Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/GBSEWSDBnu1YcT7oAJt1Afa4Ylw.roa
File: GBSEWSDBnu1YcT7oAJt1Afa4Ylw.roa (raw, json)
Hash identifier: 8etyJpVVdrvmZ5+iZCVQeqV/FPdcrmRVErX4cmZ3nnA=
Subject key identifier: 18:14:84:59:20:C1:9E:ED:58:71:3E:E8:00:9B:75:01:F6:B8:62:5C
Certificate issuer: /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial: 01A0E86C600D5785B87AC0AA94A7F1AFC9E1
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/GBSEWSDBnu1YcT7oAJt1Afa4Ylw.roa
Signing time: Mon 28 Sep 2026 14:30:11 +0000
ROA not before: Mon 28 Sep 2026 14:30:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202585
IP address blocks: 157.173.75.0/24 maxlen: 24
2001:678:d64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 11:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:6c:60:0d:57:85:b8:7a:c0:aa:94:a7:f1:af:c9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Validity
Not Before: Sep 28 14:30:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1814845920c19eed58713ee8009b7501f6b8625c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f3:cd:6b:f6:9c:8b:3c:da:71:5e:fb:b9:cb:
a4:56:29:76:e6:a7:fa:d6:be:da:0f:6c:fe:b5:f9:
31:2f:64:dc:1c:92:83:eb:eb:25:20:13:fb:c1:2e:
d7:10:4b:0c:d9:19:d8:af:0a:e9:aa:24:29:56:75:
9d:ec:ff:0b:a8:8f:a9:81:44:be:25:6d:e0:41:53:
48:4f:ef:95:76:3a:97:78:9d:ec:38:02:13:7b:21:
2b:53:06:c6:ef:8e:f8:6c:d6:39:67:e0:ba:d1:43:
74:3e:02:da:54:f8:cf:b8:3b:c0:15:3c:d3:ce:f0:
4d:4d:5b:79:bc:ce:e4:7d:dc:62:9c:b3:ff:f8:09:
6b:b8:92:8c:2f:30:03:4a:8f:0c:8d:3f:3c:e8:6d:
68:ea:68:ad:48:4e:fd:18:a8:63:d8:7a:dc:e7:2f:
fe:87:7c:49:57:35:ce:fd:5f:c9:52:1d:b0:e5:fd:
45:95:f6:9d:e1:10:2a:99:44:7d:4e:09:81:67:00:
02:0d:60:77:ad:d7:aa:fc:ef:c0:2c:15:bb:91:2c:
83:bb:8e:d1:3a:88:bd:02:df:a0:e7:7f:68:30:64:
68:d8:e0:77:2c:69:dd:48:ec:4d:04:d0:aa:2f:16:
24:8b:7d:a9:2a:30:af:1d:7c:af:0b:e8:2c:16:de:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:14:84:59:20:C1:9E:ED:58:71:3E:E8:00:9B:75:01:F6:B8:62:5C
X509v3 Authority Key Identifier:
keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/GBSEWSDBnu1YcT7oAJt1Afa4Ylw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.75.0/24
IPv6:
2001:678:d64::/48
Signature Algorithm: sha256WithRSAEncryption
89:56:2c:83:5b:5f:dd:90:f0:95:06:02:3d:02:32:3a:59:44:
be:ff:a0:8d:f2:da:d1:22:78:1a:5d:10:b0:f9:d6:93:c2:d7:
8a:ce:7f:64:15:4f:79:fc:2d:43:2b:a4:38:f4:a2:d7:99:75:
43:9d:da:c6:ea:ec:7d:a7:0e:c1:81:ec:bb:4e:f6:ec:4f:6b:
7d:dc:9c:9a:58:f8:f1:2a:44:b4:9d:f5:d0:23:a2:16:c5:00:
63:2c:64:f6:c4:03:23:f0:7d:7a:e5:cf:1a:e0:4f:0f:2a:4e:
32:0f:40:a2:bb:85:b8:2e:4d:a2:1e:1d:e9:95:e4:01:e4:5b:
76:55:0e:01:b8:35:ac:e4:ba:c3:a8:d8:7e:59:ce:53:b2:76:
20:f8:e3:52:fd:71:36:c7:02:b4:2e:98:7a:2d:3c:e5:da:d2:
0a:92:bd:68:29:64:bb:14:65:fd:2e:07:66:2c:03:c3:85:b0:
96:89:aa:aa:87:e0:2d:fe:7b:02:43:5a:51:b8:b1:50:14:ef:
ec:b9:d1:45:04:95:0c:8e:ac:3c:16:e9:56:df:b1:eb:39:5b:
13:bf:c9:ee:09:84:8f:25:78:6b:9b:43:c3:0c:26:f5:89:b4:
a1:71:9c:52:35:52:96:7a:bb:2a:32:53:69:03:aa:32:83:43:
04:a2:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:39:09 2026 by rpki-client