Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/GcW7J6jqjUurIP-7aEyJafFh_j4.roa
File: GcW7J6jqjUurIP-7aEyJafFh_j4.roa (raw, json)
Hash identifier: 263Qo59uH2IjJgii7iONl3IHCdmJu80ZDi5zrqP0r14=
Subject key identifier: 19:C5:BB:27:A8:EA:8D:4B:AB:20:FF:BB:68:4C:89:69:F1:61:FE:3E
Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial: 019FF8742D46CC831194C13C7A675E6C96DD
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/GcW7J6jqjUurIP-7aEyJafFh_j4.roa
Signing time: Thu 13 Aug 2026 00:09:51 +0000
ROA not before: Thu 13 Aug 2026 00:09:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 91.202.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:74:2d:46:cc:83:11:94:c1:3c:7a:67:5e:6c:96:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Validity
Not Before: Aug 13 00:09:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19c5bb27a8ea8d4bab20ffbb684c8969f161fe3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f2:58:31:9c:b0:b9:8e:6e:85:3b:de:76:6e:
8b:16:ac:7a:13:26:9f:c5:ba:3c:9a:18:1f:40:a9:
ca:62:b7:96:86:43:7a:17:ba:54:05:95:eb:51:cd:
70:69:fe:be:2b:0e:4b:6b:44:ba:e8:8f:ab:1f:dd:
b1:63:f8:23:1b:96:a5:6c:be:4b:08:85:03:47:31:
4e:5f:5d:92:c4:d2:ac:08:8d:23:5e:92:e0:cd:9b:
61:7b:1e:67:4d:61:83:55:bc:21:8d:7c:88:74:1f:
a0:b7:1d:44:49:7c:f8:42:41:1e:81:6c:a2:ca:88:
50:1a:81:6c:e5:76:26:35:77:a0:6e:75:6e:17:a7:
d5:ec:65:ca:47:18:a9:3f:4b:17:90:e9:37:cb:ec:
12:ff:9f:5a:5c:60:42:63:3f:56:8f:90:e1:79:44:
d2:84:65:c2:72:f4:95:fd:97:b9:fb:33:e8:e3:0d:
37:56:37:d9:6c:f5:3e:ae:a6:d5:2e:a2:de:22:65:
29:21:1c:24:c9:a4:85:b3:63:19:cb:06:ab:c5:a0:
01:cb:d1:dc:ad:78:3f:96:ed:36:c3:45:fd:c4:4d:
ca:d9:24:ff:81:88:88:a5:bf:4e:93:d4:74:2c:3a:
57:c2:4b:39:3a:9e:6e:f1:c4:48:a8:09:7e:96:a0:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C5:BB:27:A8:EA:8D:4B:AB:20:FF:BB:68:4C:89:69:F1:61:FE:3E
X509v3 Authority Key Identifier:
keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/GcW7J6jqjUurIP-7aEyJafFh_j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.213.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:54:1c:5b:d2:0a:0f:9a:d4:31:5f:32:40:69:81:b7:57:ff:
02:28:7c:04:d8:01:c9:ed:ae:70:15:81:aa:bd:d9:a0:20:a0:
d9:80:1d:64:e2:a9:50:a0:b3:6c:d0:94:6e:93:09:2d:c9:ac:
37:61:63:e1:f1:d2:e8:33:3a:2a:67:0a:96:c5:e1:d8:68:05:
0f:e3:72:70:76:74:4a:63:36:f2:b4:1f:a7:50:79:f2:42:71:
fa:29:fc:a4:9d:03:49:94:1a:ce:e3:d6:59:bc:75:42:dc:10:
db:7d:38:9d:bc:f4:01:12:d4:aa:fc:9a:9f:d8:f7:00:fb:f8:
e8:61:97:8c:ca:a8:d7:6f:1e:a1:a7:0f:20:19:17:52:98:77:
66:2d:c8:7d:e5:82:cd:21:43:7c:7e:6e:25:e8:58:1a:f7:45:
1f:e4:de:61:79:7a:e8:af:8d:71:59:82:fe:ab:ca:5c:2e:e4:
a4:c8:c2:a1:bf:e7:61:15:df:7d:fb:5a:d2:e6:3d:b3:b4:5f:
19:bf:4d:d3:af:98:d1:77:28:a9:90:14:1d:66:47:c8:4d:30:
84:01:4d:27:69:ab:07:c7:4f:dc:b0:d6:22:4e:3f:93:23:94:
10:4f:90:84:2c:9f:2e:cd:be:77:62:67:fe:9c:14:6d:ba:0f:
f8:f6:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:46:16 2026 by rpki-client