Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/GRZQfICaPZkmlWt-Zi18iyQthto.roa
File: GRZQfICaPZkmlWt-Zi18iyQthto.roa (raw, json)
Hash identifier: 5+2pbzTpQ4n5mUGa2nh7fMPzxd0iARQ9e60Moilj36g=
Subject key identifier: 19:16:50:7C:80:9A:3D:99:26:95:6B:7E:66:2D:7C:8B:24:2D:86:DA
Certificate issuer: /CN=b6f3f1f86dd4caa0b0b37c98ba128250aa494745
Certificate serial: 01A08ACDF15271DBAF6F09EC7219AA80D44F
Authority key identifier: B6:F3:F1:F8:6D:D4:CA:A0:B0:B3:7C:98:BA:12:82:50:AA:49:47:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/GRZQfICaPZkmlWt-Zi18iyQthto.roa
Signing time: Thu 10 Sep 2026 10:12:27 +0000
ROA not before: Thu 10 Sep 2026 10:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204729
IP address blocks: 150.237.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:cd:f1:52:71:db:af:6f:09:ec:72:19:aa:80:d4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f3f1f86dd4caa0b0b37c98ba128250aa494745
Validity
Not Before: Sep 10 10:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1916507c809a3d9926956b7e662d7c8b242d86da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:79:35:7b:63:2f:aa:83:e9:d3:12:c8:11:
3f:e2:21:97:a4:70:3c:2c:ad:14:62:a2:b8:87:b1:
44:07:c2:5d:72:e6:f9:dc:9f:d7:a2:66:99:51:61:
c2:09:ac:b7:af:8d:35:11:e3:af:40:1b:0c:b5:a7:
77:bb:12:e5:ad:5c:50:e3:64:8d:1d:e8:7f:5e:41:
66:63:bc:77:ea:10:62:f8:be:07:6f:8e:66:08:bc:
5f:58:0e:b4:be:5f:a4:89:ec:86:7d:ee:16:7d:fc:
09:68:06:3b:50:6d:68:75:ad:a6:30:a7:54:f7:13:
75:6b:73:1a:44:f9:72:fc:82:4f:3b:c6:12:be:c2:
1c:b7:02:22:ba:45:90:a8:b4:54:f0:3e:dc:b1:a5:
f8:1f:88:65:ab:59:ca:75:e5:a8:96:f7:a4:ed:f2:
0c:31:f9:d1:b3:7f:b8:28:66:4c:80:80:66:10:ff:
cb:9d:4a:57:14:f0:72:99:3c:77:ad:56:eb:73:70:
a9:97:75:64:a1:e5:96:5b:b4:5b:6c:88:37:c4:d9:
8d:4f:1b:5d:a0:3e:34:98:bb:af:92:d5:40:b2:63:
ac:41:be:0e:df:1e:63:e0:9a:2b:a3:42:ef:7d:be:
f9:95:1c:45:ed:a5:5f:63:25:2a:45:87:6c:42:10:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:16:50:7C:80:9A:3D:99:26:95:6B:7E:66:2D:7C:8B:24:2D:86:DA
X509v3 Authority Key Identifier:
keyid:B6:F3:F1:F8:6D:D4:CA:A0:B0:B3:7C:98:BA:12:82:50:AA:49:47:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/GRZQfICaPZkmlWt-Zi18iyQthto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.237.127.0/24
Signature Algorithm: sha256WithRSAEncryption
07:5d:43:d5:1b:ff:6d:9f:a1:b9:5d:14:d7:13:5a:e4:37:c0:
29:6d:63:ac:4a:4e:74:a9:f2:a1:43:0a:53:ef:8b:7d:b8:31:
a8:5d:0d:2f:f7:cd:4d:0d:80:9b:99:55:ae:f5:50:cd:bf:8c:
5a:a7:33:ab:4e:80:9a:12:76:2c:aa:ab:cf:36:fc:df:69:49:
18:d9:3d:47:5a:ab:86:7b:c1:7a:fa:d2:71:fe:5f:f1:eb:a4:
15:8e:9c:10:35:9b:4a:4f:3b:4f:7e:1c:32:8a:72:e0:ba:af:
15:e2:81:79:23:7a:05:eb:73:f6:3d:c9:e3:ce:ca:f6:fb:bb:
74:45:dd:92:e6:51:f5:ed:c2:31:15:6a:30:f8:f0:da:65:22:
1a:58:bb:a4:ae:d6:77:e0:69:a3:55:bf:1b:05:63:8c:c9:a7:
82:fe:2c:95:14:7b:16:a1:81:06:a0:67:fe:49:f9:82:50:1d:
67:19:6e:fc:3a:d7:a6:1f:1b:45:b6:2f:94:6b:0e:99:9d:69:
c1:c6:77:fe:97:95:d1:47:0e:ad:00:8d:b4:82:42:bc:01:68:
80:23:5a:23:9b:0c:8a:44:29:6a:fb:3b:e4:de:e4:86:85:1d:
76:b0:18:05:bc:68:b8:df:4d:20:2d:9c:34:44:27:36:03:60:
41:30:a7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:45:00 2026 by rpki-client