Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/GpwRgxH1rh6kYkbCLIqnbXHV5yc.roa
File: GpwRgxH1rh6kYkbCLIqnbXHV5yc.roa (raw, json)
Hash identifier: /8lkVZUXTI5q0RD+ogbND16CeygsTyvjGJNPFWulD2U=
Subject key identifier: 1A:9C:11:83:11:F5:AE:1E:A4:62:46:C2:2C:8A:A7:6D:71:D5:E7:27
Certificate issuer: /CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Certificate serial: 01A048D8B23009CCEB256913642DC7BE14DD
Authority key identifier: B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/GpwRgxH1rh6kYkbCLIqnbXHV5yc.roa
Signing time: Fri 28 Aug 2026 14:49:16 +0000
ROA not before: Fri 28 Aug 2026 14:49:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 94.46.204.0/24 maxlen: 24
94.46.205.0/24 maxlen: 24
194.0.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:d8:b2:30:09:cc:eb:25:69:13:64:2d:c7:be:14:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Validity
Not Before: Aug 28 14:49:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a9c118311f5ae1ea46246c22c8aa76d71d5e727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:78:79:91:9c:c3:c6:ef:aa:32:2a:ab:52:
60:53:12:21:7c:68:7f:02:10:1a:d7:03:e2:90:e0:
d7:89:65:ec:37:ff:a3:f7:4f:0e:23:a6:f0:72:cc:
b6:18:59:6a:e3:c1:f4:27:92:09:c2:96:cc:72:18:
b9:70:c5:7c:d0:46:65:83:f1:24:5d:07:5d:d1:2c:
2e:0c:0f:32:be:1b:69:cc:d5:84:b5:9f:ad:8a:6e:
69:0b:ca:31:03:15:75:02:29:de:46:58:be:6a:a6:
a9:58:07:9f:c0:f1:9d:6e:90:99:9a:80:48:e2:26:
d2:53:bf:ec:93:60:2f:84:8f:ed:09:4d:ec:e8:57:
a1:a8:48:a8:9f:fe:25:05:06:2d:40:d2:89:01:7f:
00:24:fd:f8:2b:95:da:8c:65:33:1f:c8:15:ce:3a:
e9:0b:f2:97:2d:9f:2b:ab:88:ef:a1:e9:4e:2b:82:
b2:f5:c5:36:d8:86:28:51:90:be:7e:3a:2e:e9:ae:
f0:4e:73:2e:45:75:54:d4:27:e4:6b:de:b8:b4:a8:
a9:ba:16:4e:c8:f5:8e:0f:0a:57:8f:b4:c4:da:56:
f5:73:5f:cd:3a:8f:5a:7d:1e:62:41:70:b1:ff:03:
43:d8:62:a6:e5:6a:70:99:31:ce:4b:21:f5:55:39:
be:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9C:11:83:11:F5:AE:1E:A4:62:46:C2:2C:8A:A7:6D:71:D5:E7:27
X509v3 Authority Key Identifier:
keyid:B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/GpwRgxH1rh6kYkbCLIqnbXHV5yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.46.204.0/23
194.0.137.0/24
Signature Algorithm: sha256WithRSAEncryption
73:62:1f:9e:8d:79:1a:5b:a2:1a:6a:c7:ef:e6:1b:8c:a6:f6:
cf:a4:8c:59:37:05:d7:77:2e:cd:2c:ca:f1:01:e4:31:aa:83:
ac:e1:6a:0f:0d:84:29:48:50:e0:6a:48:04:48:fa:10:90:e7:
3f:f1:a6:dc:96:61:bf:85:e3:69:0e:9a:a2:e0:cb:73:3a:38:
00:27:c5:08:fd:ed:49:d5:c0:e0:d1:d7:9f:c2:56:cf:d8:36:
67:f8:ba:ca:e4:45:3f:33:90:a6:1a:ef:9c:d9:b0:ad:2b:15:
b0:fe:fd:82:11:a3:20:81:ff:a0:ad:da:b4:15:60:2c:c0:df:
f0:18:c0:42:74:43:e0:0e:c6:0c:b8:03:34:80:ec:c2:59:12:
a4:96:50:e2:4c:e3:ce:9f:ce:60:3b:33:b0:68:8d:b7:42:a0:
f3:52:d8:7d:68:90:71:2c:29:39:77:8f:72:dc:a0:34:c8:de:
51:dd:3f:e8:cf:68:fc:23:93:87:58:20:ae:72:2a:ca:df:9f:
5e:c0:62:3e:12:ae:4b:32:ab:2d:e3:f8:5a:e9:14:f7:b9:00:
7c:fc:c4:59:3a:a8:48:3b:39:6e:4e:90:e5:dc:76:12:1e:b5:
1d:32:f5:5e:76:94:d8:d7:3e:f5:b8:ef:a3:77:8d:11:c0:6c:
9d:ec:23:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:58 2026 by rpki-client