Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/GqzdFNSiDk6sI52-YP2ccD92cJI.roa
File: GqzdFNSiDk6sI52-YP2ccD92cJI.roa (raw, json)
Hash identifier: drkoNBSBFH+OuC0Inyg8xVO+iSjJR9Gj4j9T03Dwk58=
Subject key identifier: 1A:AC:DD:14:D4:A2:0E:4E:AC:23:9D:BE:60:FD:9C:70:3F:76:70:92
Certificate issuer: /CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
Certificate serial: 01A048ACB19432B0748E5B37C251E61B7C73
Authority key identifier: 30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/GqzdFNSiDk6sI52-YP2ccD92cJI.roa
Signing time: Fri 28 Aug 2026 14:01:12 +0000
ROA not before: Fri 28 Aug 2026 14:01:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 5.254.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:ac:b1:94:32:b0:74:8e:5b:37:c2:51:e6:1b:7c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
Validity
Not Before: Aug 28 14:01:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aacdd14d4a20e4eac239dbe60fd9c703f767092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5c:e4:b0:ad:b6:f2:a1:af:fa:3d:89:51:2e:
7f:9b:32:53:c9:95:fa:18:c6:1a:60:ea:8e:4e:a8:
f9:c0:6e:85:ef:16:6c:2a:fd:85:0e:3f:db:62:75:
ec:a0:7c:dd:e1:fe:7a:50:aa:52:e5:54:20:9f:5e:
80:b5:39:36:16:e7:d8:bb:81:a2:5e:2b:ab:ce:75:
1e:3f:41:37:73:68:82:0d:d7:9e:da:72:8e:dd:ee:
51:17:18:07:73:30:4e:5a:72:b6:c3:69:f7:0b:a7:
d9:39:f6:3a:1c:c1:d6:36:8e:78:46:77:94:dd:fe:
d3:ec:66:1b:ec:8d:f2:1d:e2:24:aa:61:76:55:79:
72:6d:f1:93:da:42:fe:4b:4e:46:0a:4f:f9:92:3e:
b0:5e:a0:d5:15:8c:a6:c7:8b:93:eb:a9:0f:cd:fa:
d8:66:e8:71:dc:b8:49:ce:80:dd:88:15:63:51:50:
60:1e:20:c2:f1:8e:81:03:46:71:a9:8d:40:9c:8a:
11:bb:81:b4:e0:40:6e:8a:c9:9e:71:85:09:46:79:
4b:00:87:4f:a7:16:96:65:a4:06:e1:5c:55:e4:59:
97:98:ee:a9:f1:20:e6:9e:b5:7b:b3:14:88:02:11:
79:f1:b5:ed:de:d4:6c:12:2f:1b:26:ec:d4:63:17:
0c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AC:DD:14:D4:A2:0E:4E:AC:23:9D:BE:60:FD:9C:70:3F:76:70:92
X509v3 Authority Key Identifier:
keyid:30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/GqzdFNSiDk6sI52-YP2ccD92cJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.167.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8d:b2:4f:7a:ca:21:aa:eb:cb:3d:b2:71:a5:3f:56:1f:6b:
e4:9a:62:bb:71:a8:56:7f:4b:e4:9b:55:0f:a6:a6:18:e5:2e:
9b:b0:ef:08:dc:9d:d4:08:62:d0:62:8d:91:0b:3c:be:71:56:
83:54:4a:0f:c2:1e:7c:3f:4c:77:43:7f:c7:28:bb:98:d9:04:
e3:05:b3:67:0e:f1:9a:6d:46:be:fb:af:5d:ae:02:fa:ee:f6:
78:d2:85:f9:24:4c:a5:3b:25:93:9e:d1:c6:0f:54:e5:74:2f:
f3:c6:42:3d:06:5f:d7:c1:29:46:d3:4f:96:04:d8:59:b7:4b:
1e:95:66:94:9b:d4:97:36:9e:63:f5:a2:cb:6a:66:f6:4c:8b:
d1:4e:f6:8d:ae:ed:ef:2b:0d:54:96:5a:eb:f4:d1:62:df:41:
d4:88:d8:df:ce:e1:b6:48:54:da:e9:e7:75:75:d6:8e:a2:10:
6d:dc:46:54:74:f5:38:32:cf:b8:30:50:1e:ef:b9:3b:d1:54:
39:43:c3:89:56:5a:f0:50:4b:2e:87:97:bc:2f:51:7e:51:a8:
ef:a2:da:bf:3d:e3:a9:be:21:8b:63:1a:38:c0:df:f0:f5:28:
07:ab:9d:a6:a9:16:2f:af:0f:1a:55:2b:9e:ee:ee:e6:0b:e6:
d0:6a:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:16 2026 by rpki-client