Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/glrmCimkt00RGLl-0iKytya0FME.roa
File: glrmCimkt00RGLl-0iKytya0FME.roa (raw, json)
Hash identifier: 4pJ2sCbvMLafWmJon75Iv1pWI6NIK7fWPBhGjo/nywI=
Subject key identifier: 82:5A:E6:0A:29:A4:B7:4D:11:18:B9:7E:D2:22:B2:B7:26:B4:14:C1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A0CD5E598AE0FD3F276084EDADA3190F44
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/glrmCimkt00RGLl-0iKytya0FME.roa
Signing time: Wed 23 Sep 2026 08:25:07 +0000
ROA not before: Wed 23 Sep 2026 08:25:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141323
IP address blocks: 185.214.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:5e:59:8a:e0:fd:3f:27:60:84:ed:ad:a3:19:0f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 23 08:25:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=825ae60a29a4b74d1118b97ed222b2b726b414c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:dc:f3:77:f6:c3:07:57:60:ca:17:44:26:
cb:1c:55:fe:ca:a9:70:37:69:90:fa:93:46:0f:17:
86:b9:4a:50:b9:ef:a8:cb:77:a3:bf:63:35:d6:6f:
c6:79:db:8d:22:b7:89:79:19:3f:bf:0f:89:38:6a:
94:d8:95:3e:31:99:99:88:1f:99:1f:00:3a:13:9f:
2e:71:92:1e:1f:99:27:a1:6f:2f:45:26:46:61:4e:
b6:6b:2d:bd:0f:f4:1b:ab:ee:2e:2f:c3:c4:90:40:
f4:82:4b:7c:2d:58:36:52:8a:62:ef:3f:0d:b1:15:
72:b9:b5:51:34:1c:a9:61:cd:91:63:d9:94:c6:da:
bd:41:6b:3f:ac:f4:e9:3b:83:93:b1:bb:35:ab:30:
81:a7:7a:df:39:e2:33:b7:9f:80:05:bf:96:9d:96:
7e:f0:5a:cb:30:74:7a:49:fa:7e:8e:4d:ab:1d:1a:
a8:1e:e9:2e:3d:a7:64:e3:f0:6d:e5:08:95:74:87:
a9:ee:f5:d3:90:2d:0a:af:69:57:62:8f:56:38:cb:
56:20:63:8b:f9:ac:c1:23:22:33:5a:69:e8:a7:7e:
15:7b:63:1a:3d:22:4e:52:d6:c8:2d:88:df:04:d0:
31:ac:f7:42:4f:62:c6:07:d3:bb:0f:ee:fa:24:1e:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5A:E6:0A:29:A4:B7:4D:11:18:B9:7E:D2:22:B2:B7:26:B4:14:C1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/glrmCimkt00RGLl-0iKytya0FME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.102.0/24
Signature Algorithm: sha256WithRSAEncryption
88:93:bc:45:9d:4e:f0:df:8c:1c:90:8c:e1:45:f7:20:3f:d9:
19:7a:45:c5:51:21:56:8c:32:87:13:10:a7:c7:ea:cb:3a:e6:
4f:36:3b:74:86:f5:53:18:80:9e:6b:7c:12:7b:12:82:8b:51:
3c:47:9c:07:cb:83:6c:3f:17:e4:89:24:9e:40:1a:a3:aa:9e:
0b:d5:e7:85:53:fc:1b:05:c4:20:a4:86:77:da:95:2e:f9:91:
e5:92:0b:c0:cd:13:9b:37:8c:ff:39:a3:61:65:7f:dc:3f:93:
a2:60:98:6b:79:f6:44:ee:8d:e6:59:2f:d1:e0:2b:b6:bf:ef:
2c:90:39:c3:bc:68:90:62:7d:a2:5d:7e:a7:46:9d:1f:12:64:
42:00:6d:e1:70:8c:30:b6:c1:6f:33:ed:b0:f5:cd:39:e4:bd:
33:9e:ea:ac:06:a4:43:d3:e1:1c:0f:46:54:c8:33:16:08:e4:
2e:8e:87:1e:62:2c:cc:99:5d:8f:24:be:b1:cf:7c:eb:47:55:
79:d2:8f:18:d9:20:7d:f4:85:49:7c:79:b8:ab:69:8d:3f:b2:
11:67:51:9f:01:06:84:e1:f2:27:0e:8a:ae:6d:1b:40:7e:89:
63:ab:f9:ea:33:66:06:e2:7a:41:d8:4d:95:56:63:b9:52:db:
83:c6:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:30:34 2026 by rpki-client