Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/GQnHTRMHOOfXf-q1lA1GVsIiYEY.roa
File: GQnHTRMHOOfXf-q1lA1GVsIiYEY.roa (raw, json)
Hash identifier: 8NrETMC7ms4hMHOoi8XDcOkhkZOGNojhzo06eNcWX7Y=
Subject key identifier: 19:09:C7:4D:13:07:38:E7:D7:7F:EA:B5:94:0D:46:56:C2:22:60:46
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019FF9FA8746C873A6622CD526A3EC96B82B
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/GQnHTRMHOOfXf-q1lA1GVsIiYEY.roa
Signing time: Thu 13 Aug 2026 07:16:13 +0000
ROA not before: Thu 13 Aug 2026 07:16:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 80.86.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:fa:87:46:c8:73:a6:62:2c:d5:26:a3:ec:96:b8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Aug 13 07:16:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1909c74d130738e7d77feab5940d4656c2226046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:19:cd:b7:49:3a:57:de:80:50:8e:d2:c2:
50:1e:a4:c0:ec:4f:f7:dc:f6:05:35:c2:78:27:ac:
33:33:0f:f5:56:e5:ab:f7:51:10:78:6c:bb:4e:b8:
7f:fa:e1:37:46:96:20:c6:2d:5c:cd:10:d4:5d:3f:
c9:48:1b:46:66:77:f7:81:d0:fa:66:02:41:0b:b9:
82:e0:5d:60:e5:3f:a5:41:c0:b2:40:72:65:47:d5:
ee:f0:47:0d:2c:16:9a:af:4f:88:31:2c:c9:53:61:
8e:98:81:54:bd:ff:2b:6b:11:b1:92:7d:82:ab:a0:
cb:04:91:a3:ac:d1:d0:f5:5a:37:f9:9e:9c:be:ce:
f6:18:0d:ca:30:46:36:c1:84:9d:25:58:3f:b9:88:
f7:41:5c:8d:e0:e4:21:ef:aa:cb:d7:2f:06:d3:47:
8d:cf:50:e4:6f:5b:17:63:c4:9a:fb:9e:93:f3:93:
b1:71:19:64:03:d7:1f:b4:bf:55:33:3c:7c:87:26:
63:e8:e2:15:be:85:be:e7:b0:ad:3f:a4:7a:5a:76:
d1:57:8e:72:f9:47:bc:c8:34:89:0c:97:30:94:ae:
08:9e:d3:38:8c:d3:b4:50:42:d1:cb:e1:b7:50:cc:
13:37:80:60:c5:48:d2:c9:49:3f:27:72:db:0a:fe:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:09:C7:4D:13:07:38:E7:D7:7F:EA:B5:94:0D:46:56:C2:22:60:46
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/GQnHTRMHOOfXf-q1lA1GVsIiYEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.214.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0b:97:0c:4e:4e:1b:f5:61:23:41:14:25:62:6f:80:0a:cc:
52:7d:0e:d8:20:1f:27:2d:ff:bf:72:aa:3b:22:ea:08:54:76:
c9:02:30:39:bd:7d:c9:50:35:7f:f3:e1:78:e5:ad:ae:44:ab:
04:d0:87:18:a9:d8:2f:38:3e:6e:48:10:8d:e0:97:3f:1b:fa:
a5:56:a7:b4:50:cf:ce:cd:9a:46:2f:62:d9:7f:4e:78:e5:3d:
0c:8c:a7:0b:ac:62:62:3a:7e:55:93:c2:75:ee:22:c2:8e:ac:
8e:9c:2d:aa:43:80:28:6e:34:8e:e1:30:04:35:76:76:ac:6d:
4f:ee:e4:e0:5a:19:ca:94:9b:98:d4:6b:16:ed:5c:fc:00:51:
19:ee:9c:34:17:d2:53:42:dd:69:ff:68:58:60:23:51:4f:d9:
71:86:b1:80:c9:c8:d1:9f:75:be:67:28:f2:f7:62:00:32:48:
b5:a6:70:ed:28:6c:f7:9f:bf:a7:23:cc:fe:ff:85:a0:7d:14:
b7:f4:29:2c:be:22:9e:a0:63:f5:85:b2:26:6e:21:f1:71:c8:
f5:64:86:97:5e:ed:38:da:bb:f9:d0:c7:b0:df:b3:d8:84:ca:
9d:6a:4b:f5:a7:06:45:0f:79:32:25:b0:3b:02:25:fc:c8:64:
e5:4b:3e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:17:50 2026 by rpki-client