Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/GkhLBKyXd_2_TAAIDkb9-78tRyw.roa
File: GkhLBKyXd_2_TAAIDkb9-78tRyw.roa (raw, json)
Hash identifier: YA9SCWRSChUXka0qzLVmh8TguQnI9NGmd8B8uSQKI9M=
Subject key identifier: 1A:48:4B:04:AC:97:77:FD:BF:4C:00:08:0E:46:FD:FB:BF:2D:47:2C
Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial: 01A003E2C26CFCFB5457F30F219EA753AE82
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/GkhLBKyXd_2_TAAIDkb9-78tRyw.roa
Signing time: Sat 15 Aug 2026 05:26:27 +0000
ROA not before: Sat 15 Aug 2026 05:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8866
IP address blocks: 5.61.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:e2:c2:6c:fc:fb:54:57:f3:0f:21:9e:a7:53:ae:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Validity
Not Before: Aug 15 05:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a484b04ac9777fdbf4c00080e46fdfbbf2d472c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:ab:9f:2c:db:57:3b:d2:a6:45:6f:6b:a2:
19:4d:b9:7f:43:15:ed:1f:3a:b2:78:31:13:db:dc:
79:3f:ff:16:ec:da:eb:f2:d0:4c:ad:b4:8a:e1:9f:
47:51:83:91:c9:04:64:fb:fa:ab:7d:cb:5d:7e:f3:
32:1c:e5:2b:30:eb:1f:4e:18:f2:cd:54:f8:15:ef:
a4:7f:62:bc:9a:e5:f9:84:c6:18:d4:68:7f:90:3c:
8d:c0:a3:c7:00:e6:a5:e5:9f:df:36:86:1e:77:ea:
23:e9:64:5f:c1:94:e1:30:c6:84:ee:bc:0b:3e:66:
6b:ff:ec:46:d7:d4:05:a2:af:76:ba:0f:06:85:4a:
87:cb:6f:59:72:9b:c2:af:21:64:7f:22:5d:24:a0:
f9:70:d1:e8:f8:15:c2:7a:97:53:b1:54:cb:e4:1c:
cf:a0:4f:ea:61:ca:13:72:39:ae:f1:97:38:ab:0c:
a8:9b:ed:04:a5:60:c2:60:05:e1:ee:ed:e4:27:12:
e3:78:5e:3d:1d:6d:7d:84:64:fd:74:cf:de:d4:96:
07:b4:a1:e5:1d:f5:8f:24:93:e2:40:57:eb:88:a9:
e1:7b:19:86:56:df:10:de:d9:78:a2:41:75:fd:52:
a9:bf:46:34:f2:43:71:dd:fa:2d:78:19:cc:da:23:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:48:4B:04:AC:97:77:FD:BF:4C:00:08:0E:46:FD:FB:BF:2D:47:2C
X509v3 Authority Key Identifier:
keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/GkhLBKyXd_2_TAAIDkb9-78tRyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.110.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5f:7f:2d:e9:e3:c2:78:7f:9c:20:25:33:fc:e3:c1:89:0a:
ee:09:ef:7f:d5:dd:d1:47:8c:d6:bd:13:2d:1a:70:96:7d:3f:
e5:34:04:92:3d:d9:7a:3a:9a:aa:ff:b2:11:e6:2f:1b:0c:40:
6e:70:d9:8c:13:9b:38:61:90:f4:8d:6a:6b:6b:c5:22:d1:fb:
ca:07:dc:1a:aa:34:69:38:2c:d9:65:a8:58:60:df:85:95:25:
a8:ac:9d:89:52:b8:be:aa:7a:1b:72:69:12:80:98:19:cc:e9:
ea:6c:39:5f:06:75:22:f1:d6:65:bf:a9:a0:6c:82:c0:f4:86:
17:fe:f2:42:13:c3:9f:cc:c9:34:ef:0b:b8:b5:18:47:f1:66:
f3:90:ae:42:e5:95:ce:4f:e8:2d:12:1f:ff:03:8c:be:ec:ed:
a2:c8:69:a9:50:38:62:c8:1c:57:98:ad:07:79:55:32:d8:71:
53:06:5b:92:9c:9b:ef:9d:71:5c:30:0f:d6:84:90:8f:9b:14:
0c:b2:94:2b:3a:f5:91:d8:0d:2e:a4:0b:bd:c6:91:8b:c9:5d:
b7:99:1f:0c:ae:c9:d8:d5:e5:7c:39:91:0c:6b:3b:cc:c0:27:
52:4c:b1:9d:7b:b4:b4:85:a0:e5:23:f0:42:18:d5:ae:8d:3c:
49:0d:af:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAD4sJs/PtUV/MPIZ6nU66CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjE4NmU5NzA5N2M4NDE3ZDk0MzdkNzBjZmRmYzUyNzMz
MWI1YTgwHhcNMjYwODE1MDUyNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTQ4NGIwNGFjOTc3N2ZkYmY0YzAwMDgwZTQ2ZmRmYmJmMmQ0NzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm+rnyzbVzvSpkVva6IZTbl/QxXt
HzqyeDET29x5P/8W7Nrr8tBMrbSK4Z9HUYORyQRk+/qrfctdfvMyHOUrMOsfThjy
zVT4Fe+kf2K8muX5hMYY1Gh/kDyNwKPHAOal5Z/fNoYed+oj6WRfwZThMMaE7rwL
PmZr/+xG19QFoq92ug8GhUqHy29ZcpvCryFkfyJdJKD5cNHo+BXCepdTsVTL5BzP
oE/qYcoTcjmu8Zc4qwyom+0EpWDCYAXh7u3kJxLjeF49HW19hGT9dM/e1JYHtKHl
HfWPJJPiQFfriKnhexmGVt8Q3tl4okF1/VKpv0Y08kNx3foteBnM2iMHHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBpISwSsl3f9v0wACA5G/fu/LUcsMB8GA1UdIwQY
MBaAFPHxhulwl8hBfZQ31wz9/FJzMbWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2Mt
YjY1Y2QxMzYyNjJlLzEvR2toTEJLeVhkXzJfVEFBSURrYjktNzh0Unl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2MtYjY1Y2QxMzYyNjJl
LzEvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABT1uMA0G
CSqGSIb3DQEBCwUAA4IBAQB3X38t6ePCeH+cICUz/OPBiQruCe9/1d3RR4zWvRMt
GnCWfT/lNASSPdl6Opqq/7IR5i8bDEBucNmME5s4YZD0jWpra8Ui0fvKB9waqjRp
OCzZZahYYN+FlSWorJ2JUri+qnobcmkSgJgZzOnqbDlfBnUi8dZlv6mgbILA9IYX
/vJCE8OfzMk07wu4tRhH8WbzkK5C5ZXOT+gtEh//A4y+7O2iyGmpUDhiyBxXmK0H
eVUy2HFTBluSnJvvnXFcMA/WhJCPmxQMspQrOvWR2A0upAu9xpGLyV23mR8MrsnY
1eV8OZEMazvMwCdSTLGde7S0haDlI/BCGNWujTxJDa8f
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:27:51 2026 by rpki-client