Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/GdC0LgcFbb0CUEZibUHiTTs_NEo.roa
File: GdC0LgcFbb0CUEZibUHiTTs_NEo.roa (raw, json)
Hash identifier: xHT/MiFOk+kc9og/XLu9szkZR6KDTtPS2ZCW2+iuhyE=
Subject key identifier: 19:D0:B4:2E:07:05:6D:BD:02:50:46:62:6D:41:E2:4D:3B:3F:34:4A
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A00EA93F4165E55B0539038CE04486F3EB
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/GdC0LgcFbb0CUEZibUHiTTs_NEo.roa
Signing time: Mon 17 Aug 2026 07:39:27 +0000
ROA not before: Mon 17 Aug 2026 07:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152565
IP address blocks: 201.7.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:a9:3f:41:65:e5:5b:05:39:03:8c:e0:44:86:f3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 17 07:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19d0b42e07056dbd025046626d41e24d3b3f344a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:ac:3b:4c:00:64:e5:f7:40:6a:f9:09:3c:
d8:a3:15:12:90:5f:12:a5:ec:0b:4f:a9:ce:4a:14:
87:79:ca:af:8e:6c:63:50:42:34:fa:32:a9:d9:a3:
c4:a4:40:e8:06:af:23:cd:48:38:f0:81:09:78:07:
d5:a9:35:40:f9:3a:e5:91:b6:42:71:33:36:c6:92:
dc:d8:08:a3:80:9e:ad:b5:39:aa:83:14:ce:19:00:
e7:32:db:7d:a3:ac:ab:ac:86:bf:f2:73:60:38:3c:
32:3f:32:9a:07:bd:99:63:8f:d6:6d:58:ae:38:c9:
98:ef:3f:ca:a0:5d:99:01:0e:5c:63:07:e5:f9:ac:
8c:00:c1:d6:d5:63:45:8f:8b:48:3a:97:83:b3:4e:
67:84:ff:30:7d:fe:f2:e3:a1:74:45:6a:5e:1b:b3:
21:b7:77:eb:54:7b:a5:2f:68:e0:c9:02:2e:d5:04:
9d:cf:a1:94:a6:c1:ed:ac:6d:f4:19:bd:54:bc:48:
da:1a:7f:30:eb:f8:44:ce:d5:1a:62:92:cf:ec:c9:
7e:a0:e8:4d:34:f6:e9:a8:ca:77:87:0d:83:cd:12:
35:9e:94:ff:95:45:7e:8a:80:26:f7:c1:4c:f0:fc:
1a:1c:c6:47:2b:b5:07:dc:d4:70:b6:a6:79:e2:a1:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:B4:2E:07:05:6D:BD:02:50:46:62:6D:41:E2:4D:3B:3F:34:4A
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/GdC0LgcFbb0CUEZibUHiTTs_NEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.7.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:5c:38:9a:8a:af:b6:6b:a0:14:78:79:88:57:27:93:b0:85:
aa:2e:5c:fe:ae:ee:58:4c:ee:a2:6f:88:26:1b:94:00:54:4d:
cc:a6:ff:e3:d4:2a:0d:e7:ad:b0:41:2d:bb:85:5d:53:43:ce:
db:71:90:9e:e6:5e:40:a9:42:5c:e9:95:42:c7:b2:4b:43:30:
7d:4e:bf:9f:c5:c7:94:0f:49:b2:ab:c0:e2:47:48:fe:b1:a3:
f6:fc:1c:4c:dd:7a:21:56:15:17:d0:29:84:49:3a:18:3c:ac:
ff:d4:f3:ae:2c:9b:0e:16:8e:c7:f9:73:72:45:8c:32:06:81:
04:26:aa:9c:b5:73:ed:96:44:38:ca:d5:66:aa:eb:66:74:4d:
0b:bf:a9:69:33:13:82:0f:f8:af:d0:9c:5e:f5:bc:d8:f7:29:
eb:d5:77:bb:a8:33:de:94:ff:4f:24:24:61:e0:a7:13:70:32:
e1:f5:9d:bb:aa:5f:f5:d2:26:50:d5:42:0c:1b:02:32:23:b4:
5b:80:04:14:5d:7c:0a:64:4e:5d:6e:42:22:43:e9:2b:6b:25:
40:05:d1:3d:61:7a:7b:8d:af:58:53:e4:3a:c4:45:b3:b7:ef:
7c:91:96:d2:05:ef:7f:cb:2f:91:73:6a:be:bf:95:3b:97:d5:
b1:98:f1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:28:05 2026 by rpki-client