Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/gkzk0gvDg9I3VzGU5NaHexAuLU0.roa
File: gkzk0gvDg9I3VzGU5NaHexAuLU0.roa (raw, json)
Hash identifier: h5/p9RICRTcamiWva/eyrrucloMZMW61s6wicb+IUZU=
Subject key identifier: 82:4C:E4:D2:0B:C3:83:D2:37:57:31:94:E4:D6:87:7B:10:2E:2D:4D
Certificate issuer: /CN=7b8db129261a52cd125f369b1eb8abff0f11b268
Certificate serial: 019F236882A0673FED584AEB4AA05BFE16E6
Authority key identifier: 7B:8D:B1:29:26:1A:52:CD:12:5F:36:9B:1E:B8:AB:FF:0F:11:B2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e42xKSYaUs0SXzabHrir_w8Rsmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/gkzk0gvDg9I3VzGU5NaHexAuLU0.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57644
IP address blocks: 194.50.95.0/24 maxlen: 24
2a13:57c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/e42xKSYaUs0SXzabHrir_w8Rsmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/e42xKSYaUs0SXzabHrir_w8Rsmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/e42xKSYaUs0SXzabHrir_w8Rsmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:82:a0:67:3f:ed:58:4a:eb:4a:a0:5b:fe:16:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8db129261a52cd125f369b1eb8abff0f11b268
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=824ce4d20bc383d237573194e4d6877b102e2d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:42:4f:68:6a:99:22:1c:00:11:ad:bd:cc:
9d:44:63:16:0d:b1:46:cd:8b:d6:a9:90:76:09:6f:
e3:25:55:a2:6d:42:e1:a1:ae:2b:ba:b5:c1:bc:ec:
bd:85:f5:f6:47:bb:23:d9:f9:5e:18:92:93:c8:8e:
62:0a:50:e5:ef:56:35:19:f6:9a:43:ba:c9:8b:1b:
d9:1c:79:85:93:11:ee:42:cb:a4:bb:92:9a:a1:91:
61:2d:f8:26:64:72:8d:ce:ba:97:58:1a:82:80:10:
7f:ef:ff:65:7f:8c:d2:a2:64:6a:15:6e:6a:dc:be:
f9:99:d6:f2:61:3d:07:c3:0c:3f:15:99:86:1e:11:
b8:9a:ca:37:83:55:2e:84:78:9e:2e:16:02:0a:96:
68:72:07:03:34:1f:c4:b1:88:26:a0:fe:1e:46:4e:
93:59:27:f5:28:9a:1b:6b:fe:fc:36:d2:eb:7c:59:
be:70:96:e5:5d:fc:0f:12:9a:9a:70:c6:99:a2:f5:
c8:ff:6a:8f:71:9c:7c:4e:0e:8e:ff:9a:8a:28:b9:
fb:9b:d6:f9:0c:a4:1f:5c:d6:fd:12:61:2c:d7:0c:
8d:78:ef:4d:06:a6:76:74:3e:96:df:92:4b:6b:7c:
8a:31:3d:74:7a:4c:f1:22:c4:df:47:f1:34:2a:ec:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4C:E4:D2:0B:C3:83:D2:37:57:31:94:E4:D6:87:7B:10:2E:2D:4D
X509v3 Authority Key Identifier:
keyid:7B:8D:B1:29:26:1A:52:CD:12:5F:36:9B:1E:B8:AB:FF:0F:11:B2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e42xKSYaUs0SXzabHrir_w8Rsmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/gkzk0gvDg9I3VzGU5NaHexAuLU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/e42xKSYaUs0SXzabHrir_w8Rsmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.95.0/24
IPv6:
2a13:57c0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:10:33:c3:bb:b1:6f:9d:67:a7:7c:ac:19:91:e9:ab:4e:8c:
66:41:be:ec:ec:e8:17:0e:48:72:bd:e6:9f:f9:d0:6d:27:f5:
83:bf:ce:59:08:58:d8:99:7f:9a:ef:c6:93:ed:9d:7f:01:46:
ae:4c:da:be:17:94:70:1f:51:8d:49:e2:35:e9:9e:b7:e8:c4:
e4:ff:2e:62:35:7b:cd:57:86:18:94:0a:ee:43:38:31:e5:b0:
ff:45:54:3a:15:f3:71:e4:5e:a5:22:ba:5a:fe:db:f8:b0:0e:
88:49:f3:65:df:dd:70:6c:60:49:1b:3e:da:12:ef:88:e4:4f:
e6:90:30:ed:39:04:72:b4:58:15:9d:56:88:01:df:65:09:3a:
a0:5b:fa:f3:59:c6:bf:27:c5:a3:14:74:03:02:b5:5b:c7:20:
97:18:04:e2:be:85:c9:ca:15:9e:86:ac:be:8a:12:59:e1:53:
85:14:8f:7a:8a:ce:9f:0f:f5:06:56:dc:da:02:0c:66:b6:42:
f1:a8:00:e6:cd:d7:fe:84:bb:b4:56:56:cf:ea:cd:78:b1:5b:
39:8f:26:1d:98:10:04:e5:ef:70:50:d7:2a:51:35:ab:65:11:
51:f7:b0:c5:8a:52:45:dd:d8:07:fa:22:68:5e:13:ae:fc:8b:
f7:d4:b2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:03:52 2026 by rpki-client