Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/GP_DUV0faWuK0jHjXr1g_eRLzwA.roa
File: GP_DUV0faWuK0jHjXr1g_eRLzwA.roa (raw, json)
Hash identifier: IUdACoDW0rE/n6kZcocEWVzhGKES4IEE0jvO7MJrLYo=
Subject key identifier: 18:FF:C3:51:5D:1F:69:6B:8A:D2:31:E3:5E:BD:60:FD:E4:4B:CF:00
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 01A0107FD318AF2A7580B4EE137C5F7FD5F7
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/GP_DUV0faWuK0jHjXr1g_eRLzwA.roa
Signing time: Mon 17 Aug 2026 16:13:27 +0000
ROA not before: Mon 17 Aug 2026 16:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203771
IP address blocks: 176.53.22.0/24 maxlen: 24
176.53.35.0/24 maxlen: 24
176.53.36.0/24 maxlen: 24
213.128.69.0/24 maxlen: 24
213.128.78.0/24 maxlen: 24
213.128.80.0/24 maxlen: 24
213.128.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:7f:d3:18:af:2a:75:80:b4:ee:13:7c:5f:7f:d5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Aug 17 16:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18ffc3515d1f696b8ad231e35ebd60fde44bcf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5f:0f:cd:53:1a:6f:94:f6:10:b9:44:44:d9:
a1:67:4d:64:39:f3:23:2e:64:b8:d1:d7:df:d9:f5:
dd:61:7d:9f:6b:13:88:fb:dd:af:ab:fc:26:ef:20:
4d:5b:0b:33:37:a9:5b:01:b5:62:96:2c:48:5a:5f:
ce:c2:14:5b:3f:1c:b4:7c:18:f3:21:97:20:48:6d:
e2:88:5c:5b:63:7e:da:3e:e3:6b:ce:5b:8d:28:01:
6f:76:d2:4f:4a:25:ee:52:c6:80:44:3c:1f:0a:59:
8a:8b:af:ea:f1:09:76:3b:dc:33:af:e0:46:ec:ad:
a7:d0:cc:fb:c4:18:fa:ea:40:39:df:ac:ab:8b:cf:
d6:b3:9e:54:27:29:b2:2a:75:72:11:0a:24:2f:ed:
28:b6:1f:ee:05:75:6a:e3:c6:65:21:70:ba:19:17:
1e:bf:2a:df:7d:aa:1b:b0:58:12:3d:bc:c8:96:09:
de:6e:0c:e3:09:d8:51:50:be:cc:61:b8:b6:a0:37:
0d:f2:cd:15:37:ab:a8:4e:c0:d1:5f:22:79:80:9c:
bb:0c:70:18:0b:7f:17:89:84:c6:b8:5c:e6:79:ca:
d6:df:27:22:88:c2:41:59:03:e6:b5:ed:cf:29:09:
27:fd:b7:3f:e1:62:76:eb:ac:a7:af:32:4a:3f:e1:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FF:C3:51:5D:1F:69:6B:8A:D2:31:E3:5E:BD:60:FD:E4:4B:CF:00
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/GP_DUV0faWuK0jHjXr1g_eRLzwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.22.0/24
176.53.35.0-176.53.36.255
213.128.69.0/24
213.128.78.0/24
213.128.80.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:5c:e6:d2:d4:56:5b:c0:06:60:53:6d:c4:7f:6e:7f:11:5d:
97:cc:09:3f:e1:98:1c:82:c3:c2:e4:2b:1a:4e:cb:ec:6f:10:
85:f8:d1:e4:22:9b:7f:24:98:6b:04:59:9e:8b:e1:c5:a0:82:
58:03:ae:25:19:d7:c8:1e:e1:1d:55:16:ee:03:74:c1:e1:e2:
1d:80:c4:6a:9e:00:55:d4:95:be:99:cf:ed:05:ed:a8:85:31:
c0:33:48:04:04:ae:62:b9:16:4f:da:0e:be:4d:18:43:fa:86:
cc:7b:6a:b0:d0:d4:10:7b:e5:21:99:57:a7:4f:d7:fe:48:0a:
38:ab:da:50:fe:ba:fa:19:95:a8:c2:45:9e:41:aa:ba:ae:75:
51:66:29:f0:8e:04:6a:54:3b:5b:25:8a:1b:aa:f0:cf:fe:fe:
00:d5:82:ef:64:f0:55:91:73:a3:68:ea:1e:e9:ae:d7:e2:df:
f8:b8:09:d2:c3:47:f0:2d:09:7b:c1:52:05:bb:ba:9b:8e:9d:
05:d5:c2:d6:3a:7b:4b:1c:9e:93:25:15:65:85:38:0c:dc:02:
b1:d7:6a:1e:eb:f5:81:81:65:dc:37:5f:6a:ee:ba:90:53:53:
c5:2c:b6:bc:53:8b:d7:16:13:ca:ed:7c:b9:fb:47:53:22:2f:
67:5a:60:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:12 2026 by rpki-client