Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GmQTHXNmzSvrfcq60cRKq9jiMAw.roa
File: GmQTHXNmzSvrfcq60cRKq9jiMAw.roa (raw, json)
Hash identifier: sRqqxFLq4tEdyHQvXsQJis3NTdz1kNmxUtY6hHj0OTE=
Subject key identifier: 1A:64:13:1D:73:66:CD:2B:EB:7D:CA:BA:D1:C4:4A:AB:D8:E2:30:0C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D2A864EDCC924B0FB344BB86E25651008
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GmQTHXNmzSvrfcq60cRKq9jiMAw.roa
Signing time: Thu 26 Mar 2026 14:22:18 +0000
ROA not before: Thu 26 Mar 2026 14:22:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206136
IP address blocks: 163.5.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:86:4e:dc:c9:24:b0:fb:34:4b:b8:6e:25:65:10:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 26 14:22:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a64131d7366cd2beb7dcabad1c44aabd8e2300c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:fc:28:de:2f:72:eb:96:ca:50:a5:f5:05:
0f:69:1c:80:b5:99:fd:3e:e7:1b:07:86:bb:e2:95:
0d:8e:66:c5:5c:b8:b8:1e:7a:29:5a:3d:25:69:17:
ec:23:09:be:9c:4c:e2:a8:3d:1c:02:d1:98:9b:33:
10:79:ec:44:3d:8c:24:93:ae:cb:7d:48:11:41:23:
3b:59:7b:ca:7a:aa:17:80:f6:d8:44:d9:b5:32:53:
14:31:78:e2:a6:d6:32:75:77:6d:fc:3d:d1:6a:f9:
62:27:bb:2a:e2:aa:9e:1b:ed:ab:46:02:f0:b8:77:
12:f2:17:17:28:40:ed:04:0d:5f:85:9b:5d:92:da:
cb:d8:9b:73:36:d6:08:f9:c0:67:da:b7:f6:8e:5b:
24:12:48:55:f7:3a:a3:dc:85:9e:41:2e:f1:84:4e:
27:9b:b6:13:5d:1f:3d:3f:a5:b7:51:4f:b2:03:38:
db:da:b6:75:14:6a:59:26:60:1c:29:02:88:6b:ce:
65:2e:e9:13:f9:48:34:0d:db:e8:de:6a:76:35:74:
22:ce:f4:c6:e0:8a:07:30:1b:38:8d:aa:9a:1d:ff:
fb:d2:47:53:20:6f:c3:0f:4f:84:86:82:f6:b6:90:
d2:c6:11:90:b3:4b:7e:56:9c:f8:68:12:f8:b5:18:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:64:13:1D:73:66:CD:2B:EB:7D:CA:BA:D1:C4:4A:AB:D8:E2:30:0C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GmQTHXNmzSvrfcq60cRKq9jiMAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.203.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b4:ef:71:5c:4d:ee:db:bb:78:42:22:98:9b:64:19:8e:4e:
38:94:35:ed:e9:55:4b:64:fe:95:d1:59:eb:c9:86:32:e2:79:
44:ff:8b:2d:a5:a8:a6:fc:f8:7a:c0:82:20:8a:af:22:f9:4b:
90:32:f2:a7:00:77:b4:28:36:96:6d:56:41:0c:69:55:e0:c7:
57:aa:1a:2c:cd:0c:8f:d8:05:83:6c:d6:95:6f:39:71:03:d5:
c5:7e:a3:f0:18:2c:45:0c:92:ea:34:56:39:e9:da:1b:e4:70:
9c:40:c1:ab:48:83:00:4a:b6:49:3d:b4:cc:60:15:3f:35:39:
5a:e5:1a:4e:e9:bf:e8:61:ec:ec:c2:1a:e4:3a:30:b9:52:68:
04:fb:89:97:f4:cb:7c:1b:c5:8b:e2:2d:20:5e:aa:cb:e2:5b:
2d:6b:cf:80:07:a6:10:1a:98:13:3b:28:48:ed:6f:74:0e:64:
f0:ca:3d:83:4a:3b:d9:1e:72:d3:f0:ef:8b:a0:56:72:4f:0b:
de:14:26:90:24:68:99:c7:f9:9b:da:83:4c:e2:13:3f:e4:e7:
e0:91:54:06:06:5e:89:ab:d8:7b:28:af:f4:72:19:f8:24:54:
94:9c:fd:94:72:81:fe:c2:91:7e:6c:a9:8d:f2:97:14:2b:3d:
e9:ba:79:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:01:54 2026 by rpki-client