Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/GWmirov06IdeTd2nnmtiYLBoiro.roa
File: GWmirov06IdeTd2nnmtiYLBoiro.roa (raw, json)
Hash identifier: 3xuoN/GbfQwL4WKzoGjrLN8QPEIQ/Gk70xBJ2OMLxwY=
Subject key identifier: 19:69:A2:AE:8B:F4:E8:87:5E:4D:DD:A7:9E:6B:62:60:B0:68:8A:BA
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 01A0CDFE9055668D957904D6688B6EC4E232
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/GWmirov06IdeTd2nnmtiYLBoiro.roa
Signing time: Wed 23 Sep 2026 11:20:07 +0000
ROA not before: Wed 23 Sep 2026 11:20:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60472
IP address blocks: 185.128.11.0/24 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:fe:90:55:66:8d:95:79:04:d6:68:8b:6e:c4:e2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Sep 23 11:20:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1969a2ae8bf4e8875e4ddda79e6b6260b0688aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:dd:6f:0e:a0:84:23:1d:88:89:b8:8d:7b:c6:
c5:e7:48:24:65:f4:54:b8:fe:22:27:35:48:36:5e:
12:7e:f6:0c:5b:c3:66:20:58:cb:45:75:1f:57:d6:
b6:2c:94:1e:d5:f3:8e:37:c2:3a:8e:cd:01:ee:e6:
c5:e4:b6:2a:1c:c8:a5:1e:3f:a4:74:ee:e5:65:3f:
b0:23:6e:01:c6:ff:26:4b:e4:c0:ab:ee:29:fa:6c:
ab:3a:f4:ea:c8:fc:5f:d7:b7:d3:fe:65:87:86:87:
40:11:35:78:e2:13:7f:44:5a:37:a0:7f:f1:1c:c0:
69:ff:c6:bc:ab:ca:a3:78:ee:39:be:63:75:5b:30:
04:ff:c0:b4:e2:02:74:22:02:ca:00:8f:cb:92:88:
20:70:d4:a5:b7:8b:67:e0:bf:0d:e3:5a:df:91:7c:
ab:c0:e7:a5:1e:5e:ac:79:ab:af:1e:5b:d2:d2:83:
5b:f3:73:51:1c:87:7a:e4:06:53:8b:ee:9c:d6:7a:
82:c2:64:53:fd:ec:1d:e5:db:7c:1c:48:a8:32:0c:
4a:df:d6:41:cb:25:8a:6c:d9:58:7a:d0:30:80:b4:
92:3c:7d:af:78:2a:42:af:50:27:ef:98:ac:70:7e:
66:bb:b9:cf:cd:db:85:96:55:61:7f:cc:de:ac:8a:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:69:A2:AE:8B:F4:E8:87:5E:4D:DD:A7:9E:6B:62:60:B0:68:8A:BA
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/GWmirov06IdeTd2nnmtiYLBoiro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.11.0/24
Signature Algorithm: sha256WithRSAEncryption
74:71:42:72:38:4e:09:c5:59:2c:57:e7:4d:4a:12:20:b5:81:
a5:59:7d:08:d3:04:eb:c0:3b:28:3e:26:ce:61:c2:2b:69:f4:
6a:02:68:b8:53:dc:7e:96:76:ba:e4:29:c8:c4:f9:d3:11:ef:
90:92:76:e6:97:6c:38:e7:48:94:bf:dc:2f:7f:8b:01:df:e8:
cc:5f:93:90:7d:d6:fa:3f:a4:d2:24:a8:f3:1f:cf:c7:15:1d:
6c:42:7d:ea:b4:51:e8:f7:c4:b9:ec:15:b3:af:4c:a5:88:a5:
a6:72:ed:d7:da:f7:4c:2f:fd:80:60:63:ba:e8:e1:11:14:9d:
8e:f3:22:fc:81:56:d1:16:1e:b2:49:92:19:27:e2:a4:5d:5d:
f9:00:52:56:d2:7c:31:de:e3:29:c4:18:38:43:cc:ff:40:77:
6e:3d:b0:06:db:5a:03:e8:d8:65:8e:12:e4:f4:3a:66:2c:80:
31:4c:71:6c:c5:d4:1b:ad:31:cf:47:96:05:38:5c:09:ca:f0:
53:85:a3:46:e3:1b:bb:21:88:18:8a:7b:1d:22:d7:d1:08:ba:
1c:19:11:ea:6a:c9:51:0a:2c:f0:50:5c:e2:86:44:70:f7:eb:
93:fa:f7:b6:86:1b:f9:3d:8a:02:33:07:42:e3:2f:c9:56:13:
3c:0d:c5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 02:52:06 2026 by rpki-client