Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Gb-SiK2ZF_ms4A58DIfW_6_Ii_k.roa
File: Gb-SiK2ZF_ms4A58DIfW_6_Ii_k.roa (raw, json)
Hash identifier: yKyULeU7Onx+fK7yMLmP/ZqP7YTBcInCt670FEEuDcE=
Subject key identifier: 19:BF:92:88:AD:99:17:F9:AC:E0:0E:7C:0C:87:D6:FF:AF:C8:8B:F9
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01A0F10B8695E17BF5135D568250943D2F2B
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Gb-SiK2ZF_ms4A58DIfW_6_Ii_k.roa
Signing time: Wed 30 Sep 2026 06:40:59 +0000
ROA not before: Wed 30 Sep 2026 06:40:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 92.61.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:0b:86:95:e1:7b:f5:13:5d:56:82:50:94:3d:2f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Sep 30 06:40:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19bf9288ad9917f9ace00e7c0c87d6ffafc88bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:97:24:e6:85:67:93:78:7a:96:45:84:22:
2d:31:9e:32:2f:83:8c:ad:10:3a:b9:b1:a6:38:7a:
c2:51:87:87:c3:ae:7d:9a:ea:e9:63:9e:5c:a3:07:
8f:7a:92:11:0e:a7:ec:99:57:a1:32:7e:0c:a9:6f:
bf:f8:cd:e1:59:62:8c:55:f3:a8:da:d7:29:c0:4e:
64:33:01:ee:20:ee:3a:f8:21:80:13:b8:c6:1d:c4:
cf:cd:b6:63:2b:e4:99:00:99:82:9b:5b:d7:02:13:
5e:92:50:85:07:43:62:17:74:ce:74:b5:fe:2b:0f:
59:33:35:86:f5:e6:41:56:83:17:67:de:fc:bc:8d:
4c:0d:10:e2:56:7e:86:5b:e0:b7:f0:8b:ec:ab:78:
d9:73:47:e9:d8:a7:7e:ea:9d:64:7a:c5:f9:ef:b6:
04:39:4d:73:b7:35:bd:ee:06:0b:b4:c9:d9:96:95:
cc:7a:84:0b:b8:ec:12:8f:ee:7e:a8:ac:96:a8:e6:
aa:57:10:e2:01:09:f5:eb:9e:02:db:2a:f9:aa:d8:
14:2d:b2:66:7d:72:89:99:e2:ea:b1:07:7a:34:3f:
1f:ad:5a:d1:9d:ce:99:bc:86:6d:4f:bc:d7:34:ca:
d4:9f:d2:75:fd:49:e1:3a:a2:49:db:e5:ec:8c:46:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BF:92:88:AD:99:17:F9:AC:E0:0E:7C:0C:87:D6:FF:AF:C8:8B:F9
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Gb-SiK2ZF_ms4A58DIfW_6_Ii_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.106.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:cb:3d:ec:27:90:5e:f7:31:02:75:bc:02:61:f4:e8:bb:82:
6c:f6:09:d9:8f:5c:e5:74:bc:d9:97:9d:16:d9:f8:a9:8b:69:
7d:a3:d6:1b:5b:20:f7:dd:0b:da:6d:8a:05:5e:af:05:b8:d2:
03:a5:0b:14:57:bb:6e:2d:8c:f5:4b:e1:03:72:77:7f:68:54:
2d:53:81:9b:93:90:fd:c7:04:68:9c:7c:30:31:9b:12:8b:7d:
35:5c:31:1f:04:20:57:7d:c2:22:f9:fd:c5:7a:ab:85:0f:9b:
b6:54:8c:c0:b7:89:f6:ef:49:1d:e2:bb:bf:5e:cb:94:97:4a:
4e:85:04:0b:4a:41:6e:2e:0b:6a:6d:d7:57:95:44:6b:25:3e:
cf:61:87:e2:4d:99:09:26:a5:f0:51:c4:04:cf:e2:0c:5a:95:
c1:17:8b:7f:03:52:ae:50:c9:0c:52:28:26:2a:be:32:d3:b5:
38:68:97:31:ed:0b:7e:08:af:24:1c:52:bf:a3:2c:1a:c5:a2:
9f:18:5e:db:fa:e5:cf:be:fb:d4:77:00:81:5a:67:75:e3:07:
fe:bd:d7:65:a3:2d:8c:f1:75:42:aa:e3:05:29:aa:b0:1b:26:
01:3b:b7:83:30:c3:48:4b:45:71:80:e7:af:b8:97:a7:b6:21:
be:df:df:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:07:52 2026 by rpki-client