Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GwpcAQCCWUDIgqp6C61C5QKd4tA.roa
File: GwpcAQCCWUDIgqp6C61C5QKd4tA.roa (raw, json)
Hash identifier: 4m8OAR9UKrpdQ02F910o5SmWkwYs63zFxkmF9ytxyEE=
Subject key identifier: 1B:0A:5C:01:00:82:59:40:C8:82:AA:7A:0B:AD:42:E5:02:9D:E2:D0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F3D514DE439973FB0C2CCC44AE2C9E787
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GwpcAQCCWUDIgqp6C61C5QKd4tA.roa
Signing time: Tue 07 Jul 2026 16:02:46 +0000
ROA not before: Tue 07 Jul 2026 16:02:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 151.245.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:51:4d:e4:39:97:3f:b0:c2:cc:c4:4a:e2:c9:e7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 7 16:02:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b0a5c0100825940c882aa7a0bad42e5029de2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:b2:47:9e:1e:cc:da:d2:0f:f3:78:83:b2:
38:1a:55:04:36:86:ba:0a:d6:6a:d7:97:64:82:f3:
76:c3:da:92:1a:c2:2f:d4:c0:1f:3a:77:c6:6c:14:
18:71:4f:f8:94:64:a2:fd:89:ea:5f:cd:a3:09:3a:
34:49:cd:b9:7f:7c:f1:ec:02:8b:f4:a0:e5:12:2e:
74:b9:0f:3e:f0:56:b6:93:f2:e6:d1:c8:6e:97:fd:
f6:84:87:bd:d8:e3:b8:d4:88:94:80:9c:45:1d:83:
bc:eb:63:8b:30:fe:aa:9b:06:6b:59:00:f5:e6:a3:
40:77:1b:7a:86:23:84:29:5d:36:09:11:ed:21:2a:
e4:98:f4:a0:5f:4c:a6:63:c9:83:0a:e7:23:24:11:
d5:2e:f8:b1:f7:76:2b:1c:95:0f:55:e7:2c:a0:57:
e8:a9:1a:8a:f9:70:d5:d2:85:cd:90:c0:79:e4:8d:
fa:b3:ed:02:9c:ef:83:71:f1:27:2e:2c:15:a4:ca:
38:88:53:3b:b2:60:d2:3c:81:fa:d0:fa:9d:b4:58:
30:53:11:9f:e8:a3:10:e6:3c:e2:47:ea:9e:66:36:
49:ba:42:cf:c0:78:98:be:21:99:77:1b:ea:09:fc:
d6:a1:23:0f:0f:d2:84:ca:92:e8:0c:d4:90:bb:c8:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0A:5C:01:00:82:59:40:C8:82:AA:7A:0B:AD:42:E5:02:9D:E2:D0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GwpcAQCCWUDIgqp6C61C5QKd4tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.176.0/24
Signature Algorithm: sha256WithRSAEncryption
02:2a:22:45:bd:31:29:22:6f:08:44:f8:1b:83:0c:e8:2d:67:
74:d9:4f:87:b4:6d:f3:55:59:4d:9c:81:61:a2:6e:40:bb:d9:
ae:ff:58:47:22:56:ac:18:92:88:05:0d:7f:d7:48:e4:d6:09:
8a:dc:bd:ff:60:8c:ad:81:34:54:94:64:0e:a8:e6:c9:31:31:
cc:c7:48:70:05:b0:29:c9:1c:d6:7a:cc:4b:50:7a:95:f6:2f:
92:e1:db:d1:13:83:06:ac:24:27:99:6f:83:72:3f:76:3c:be:
4f:df:57:59:c7:e7:e6:47:c8:52:f3:36:9f:36:7c:c4:49:ed:
3d:9b:ea:78:cd:62:2c:da:c4:3a:46:24:84:9f:e7:65:da:0a:
fa:76:1b:b7:a8:6c:e4:ac:27:bf:9e:0d:30:f6:bf:a0:8e:94:
84:91:72:80:d9:01:09:d4:df:c3:4c:0f:2f:99:00:62:cf:93:
ee:98:f9:4a:20:b6:9e:23:46:f4:10:2c:7c:ce:43:ae:30:2f:
e5:49:bd:1b:9b:32:aa:78:7b:31:24:fd:80:a8:61:3a:5a:ac:
d8:9f:00:09:51:da:20:cc:96:7e:c4:10:7c:3b:f4:fa:2b:fe:
f0:4c:1e:31:e9:5a:6d:d1:49:0b:2e:f6:6a:af:90:f2:2e:e5:
46:a8:f0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:31 2026 by rpki-client