c:36:e6:3d:42:
5c:88:df:3c:a6:d7:0f:4b:51:7f:34:e7:4d:30:7f:
d8:71:32:39:f3:32:a3:1b:31:9c:74:41:4f:b2:07:
20:ac:eb:1a:da:de:20:a7:a4:95:7a:2d:45:17:80:
cc:59:96:55:93:00:15:34:f6:54:a0:cf:f4:5b:be:
56:55:be:ea:e9:2a:d5:2a:e6:3d:e5:2f:07:47:20:
a1:84:08:39:ac:51:cd:3c:56:78:88:8d:78:ef:ea:
4b:a6:39:f8:46:c3:bd:98:6e:dd:61:a8:7e:56:dc:
57:f8:32:68:78:f8:7b:22:ba:c9:2d:8f:74:cd:6d:
3d:cc:57:ff:43:48:3e:9d:5a:e7:d9:4c:41:85:4e:
97:24:3f:a2:98:a0:25:22:6f:15:a6:e6:8f:75:e6:
2e:a5:f9:d7:53:54:02:8e:e9:88:75:f5:19:0f:b6:
db:ec:74:a8:4e:73:33:bc:85:85:af:bd:62:aa:b3:
d6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:51:BE:30:FF:39:0F:EB:BC:62:03:9E:C7:29:01:FF:16:BE:F2:8D
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/GlG-MP85D-u8YgOexykB_xa-8o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.254.0/24
45.91.9.0/24
77.83.195.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a5:cc:41:99:a1:2d:59:84:dd:ce:28:e3:fd:b3:bd:29:e9:
77:fa:93:e3:58:09:13:b4:09:12:6d:02:dd:c7:eb:7a:14:e1:
38:e3:35:ba:23:3a:ea:fe:3f:5d:0e:3a:19:42:50:9e:b7:50:
29:00:9d:e6:b2:96:97:49:9f:64:e6:3a:18:14:be:40:0e:a1:
e5:1e:8b:9c:21:eb:30:06:bb:08:9f:0c:db:c9:d2:21:01:4a:
c0:bf:b6:ea:c8:81:c9:3e:ed:1e:3b:58:4e:1f:35:bf:d4:e8:
e1:e1:1c:b9:85:18:03:88:f5:89:ec:43:a2:b8:44:81:a9:b1:
89:ac:b0:48:50:9d:cb:c7:2d:c7:e1:1c:44:ff:20:61:ed:d6:
1a:e6:eb:e8:c2:2d:a8:0b:58:05:a3:20:54:01:99:45:f5:f4:
2d:77:70:1d:98:6f:7e:15:d1:03:62:75:c0:25:b2:76:ea:d2:
f1:f4:8f:84:f0:2d:ed:c6:aa:32:ff:51:de:13:5b:26:83:f4:
de:74:c3:fd:11:a5:84:3a:13:83:ad:94:53:43:3d:cf:30:73:
79:81:82:68:47:2c:c4:8c:6f:14:1d:a0:78:0d:22:05:7e:68:
e0:db:1d:84:a5:0a:78:d2:4f:92:0f:98:86:88:49:ff:3f:b4:
47:b1:17:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:16:56 2026 by rpki-client