Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/GCdybMrdrU3oB46xpZiQAe-m1qQ.roa
File: GCdybMrdrU3oB46xpZiQAe-m1qQ.roa (raw, json)
Hash identifier: 4dMiF+jTcofsSUkU26dq7BI7okegOSoxa3/Fp4RwGsE=
Subject key identifier: 18:27:72:6C:CA:DD:AD:4D:E8:07:8E:B1:A5:98:90:01:EF:A6:D6:A4
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019DAB9E3A6C013447F02257043B4FF0A36E
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/GCdybMrdrU3oB46xpZiQAe-m1qQ.roa
Signing time: Mon 20 Apr 2026 15:59:26 +0000
ROA not before: Mon 20 Apr 2026 15:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 132.243.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:9e:3a:6c:01:34:47:f0:22:57:04:3b:4f:f0:a3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Apr 20 15:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1827726ccaddad4de8078eb1a5989001efa6d6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:42:07:b9:00:6b:d1:f5:be:a6:8e:1e:59:3e:
13:49:5f:7e:1a:58:c8:b6:99:0e:18:00:b3:3b:ae:
c1:3b:10:c5:a2:72:28:6d:57:f9:58:6d:c2:ca:1d:
a1:a1:31:71:cb:8f:ca:0c:94:32:aa:58:ab:e9:e8:
19:7b:2a:89:c6:11:d7:b6:75:89:a5:ab:c0:77:f3:
34:49:11:1a:aa:c1:05:e3:bd:81:49:3b:d2:c6:dd:
71:21:63:3a:6c:ea:28:e6:22:2a:8a:26:14:3a:d7:
4d:98:3c:34:1a:f0:d4:f8:2e:7e:de:ec:18:95:8f:
19:eb:59:3c:a6:81:84:b4:9e:f1:9b:aa:e3:07:5c:
84:b5:68:f2:1c:49:cf:6b:e9:73:8d:cc:7c:cf:66:
9d:73:7b:3b:19:3e:ff:2e:42:99:6b:07:07:8a:00:
ec:67:40:7a:73:38:20:49:04:d2:05:c6:30:4c:1e:
b0:a4:23:ac:13:63:56:b0:75:4e:24:8f:f9:65:14:
7f:59:7c:4c:c1:26:f8:91:be:33:ff:01:26:63:19:
24:07:d2:1b:f0:21:c4:e9:50:01:69:05:66:da:c6:
70:d1:9e:fd:11:c4:37:ef:b0:98:da:5c:6e:4e:17:
4f:e0:bf:a9:69:33:87:40:39:1d:bf:8b:92:3a:c3:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:27:72:6C:CA:DD:AD:4D:E8:07:8E:B1:A5:98:90:01:EF:A6:D6:A4
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/GCdybMrdrU3oB46xpZiQAe-m1qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.232.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:13:ca:59:ab:0f:c4:69:1c:7d:c1:cb:fe:b6:b7:96:61:52:
00:c4:4b:1b:fe:80:74:41:77:c3:2c:96:5a:c4:80:78:8d:67:
10:a3:11:0f:1b:0f:d8:4d:9d:e0:f8:a3:90:61:a1:e2:a0:c9:
e2:0a:5e:3e:79:ae:a5:bc:63:6e:91:c9:31:1f:cb:2f:ad:a4:
30:1f:c7:90:85:ec:49:a3:c7:3d:c9:82:84:2b:19:c8:28:e4:
3c:2c:1f:77:1b:ef:f3:28:d1:45:ee:e3:c3:1d:a7:84:87:bb:
ce:b0:88:fb:9c:6d:34:57:ad:f7:fa:df:62:ef:06:a3:75:44:
3d:d8:09:c1:c4:35:01:44:16:2d:f8:ef:ef:88:f1:65:fe:b1:
52:de:cd:e5:40:f5:ac:d6:73:98:a7:a9:04:e7:84:99:6e:cc:
41:0d:14:8c:2d:84:fe:15:08:bc:05:a8:ea:0c:3a:6f:01:3c:
0a:df:80:64:b0:ca:08:a1:83:0b:3c:10:f1:43:a6:4f:82:dd:
40:09:c4:d7:8d:3d:9c:ee:2c:5e:5f:cd:ad:8a:95:3f:1b:96:
d8:38:92:7d:9e:ca:09:9d:32:d3:09:09:1e:01:3c:1d:cc:6e:
30:03:64:e2:e9:6c:38:64:c2:35:1f:95:de:de:e4:d2:be:3e:
b2:0f:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 06:51:17 2026 by rpki-client