Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gvTAjZuy-7dL9iVtAJP0MyLjDTc.roa
File: gvTAjZuy-7dL9iVtAJP0MyLjDTc.roa (raw, json)
Hash identifier: c46x+/6+UjzSQ7D0G6PfnNRMwu66+IQVT+ItV8BqGLo=
Subject key identifier: 82:F4:C0:8D:9B:B2:FB:B7:4B:F6:25:6D:00:93:F4:33:22:E3:0D:37
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A05B6DB97954014A83CA4EFCDBE5527ED4
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gvTAjZuy-7dL9iVtAJP0MyLjDTc.roa
Signing time: Tue 01 Sep 2026 05:25:12 +0000
ROA not before: Tue 01 Sep 2026 05:25:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 5.253.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:6d:b9:79:54:01:4a:83:ca:4e:fc:db:e5:52:7e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 1 05:25:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82f4c08d9bb2fbb74bf6256d0093f43322e30d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:fe:ac:d2:7c:88:58:77:63:c6:a4:bc:b6:
6d:77:84:f5:44:4f:0c:6a:da:72:05:fd:21:5f:ed:
61:ae:55:cc:13:65:02:e2:fb:08:59:56:81:80:46:
68:ae:bf:c1:69:de:dd:59:b1:a7:61:1f:ca:ad:ab:
19:43:37:16:e8:e5:e1:5d:29:e1:35:4e:3b:b4:ae:
f9:91:b1:a0:2d:f2:c9:ce:84:ac:44:39:9b:c7:26:
1a:35:5b:05:53:39:a1:8b:b9:f5:87:8b:91:9e:1c:
87:dd:6f:eb:d1:92:10:23:7c:db:a1:21:b9:77:90:
35:f6:b7:0f:45:57:23:27:ad:7f:fc:e5:1b:d3:58:
a7:a1:2c:cc:3c:c7:46:0e:7a:d6:47:aa:63:ce:94:
08:17:7e:3f:d9:5d:bf:2a:8c:f7:6d:95:5e:d6:a0:
80:ca:41:22:5a:f6:31:04:2c:4f:a5:a9:b9:7f:5a:
09:b7:04:2c:93:ce:b5:7a:df:b1:00:67:91:12:bf:
56:2a:db:a6:24:f0:fd:90:e5:3a:83:3a:92:74:ed:
2c:49:8f:80:ee:d2:b2:f6:e6:b6:ac:8c:11:d2:0c:
a8:ef:ee:34:f0:6d:12:d5:1d:8e:c8:23:e5:f6:b6:
b4:c1:69:92:ab:00:96:fd:07:cf:48:71:a7:da:72:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F4:C0:8D:9B:B2:FB:B7:4B:F6:25:6D:00:93:F4:33:22:E3:0D:37
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gvTAjZuy-7dL9iVtAJP0MyLjDTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.39.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:78:e3:01:f1:80:6d:0e:50:6c:1d:a0:2a:61:28:43:94:8f:
e0:f8:03:66:c5:5f:06:44:58:c1:01:f3:fb:54:fd:72:fb:74:
a8:97:ba:5d:8b:29:51:39:c5:10:ff:a8:17:b2:f2:2a:6f:20:
65:15:3e:50:83:84:31:e3:46:7c:fd:d8:fa:f1:35:fd:ae:39:
5f:12:c0:81:f5:54:c0:ba:58:31:a0:1d:0e:6c:1c:59:b4:a8:
ff:c4:83:e5:9b:05:b6:6a:b6:59:59:23:66:b6:73:00:1d:64:
e4:fb:f2:c5:ca:67:69:70:78:59:eb:e7:77:7d:1d:4f:ee:d6:
0a:d9:03:f9:35:44:68:32:f7:ad:45:d4:1d:33:8d:bc:a4:2b:
cd:7e:0d:d5:eb:d5:35:ef:b5:2d:77:be:44:27:da:4d:30:45:
27:89:03:3f:72:84:42:a0:cc:2b:54:9f:2a:3b:9e:5a:8b:f4:
60:4d:31:9a:3e:18:53:e1:a5:e7:ba:30:b5:bc:b9:d6:de:ec:
04:26:36:e5:bd:60:b2:f2:a1:cb:63:8f:69:b7:a5:b7:39:d6:
03:3f:85:19:7b:65:1b:da:aa:8d:b6:7c:3f:12:60:30:8a:8b:
a7:37:04:f3:a4:17:17:5d:da:38:10:18:fe:0a:5b:fa:c5:70:
51:47:f0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 01:21:55 2026 by rpki-client