Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GBtOLoP9vp71Gxv2kWFmggDOWIg.roa
File: GBtOLoP9vp71Gxv2kWFmggDOWIg.roa (raw, json)
Hash identifier: SS3qAUpFfqbcoGvQQS410i2/UO0RDDYTX8RnTuFzQhA=
Subject key identifier: 18:1B:4E:2E:83:FD:BE:9E:F5:1B:1B:F6:91:61:66:82:00:CE:58:88
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A13B9C7C12E2AF34606473A56B0BD24476
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GBtOLoP9vp71Gxv2kWFmggDOWIg.roa
Signing time: Wed 14 Oct 2026 18:11:13 +0000
ROA not before: Wed 14 Oct 2026 18:11:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218465
IP address blocks: 31.77.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:9c:7c:12:e2:af:34:60:64:73:a5:6b:0b:d2:44:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 14 18:11:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=181b4e2e83fdbe9ef51b1bf69161668200ce5888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:3e:bf:41:76:b7:e6:06:10:da:38:a9:97:
b0:de:08:bb:74:10:a4:e5:48:9d:7e:97:b0:9f:4f:
ae:d4:db:f7:22:7f:8a:dd:2e:33:9e:eb:8f:e0:b2:
61:f9:dc:ba:29:7c:9c:c8:d4:98:56:a3:15:5f:a7:
8d:b4:de:6a:8d:39:b6:d9:af:49:1e:7c:88:04:f1:
d0:eb:ac:ed:90:a2:2e:2c:38:51:f9:a4:1b:08:98:
d2:d9:bc:c5:36:6c:bd:22:86:ec:b1:33:cb:48:24:
12:35:f6:4e:a8:b9:b8:d9:68:71:e5:78:57:5d:13:
d5:08:fe:81:4c:70:7d:4d:3b:2f:f1:81:b2:73:6d:
e1:3b:5a:91:65:c4:b8:08:72:a7:0f:0c:23:bf:61:
5d:74:d7:bb:40:6e:37:cd:44:22:77:e3:e1:17:0c:
64:fd:9a:aa:79:58:97:9b:a3:b3:17:88:3b:7c:73:
30:75:b2:43:ac:4a:c3:5e:7f:17:c9:b5:a2:6e:37:
28:29:dc:66:39:19:ba:15:f0:c8:f7:a0:27:1d:93:
3d:ca:39:69:83:29:fc:85:5f:a1:6d:c2:82:7b:8c:
c0:19:bd:8b:0e:2e:51:95:bc:e5:23:6f:aa:7f:17:
50:17:d8:c4:9d:fa:5d:c9:4e:cd:51:cb:b6:71:47:
65:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1B:4E:2E:83:FD:BE:9E:F5:1B:1B:F6:91:61:66:82:00:CE:58:88
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GBtOLoP9vp71Gxv2kWFmggDOWIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.222.0/24
Signature Algorithm: sha256WithRSAEncryption
82:44:69:af:e0:69:bc:27:ee:13:3a:cd:86:e7:80:cd:a5:97:
83:da:53:3b:03:45:1d:2b:e8:de:ed:89:94:52:e8:a8:62:48:
e7:e5:74:de:6c:19:5e:2c:9c:04:b2:26:e4:0d:df:b5:d7:31:
8d:7f:8a:7f:0f:d5:b3:4c:86:4a:9f:4a:a4:5b:43:8e:36:8d:
92:b8:68:4f:47:9e:58:a2:45:25:23:cd:4d:e0:46:0a:9d:c7:
c1:c7:e6:0a:f6:c6:db:31:80:0c:28:28:9f:a2:d2:7c:ee:6f:
72:34:51:79:d6:fc:5c:d9:ba:bb:40:b8:58:40:10:bb:dc:48:
65:7e:9c:83:d8:f6:81:94:e1:27:f2:ca:53:d0:5c:7e:67:31:
a1:2e:8e:7b:63:48:40:40:41:db:ef:93:17:5e:84:28:0d:6d:
ef:2c:79:3f:92:88:d1:8b:1a:91:4d:cf:2b:4f:78:54:ec:2f:
e4:74:a5:24:b6:46:fd:84:ab:97:08:92:b3:bd:da:7f:4a:32:
16:06:db:18:fa:2f:3a:f5:d3:b5:8f:3f:3b:8d:68:b9:e3:0c:
78:90:5a:1f:aa:03:74:8a:5c:18:36:5e:1f:e8:42:7c:31:a7:
8e:0e:27:4c:17:a9:4d:bb:27:d8:a9:90:b9:02:2f:61:1f:e7:
25:c8:f7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:46:00 2026 by rpki-client