Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/gmxsPG4cUoRDhGjGSFZpIBKC3Vc.roa
File: gmxsPG4cUoRDhGjGSFZpIBKC3Vc.roa (raw, json)
Hash identifier: 34TUxv9nfVy/jkSU3uZVSK5tEVV3b0jLrFwkZpgwR/I=
Subject key identifier: 82:6C:6C:3C:6E:1C:52:84:43:84:68:C6:48:56:69:20:12:82:DD:57
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A0200AB523DF662F1AB077B2E07A0064A7
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/gmxsPG4cUoRDhGjGSFZpIBKC3Vc.roa
Signing time: Thu 20 Aug 2026 16:39:27 +0000
ROA not before: Thu 20 Aug 2026 16:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218914
IP address blocks: 130.78.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:0a:b5:23:df:66:2f:1a:b0:77:b2:e0:7a:00:64:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 20 16:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=826c6c3c6e1c5284438468c6485669201282dd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:c0:3c:3b:ac:64:5d:b8:14:3d:dc:e9:43:
40:cd:bc:47:19:72:f1:a0:a7:10:bd:6e:f8:1c:ca:
76:9d:a9:8b:22:c3:fb:45:29:38:76:c8:29:e8:b8:
d5:a5:72:6d:be:68:fb:f3:bb:73:ad:2f:c3:c1:ae:
93:e5:a6:63:70:36:55:68:74:0c:c2:a7:60:38:cb:
37:44:f0:82:40:9b:d0:b9:ef:03:e9:ab:18:2a:8a:
4f:c0:69:f9:5f:ee:ca:11:a0:90:0c:22:55:18:12:
e0:a3:75:e6:0b:9d:75:bc:dd:56:19:a3:da:77:36:
88:65:31:08:3c:9c:86:f6:22:4b:76:39:42:da:9a:
72:82:39:cc:7e:55:37:9c:f7:3f:bf:24:05:c7:1a:
36:e0:e0:4a:b6:c9:db:25:91:fd:b3:64:6d:47:51:
d5:0f:89:71:6b:01:6d:18:31:5c:1f:1c:a3:35:d9:
92:00:53:f6:6f:d8:da:56:8c:c1:ff:7d:8f:0a:15:
49:d6:da:21:cf:61:26:d6:35:79:80:42:8f:09:5e:
93:e3:43:7b:8c:94:b3:3f:e0:1d:04:06:44:7f:ed:
eb:08:06:76:01:a2:d0:cb:94:af:4c:6a:b5:f0:5b:
dd:30:db:ec:e0:a5:cf:65:67:01:e9:c8:39:eb:51:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6C:6C:3C:6E:1C:52:84:43:84:68:C6:48:56:69:20:12:82:DD:57
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/gmxsPG4cUoRDhGjGSFZpIBKC3Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.191.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d5:a6:14:e3:de:7a:4c:5c:db:95:3f:10:6e:2d:e1:54:20:
de:e7:96:e0:c7:e2:72:83:f6:03:37:54:3e:a7:d2:69:5a:27:
77:02:c7:1b:15:a1:d7:f0:bf:9a:c5:c9:6f:52:8b:d5:4a:30:
7d:e8:69:17:6e:3e:ce:fa:5d:61:cc:88:f6:80:33:3c:ae:0a:
e4:7b:c9:a7:8f:71:02:a6:33:ee:e9:09:f1:1c:55:d1:ee:1c:
01:ad:2b:53:fd:10:28:d7:aa:98:9a:f4:4a:26:04:ff:06:27:
fc:28:44:e8:cf:3d:3b:f7:a0:00:82:a6:86:13:05:e2:88:92:
08:53:4c:dd:2a:6d:7d:ce:e5:43:6d:6a:e5:88:94:b3:5d:80:
ee:ca:fb:23:d8:6b:3d:9f:58:9f:1f:bb:de:6a:12:cc:6b:c6:
11:ec:50:cc:fa:49:12:a5:18:10:13:40:20:b5:44:7e:3f:9d:
16:f5:b7:b6:07:32:19:1b:91:32:87:e4:9c:86:3f:f0:71:bb:
74:94:0d:c1:5a:f7:5c:59:47:ca:e4:0f:12:67:16:91:da:dd:
3f:75:eb:55:71:c6:cb:68:60:69:7b:21:e1:3f:8e:4a:f4:b9:
56:58:8b:f8:49:b4:2d:77:52:14:13:2c:77:ff:9c:ef:ea:1a:
37:e3:13:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 04:47:09 2026 by rpki-client