Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/GnStT-POC5UGkoTEHzhMgY47yLE.roa
File: GnStT-POC5UGkoTEHzhMgY47yLE.roa (raw, json)
Hash identifier: YojptsrWu7SyCL6K8FoBnOB5c0dK7WvThjLcuV1Ct/0=
Subject key identifier: 1A:74:AD:4F:E3:CE:0B:95:06:92:84:C4:1F:38:4C:81:8E:3B:C8:B1
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A1AB13CDAC4037B6DB003525BBEF21E5F9
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/GnStT-POC5UGkoTEHzhMgY47yLE.roa
Signing time: Thu 05 Nov 2026 09:39:23 +0000
ROA not before: Thu 05 Nov 2026 09:39:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 80.93.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:13:cd:ac:40:37:b6:db:00:35:25:bb:ef:21:e5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Nov 5 09:39:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a74ad4fe3ce0b95069284c41f384c818e3bc8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:d2:66:36:fd:05:17:4c:c8:6a:48:fc:d6:
29:c5:e9:3e:49:df:e3:97:61:b7:9a:96:50:b3:ca:
7c:46:8b:0d:55:5a:72:2b:55:db:e2:90:94:cf:ca:
53:a2:66:6b:00:6f:1a:a5:b8:36:3b:31:31:3e:19:
45:02:ad:38:84:2f:c0:af:dc:3d:c7:90:11:14:d0:
95:4e:ed:44:97:fc:6a:ec:fe:d6:9a:ff:1c:8c:50:
95:97:2d:0c:3b:7d:9d:7b:b6:a7:18:84:f8:6a:29:
be:9a:89:bc:73:69:76:74:3f:6c:45:9b:39:52:2e:
2f:5f:74:46:21:1b:58:cb:eb:2b:ed:52:3a:14:3b:
9e:a3:72:fb:d6:e2:d6:4b:7a:1d:39:eb:ae:00:27:
95:c9:12:5d:be:b7:1d:34:9d:d7:40:02:30:1c:20:
40:f9:78:7e:8b:65:84:1c:5e:df:82:ea:65:8d:05:
76:b6:4e:b3:88:82:4a:fd:66:e2:f0:2c:30:2c:44:
20:dd:d0:92:d5:15:bd:6d:16:4e:c4:b5:5e:8b:14:
e5:ce:8d:21:85:2d:7d:a1:52:c8:3c:7c:b4:eb:c0:
6d:b6:0e:07:c9:1c:ea:1b:93:0f:71:5e:62:6b:6c:
ce:45:49:be:bd:1d:f5:d7:e9:e2:3a:c7:e4:cf:1c:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:74:AD:4F:E3:CE:0B:95:06:92:84:C4:1F:38:4C:81:8E:3B:C8:B1
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/GnStT-POC5UGkoTEHzhMgY47yLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.201.0/24
Signature Algorithm: sha256WithRSAEncryption
02:e9:5a:88:4f:16:86:fa:d6:fa:4e:98:2d:96:c1:99:e5:53:
bf:77:57:83:fb:04:db:19:47:c9:a0:f4:31:a8:fe:89:9f:89:
46:8e:4c:98:38:5f:31:67:aa:84:0a:05:7a:b0:c6:f2:be:fe:
de:0d:d0:ca:58:f5:8e:ca:5a:c0:1d:d5:11:4c:c3:71:1f:49:
90:32:f5:85:25:78:72:02:19:0d:77:a7:62:8c:fa:7f:c4:d4:
03:84:19:47:b3:4c:ac:e3:f0:38:cc:4b:81:9c:0e:95:b2:97:
60:02:79:b4:45:d8:59:c1:42:ae:66:42:4f:b8:82:79:e5:b2:
2d:91:cd:d0:e7:53:3e:53:e2:9d:da:20:40:ff:82:48:a5:fe:
58:25:08:f5:23:b2:4e:0c:d8:8c:42:7d:14:8a:c9:a2:cc:97:
04:98:19:02:31:0c:e6:84:c5:aa:46:92:2f:b5:8d:3d:71:43:
b3:9a:11:f7:cd:93:ad:32:21:bb:2f:34:12:46:6d:a1:67:a1:
c2:62:29:22:f7:69:e7:5a:46:b9:86:96:68:cd:f6:09:84:5b:
d5:a2:1d:c7:64:cd:dc:0a:9f:18:1b:48:49:ca:5d:dc:03:6d:
7d:25:f7:f6:99:51:bf:1d:87:75:db:26:20:26:f3:de:18:f4:
25:3e:96:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:20:35 2026 by rpki-client