Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/Gt-6orGpXZKA9oiAT_yxlXlxxLU.roa
File: Gt-6orGpXZKA9oiAT_yxlXlxxLU.roa (raw, json)
Hash identifier: VIGJrby0dx0a4mdrc24JbAt5nTLlizl4UvAfIY1Ljk8=
Subject key identifier: 1A:DF:BA:A2:B1:A9:5D:92:80:F6:88:80:4F:FC:B1:95:79:71:C4:B5
Certificate issuer: /CN=bbbda8e3a1b7edf7a33aa8aa4dbd2a854eff8181
Certificate serial: 019FD1AA7008CC3BD3A361F8599065E0395E
Authority key identifier: BB:BD:A8:E3:A1:B7:ED:F7:A3:3A:A8:AA:4D:BD:2A:85:4E:FF:81:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u72o46G37fejOqiqTb0qhU7_gYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/Gt-6orGpXZKA9oiAT_yxlXlxxLU.roa
Signing time: Wed 05 Aug 2026 11:23:55 +0000
ROA not before: Wed 05 Aug 2026 11:23:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57795
IP address blocks: 45.67.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/u72o46G37fejOqiqTb0qhU7_gYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:aa:70:08:cc:3b:d3:a3:61:f8:59:90:65:e0:39:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbda8e3a1b7edf7a33aa8aa4dbd2a854eff8181
Validity
Not Before: Aug 5 11:23:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1adfbaa2b1a95d9280f688804ffcb1957971c4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:32:ba:4e:64:e2:e5:75:aa:b9:7d:2b:87:
3b:17:1c:e8:16:71:5d:b7:f1:0d:cd:69:b5:98:c0:
e5:16:8f:b4:2a:08:53:5a:e4:4c:49:40:8c:aa:b2:
1e:2b:91:23:bd:c1:cb:92:19:36:f9:0d:29:c0:5c:
aa:bc:c5:5a:cc:f7:4b:01:de:c0:4b:9c:8e:16:e1:
85:02:ce:24:0b:1b:45:ff:71:fd:03:e2:32:7c:43:
22:6f:dd:d9:3d:e7:07:eb:76:a8:59:60:83:92:a8:
65:e8:3f:af:1c:37:e0:9b:fd:2d:a8:75:ec:a2:4d:
57:a1:24:e0:da:43:c5:09:77:77:c3:10:a8:44:d0:
6c:bf:ad:1e:3f:62:c3:fc:3f:40:be:54:9b:21:ac:
aa:32:fb:73:a3:31:6a:66:45:46:60:24:a2:6f:81:
78:9a:57:db:60:1c:93:e0:2a:e7:7f:bf:18:8e:d9:
c8:d8:71:22:1d:f2:9f:95:0e:01:01:2b:97:30:08:
cd:c3:43:1d:67:67:dd:52:63:ed:dd:5c:36:9c:46:
db:56:b1:3b:a8:2b:af:0e:cb:f1:c5:46:a4:43:27:
c2:7d:18:2c:6f:a9:eb:90:a2:4f:a0:de:fa:43:24:
a1:fa:ba:56:53:b8:c9:8e:fb:cd:84:62:ac:29:b5:
cf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DF:BA:A2:B1:A9:5D:92:80:F6:88:80:4F:FC:B1:95:79:71:C4:B5
X509v3 Authority Key Identifier:
keyid:BB:BD:A8:E3:A1:B7:ED:F7:A3:3A:A8:AA:4D:BD:2A:85:4E:FF:81:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u72o46G37fejOqiqTb0qhU7_gYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/Gt-6orGpXZKA9oiAT_yxlXlxxLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.110.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:37:df:ee:7d:bc:77:ff:d9:41:0b:e0:93:98:5a:b4:4d:2c:
0b:62:17:86:5b:b0:99:ed:f2:49:48:eb:1e:21:30:2a:03:12:
47:f2:42:50:09:8f:17:87:0d:be:6c:ac:af:59:0f:ee:7d:9f:
7a:96:fc:94:26:29:87:0a:b5:ac:f8:52:f3:56:97:ec:7f:71:
b9:21:da:bf:f9:cd:d1:93:92:16:30:42:b8:32:fe:79:ee:2e:
0b:39:11:32:2f:78:f2:94:35:ff:2a:88:6e:6b:31:ac:5a:f0:
b6:72:2a:c7:df:e0:e1:34:be:10:b3:9b:1a:96:04:16:b7:1a:
2f:27:11:b4:3a:71:2a:31:39:16:98:f0:34:ce:47:24:de:c2:
ca:4c:4a:22:6d:ef:0c:2d:a1:dd:4f:df:f4:ca:bd:13:8a:bb:
24:7e:d8:19:53:b7:78:d7:09:d3:61:5c:fe:6b:79:11:dc:5f:
cd:3a:1e:07:29:f2:64:ce:6e:32:85:69:10:89:57:8b:d5:7b:
0f:96:91:05:e7:33:57:27:1c:5c:ef:5b:5c:de:48:6a:51:02:
aa:03:b3:c4:63:a0:ce:0b:e3:d1:f2:c7:9c:55:fb:31:3c:00:
91:08:2d:40:ca:b6:6a:5d:14:2b:7f:aa:f3:dc:60:fd:7b:3a:
9e:70:bb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:47:40 2026 by rpki-client