Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/GysgxckvU9w6RPGtRYGSjjzMaeI.roa
File: GysgxckvU9w6RPGtRYGSjjzMaeI.roa (raw, json)
Hash identifier: jULcLoc2tnQVeXNdUpLnnHKQk5KFPYH+I0w28ILf6uo=
Subject key identifier: 1B:2B:20:C5:C9:2F:53:DC:3A:44:F1:AD:45:81:92:8E:3C:CC:69:E2
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 019FEABFE0A98D635FE1CE86DA3B2BF11A9B
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/GysgxckvU9w6RPGtRYGSjjzMaeI.roa
Signing time: Mon 10 Aug 2026 08:17:51 +0000
ROA not before: Mon 10 Aug 2026 08:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35000
IP address blocks: 94.141.100.0/22 maxlen: 32
185.136.32.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:bf:e0:a9:8d:63:5f:e1:ce:86:da:3b:2b:f1:1a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Aug 10 08:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b2b20c5c92f53dc3a44f1ad4581928e3ccc69e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:da:69:2d:44:92:61:5d:b1:5f:60:3d:9d:
b8:70:1b:d2:a8:66:58:4d:89:9a:2e:35:89:36:5f:
35:17:3a:63:f3:21:92:a1:d2:ee:89:ff:86:57:8b:
65:ed:a5:85:08:af:18:c3:f7:e9:a0:14:7a:20:29:
f1:79:09:b7:84:eb:97:bf:4f:8b:b2:8c:bb:1c:cf:
9e:4e:6a:f9:01:d6:df:b0:57:22:37:d9:b6:c4:b3:
34:fb:5f:92:7e:dc:4b:8d:df:4e:3b:ee:a3:e1:81:
2d:65:a9:93:43:5c:ec:09:1a:a1:2d:89:cb:32:68:
59:f1:25:a5:09:76:38:4a:06:49:d6:07:ff:0a:8b:
2c:bb:ee:83:bf:38:ef:e9:fd:fb:d9:52:81:4c:68:
e9:f2:4c:cf:9f:06:04:e4:d7:10:e5:2e:c8:11:55:
c3:ce:bd:d8:9a:40:c8:60:21:d6:8e:41:b7:da:4a:
3e:e7:08:8e:ad:c2:34:72:1a:74:55:12:db:4e:5e:
f9:14:33:c8:49:8f:29:d4:55:de:dc:09:8c:89:6e:
0a:23:f7:b9:a8:1f:a4:e3:04:88:12:15:b7:83:82:
62:d4:a3:f5:16:81:52:de:08:92:59:83:30:b5:27:
35:d0:bb:94:4d:67:f7:e3:74:d7:c6:72:e5:84:a2:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2B:20:C5:C9:2F:53:DC:3A:44:F1:AD:45:81:92:8E:3C:CC:69:E2
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/GysgxckvU9w6RPGtRYGSjjzMaeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.100.0/22
185.136.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:c2:a3:4d:3f:3e:32:e8:b8:c4:b1:88:71:ee:4d:bc:95:cf:
aa:52:fe:e1:0f:38:70:e0:4b:f5:36:0f:cf:ed:8a:68:da:96:
0f:03:82:06:cc:a5:bf:c1:54:3c:ba:0b:27:05:2a:dc:d7:93:
b2:0e:8d:f7:de:0e:b1:aa:52:3b:69:6a:5c:ce:d8:15:56:ee:
93:44:6c:69:00:cd:f8:8b:4f:f3:4d:cf:4f:4d:0d:49:19:35:
74:51:87:ac:e9:7d:f0:85:34:f6:a2:6f:2c:f0:a6:5e:01:03:
d5:05:15:c2:37:17:44:f9:c4:0e:62:52:cd:4b:82:11:f1:14:
11:5b:e0:3e:b6:7a:34:b3:6c:4a:a6:61:1e:46:19:06:97:05:
ee:60:e0:96:24:42:03:2e:74:da:11:8d:96:26:37:81:0f:3c:
f0:ec:3e:16:5a:6a:d7:8b:14:90:dc:3b:31:4d:ed:ad:df:be:
14:18:f4:50:da:c5:17:4a:98:b9:c8:de:bb:08:2c:72:82:28:
81:11:d5:26:d2:77:02:28:b7:d9:d0:0f:e2:42:ab:0c:dc:27:
67:5a:fd:20:61:c3:76:d5:7d:2e:7b:5e:85:df:8a:be:3f:69:
4d:bd:e3:30:e3:de:f2:a8:f8:19:eb:06:9e:ea:73:ab:42:03:
44:da:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:47:16 2026 by rpki-client