Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/GZKeSbUtKP0A87Unbd7Rsvq-Fpk.roa
File: GZKeSbUtKP0A87Unbd7Rsvq-Fpk.roa (raw, json)
Hash identifier: O0V2Z9mP0wXP61H6lfC5sP/HjnA61yV761IDfZVIkE4=
Subject key identifier: 19:92:9E:49:B5:2D:28:FD:00:F3:B5:27:6D:DE:D1:B2:FA:BE:16:99
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 019FE232DA200E41E188E2D9FD2BB9D50E4E
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/GZKeSbUtKP0A87Unbd7Rsvq-Fpk.roa
Signing time: Sat 08 Aug 2026 16:26:51 +0000
ROA not before: Sat 08 Aug 2026 16:26:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 45.145.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e2:32:da:20:0e:41:e1:88:e2:d9:fd:2b:b9:d5:0e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Aug 8 16:26:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19929e49b52d28fd00f3b5276dded1b2fabe1699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cb:72:1b:74:20:53:c5:7f:80:27:f9:5f:7d:
6b:1e:e4:74:35:0d:64:8b:e8:e6:24:04:5b:ca:1f:
fa:30:ef:d7:20:b1:19:99:cd:64:7c:03:86:22:90:
f3:48:6c:b9:27:77:34:00:66:94:10:33:80:34:e8:
a7:bd:38:06:bd:c7:6a:59:6d:dd:06:29:78:54:67:
5f:36:32:51:ea:3a:25:45:e1:d8:a9:1e:73:b1:a3:
d2:1e:8b:2a:3d:61:68:52:61:86:58:68:81:59:c7:
06:74:8c:98:f8:90:d6:e6:dd:93:e8:34:cd:bd:ef:
18:08:b2:89:a6:e8:49:48:11:89:7f:1b:1f:17:16:
65:80:5d:4d:e1:23:2f:e7:07:0a:18:c1:fb:9c:58:
ac:cf:fc:e4:d7:20:ee:fe:42:d6:a4:5b:cc:1b:50:
a8:0c:00:50:6c:68:fd:eb:fb:f9:f0:74:fe:ab:bf:
c6:66:14:90:d2:35:f8:0e:3e:73:d5:2e:f8:bd:3c:
9e:e4:b0:f9:e7:0c:e8:9f:0a:aa:4e:f6:22:a8:cf:
1b:1e:94:29:77:01:95:3e:2c:e6:6a:5b:86:6b:21:
b1:bf:3d:3e:c9:08:3d:21:c3:4f:40:0a:bf:42:22:
6c:ba:7d:f0:aa:fd:5b:67:aa:26:6b:aa:bf:e1:62:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:92:9E:49:B5:2D:28:FD:00:F3:B5:27:6D:DE:D1:B2:FA:BE:16:99
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/GZKeSbUtKP0A87Unbd7Rsvq-Fpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.152.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a5:87:53:63:90:ba:93:40:00:d1:4c:ff:44:62:cb:a7:bc:
cc:a8:62:67:5f:12:24:7f:53:26:e4:35:a5:63:95:2b:c1:76:
b9:9b:05:5e:37:41:35:99:26:31:d9:c6:ef:bb:b9:da:5d:31:
e4:bb:b0:8f:99:31:60:e0:0f:a3:be:4d:64:5a:0b:f3:94:c1:
8b:ec:e3:b2:a0:a0:e1:10:8a:d2:62:85:9c:87:9e:f5:8d:92:
bd:10:b7:ad:85:49:fd:67:e1:03:ab:e8:19:b5:7b:44:73:39:
88:ae:17:66:d7:d6:0e:22:5d:b9:6c:8e:9b:4e:28:8a:7f:ac:
be:39:6f:58:3d:6b:1c:eb:4a:98:3b:57:c0:c4:4d:10:c8:86:
c9:94:ca:68:46:c7:21:df:84:6e:14:5e:cf:c9:d4:ba:4f:2a:
6c:34:d2:a1:e7:e2:0e:d7:c3:cd:3a:27:e0:77:8d:44:f1:09:
40:16:ca:f4:d5:61:dc:a0:73:78:75:14:8a:3e:9f:15:10:25:
fb:11:5a:e2:22:3c:b4:9d:17:ec:37:63:94:c3:0c:5e:44:0c:
ca:ff:91:21:86:39:1d:9b:fe:57:d9:ed:5d:f9:08:e4:1c:10:
4f:df:15:2f:ad:a5:14:fc:8a:80:09:e7:31:8d:77:c6:80:6a:
16:e7:f1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:34:39 2026 by rpki-client