Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/GkXYgdVFP2_HexVVs3gomnNY70U.roa
File: GkXYgdVFP2_HexVVs3gomnNY70U.roa (raw, json)
Hash identifier: Aaxv9YVnKsaCjNY2StCqQ1xmto/cCalggSwSd56aIwk=
Subject key identifier: 1A:45:D8:81:D5:45:3F:6F:C7:7B:15:55:B3:78:28:9A:73:58:EF:45
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 01A07513646228DABF81A6BABE7ECE3EDD90
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/GkXYgdVFP2_HexVVs3gomnNY70U.roa
Signing time: Sun 06 Sep 2026 04:56:40 +0000
ROA not before: Sun 06 Sep 2026 04:56:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49915
IP address blocks: 152.236.0.0/16 maxlen: 24
152.236.128.0/18 maxlen: 24
2a0a:1800::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:13:64:62:28:da:bf:81:a6:ba:be:7e:ce:3e:dd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Sep 6 04:56:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a45d881d5453f6fc77b1555b378289a7358ef45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:93:9f:dc:2c:ce:33:fc:87:5a:ff:cb:15:
44:08:ad:59:89:46:72:ed:81:50:f8:92:64:3d:7b:
9c:78:9e:db:d3:d0:40:48:f5:eb:c3:07:78:84:6d:
0d:45:32:08:48:b7:56:34:1b:6a:03:75:a9:4e:d9:
e1:bb:06:53:32:c1:68:15:31:38:5a:ae:08:16:0f:
80:c0:a3:ea:cc:9c:92:ef:4d:a3:f9:0f:3f:74:01:
af:e6:44:01:f3:b4:0b:8f:2f:5b:31:ad:99:7d:98:
34:d6:61:df:01:c7:28:8e:10:64:ce:4c:38:10:43:
9f:4c:a6:aa:8d:63:a1:26:6d:0d:a4:42:18:49:f5:
d4:5e:cd:78:98:a6:ce:ed:37:dc:56:b3:c4:4e:5e:
7b:d0:c8:05:31:8d:78:3b:fe:10:4a:8c:ec:77:5b:
73:70:c9:e5:26:63:7d:4e:1e:eb:77:8a:9c:19:06:
a7:bb:10:ef:cb:99:5d:6f:dd:e8:40:24:28:74:61:
cb:36:f3:6d:03:51:e4:5f:26:d5:d8:a5:05:68:9f:
f3:91:29:e2:44:f2:10:2d:54:9f:ae:08:f5:5d:49:
76:71:21:4d:32:e4:9d:5d:55:7d:f8:b0:35:80:a0:
d1:2e:6d:77:22:a5:33:0c:a9:fd:55:1d:41:ca:36:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:45:D8:81:D5:45:3F:6F:C7:7B:15:55:B3:78:28:9A:73:58:EF:45
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/GkXYgdVFP2_HexVVs3gomnNY70U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.236.0.0/16
IPv6:
2a0a:1800::/32
Signature Algorithm: sha256WithRSAEncryption
19:ff:45:8e:3d:20:47:64:c9:d8:c6:bd:28:aa:ec:03:d9:a3:
58:3c:fa:98:08:de:7b:88:07:0c:ee:7c:63:a1:fd:3b:b2:56:
7e:32:9a:c4:82:3f:fc:f9:e2:51:3b:dd:a9:e4:b6:e7:b3:d8:
e5:f9:96:7c:16:18:f5:0c:a9:3b:5f:b8:ca:af:17:3f:a1:8b:
b0:41:26:4f:33:c1:7a:9f:26:ac:af:93:42:ba:36:02:5a:c1:
9f:de:15:90:1a:49:8b:ac:11:83:5d:4f:79:aa:56:dc:0b:bc:
49:77:59:1c:57:3a:42:48:3a:0e:3c:04:99:93:8d:56:28:1f:
31:f2:f0:48:dd:1b:78:28:1c:e9:f3:0e:f8:16:98:0a:31:ca:
c4:87:c5:15:d8:e7:79:e6:50:0f:2b:21:3a:d1:26:42:69:df:
1d:b4:ac:2b:ea:c1:1e:0f:e9:0b:fd:a1:c0:24:0e:cb:90:87:
98:7c:49:fa:e1:76:98:99:8f:15:eb:12:49:bf:4a:35:86:72:
f8:3b:13:84:44:18:08:6d:a2:0d:df:c0:9e:6a:34:d9:87:68:
01:66:05:b6:cd:80:7b:e3:79:6f:a1:8c:51:d8:e5:9e:ec:91:
54:bc:ba:dd:71:a8:07:d8:45:a0:33:04:3c:ba:c0:a8:f5:51:
18:24:c3:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:07:55 2026 by rpki-client