Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/glrbGTSjeiyA0d1F4ucbM4RwV0s.roa
File: glrbGTSjeiyA0d1F4ucbM4RwV0s.roa (raw, json)
Hash identifier: 1D0XPjNh3bh/Q4mbd0Drd3ZeHRPIwz16/YLmKE6dHqg=
Subject key identifier: 82:5A:DB:19:34:A3:7A:2C:80:D1:DD:45:E2:E7:1B:33:84:70:57:4B
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01A00B9325A4AE8CBE0F35D20012A4D4598B
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/glrbGTSjeiyA0d1F4ucbM4RwV0s.roa
Signing time: Sun 16 Aug 2026 17:16:27 +0000
ROA not before: Sun 16 Aug 2026 17:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215238
IP address blocks: 31.42.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0b:93:25:a4:ae:8c:be:0f:35:d2:00:12:a4:d4:59:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Aug 16 17:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=825adb1934a37a2c80d1dd45e2e71b338470574b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:80:7c:2c:16:b9:00:a2:4b:8a:04:61:7c:5c:
dd:10:91:2a:55:49:5c:a6:7e:cf:24:48:56:12:50:
d4:cc:b8:35:b2:9f:27:d8:6b:5f:38:42:20:dc:e6:
8d:54:a8:e1:cc:ff:98:cc:c5:55:5a:9a:83:2e:e5:
46:ba:1b:4b:05:78:38:1e:21:4f:6b:04:0e:f3:96:
b0:2e:bf:51:95:95:84:fa:28:2c:79:a5:8e:a4:ec:
50:3f:f0:11:19:dd:5a:d9:50:5f:aa:db:a7:22:c7:
18:32:76:1b:7c:92:bb:c1:03:8c:d9:96:08:9d:70:
e3:11:07:71:82:fe:34:f4:c3:63:1e:f3:0f:27:64:
56:0b:28:39:2b:2f:d3:f1:86:52:65:65:35:c7:62:
5c:18:5b:87:1d:62:f3:06:f4:1e:d9:0d:29:1a:d3:
ca:35:c7:35:a0:82:09:3c:c3:61:18:d0:ba:c1:e3:
a9:fa:f2:26:8a:9a:ea:d3:c3:95:e3:c0:37:12:85:
95:41:1b:48:8a:41:f6:88:30:50:6d:a1:3d:67:77:
44:ab:0e:52:cc:f7:50:4e:d9:fc:db:bf:4a:f2:71:
95:a2:ab:40:ea:77:56:e0:58:e8:28:64:24:81:54:
15:12:13:07:fa:f1:52:f9:26:43:8e:4b:f3:ba:fd:
23:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5A:DB:19:34:A3:7A:2C:80:D1:DD:45:E2:E7:1B:33:84:70:57:4B
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/glrbGTSjeiyA0d1F4ucbM4RwV0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.121.0/24
Signature Algorithm: sha256WithRSAEncryption
76:bd:49:9e:1e:61:cd:31:c8:fa:28:ec:09:a9:4d:19:2f:93:
5d:13:01:8a:16:0b:9a:50:8b:fd:6a:bc:fe:f7:b7:5e:a2:42:
da:5f:6d:bb:ac:b0:7f:1a:d0:11:da:3a:29:a2:68:fa:ba:2c:
61:e4:9a:ad:78:4b:d0:d8:63:6c:5d:70:b6:0c:96:dd:9f:52:
60:70:fa:dc:40:15:4e:b3:16:3f:91:61:7c:84:bf:7b:aa:2a:
c2:37:6e:63:8b:15:1c:2f:8f:b9:34:80:1a:3f:d4:00:46:69:
8d:96:7a:ae:05:65:6d:b7:e4:9d:2b:8c:45:84:bb:66:ac:10:
b3:fb:91:19:71:c6:9c:1e:48:1e:72:a4:e9:d0:4d:61:36:b7:
13:e1:1f:33:e0:90:39:ea:e5:ec:ac:e6:04:ed:cb:33:82:d0:
f6:00:2e:b8:bc:b0:42:99:42:41:2d:3e:81:a2:6a:d2:b9:2a:
49:de:ee:22:59:7d:76:f4:95:1f:fc:8f:48:f4:06:b1:cd:ef:
58:3e:49:41:c8:d7:b7:7b:41:b1:4c:a6:9f:e0:46:73:c6:d0:
df:dc:96:14:5c:e5:0d:36:e5:90:5f:42:9e:e4:6d:be:47:32:
8c:70:63:2c:d8:44:d1:60:e4:08:d1:28:a5:ad:46:4b:c3:a0:
fb:b7:24:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:50 2026 by rpki-client