Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/GjHI4b9XG_Gq98DG7Vz6sUZGE80.roa
File: GjHI4b9XG_Gq98DG7Vz6sUZGE80.roa (raw, json)
Hash identifier: WTcq50V1CPKptotufjQn29Ul1Zr2FOf8snIYBs8IL7M=
Subject key identifier: 1A:31:C8:E1:BF:57:1B:F1:AA:F7:C0:C6:ED:5C:FA:B1:46:46:13:CD
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 01A00AD51A9A21CBA7991485B1D637345924
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/GjHI4b9XG_Gq98DG7Vz6sUZGE80.roa
Signing time: Sun 16 Aug 2026 13:48:53 +0000
ROA not before: Sun 16 Aug 2026 13:48:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 193.176.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:d5:1a:9a:21:cb:a7:99:14:85:b1:d6:37:34:59:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Aug 16 13:48:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a31c8e1bf571bf1aaf7c0c6ed5cfab1464613cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:7d:8b:2d:bb:5b:48:44:9e:c0:c6:70:1c:
39:54:d5:85:b4:15:f8:21:cc:0a:7b:31:87:03:07:
f5:23:eb:51:d5:c2:32:a7:ad:49:0b:4b:b6:87:60:
69:bc:81:0c:d3:af:22:1e:46:04:8b:f5:de:c6:1f:
88:e2:e2:04:ba:b5:b4:63:f3:14:18:17:76:60:b8:
b1:42:6c:f6:29:2f:a7:5b:e1:2f:b6:4b:5c:71:6b:
0e:c5:b1:8a:f0:03:a7:1b:37:50:57:40:6a:4b:c4:
2b:cd:d8:89:41:60:1b:e5:6a:03:c7:69:ff:0c:9c:
33:40:8d:da:25:d4:51:be:0c:33:38:6d:2d:60:2f:
11:c5:ab:71:e8:66:ad:30:22:4c:ce:c0:29:f6:16:
71:df:ef:bf:ed:3a:17:55:d7:f3:f9:75:a8:d0:be:
69:13:73:c2:ff:75:f3:1a:15:3f:1a:68:37:4a:46:
20:75:c3:fc:19:31:40:68:ac:56:cd:2c:f7:b4:f9:
c8:3d:34:59:14:eb:4d:9a:8f:b1:cf:be:31:7d:cb:
01:36:eb:5a:50:04:e2:96:3e:69:59:09:97:11:7e:
f8:41:ab:ac:7d:e6:39:bb:8b:67:b7:96:77:c3:50:
22:0d:dd:fe:d1:c8:7d:f3:af:6d:dd:97:dc:8e:be:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:31:C8:E1:BF:57:1B:F1:AA:F7:C0:C6:ED:5C:FA:B1:46:46:13:CD
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/GjHI4b9XG_Gq98DG7Vz6sUZGE80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.179.0/24
Signature Algorithm: sha256WithRSAEncryption
60:5b:1a:ba:c0:ed:37:b4:94:59:1f:d3:50:14:13:82:4c:9e:
aa:9f:84:23:3c:e7:74:11:8f:10:92:4f:c4:6a:d5:6d:b8:7d:
6b:73:2c:a9:aa:ab:26:8a:8e:aa:77:14:5a:f1:30:2f:26:c0:
31:c9:e3:b1:69:6c:cf:0f:ff:fc:c0:79:95:f5:a0:f0:8e:90:
f8:c9:04:ca:67:c6:bd:c7:fe:70:a6:1b:a4:79:c5:9d:3e:16:
15:34:0c:72:3e:84:a3:26:68:bf:95:f8:3f:95:e3:a8:a6:db:
43:dc:5d:2e:20:0b:73:c4:92:2d:08:ea:c5:99:09:d8:61:0a:
f8:4e:37:04:a1:5e:eb:39:e4:86:ba:df:fa:d9:f7:b6:87:90:
ce:9e:1d:b9:6f:0a:ce:d9:68:08:e0:22:1e:61:73:7b:0a:35:
05:ed:1c:88:b4:b8:49:ca:19:a4:2b:2a:65:d4:92:d0:66:a9:
f1:1a:9a:26:38:ab:4b:58:a5:9f:02:2d:a1:a4:61:bd:ab:ea:
9d:54:00:2a:5a:1b:b6:d2:43:12:79:24:78:6d:f8:3e:34:42:
6b:3a:dc:0c:2a:23:bf:b8:61:6d:d0:5e:c5:bd:5d:21:3e:ea:
50:f8:89:4d:60:2e:5d:f9:73:4e:b1:b1:34:0e:54:f8:80:92:
09:6f:a3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 02:25:33 2026 by rpki-client