Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/Gc2vMxFBWEeJeuoh-ofu-vIGoPA.roa
File: Gc2vMxFBWEeJeuoh-ofu-vIGoPA.roa (raw, json)
Hash identifier: sxRBGPV6evdW0l9PutdsZr3FSXSYsXmPZx9fUpBtiB0=
Subject key identifier: 19:CD:AF:33:11:41:58:47:89:7A:EA:21:FA:87:EE:FA:F2:06:A0:F0
Certificate issuer: /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Certificate serial: 01A0F7B6ACF9C89FED582CB2DDFD5B56BDA1
Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/Gc2vMxFBWEeJeuoh-ofu-vIGoPA.roa
Signing time: Thu 01 Oct 2026 13:45:39 +0000
ROA not before: Thu 01 Oct 2026 13:45:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 195.13.44.0/23 maxlen: 23
195.13.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:b6:ac:f9:c8:9f:ed:58:2c:b2:dd:fd:5b:56:bd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Validity
Not Before: Oct 1 13:45:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19cdaf3311415847897aea21fa87eefaf206a0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:c2:45:42:7a:a9:c4:62:c4:8b:b6:5f:6b:
d7:1f:e7:a2:79:56:03:75:7d:21:ac:91:b1:a5:f3:
3c:d6:45:b0:1d:e2:7a:c6:a9:6a:86:d1:c3:ef:92:
8f:c9:a2:d3:40:a0:1e:66:ec:56:97:c0:df:49:d8:
06:fe:08:f9:01:ad:94:b9:94:d8:8c:28:d8:98:db:
92:8d:73:dc:b1:d8:f5:f6:5f:91:6b:23:fe:4e:c9:
c8:c4:4d:eb:26:cb:91:77:4a:5f:3f:7c:9e:98:23:
36:1d:06:85:a8:8f:4d:a2:72:06:60:e8:4a:23:28:
d1:f7:1e:49:68:13:7d:42:8d:fc:22:cb:3b:59:78:
b0:c2:22:4e:34:90:66:32:94:0b:ce:79:43:1b:d4:
ef:e4:61:6b:b4:bf:08:97:90:21:93:8d:7e:95:ad:
90:35:1a:40:3a:34:18:99:da:39:16:ca:27:9f:2a:
36:9b:be:a5:35:5f:73:c3:c9:da:ed:13:7f:89:88:
a5:70:16:3a:0f:36:74:20:95:dc:1d:e1:f8:35:88:
96:02:2d:54:2d:6a:1b:8f:46:a5:97:41:a0:0d:5c:
37:88:dd:74:80:15:47:22:1b:7b:c0:2c:ea:07:8b:
37:3f:7e:53:66:06:31:36:e9:8a:3d:f7:47:8f:f9:
52:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CD:AF:33:11:41:58:47:89:7A:EA:21:FA:87:EE:FA:F2:06:A0:F0
X509v3 Authority Key Identifier:
keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/Gc2vMxFBWEeJeuoh-ofu-vIGoPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.13.44.0/23
195.13.54.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:75:1e:3e:85:8d:d1:ad:68:09:5b:d7:ee:20:76:81:28:ab:
ad:6b:56:36:15:3f:f3:b9:d9:39:a4:bb:74:31:68:73:3e:62:
32:82:34:da:ae:84:ab:2b:ae:ee:30:21:d0:4e:d2:f9:36:42:
f2:f8:9b:55:e3:13:39:de:0d:d5:b3:8e:0f:90:47:ac:16:53:
77:73:25:9b:82:92:17:a6:d7:07:34:c2:a4:32:e6:88:f1:8c:
b5:08:c0:f3:f6:70:5f:05:22:fe:63:c0:9a:7c:da:7d:a3:ec:
bb:5c:a3:3c:68:d7:24:f9:1d:32:62:e2:99:70:b2:2d:67:63:
8e:0e:56:26:03:5c:7c:da:95:63:81:a4:d8:62:24:5a:6e:dc:
c7:0a:8a:19:64:7f:65:be:48:f4:61:94:93:18:25:7d:3b:19:
48:7c:7b:e5:ec:78:2e:02:e8:2b:42:65:a6:dd:6f:b4:20:19:
cb:23:ef:a7:33:1f:0c:5f:3f:d6:71:d4:57:19:75:c9:cb:5e:
45:a4:29:09:b8:37:28:e4:c8:65:ea:60:3f:80:e6:96:f2:b4:
38:a4:97:af:3a:30:e1:68:0d:dc:76:c0:2f:8f:14:73:52:cb:
bd:f9:67:67:95:8f:2b:88:86:bf:3e:ed:d7:11:c3:40:39:2b:
56:bb:7e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:39:59 2026 by rpki-client