Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/GPicX2Mt4yE_Rq_pflq6xcNfgak.roa
File: GPicX2Mt4yE_Rq_pflq6xcNfgak.roa (raw, json)
Hash identifier: WxqHtA7vCCWgN8qQIvP/TGNrMuKDdpeonE+DyVIgdYU=
Subject key identifier: 18:F8:9C:5F:63:2D:E3:21:3F:46:AF:E9:7E:5A:BA:C5:C3:5F:81:A9
Certificate issuer: /CN=8044a558d15dfc3b9d4a7e0665f86d257cd02a00
Certificate serial: 019FD636F7C13C496FF9FE7C1EFF41E82F26
Authority key identifier: 80:44:A5:58:D1:5D:FC:3B:9D:4A:7E:06:65:F8:6D:25:7C:D0:2A:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/GPicX2Mt4yE_Rq_pflq6xcNfgak.roa
Signing time: Thu 06 Aug 2026 08:35:54 +0000
ROA not before: Thu 06 Aug 2026 08:35:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30722
IP address blocks: 193.207.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:36:f7:c1:3c:49:6f:f9:fe:7c:1e:ff:41:e8:2f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8044a558d15dfc3b9d4a7e0665f86d257cd02a00
Validity
Not Before: Aug 6 08:35:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18f89c5f632de3213f46afe97e5abac5c35f81a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:f7:ae:03:33:d3:39:49:94:10:ef:30:31:
a5:06:92:ba:06:18:8a:fc:bd:fa:7d:1d:84:83:3d:
a1:67:bd:7f:78:bb:f6:4b:e1:2a:25:60:56:df:02:
c7:7e:a4:6f:d5:46:fa:4f:fa:c4:b8:35:82:23:89:
a2:b2:d6:79:e2:7a:b6:6a:e3:83:82:e4:91:a9:69:
4b:35:41:bf:42:3a:d3:66:7b:12:e1:1c:c9:c0:a3:
88:ca:bf:dc:ca:28:7d:8a:f0:d1:07:57:bb:4f:f5:
94:a4:0f:18:6a:b4:2d:8e:1b:19:72:43:da:9a:a8:
27:ce:b0:a7:dd:2c:39:c9:29:e7:9e:86:8a:8c:71:
f2:8a:b5:25:6b:b1:52:74:55:76:2f:59:d2:ec:0c:
d6:34:ef:cd:b6:a2:38:8d:12:b5:50:fc:c4:ea:f2:
8d:c6:76:5f:28:b3:89:7f:15:a8:d7:4b:72:41:ca:
c8:bc:66:84:8c:2d:53:e7:15:42:a5:77:a8:8e:7e:
0d:b9:85:fa:25:43:80:6a:b6:64:36:9b:20:6c:91:
b1:6c:b4:51:9a:8b:fc:31:6b:2b:f6:8f:52:f9:5d:
fb:32:14:b5:af:a3:43:36:35:a3:4b:f8:bd:76:ca:
af:5c:6a:cf:7a:e6:6d:83:e7:de:47:1e:97:36:b9:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F8:9C:5F:63:2D:E3:21:3F:46:AF:E9:7E:5A:BA:C5:C3:5F:81:A9
X509v3 Authority Key Identifier:
keyid:80:44:A5:58:D1:5D:FC:3B:9D:4A:7E:06:65:F8:6D:25:7C:D0:2A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/GPicX2Mt4yE_Rq_pflq6xcNfgak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.207.27.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:95:e4:a7:a2:ec:48:f1:f1:50:32:19:43:a3:bb:5c:ad:f4:
46:3c:ec:34:73:a7:06:90:29:3b:51:e0:5b:12:57:ad:0e:64:
a5:24:06:88:e6:2b:c7:0a:6a:56:1e:cd:13:ec:21:16:a1:f2:
79:81:d9:28:21:e6:39:e6:bf:e6:61:01:f5:00:df:67:83:d4:
55:ce:bd:ba:c0:6c:7b:9e:60:98:ca:f3:38:c1:ef:21:38:c6:
cc:7d:7f:45:03:fa:95:7f:28:98:c1:f4:c5:76:29:2f:21:60:
cf:9d:2e:05:53:aa:ce:7d:27:a0:df:2b:00:ce:c2:86:b2:08:
1d:a7:33:21:db:70:d2:5a:ac:aa:4e:3b:99:05:be:e0:1a:a2:
f1:5e:f2:bd:7a:4e:93:85:ae:b1:41:4d:41:2d:ce:6f:07:59:
fd:7f:55:f6:28:f9:f4:f6:88:cc:a8:0a:a6:06:a8:61:da:bf:
61:c9:37:80:ff:38:10:af:b9:97:ad:9c:05:64:28:f1:9e:10:
59:a9:77:ae:57:d3:a5:04:75:07:4e:a0:c7:6c:e9:b7:9b:5d:
b9:1c:57:b2:6b:c8:64:be:4f:90:b1:fe:7a:c4:94:09:66:e1:
e9:35:8f:3e:41:e2:6f:78:cb:d5:d4:c3:20:7e:03:55:2c:7e:
f1:98:15:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:57:38 2026 by rpki-client