Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gQtivGNi9aooBdZy6gHMImaVO5c.roa
File: gQtivGNi9aooBdZy6gHMImaVO5c.roa (raw, json)
Hash identifier: 1bv0knyj74iO7v80eyV3NUbElvclgS5MbMG5urE/G6Q=
Subject key identifier: 81:0B:62:BC:63:62:F5:AA:28:05:D6:72:EA:01:CC:22:66:95:3B:97
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368F06B4C97D461AB4787C496475368
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gQtivGNi9aooBdZy6gHMImaVO5c.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211091
IP address blocks: 82.163.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f0:6b:4c:97:d4:61:ab:47:87:c4:96:47:53:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=810b62bc6362f5aa2805d672ea01cc2266953b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:09:e9:9e:66:3f:b9:fe:0c:59:0e:1d:c2:
6d:47:da:b3:82:f1:3d:18:28:31:4a:d6:53:24:79:
2e:ac:78:7c:4c:a5:ed:b5:78:24:cb:f2:8f:ab:66:
90:55:9c:f9:7c:eb:35:11:d7:7a:3c:1f:20:09:78:
f9:62:c0:7d:aa:a0:59:3a:f2:9d:5b:00:7b:38:94:
cf:38:fe:ed:3a:1b:2c:9d:f2:03:b0:68:6f:dc:65:
20:97:00:71:0a:a5:27:68:3c:60:55:9e:5d:81:2a:
df:04:35:05:e2:e7:b2:de:90:b9:1e:dc:3a:52:00:
7c:4d:08:10:8b:52:c9:1d:21:b9:9b:29:b2:69:a8:
d6:e6:b5:42:53:be:e5:2a:54:8a:52:98:fa:3f:d0:
85:23:60:d2:8e:d1:d4:3d:a2:28:0e:f2:72:c9:1a:
bd:1d:9e:8b:60:13:fb:95:f1:89:80:80:98:1d:07:
c2:7d:08:43:ec:c0:2d:b3:60:fb:b0:ac:43:07:f7:
fd:f5:e4:c5:fe:79:23:b9:cc:22:bd:8d:4d:17:52:
27:93:42:2b:e3:9b:f8:85:96:6b:82:70:83:b2:23:
f7:1e:bc:da:96:bf:4c:a2:c7:55:3b:ce:3d:1a:05:
24:be:21:4b:41:41:3d:11:03:fd:67:c6:a0:72:25:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0B:62:BC:63:62:F5:AA:28:05:D6:72:EA:01:CC:22:66:95:3B:97
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gQtivGNi9aooBdZy6gHMImaVO5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.21.0/24
Signature Algorithm: sha256WithRSAEncryption
61:6c:81:85:c5:47:66:ef:44:f1:7a:55:1d:a8:e1:95:1a:d3:
90:6b:09:6d:58:5b:ce:11:b3:54:f3:c7:e9:74:22:3b:9a:38:
cd:d1:01:fe:46:b0:bc:64:7f:2c:8a:23:4a:81:40:54:5c:9b:
6b:e1:33:d1:c1:e0:b2:11:d6:65:2d:bc:31:b5:3a:3a:86:52:
ff:26:7a:f5:9d:81:b8:32:c2:35:b5:a7:23:af:77:27:55:7d:
69:c4:6c:7e:0f:39:f1:3d:ce:fd:d1:99:b7:8e:11:b4:51:f4:
67:7c:e9:73:de:3d:0f:1e:97:1c:5a:f6:c4:44:ff:4f:fd:63:
1b:52:97:2f:a7:90:1d:cc:d9:a1:2c:8d:22:10:20:cd:c2:97:
71:4c:52:62:42:84:88:65:d1:8e:52:b8:f1:da:36:13:22:ff:
4b:d8:44:a3:78:08:53:72:fe:03:d0:03:07:f7:99:2c:28:e0:
20:1d:48:9e:d6:0f:19:b9:e8:66:3d:78:0d:69:e8:5e:00:c7:
a4:db:e1:86:67:12:2f:8e:fd:e1:b5:15:bf:09:ec:33:e2:c9:
f9:5c:06:ef:73:ce:f1:ab:27:50:0d:5d:b9:05:3b:c7:6a:40:
5f:39:b4:3e:75:c9:53:7b:5a:ba:12:99:bb:71:26:0f:a6:54:
41:d7:85:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:13 2026 by rpki-client