Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GpHGRfRpqbZK-2IRKu2ahRHKwK4.roa
File: GpHGRfRpqbZK-2IRKu2ahRHKwK4.roa (raw, json)
Hash identifier: MpMdAhN5tW4+uFy/w/La2Id/srzKs1dT7v+Z2R69pLg=
Subject key identifier: 1A:91:C6:45:F4:69:A9:B6:4A:FB:62:11:2A:ED:9A:85:11:CA:C0:AE
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A110353B3DE52C4F58947EA63EE57DE13C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GpHGRfRpqbZK-2IRKu2ahRHKwK4.roa
Signing time: Tue 06 Oct 2026 07:54:46 +0000
ROA not before: Tue 06 Oct 2026 07:54:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59245
IP address blocks: 194.77.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:35:3b:3d:e5:2c:4f:58:94:7e:a6:3e:e5:7d:e1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 6 07:54:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a91c645f469a9b64afb62112aed9a8511cac0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:30:74:f1:77:e4:a5:9c:29:fe:0d:47:d4:5b:
94:2d:11:06:61:0e:d9:47:27:34:f2:f9:46:21:8f:
c8:c6:7c:99:82:37:9c:f2:6b:cf:be:04:fc:af:5c:
8b:fe:3b:31:bc:8f:98:f6:15:f7:85:ed:36:1a:68:
52:9d:01:ef:c8:d6:57:b2:9f:77:1a:ac:dd:b5:05:
a9:28:46:7c:c5:73:22:66:d9:45:27:db:83:21:fb:
5b:d1:5f:aa:f4:ba:f0:16:d2:13:83:63:9c:c5:cf:
1e:e9:bc:a6:96:41:22:0c:a4:10:61:d3:20:13:4d:
bb:41:30:ca:65:08:65:70:b7:24:d1:0f:22:9f:94:
45:57:41:e9:ec:80:6f:c2:a7:76:fb:b3:eb:bc:e7:
ea:89:1a:6d:2e:8e:00:69:bb:70:63:4e:02:8f:00:
0c:bc:25:0b:27:20:8a:9d:0d:36:c2:09:fe:79:47:
e8:4d:42:a8:2d:e8:cb:89:b2:22:e0:5f:a2:3f:86:
8a:07:a7:62:fc:08:3c:e8:c2:87:b1:4d:e7:e7:31:
13:68:e7:2b:3b:dc:2d:16:a1:6f:79:b6:04:d3:4c:
5d:7b:57:a0:81:76:80:63:a2:16:46:c6:21:4b:35:
1c:f6:f6:aa:b6:c8:70:87:63:cf:27:46:7c:6f:c9:
f8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:91:C6:45:F4:69:A9:B6:4A:FB:62:11:2A:ED:9A:85:11:CA:C0:AE
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GpHGRfRpqbZK-2IRKu2ahRHKwK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.232.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:8d:8b:86:cd:11:2b:f7:65:87:b0:f4:78:84:ba:c2:e4:48:
9a:16:29:a2:79:fe:cd:35:c7:43:c8:ff:b6:fb:c7:98:74:eb:
5f:1c:5b:f2:ee:c4:14:0f:2f:6f:d2:fc:d2:12:04:9b:9b:08:
b8:cb:76:7b:f6:ea:49:3b:a6:41:b9:a1:73:74:3f:34:02:6a:
4d:02:56:8a:02:9c:2d:f0:a0:45:c8:fd:ca:56:95:0a:98:db:
6f:dd:78:c7:63:e7:a1:09:63:d1:49:e1:be:a6:e0:38:fd:6b:
38:55:6e:12:44:4f:07:db:05:68:c4:ba:9c:5e:4f:79:61:f1:
3a:b9:9b:3f:b2:7d:1c:ed:dd:3d:ca:9c:c8:34:5d:1a:04:e2:
09:d2:3d:8c:e7:5c:de:72:6a:e6:e3:90:4c:ab:9b:6f:fb:9a:
f6:04:f0:78:38:f5:7e:d9:e6:ea:6e:7c:1f:3f:b6:22:ec:a2:
73:ee:84:79:03:ff:d9:f7:52:af:5c:b1:b0:81:23:d9:9c:58:
ae:ff:38:42:dc:28:0b:c7:f3:7b:19:a5:57:b9:00:1b:71:92:
46:af:bb:37:cb:f1:55:32:7c:cd:c1:c4:ad:1a:9e:c0:d6:82:
1d:b7:9b:66:bf:ed:57:08:22:b9:65:e2:18:b0:94:d1:13:d2:
6b:45:c2:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEQNTs95SxPWJR+pj7lfeE8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYxMDA2MDc1NDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTkxYzY0NWY0NjlhOWI2NGFmYjYyMTEyYWVkOWE4NTExY2FjMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jB08XfkpZwp/g1H1FuULREGYQ7Z
Ryc08vlGIY/IxnyZgjec8mvPvgT8r1yL/jsxvI+Y9hX3he02GmhSnQHvyNZXsp93
GqzdtQWpKEZ8xXMiZtlFJ9uDIftb0V+q9LrwFtITg2Ocxc8e6bymlkEiDKQQYdMg
E027QTDKZQhlcLck0Q8in5RFV0Hp7IBvwqd2+7PrvOfqiRptLo4AabtwY04CjwAM
vCULJyCKnQ02wgn+eUfoTUKoLejLibIi4F+iP4aKB6di/Ag86MKHsU3n5zETaOcr
O9wtFqFvebYE00xde1eggXaAY6IWRsYhSzUc9vaqtshwh2PPJ0Z8b8n4owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBqRxkX0aam2SvtiESrtmoURysCuMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvR3BIR1JmUnBxYlpLLTJJUkt1MmFoUkhLd0s0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwk3oMA0G
CSqGSIb3DQEBCwUAA4IBAQCxjYuGzREr92WHsPR4hLrC5EiaFimief7NNcdDyP+2
+8eYdOtfHFvy7sQUDy9v0vzSEgSbmwi4y3Z79upJO6ZBuaFzdD80AmpNAlaKApwt
8KBFyP3KVpUKmNtv3XjHY+ehCWPRSeG+puA4/Ws4VW4SRE8H2wVoxLqcXk95YfE6
uZs/sn0c7d09ypzINF0aBOIJ0j2M51zecmrm45BMq5tv+5r2BPB4OPV+2ebqbnwf
P7Yi7KJz7oR5A//Z91KvXLGwgSPZnFiu/zhC3CgLx/N7GaVXuQAbcZJGr7s3y/FV
MnzNwcStGp7A1oIdt5tmv+1XCCK5ZeIYsJTRE9JrRcKW
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:58:13 2026 by rpki-client