Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/Gq5m_G-Nn2cWTHSMId-lsWbhgww.roa
File: Gq5m_G-Nn2cWTHSMId-lsWbhgww.roa (raw, json)
Hash identifier: II7AjmOdLqNqKi9JZQ0wHWiOvxzW1DAYgv+REwV7TLk=
Subject key identifier: 1A:AE:66:FC:6F:8D:9F:67:16:4C:74:8C:21:DF:A5:B1:66:E1:83:0C
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 01A07B349B852430314B855AA8162FFE225F
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/Gq5m_G-Nn2cWTHSMId-lsWbhgww.roa
Signing time: Mon 07 Sep 2026 09:30:40 +0000
ROA not before: Mon 07 Sep 2026 09:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30088
IP address blocks: 193.178.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:34:9b:85:24:30:31:4b:85:5a:a8:16:2f:fe:22:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Sep 7 09:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aae66fc6f8d9f67164c748c21dfa5b166e1830c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:5a:c9:91:e4:ef:04:2d:47:9c:0e:b9:e9:
34:04:74:4a:2d:ab:7e:23:c0:fd:84:49:a2:0b:72:
82:cf:0c:9a:a4:f5:f8:28:9e:6b:70:e9:93:25:b6:
ad:29:1c:43:e9:a7:ac:6c:70:0f:8d:03:4a:47:55:
b7:e9:c0:ba:54:76:76:29:d4:15:dd:00:f4:bd:af:
e2:8f:6b:63:55:4d:c3:be:3d:9f:93:5f:4d:3e:93:
15:4f:45:1a:24:54:e9:64:b2:6f:44:93:df:21:e6:
bf:24:dc:52:d2:f8:a2:11:51:f6:ac:7a:a5:6f:51:
3c:f9:87:9c:d9:37:b2:2c:57:d2:a2:d7:7f:08:ca:
3f:34:f0:d6:3c:61:7d:de:29:ca:38:bd:ce:85:f0:
47:29:9d:72:80:09:29:52:7c:61:65:da:69:85:18:
36:6d:31:54:be:63:a0:49:d1:bb:5e:7b:b1:f9:40:
1c:7c:69:6c:87:33:74:5a:03:4f:09:39:b6:73:44:
00:12:f8:8e:59:01:e4:d1:5e:f5:e5:e5:df:c2:97:
e0:63:41:2f:71:de:76:02:db:1a:ea:3f:0c:ae:51:
62:4b:db:12:8c:6f:86:3c:b1:f8:09:54:d7:95:f5:
03:4d:75:4a:6a:41:9a:5a:7c:b5:b7:ea:17:f9:5a:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AE:66:FC:6F:8D:9F:67:16:4C:74:8C:21:DF:A5:B1:66:E1:83:0C
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/Gq5m_G-Nn2cWTHSMId-lsWbhgww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.115.0/24
Signature Algorithm: sha256WithRSAEncryption
72:82:52:e5:61:4c:11:9f:db:f4:7b:50:55:87:a1:60:3f:57:
b2:07:9a:a6:ae:43:19:e4:c2:5e:ec:5e:45:9a:7c:2d:61:2a:
5d:7e:19:9d:5e:8f:a8:d0:85:3a:8e:6f:66:80:3c:30:27:be:
25:b8:9c:4b:97:ac:d9:11:b2:bc:84:d9:0b:4d:90:09:bd:da:
e6:ec:4a:1d:d4:07:95:97:6c:a1:31:ec:f5:02:81:63:a9:9e:
ae:59:e5:48:bd:70:5b:ec:7c:9e:15:c6:ae:58:61:48:f8:f7:
08:02:0d:2e:7b:af:4f:f8:5a:cc:84:b6:3a:09:e1:13:8e:6a:
ef:3f:0c:71:0b:7c:1e:fa:24:11:c0:23:84:61:17:cf:60:eb:
f4:8a:d3:2b:8a:96:de:bd:55:53:83:ff:bc:ec:c2:ed:04:2f:
f3:b5:2c:dd:25:7c:f7:2b:1c:81:2f:4a:9d:5b:77:32:a4:02:
dd:73:d4:27:f6:71:d4:6f:d7:79:4d:92:4d:51:6e:5d:9a:74:
65:6f:2a:3f:cf:a0:5d:75:00:ce:c0:c5:bc:a0:11:e8:3c:ed:
0c:67:c1:06:bf:8c:a0:e1:34:f2:be:8f:0a:7f:c1:92:88:58:
bf:87:d3:04:04:d2:dc:05:7c:b9:9c:05:89:1c:9c:52:a1:35:
b1:93:58:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 19:46:51 2026 by rpki-client