Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/GRCVDLnKbTI2yiwFt08dT2GXqos.roa
File: GRCVDLnKbTI2yiwFt08dT2GXqos.roa (raw, json)
Hash identifier: OOLKrwih4MjJDg+ZY7bsD0PH+HIUYbfBqz3rZKu7eF4=
Subject key identifier: 19:10:95:0C:B9:CA:6D:32:36:CA:2C:05:B7:4F:1D:4F:61:97:AA:8B
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01A057F3D41206BF0E09B66264653993F1D1
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/GRCVDLnKbTI2yiwFt08dT2GXqos.roa
Signing time: Mon 31 Aug 2026 13:13:12 +0000
ROA not before: Mon 31 Aug 2026 13:13:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 82.206.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:f3:d4:12:06:bf:0e:09:b6:62:64:65:39:93:f1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Aug 31 13:13:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1910950cb9ca6d3236ca2c05b74f1d4f6197aa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:14:05:78:73:e1:bb:8b:3e:12:1d:24:71:
ea:3e:43:ae:46:5d:e6:3d:73:b1:b8:7b:38:5f:42:
74:c1:67:b4:1f:fb:41:ba:a3:1c:96:d4:5f:c5:9b:
97:b2:19:97:41:32:b9:68:b2:2b:de:a9:56:85:fa:
29:d7:30:14:9a:51:a4:5a:27:61:4a:33:4b:99:1c:
ce:f0:6f:81:62:53:8b:cb:7f:34:3e:b5:4d:ea:58:
e3:62:24:2f:64:89:11:3a:60:8a:62:06:ee:e5:4e:
88:51:1d:0d:b1:1e:c3:89:96:17:dc:29:bd:2a:8b:
10:eb:53:3a:1e:5c:0e:c6:a3:b4:10:c4:b7:17:82:
ba:1b:d8:64:b7:6b:45:e5:6c:86:82:1b:da:8e:67:
53:01:39:1a:9e:bb:ef:73:4a:46:44:3b:5e:f3:be:
21:67:8b:80:40:41:a4:9d:c7:d5:c2:ed:f5:64:9f:
7f:a5:75:79:99:a0:da:e1:cc:8e:a0:47:ce:37:9e:
65:67:e1:53:82:45:d8:81:5d:79:26:02:bf:bc:56:
1a:33:57:3b:3b:a3:05:71:ed:97:84:42:40:bb:fc:
75:fd:65:56:d4:9f:a9:c5:11:bf:35:07:a6:b2:76:
a7:1e:3a:4a:f1:fc:4f:16:43:4d:12:cd:d6:1d:cc:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:10:95:0C:B9:CA:6D:32:36:CA:2C:05:B7:4F:1D:4F:61:97:AA:8B
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/GRCVDLnKbTI2yiwFt08dT2GXqos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:3a:4a:ef:eb:83:3c:47:63:76:32:4b:33:b4:6f:ef:fa:1a:
d1:e9:93:e3:54:06:fc:84:e5:ed:91:a1:bb:0b:49:32:71:73:
30:75:af:19:a9:a0:0a:47:8a:7a:e5:10:1a:34:5e:c1:f1:44:
80:ab:cf:9d:78:9d:72:ac:2c:ce:6e:c7:c6:1d:cf:d2:2d:e4:
83:5e:41:00:e8:12:30:c8:1e:89:f1:85:17:f7:65:ca:13:9a:
a0:4b:db:3d:d5:66:70:5a:c5:5d:6f:e4:f7:5c:8c:4b:88:a3:
62:45:5c:fe:b8:0e:0f:ec:f3:b0:98:25:d8:e8:23:6a:6c:10:
6a:6c:cd:5d:44:11:2d:4d:70:91:87:47:fe:8f:af:75:13:1a:
ce:7c:ac:75:a4:07:3f:f8:52:75:af:11:c7:36:74:c7:a5:5a:
c5:3d:c0:95:2f:61:2f:d9:ae:3a:67:94:e8:0f:33:af:a7:bd:
d1:29:43:82:5e:69:05:26:19:33:83:7f:f1:e7:30:b0:23:8e:
d3:e8:da:76:24:88:a4:aa:59:18:6b:90:71:ac:06:a4:74:c5:
12:e5:1f:1e:bb:9a:f7:bc:b4:66:6d:c2:4e:24:6a:3f:10:c7:
a4:e2:fc:83:70:fb:cb:ad:d4:3a:22:0f:88:0c:e8:1a:d8:83:
22:ab:b2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:03 2026 by rpki-client