Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/GkFoE_2ltOflsqGwzHr6Gcwxcpw.roa
File: GkFoE_2ltOflsqGwzHr6Gcwxcpw.roa (raw, json)
Hash identifier: y4SdBrwkJXx5JbHyjlzXWzfHFwy4JEP2NLuMX+CqaJg=
Subject key identifier: 1A:41:68:13:FD:A5:B4:E7:E5:B2:A1:B0:CC:7A:FA:19:CC:31:72:9C
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 019F9DA3A31BB0EFF945C7F069EE730DBC2A
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/GkFoE_2ltOflsqGwzHr6Gcwxcpw.roa
Signing time: Sun 26 Jul 2026 08:56:14 +0000
ROA not before: Sun 26 Jul 2026 08:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7843
IP address blocks: 213.187.149.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:a3:a3:1b:b0:ef:f9:45:c7:f0:69:ee:73:0d:bc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jul 26 08:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a416813fda5b4e7e5b2a1b0cc7afa19cc31729c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:f1:9b:48:7d:43:f3:4c:4d:c4:8e:c8:b4:
13:a7:12:3c:d0:24:77:ee:33:75:f5:61:54:6d:23:
35:d3:7b:77:1c:3a:bc:ad:a8:ba:0f:f9:a2:32:39:
f2:0f:06:33:58:d0:e4:c1:ef:c9:73:9d:68:18:57:
0d:5f:b7:20:ad:03:27:a2:e7:4b:7c:08:7e:e4:6d:
01:d7:75:f2:3c:61:83:3a:3d:e4:6f:2c:16:19:13:
d6:40:3a:bb:70:48:8f:14:a5:36:4a:f2:d6:65:e7:
91:22:58:be:14:31:ac:9c:11:b6:21:5a:33:1c:77:
70:ed:b9:ef:74:fa:d0:75:ef:5c:5e:8a:c8:16:d0:
15:4a:fa:c2:ab:eb:ba:11:c0:db:01:93:24:0c:a1:
ab:0f:01:13:9d:a9:1d:c1:f2:a0:b0:a2:be:ae:50:
49:25:c2:b3:18:36:0f:95:49:83:66:18:7e:34:b8:
bf:68:77:62:6e:19:ec:02:dd:7a:5b:c4:d0:d4:a0:
a2:c3:8c:4c:a3:81:45:d4:8c:cb:19:b3:db:62:e1:
57:d6:2b:f4:01:03:58:3d:ee:6f:9f:47:34:cf:65:
27:1e:11:f8:c5:2e:70:a5:13:b4:4a:f1:14:58:84:
f7:25:56:1d:3c:47:44:35:55:34:68:9d:ff:58:90:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:41:68:13:FD:A5:B4:E7:E5:B2:A1:B0:CC:7A:FA:19:CC:31:72:9C
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/GkFoE_2ltOflsqGwzHr6Gcwxcpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.187.149.0/24
Signature Algorithm: sha256WithRSAEncryption
32:4e:e9:b0:c2:fe:d4:15:49:18:ac:7b:eb:7b:2f:d6:f5:aa:
e6:0d:2f:39:7e:07:20:fa:61:7a:71:10:fe:8e:46:60:ee:a2:
67:90:80:f8:70:c2:78:c6:74:6f:55:95:be:9c:35:c8:7b:8a:
d2:c6:6c:3f:d4:fb:e4:14:4f:97:06:18:13:00:af:68:af:31:
fd:d3:e0:49:6c:03:40:16:1c:1a:fe:8d:84:f5:11:df:d7:46:
e4:10:26:25:b2:36:9e:46:43:23:ed:a1:72:83:c2:71:66:92:
be:96:20:a9:7b:56:2c:73:b6:8e:86:25:9b:71:ae:73:81:7c:
17:1c:2d:24:6b:6f:ad:57:44:11:b0:3e:9e:81:6f:59:a0:ab:
1c:e5:b0:d5:73:f9:88:83:5a:d5:93:a4:5d:7e:24:30:e6:f1:
48:0d:11:53:05:c7:39:a4:a1:41:a7:1c:e3:04:60:49:f5:08:
d9:bc:b2:ab:ac:44:9b:b3:a3:8e:c4:07:71:24:e6:26:3b:8d:
b2:e1:c8:0b:0f:33:17:a8:15:59:3a:48:ae:8c:50:e2:7a:6a:
25:ab:83:6c:06:49:d1:89:b5:00:7f:0e:df:f4:63:a6:e8:74:
be:b0:b2:ee:61:98:0d:9c:70:16:48:5d:0e:60:ff:ee:9b:5b:
52:92:3a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:17:33 2026 by rpki-client