Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/gqBVZEVuiZ-zx9jxMYipRTJwia4.roa
File: gqBVZEVuiZ-zx9jxMYipRTJwia4.roa (raw, json)
Hash identifier: j0pbo/Vqg06cGHRaMHKMNgMf3A2mm2wCn/7xVagvqms=
Subject key identifier: 82:A0:55:64:45:6E:89:9F:B3:C7:D8:F1:31:88:A9:45:32:70:89:AE
Certificate issuer: /CN=25041a924ee83932c18e880e41eaddfa7cf2cbb3
Certificate serial: 019F2368E561427B51858E60E677FE93CBAB
Authority key identifier: 25:04:1A:92:4E:E8:39:32:C1:8E:88:0E:41:EA:DD:FA:7C:F2:CB:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/gqBVZEVuiZ-zx9jxMYipRTJwia4.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210767
IP address blocks: 188.64.139.0/24 maxlen: 24
2a11:fc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e5:61:42:7b:51:85:8e:60:e6:77:fe:93:cb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25041a924ee83932c18e880e41eaddfa7cf2cbb3
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82a05564456e899fb3c7d8f13188a945327089ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:42:0c:f2:aa:75:ff:4f:9f:66:ad:4f:0b:fd:
ed:ab:19:37:86:1a:c3:fd:ec:03:08:9a:54:3c:95:
c7:36:7c:2f:4c:f1:f9:06:d2:de:13:79:14:ce:13:
d9:5e:d2:15:c4:2b:f5:6e:be:26:40:f5:28:8e:df:
e0:03:6e:ab:f5:b4:d9:2c:db:b3:b4:db:50:8b:fd:
ac:cf:d9:77:33:33:81:5e:7d:19:aa:e6:89:08:35:
e7:02:bf:bd:e1:61:ea:e3:8b:08:83:20:f0:28:81:
c2:21:cb:8c:a3:d7:93:eb:d4:21:c0:5c:7d:67:db:
af:72:7c:00:94:fc:10:ba:b3:e3:20:47:47:a5:a0:
cd:8c:df:20:3f:2f:df:43:f6:1e:bd:98:18:8e:7e:
70:81:2c:9a:dd:18:ea:3f:a1:6e:17:eb:cf:64:36:
c6:d7:dd:76:c8:61:b7:e1:78:f4:2a:16:23:6a:63:
b6:fe:2b:60:95:95:9c:9d:4f:77:95:ce:bd:a4:9a:
c9:68:1e:8f:2c:37:2d:a8:82:c6:06:84:32:82:31:
57:b3:81:b9:87:3b:88:4a:98:3d:19:e6:f1:ae:7f:
d4:70:dd:f8:9a:62:d4:79:77:6a:e4:6d:4c:0e:da:
da:e2:b6:b7:d7:04:f3:bf:1c:89:e7:17:47:75:b6:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A0:55:64:45:6E:89:9F:B3:C7:D8:F1:31:88:A9:45:32:70:89:AE
X509v3 Authority Key Identifier:
keyid:25:04:1A:92:4E:E8:39:32:C1:8E:88:0E:41:EA:DD:FA:7C:F2:CB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/gqBVZEVuiZ-zx9jxMYipRTJwia4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.139.0/24
IPv6:
2a11:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
1c:f1:eb:bd:e2:cb:4e:0f:11:74:70:f1:14:28:3f:b7:38:21:
03:20:e2:17:14:fd:f0:6a:b3:3a:58:89:9c:0d:38:4e:de:57:
bf:74:cd:08:75:a5:2b:b4:c7:28:ae:39:2b:96:8c:fe:ce:96:
b6:5d:6d:24:6a:72:ea:20:98:54:bc:4c:56:8c:cc:31:3b:ec:
aa:25:7a:9d:3e:85:2f:3a:5c:44:21:12:88:db:99:07:c6:37:
61:8b:a5:f9:0d:cb:18:9e:e3:91:27:30:26:72:71:99:6f:b2:
e3:bd:f1:69:7b:e5:4f:a5:ad:7d:6c:44:a4:0c:88:9e:13:27:
21:15:94:44:83:94:18:d4:fb:92:83:a3:05:72:f0:d7:b4:51:
7a:51:98:ac:27:20:29:86:99:8c:3d:77:b1:e7:bf:b9:72:61:
ef:5c:12:db:49:ca:31:4b:b7:16:99:78:9a:6d:22:15:cb:2e:
d6:4b:87:1d:34:a9:9f:6d:6c:6c:80:ac:3f:79:d3:d7:74:9d:
8b:0c:9c:80:ef:43:5c:cf:cb:18:2d:de:5a:dc:ff:35:53:3e:
9b:97:d2:41:9d:7f:fa:e4:d4:33:35:d4:81:7d:da:59:99:ad:
c5:0e:ac:50:d9:ee:96:52:f6:50:c2:38:6e:22:84:66:59:60:
bb:32:0b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:55 2026 by rpki-client