Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/GHbbE_KycJcNHTra48i1hTb5n08.roa
File: GHbbE_KycJcNHTra48i1hTb5n08.roa (raw, json)
Hash identifier: UU07TEjNzAXzEh7EPxvFpMGaKSXCot93eTzgIn9jLp4=
Subject key identifier: 18:76:DB:13:F2:B2:70:97:0D:1D:3A:DA:E3:C8:B5:85:36:F9:9F:4F
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 01A124208C730DB39E12132B1C3D85FACD19
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/GHbbE_KycJcNHTra48i1hTb5n08.roa
Signing time: Sat 10 Oct 2026 04:44:35 +0000
ROA not before: Sat 10 Oct 2026 04:44:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218504
IP address blocks: 194.190.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:20:8c:73:0d:b3:9e:12:13:2b:1c:3d:85:fa:cd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Oct 10 04:44:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1876db13f2b270970d1d3adae3c8b58536f99f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0d:37:46:e5:0d:ba:e0:d9:40:4a:94:97:fa:
56:9d:c0:85:cb:cd:27:3f:08:3d:e3:e6:e7:0e:a4:
fa:4c:1f:52:ec:93:16:a5:40:c1:4b:bb:7a:c6:a8:
50:68:d8:ff:81:05:ab:45:fe:ca:b2:fb:1c:94:6e:
15:84:22:03:2b:95:93:32:7c:d9:28:65:c7:ff:53:
6b:fb:45:51:d3:9b:16:c3:58:ee:26:01:e1:85:63:
47:87:c8:22:0a:25:41:1d:ee:b0:78:93:43:f8:80:
c1:7e:3a:c7:b1:59:2f:5a:78:37:46:2b:ea:b6:aa:
f4:79:9e:3e:14:77:4f:9f:83:e3:f0:e1:c9:ed:cb:
31:d0:f4:70:7f:df:69:22:b6:05:7a:0e:4b:b9:06:
d1:3f:cb:a5:12:73:6f:f7:8c:b8:a5:19:5d:76:4a:
8e:e4:a8:45:5c:dd:57:09:83:58:f3:48:3b:41:fc:
b0:33:b8:df:9d:97:dd:06:97:d1:a3:e4:14:dc:b8:
b3:59:1e:7a:98:81:cb:5d:50:74:91:89:95:c5:8c:
b7:9f:9f:02:03:2c:a7:0e:22:1a:b8:06:fd:06:97:
28:20:29:ae:bb:d2:8e:97:f1:72:e8:dd:32:b2:8b:
71:f2:93:b2:07:39:aa:70:9d:9c:5b:6d:2b:6a:58:
f5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:76:DB:13:F2:B2:70:97:0D:1D:3A:DA:E3:C8:B5:85:36:F9:9F:4F
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/GHbbE_KycJcNHTra48i1hTb5n08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.190.131.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:18:6c:42:1f:44:27:00:3f:f7:9a:86:56:3d:21:4d:bf:08:
da:b2:25:b0:a9:ef:99:21:97:76:f4:e6:fa:15:64:a7:83:a9:
88:1e:47:cd:3a:67:c7:84:2d:07:41:36:e8:5e:55:7c:84:8a:
4a:43:09:fd:6c:db:3b:5a:76:06:18:21:41:31:dc:9d:72:bf:
2d:bf:03:c5:f4:6b:e3:80:7f:22:ed:90:51:f7:73:81:f7:68:
12:af:9d:2d:ea:44:c4:01:66:36:69:ba:f9:b8:ee:c4:fa:b2:
a1:a7:48:d3:49:d7:9c:53:70:d2:ac:98:49:44:17:41:eb:70:
de:53:2d:75:07:5a:f9:d6:de:94:33:3c:d9:e3:31:f8:16:c0:
9f:27:0a:12:ca:1e:ca:a0:f4:5d:7e:4e:3a:78:3e:14:f6:4f:
f0:bd:2a:44:4b:07:1c:f8:33:1f:86:46:b4:cc:3e:ee:eb:9d:
ec:07:4c:3b:20:80:32:c9:a0:00:17:2a:32:8a:cd:e2:64:72:
9d:00:e8:2f:1f:5c:89:31:c3:76:21:b3:90:17:b1:1e:d8:12:
27:a7:52:aa:26:d6:02:5d:fe:f5:b9:d3:ae:6e:f1:b2:1f:d0:
6d:25:37:f6:81:bc:d0:6b:f1:b7:47:6c:2c:b6:5f:78:e6:6a:
db:8c:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:07 2026 by rpki-client