Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/GwKWO7ehVYW-vAvHXMEqHFqEK3Y.roa
File: GwKWO7ehVYW-vAvHXMEqHFqEK3Y.roa (raw, json)
Hash identifier: 3oegqg3W3k588KyLvOM4jTsc/YZlCXVs6mlOcNyuObM=
Subject key identifier: 1B:02:96:3B:B7:A1:55:85:BE:BC:0B:C7:5C:C1:2A:1C:5A:84:2B:76
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019DB021438EA0D1FDE185517A8DEF75A856
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/GwKWO7ehVYW-vAvHXMEqHFqEK3Y.roa
Signing time: Tue 21 Apr 2026 13:01:03 +0000
ROA not before: Tue 21 Apr 2026 13:01:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135402
IP address blocks: 87.232.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:21:43:8e:a0:d1:fd:e1:85:51:7a:8d:ef:75:a8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Apr 21 13:01:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b02963bb7a15585bebc0bc75cc12a1c5a842b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:64:62:9c:02:87:ff:eb:c9:28:59:00:c8:
53:21:94:a7:3b:7d:3c:b7:62:b4:32:a2:4e:c8:68:
fd:75:3d:16:3b:37:11:72:42:24:a1:ab:84:e1:1f:
59:eb:90:00:7a:43:72:d0:3f:f9:f5:af:b7:6f:6b:
51:a1:0e:07:64:11:be:3d:dd:62:33:bb:0e:db:8e:
94:d8:af:0d:70:26:22:82:00:7c:35:1e:6f:88:93:
10:17:e5:7f:03:03:80:5a:b0:22:89:bd:d9:41:4f:
54:19:ca:fd:8a:e7:b6:8a:8c:19:f6:6d:96:44:eb:
27:79:4e:ce:cb:95:e0:10:2e:8b:4f:d3:38:e8:25:
87:09:9f:ef:c8:21:66:5f:af:07:1c:9a:ee:47:c2:
1e:92:ef:1d:81:a5:82:c7:dc:a4:c0:a7:2a:6a:03:
c6:6c:77:70:17:cc:d8:d2:97:30:d0:b6:c7:ef:f2:
3f:fd:ec:77:e0:30:47:23:b4:3a:f2:14:62:a1:03:
2f:d4:d1:a1:8c:f3:af:64:c6:ae:28:9c:2e:b9:67:
17:a1:86:1d:0a:0a:76:7f:3a:83:c4:88:69:70:f1:
03:76:33:38:7b:e4:e7:cb:d4:8b:de:97:05:23:68:
e9:77:9c:d8:f5:8a:82:88:f9:9e:d6:22:a2:9d:b3:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:02:96:3B:B7:A1:55:85:BE:BC:0B:C7:5C:C1:2A:1C:5A:84:2B:76
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/GwKWO7ehVYW-vAvHXMEqHFqEK3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.107.0/24
Signature Algorithm: sha256WithRSAEncryption
02:10:a3:2a:94:00:84:36:47:9f:d6:e1:32:96:0f:8b:2c:6e:
3b:d1:d7:b4:7c:82:93:b3:7b:18:47:f1:81:f7:9d:92:65:f6:
71:bd:56:03:94:aa:51:42:6e:23:55:7d:b6:76:08:1b:e7:c8:
af:1a:1b:d0:cc:55:74:76:2f:76:42:68:95:b7:b3:9e:ba:03:
fe:12:1d:a6:9e:2c:e8:1a:99:7e:b1:03:6c:f4:81:f6:da:c2:
31:82:ad:23:a8:20:d2:a4:d2:f7:86:2f:72:23:47:40:f5:e0:
6a:88:ee:f2:3a:24:bf:de:9b:8c:49:09:b0:8f:6f:00:62:28:
2d:d3:3c:8a:53:6f:44:d9:50:ae:c1:cf:ae:8f:d9:d3:9c:d3:
d2:ba:e3:22:e0:ba:93:b9:55:25:1b:1a:1c:e2:ab:bc:16:a9:
a2:27:12:83:71:ff:c5:ef:10:92:29:35:8b:6f:17:35:d0:40:
ac:6b:a4:a4:9c:61:ae:26:c3:e5:0e:21:95:2b:81:74:e3:da:
c0:63:a2:6e:01:8e:81:48:b7:1b:f7:3b:53:f6:17:00:2e:92:
ef:d0:d7:a1:d4:99:06:1b:58:b5:55:59:7e:11:2f:70:ab:15:
2a:a7:2a:fd:40:2c:14:fd:9b:63:25:cd:53:87:2a:a7:ee:e3:
b4:64:e1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:55 2026 by rpki-client