Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9c1f4-fe55-4e3e-bede-639d9234bee5/1/gdbsl_4MPT9qzaL3iFIYYdb2b_k.roa
File: gdbsl_4MPT9qzaL3iFIYYdb2b_k.roa (raw, json)
Hash identifier: +8rhGszZ9hRWEkJZoQcBXPXHR+tIlz+/2vYql3QPVGo=
Subject key identifier: 81:D6:EC:97:FE:0C:3D:3F:6A:CD:A2:F7:88:52:18:61:D6:F6:6F:F9
Certificate issuer: /CN=06e02684c35783c500e1d2ac6dc7fbf50419a6c2
Certificate serial: 019FCC8B664473917B9AA32C1680D4981BB0
Authority key identifier: 06:E0:26:84:C3:57:83:C5:00:E1:D2:AC:6D:C7:FB:F5:04:19:A6:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuAmhMNXg8UA4dKsbcf79QQZpsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9c1f4-fe55-4e3e-bede-639d9234bee5/1/gdbsl_4MPT9qzaL3iFIYYdb2b_k.roa
Signing time: Tue 04 Aug 2026 11:31:55 +0000
ROA not before: Tue 04 Aug 2026 11:31:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6908
IP address blocks: 193.33.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9c1f4-fe55-4e3e-bede-639d9234bee5/1/BuAmhMNXg8UA4dKsbcf79QQZpsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9c1f4-fe55-4e3e-bede-639d9234bee5/1/BuAmhMNXg8UA4dKsbcf79QQZpsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuAmhMNXg8UA4dKsbcf79QQZpsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:8b:66:44:73:91:7b:9a:a3:2c:16:80:d4:98:1b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e02684c35783c500e1d2ac6dc7fbf50419a6c2
Validity
Not Before: Aug 4 11:31:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81d6ec97fe0c3d3f6acda2f788521861d6f66ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:ea:90:44:4a:a7:8b:4f:a3:07:6a:84:31:
a7:92:81:eb:2a:63:7e:b7:bd:cd:78:f8:c6:3c:de:
33:b5:d0:b1:ea:da:d4:76:17:f3:c8:97:a7:66:ac:
b2:c3:1d:aa:55:84:88:7b:d7:36:ed:8b:ed:2f:d0:
65:2d:b2:16:00:7f:0c:3d:ed:78:c8:bc:9f:a5:f2:
e0:0a:26:51:25:16:b2:d5:73:f0:a7:a6:ce:ef:93:
85:10:c9:3d:0a:c5:42:cb:2e:71:2c:fb:ec:d5:8d:
b0:a0:87:f8:f8:1a:23:c5:83:39:c7:d0:8b:3c:d2:
bb:b2:1b:75:94:bd:8c:78:63:35:b8:c4:c4:4d:0a:
14:97:5d:b4:52:9b:97:a7:07:0b:07:c8:33:b1:62:
46:6a:94:b6:4e:f9:22:91:52:76:aa:9e:16:ed:84:
b9:e2:66:dc:2c:b8:23:a5:b7:d2:78:6e:5a:57:f0:
dd:4b:e0:d9:65:7b:59:1d:52:45:2f:49:4c:ba:01:
b2:fb:a2:c4:f3:83:f8:2a:e0:98:30:33:03:29:14:
f4:01:18:f4:50:6b:74:cc:80:14:9e:41:3f:71:ff:
c8:b2:f4:96:e8:14:9d:63:d9:b1:fa:eb:ca:09:f7:
dc:c4:38:2d:54:33:44:d6:1b:b2:19:47:48:e9:96:
a7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D6:EC:97:FE:0C:3D:3F:6A:CD:A2:F7:88:52:18:61:D6:F6:6F:F9
X509v3 Authority Key Identifier:
keyid:06:E0:26:84:C3:57:83:C5:00:E1:D2:AC:6D:C7:FB:F5:04:19:A6:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuAmhMNXg8UA4dKsbcf79QQZpsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9c1f4-fe55-4e3e-bede-639d9234bee5/1/gdbsl_4MPT9qzaL3iFIYYdb2b_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9c1f4-fe55-4e3e-bede-639d9234bee5/1/BuAmhMNXg8UA4dKsbcf79QQZpsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.76.0/23
Signature Algorithm: sha256WithRSAEncryption
76:7c:27:1c:27:a1:49:f2:11:5e:6f:2f:9e:22:45:b9:62:b6:
05:11:8d:8e:08:5a:25:13:86:14:bf:d6:34:d7:8e:2a:54:91:
93:7a:9c:06:4b:49:01:1e:d2:54:89:f6:29:e1:cb:b1:6f:ee:
e3:74:f6:4a:ca:78:21:9d:a4:e2:b3:9e:d6:fa:d9:09:23:c7:
55:f7:ce:2c:60:66:e1:0d:3f:bd:af:44:9d:81:29:7a:d6:a1:
a6:63:4a:fd:e1:3d:59:ca:5f:01:41:a9:22:10:48:fd:d9:79:
7f:75:4b:39:cc:fe:0f:b5:c5:e8:e1:68:3f:14:37:de:92:de:
03:53:12:71:62:12:5c:ef:b5:8c:2b:5e:f0:0e:53:5c:1b:d7:
92:8e:52:64:ce:b9:79:f6:eb:4f:25:ba:e6:f7:58:d9:fd:e7:
72:f2:e7:2c:00:f4:ab:c4:c2:f7:1a:02:26:02:84:64:47:d3:
83:f7:5c:16:94:6c:77:9a:b2:41:4f:b6:30:a3:74:2e:13:80:
4e:6a:eb:cd:51:64:5c:8a:10:1c:37:af:c5:14:6b:e9:8f:39:
a6:77:3e:26:5a:11:a0:99:15:95:9e:73:5c:0b:81:95:6d:78:
af:3a:81:df:28:98:10:d3:c3:d2:e0:6e:c4:46:d2:bb:c3:15:
6c:27:bd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 14:31:23 2026 by rpki-client