Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GmaDslgLYP9shuyxEThIzvxvsnc.roa
File: GmaDslgLYP9shuyxEThIzvxvsnc.roa (raw, json)
Hash identifier: ERGMi7hrLu3Gl49wkKp/D8rRnMcot2XGroKpQCDv51c=
Subject key identifier: 1A:66:83:B2:58:0B:60:FF:6C:86:EC:B1:11:38:48:CE:FC:6F:B2:77
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8049EB24CD8C7291C3946751F107B5AC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GmaDslgLYP9shuyxEThIzvxvsnc.roa
Signing time: Mon 20 Jul 2026 16:09:15 +0000
ROA not before: Mon 20 Jul 2026 16:09:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147276
IP address blocks: 2.26.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:49:eb:24:cd:8c:72:91:c3:94:67:51:f1:07:b5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 20 16:09:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a6683b2580b60ff6c86ecb1113848cefc6fb277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:28:07:0d:de:e3:45:59:79:9b:a1:a3:79:
40:3b:84:bc:ab:d3:02:3d:7c:bf:9d:52:79:49:6b:
79:55:4f:62:50:bc:e6:e6:3e:38:6a:ed:e9:f2:9a:
73:dc:93:c3:82:d7:0e:fe:46:c8:73:11:41:7e:3c:
1f:e9:da:6b:1c:bb:36:16:45:17:b2:30:b1:5f:0c:
3d:ca:49:73:59:9a:30:b8:93:9f:f4:53:08:2b:34:
e7:14:e2:b5:55:c3:60:2d:fd:51:39:45:2f:ce:79:
61:1a:59:f9:a3:91:f0:ba:30:8a:1d:86:1c:2b:5a:
3e:78:de:15:82:d8:4b:18:0d:9d:b4:8c:05:33:7c:
32:70:b8:f8:bf:9e:33:b5:a0:58:b9:4e:ab:18:8d:
27:32:93:6b:06:ee:72:3e:84:87:b9:f3:57:69:af:
54:94:15:b2:bb:32:f7:ab:32:8e:9e:f1:e5:92:19:
89:b1:d2:19:e1:f0:d6:ce:ca:9a:72:3d:80:cc:98:
ea:27:12:a3:83:32:cf:3a:7f:6e:ac:f9:34:e1:b5:
bb:76:58:d8:5f:cc:ce:91:92:6d:af:c2:6a:64:9c:
6d:b4:3c:b1:35:4d:85:65:dd:9c:1d:fb:02:ee:e5:
9a:9b:09:b5:d8:f6:54:cf:68:ed:d0:b9:d0:42:56:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:66:83:B2:58:0B:60:FF:6C:86:EC:B1:11:38:48:CE:FC:6F:B2:77
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GmaDslgLYP9shuyxEThIzvxvsnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.180.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:1f:2a:4d:f5:0c:75:50:0f:77:2a:d7:50:24:48:28:50:60:
e0:ce:e5:64:67:81:c0:83:78:59:9b:3f:24:e6:fb:de:b5:7d:
d3:67:0b:62:dd:30:63:32:f2:e3:ba:28:a6:08:50:79:e2:60:
ce:42:57:eb:96:ae:0d:e6:5b:0e:a4:ac:4b:93:f0:5f:b1:4a:
d6:cb:1a:be:82:54:48:4c:e0:31:ca:ed:72:71:46:0f:34:e8:
5e:a1:5b:ce:2b:f3:50:7b:39:72:4a:a4:95:fe:cc:78:b7:38:
ff:a5:f2:37:0f:13:b8:50:07:83:cb:28:75:58:95:c5:03:19:
66:29:9b:df:85:8a:b8:dc:dd:f7:af:24:ba:0c:a6:0e:71:9a:
19:13:ce:d1:93:b5:21:f8:36:64:4f:10:8c:e9:a6:e2:02:34:
0e:70:28:e3:af:3c:e3:f2:34:eb:ce:df:93:2e:59:ac:4f:5b:
c0:24:f4:57:51:f8:19:89:8d:ac:d6:b2:f5:f3:22:78:db:fc:
5c:43:ae:ef:12:ac:27:8e:c0:24:8a:38:9c:46:d9:b3:0c:bb:
59:c3:5a:b3:86:f2:d4:8f:90:4e:7f:2e:e6:91:17:8c:04:d7:
2b:5c:05:35:02:17:13:ba:ba:27:37:7a:5d:c0:82:93:5a:d1:
7c:c4:97:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:15 2026 by rpki-client