Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/GssCJL6gNf586IK8dzaQtcPZfZE.roa
File: GssCJL6gNf586IK8dzaQtcPZfZE.roa (raw, json)
Hash identifier: 5tV4K5IkdCHT8lLy88e/uavySDM/mbWrfjzgoUXPIWk=
Subject key identifier: 1A:CB:02:24:BE:A0:35:FE:7C:E8:82:BC:77:36:90:B5:C3:D9:7D:91
Certificate issuer: /CN=b6f3f1f86dd4caa0b0b37c98ba128250aa494745
Certificate serial: 01A16DD915DCB29C3A51EF059FE1A32BF369
Authority key identifier: B6:F3:F1:F8:6D:D4:CA:A0:B0:B3:7C:98:BA:12:82:50:AA:49:47:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/GssCJL6gNf586IK8dzaQtcPZfZE.roa
Signing time: Sat 24 Oct 2026 12:18:25 +0000
ROA not before: Sat 24 Oct 2026 12:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402635
IP address blocks: 150.237.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:d9:15:dc:b2:9c:3a:51:ef:05:9f:e1:a3:2b:f3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f3f1f86dd4caa0b0b37c98ba128250aa494745
Validity
Not Before: Oct 24 12:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1acb0224bea035fe7ce882bc773690b5c3d97d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:1f:f5:aa:61:4e:50:d7:df:ec:a6:76:b6:
19:5f:38:1c:79:2e:65:95:67:00:48:da:ce:ba:c4:
15:16:c7:d1:76:f7:f4:b6:db:36:96:9a:3f:fd:6b:
6c:23:41:e1:bf:57:ab:d5:d0:03:84:d9:8e:59:89:
95:aa:6c:e5:a2:dd:2f:8c:4d:20:f3:61:6a:ce:cb:
cc:f6:e0:5e:a2:e6:a4:f7:b0:f2:1a:56:9e:7e:98:
62:34:a4:51:0f:d1:3c:82:76:00:bb:33:2c:26:9f:
06:68:fa:ad:2c:7e:26:64:9b:df:ad:14:ac:ef:1e:
91:e8:ac:ba:20:a5:0e:f1:cd:b5:12:5c:51:22:78:
8f:9e:ca:a1:4a:91:27:53:6b:d6:e5:44:6c:60:e3:
7a:5f:41:56:e0:9a:c4:3e:a0:ea:41:a7:b9:98:55:
9f:63:ec:72:18:2e:87:ab:83:92:65:f7:59:be:24:
09:84:bc:11:d9:67:c3:ae:bb:22:32:49:32:30:f6:
48:0e:83:1c:7c:4a:2c:5e:34:89:49:cb:58:50:8f:
98:60:43:f8:5e:75:f3:5e:2f:3c:98:9f:eb:65:3f:
ab:5d:69:95:eb:a4:e2:1a:b5:ce:87:f7:50:e6:bf:
6a:b1:88:e9:50:48:e0:25:6b:58:8e:bd:92:64:a6:
5a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CB:02:24:BE:A0:35:FE:7C:E8:82:BC:77:36:90:B5:C3:D9:7D:91
X509v3 Authority Key Identifier:
keyid:B6:F3:F1:F8:6D:D4:CA:A0:B0:B3:7C:98:BA:12:82:50:AA:49:47:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPx-G3UyqCws3yYuhKCUKpJR0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/GssCJL6gNf586IK8dzaQtcPZfZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/559d63-afb3-41aa-b216-92f03d3dd412/1/tvPx-G3UyqCws3yYuhKCUKpJR0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.237.125.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:49:29:05:46:35:eb:70:40:0d:04:d6:e2:cf:cb:05:4c:44:
67:bb:ee:5e:ef:85:d0:b7:b1:7d:b8:9e:d0:81:55:2e:0e:1d:
4b:ef:b5:3f:29:05:33:f5:98:ed:86:f8:0a:5a:6c:1e:da:e4:
0c:29:01:c5:32:f3:a4:fa:7a:d6:92:c2:b4:73:32:3e:6f:8a:
17:71:7a:72:8e:2f:94:9f:4c:76:bb:fb:a5:1b:c7:b1:e8:f4:
0c:ec:7c:70:7b:18:7c:76:55:09:46:6f:2f:a8:3c:7a:67:b1:
d6:4f:72:21:dd:bc:cb:d2:ee:b7:34:86:9d:fa:05:2d:b3:04:
de:c8:ec:ee:a6:01:4c:3c:dd:53:96:d4:a1:c1:17:1e:ca:b1:
42:ec:6d:39:00:d2:5e:b1:06:48:43:91:7d:59:d7:09:a4:54:
2f:f1:4b:cf:b0:fa:bc:88:6f:b3:8d:fb:54:ed:5d:ff:0c:99:
a6:38:8c:7a:c8:f3:7f:81:de:3b:c2:e0:b0:c5:0e:67:0a:bb:
6e:40:f3:0c:22:e7:bd:be:b8:e2:48:dc:f0:c9:4f:90:b8:a3:
bc:ed:e3:d4:ed:97:eb:84:c6:ba:b3:e8:cd:44:0f:8a:d7:3d:
95:8e:a2:af:58:99:8f:21:cf:fb:9a:1a:61:fa:1b:d6:ba:5d:
de:2b:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:12:00 2026 by rpki-client