Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/gcbYT709f0hgiLNirRCxsCWINg0.roa
File: gcbYT709f0hgiLNirRCxsCWINg0.roa (raw, json)
Hash identifier: GvONaLOScpTddKmNp/ohtdFC7YpVWBMSGSchqA80EtE=
Subject key identifier: 81:C6:D8:4F:BD:3D:7F:48:60:88:B3:62:AD:10:B1:B0:25:88:36:0D
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019F6F229C01F10A3926F296133E6BC738FE
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/gcbYT709f0hgiLNirRCxsCWINg0.roa
Signing time: Fri 17 Jul 2026 08:12:46 +0000
ROA not before: Fri 17 Jul 2026 08:12:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 103.69.226.0/24 maxlen: 24
103.69.227.0/24 maxlen: 24
185.191.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:22:9c:01:f1:0a:39:26:f2:96:13:3e:6b:c7:38:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jul 17 08:12:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81c6d84fbd3d7f486088b362ad10b1b02588360d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:45:86:24:d7:e9:65:9d:8f:71:6d:70:7b:
09:b0:a7:d6:ba:f2:d1:0e:06:66:f7:a9:e0:31:4e:
90:cc:b1:b3:f7:18:c9:8a:86:e4:a6:97:1d:59:a8:
df:d3:9a:e2:66:19:a8:fb:94:da:ca:14:f8:3f:b5:
1c:0a:78:7b:c6:28:16:af:72:8a:82:94:37:d3:41:
3a:04:2f:59:9f:d8:f9:fe:3f:6a:a1:80:63:66:9a:
de:ae:12:3e:34:2a:09:d7:37:fb:d3:1e:a8:45:45:
ce:6a:8b:af:f0:a0:d8:f5:71:72:02:fe:57:8a:c2:
1a:9e:04:96:ea:f9:86:68:24:57:fc:f3:9d:3e:f9:
81:0e:ed:76:e2:04:08:99:ad:fe:f3:b8:b9:7f:82:
f2:09:fd:7e:d2:5f:d2:10:55:0b:5f:6f:69:67:86:
08:a6:1c:09:a9:0b:3e:8b:a5:cd:86:5e:df:88:02:
b0:a9:19:21:8e:1d:4d:86:d2:fa:f9:0b:ca:a9:8b:
84:84:e9:86:71:88:25:30:71:a3:0a:1d:55:6a:e6:
88:18:0e:31:bc:1c:6e:78:57:25:42:fb:55:fc:40:
ce:d2:a8:e1:57:3d:25:90:fe:e6:f3:32:90:af:20:
dc:dd:76:4e:ba:37:58:65:6d:74:de:c5:3c:46:9c:
6e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C6:D8:4F:BD:3D:7F:48:60:88:B3:62:AD:10:B1:B0:25:88:36:0D
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/gcbYT709f0hgiLNirRCxsCWINg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.226.0/23
185.191.20.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:a3:11:f5:f3:50:73:95:33:40:eb:71:ed:13:80:5e:f7:19:
77:91:fb:11:a2:ff:b5:39:56:33:8f:9f:8c:a8:cd:b5:9e:cc:
65:60:69:dc:69:03:8e:e0:e3:02:ef:d0:df:a2:0a:f3:f3:b2:
bf:33:5a:f7:2e:ee:7e:6e:5c:db:e7:b7:db:3a:bb:ef:b0:20:
03:8d:93:dc:2f:ad:0b:e7:d3:67:df:5e:bc:6c:69:9e:dd:02:
26:8c:2a:8b:63:26:b2:2b:84:58:7b:9a:8c:2a:0d:90:29:22:
9c:13:93:d4:4d:2a:7f:77:60:60:fd:9d:f3:ea:93:89:2e:f0:
f7:92:fc:8e:3a:b5:bc:9f:9a:c4:5b:f0:3c:47:e6:e2:35:f8:
ea:0a:68:49:6a:66:ac:6a:35:2a:a6:35:54:6d:f9:b0:c7:d6:
d0:16:90:09:e8:c2:7d:3b:50:46:d0:c9:15:a8:ce:16:32:29:
e4:1f:e6:5d:60:aa:1f:82:5a:0d:55:14:4a:08:9a:41:ae:3b:
98:6f:b1:a6:9c:08:c7:6d:43:af:f2:d5:8a:3a:d0:a2:f3:cb:
ca:48:73:08:a5:dc:09:36:c8:4a:45:75:5c:57:78:48:ba:42:
ad:30:76:76:58:d0:18:bd:14:13:12:16:2d:78:9f:bd:6c:68:
40:eb:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:47 2026 by rpki-client