Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GL-PczqlSs0W4jCvnEa0sNIucqw.roa
File: GL-PczqlSs0W4jCvnEa0sNIucqw.roa (raw, json)
Hash identifier: veNNxyMjY/UMYxVIXlw5c0Y0r5OhtpqMPHzE2TAEVYw=
Subject key identifier: 18:BF:8F:73:3A:A5:4A:CD:16:E2:30:AF:9C:46:B4:B0:D2:2E:72:AC
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A0289FF96333B81B53BAFD21DF20368942
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GL-PczqlSs0W4jCvnEa0sNIucqw.roa
Signing time: Sat 22 Aug 2026 08:39:27 +0000
ROA not before: Sat 22 Aug 2026 08:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 83.147.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:28:9f:f9:63:33:b8:1b:53:ba:fd:21:df:20:36:89:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 22 08:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18bf8f733aa54acd16e230af9c46b4b0d22e72ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:51:e2:7d:1d:7a:81:b5:fc:11:ac:47:60:
fc:2b:7e:8c:31:a4:21:03:93:c7:e9:c4:4a:34:ff:
96:56:bf:46:1a:2c:2f:b6:ea:d0:1d:8a:e3:58:b7:
f5:a0:49:c0:61:ae:f6:97:aa:52:3f:d4:19:26:ce:
cb:0a:48:eb:c2:1d:f8:f5:c3:d0:8f:76:2e:41:0b:
79:e4:55:e1:39:1b:1d:de:7c:75:85:d3:0d:ae:d2:
65:1c:52:d1:09:91:c3:50:ee:b6:03:49:6a:a4:95:
ca:77:e8:24:69:1d:ef:5d:f7:31:8c:93:94:dc:e0:
79:42:d6:20:c5:55:87:60:d2:e1:dd:1b:66:68:bd:
55:34:d7:c1:52:fd:0f:58:a0:c6:fd:d9:5c:e0:79:
de:0f:1b:dc:74:c1:88:59:93:41:f3:76:7e:26:a3:
b4:9b:6a:c5:aa:f7:ca:42:a9:ee:e1:e3:55:b3:27:
26:a4:3c:da:31:58:b6:95:b7:4c:dd:b7:99:d3:33:
5b:ed:21:32:be:32:17:d5:2c:02:05:fd:82:d5:90:
6b:9c:6a:a6:5a:c6:25:d6:61:bd:55:be:b0:f9:3e:
d8:20:18:a3:37:a1:66:f2:7c:64:87:b4:fc:22:cb:
f9:67:12:e3:db:98:6b:1d:b8:72:fe:c6:08:07:68:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BF:8F:73:3A:A5:4A:CD:16:E2:30:AF:9C:46:B4:B0:D2:2E:72:AC
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/GL-PczqlSs0W4jCvnEa0sNIucqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.22.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:9c:23:64:53:8c:92:4e:b5:a2:8b:0e:9f:b4:79:29:a9:38:
83:9d:0d:bd:34:69:04:b2:b7:88:4e:e6:31:75:00:f4:e8:a6:
f7:65:ab:94:7b:12:ae:72:d3:93:9d:53:a2:ab:4d:49:1e:ad:
04:d5:c2:e7:62:51:34:bc:9e:d7:27:b1:7f:a9:ae:b9:b2:33:
8e:a8:3f:a6:01:e4:20:90:5d:bf:ca:3c:6c:22:6f:fb:63:07:
6e:62:bd:60:ea:24:41:34:3e:da:ba:52:ed:37:bb:67:e5:06:
03:d1:26:0f:f2:e2:71:8d:39:1e:88:9c:b1:a5:d4:61:37:cc:
d9:6b:55:be:6c:87:12:18:73:b2:f1:0a:5c:16:52:ef:8a:76:
c4:94:c1:c8:1e:4c:36:3c:6a:72:aa:18:fb:23:e7:89:9c:60:
28:74:e1:e0:f7:77:1e:74:40:f0:49:9a:c7:cd:14:30:6b:da:
db:21:08:1d:09:b3:21:b7:f4:57:6b:23:37:78:3c:39:cf:4c:
ed:07:9a:79:7b:d5:8b:b8:b1:a8:fa:32:60:ee:1c:40:c1:a0:
5a:86:fc:2f:8c:5e:d9:dc:da:8d:96:59:fc:e7:b6:ec:45:1b:
af:b4:36:b1:3c:4c:0d:dd:9e:6c:ab:b6:37:49:e0:c7:ec:5c:
54:b5:dd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:13 2026 by rpki-client