Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/G-_dqvsch-FztiRFbFZNqiG8NjA.roa
File: G-_dqvsch-FztiRFbFZNqiG8NjA.roa (raw, json)
Hash identifier: QdsQROLU9oYbHS2V84Nyy+nXHOZ5dyBrkinehEDQPKQ=
Subject key identifier: 1B:EF:DD:AA:FB:1C:87:E1:73:B6:24:45:6C:56:4D:AA:21:BC:36:30
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 01A16038E4715D043F7A28396C6BF4F8E770
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/G-_dqvsch-FztiRFbFZNqiG8NjA.roa
Signing time: Wed 21 Oct 2026 20:48:23 +0000
ROA not before: Wed 21 Oct 2026 20:48:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 5.102.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:38:e4:71:5d:04:3f:7a:28:39:6c:6b:f4:f8:e7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Oct 21 20:48:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1befddaafb1c87e173b624456c564daa21bc3630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:0b:1d:b8:e2:fe:b7:4c:4f:06:a4:62:1e:
18:23:39:96:88:ab:18:43:ad:dc:e6:45:a6:db:2e:
ae:31:88:53:88:0b:10:5b:f7:2f:58:3a:ed:b0:72:
4c:28:25:6e:e8:c1:09:b1:32:e4:07:7f:00:41:ad:
a8:54:78:0e:16:f2:d6:4f:f1:02:10:c1:17:d7:9d:
2d:54:08:df:f8:b6:90:c1:ea:64:ba:a7:ea:ec:f0:
26:74:33:05:9f:62:99:26:0e:42:57:ab:7d:10:54:
1f:91:17:5d:3e:04:87:43:4f:d3:ca:69:54:93:08:
57:52:d7:93:4a:9a:45:e2:98:96:81:ec:fd:bf:16:
98:f6:a0:fd:3e:0c:6c:ba:23:4d:ff:91:3b:c8:87:
a9:2d:84:a5:de:97:ac:8d:6a:46:de:6b:01:bc:df:
c0:d0:76:c5:c9:d7:a5:0d:2b:07:8b:42:e2:69:8b:
eb:52:f9:39:f6:d9:43:f6:66:ae:bc:d7:2d:bd:57:
b2:54:f5:8b:86:6d:fb:e0:1b:13:0d:a2:ed:7d:a5:
99:62:e4:2f:64:2f:96:80:1c:22:a9:70:34:f9:7c:
d5:50:fc:da:37:d2:65:9d:c7:b2:3f:21:20:07:0c:
a8:0f:a1:f3:d2:89:0d:73:37:21:31:b2:a9:e0:e7:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EF:DD:AA:FB:1C:87:E1:73:B6:24:45:6C:56:4D:AA:21:BC:36:30
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/G-_dqvsch-FztiRFbFZNqiG8NjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:6b:a3:11:d0:86:d3:cb:0e:8e:f0:b9:32:c3:7b:6c:96:c6:
4b:9a:8a:02:db:c3:7f:36:8a:94:a0:25:1f:dc:10:ad:7b:bd:
69:94:cc:2c:d0:12:25:53:a4:ce:79:98:4d:eb:17:21:bd:3e:
25:c2:1a:01:03:bf:e3:b2:71:48:0b:32:d3:a0:aa:a6:c9:5b:
cb:b1:2a:7a:9d:e7:48:25:b5:81:fb:87:72:e5:5d:88:13:fb:
53:2b:2a:4a:49:3f:8e:63:22:1e:3b:21:1c:b8:36:16:1f:3e:
10:70:84:97:3e:8a:37:e3:4f:52:7e:b9:99:72:ef:bd:7c:31:
f3:79:56:6b:4e:bc:6c:37:e6:98:d1:48:82:0a:fb:d9:93:67:
c9:e5:eb:fb:2b:bb:d6:18:df:40:34:13:b2:d5:fe:8d:0f:3c:
73:c0:8f:5d:d2:dc:eb:eb:ec:cd:e1:f5:99:4b:99:2c:a9:1a:
19:11:76:4c:98:01:8a:f5:40:0c:71:61:c5:d0:37:b7:ee:64:
4c:f4:49:92:25:fa:a3:9a:35:00:1f:0e:9d:5f:b4:93:18:f9:
f2:30:5d:f1:a3:fb:e4:de:8a:cd:cb:3f:e7:e9:a9:e1:67:43:
9b:d3:fa:99:d6:a7:fd:00:98:57:8c:de:cb:e6:93:e2:5f:e4:
5b:93:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:30 2026 by rpki-client