Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/GVMQ2GhaEdTKaWEvEP46NaINJpE.roa
File: GVMQ2GhaEdTKaWEvEP46NaINJpE.roa (raw, json)
Hash identifier: DuVK+9fHLleTlcN4pfvABl9Ywn2SnErQI65gsGkiRnQ=
Subject key identifier: 19:53:10:D8:68:5A:11:D4:CA:69:61:2F:10:FE:3A:35:A2:0D:26:91
Certificate issuer: /CN=474779c802095f6df4b2aacf5dcdc5d33dd7de6d
Certificate serial: 019F854D76DEF808CE346266AAB46BCB87D9
Authority key identifier: 47:47:79:C8:02:09:5F:6D:F4:B2:AA:CF:5D:CD:C5:D3:3D:D7:DE:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/GVMQ2GhaEdTKaWEvEP46NaINJpE.roa
Signing time: Tue 21 Jul 2026 15:31:14 +0000
ROA not before: Tue 21 Jul 2026 15:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203449
IP address blocks: 185.127.152.0/24 maxlen: 24
185.127.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:4d:76:de:f8:08:ce:34:62:66:aa:b4:6b:cb:87:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474779c802095f6df4b2aacf5dcdc5d33dd7de6d
Validity
Not Before: Jul 21 15:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=195310d8685a11d4ca69612f10fe3a35a20d2691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:73:aa:95:e2:15:9d:15:f5:6b:0d:6c:56:40:
0c:63:3c:57:87:15:29:93:f7:f9:d6:e1:c2:5d:5e:
86:7f:1a:ec:ae:23:83:c9:86:86:7f:f6:af:d9:17:
53:87:81:d5:d7:96:a8:27:86:b9:0c:f2:9a:f3:08:
48:40:0d:ad:fb:ce:92:2f:4b:4e:19:a7:3f:a4:54:
a1:80:d7:ae:3f:43:ae:62:18:64:7a:4c:52:77:fc:
8a:e5:cc:9c:6e:8b:7a:77:11:ef:ce:b1:a8:59:f3:
78:e3:2f:43:c2:59:ac:dd:bf:82:c4:10:4f:5b:a5:
4a:37:40:a9:6d:56:ae:38:56:ea:76:fc:74:95:2f:
1d:94:e3:e1:d6:14:26:e3:ec:9e:a5:6e:04:d5:59:
48:1c:d9:22:e0:89:1d:45:36:d1:d0:aa:83:c7:9e:
c8:ad:55:6c:58:0a:35:0b:cf:2f:c7:d1:17:c4:71:
22:3c:8c:86:10:fe:72:c3:29:2c:6a:26:b4:42:06:
ad:fd:b5:69:d2:8d:99:1e:be:f8:44:38:a7:25:bb:
49:76:61:61:3c:fb:4b:6d:8c:aa:a5:1f:64:b0:ef:
02:fe:fb:be:25:f5:07:00:23:db:a5:ed:c5:aa:9c:
cf:1b:3a:d3:bc:56:a5:f2:ae:0f:49:c0:bd:27:0f:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:53:10:D8:68:5A:11:D4:CA:69:61:2F:10:FE:3A:35:A2:0D:26:91
X509v3 Authority Key Identifier:
keyid:47:47:79:C8:02:09:5F:6D:F4:B2:AA:CF:5D:CD:C5:D3:3D:D7:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/GVMQ2GhaEdTKaWEvEP46NaINJpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.152.0/24
185.127.154.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:64:d3:67:2d:e2:26:25:a4:6e:dc:6f:72:10:f2:14:3e:74:
69:73:d8:61:aa:f3:0a:07:d3:30:37:f3:fc:2e:4b:e3:2e:7a:
09:e8:48:36:cd:50:50:5c:ba:19:02:64:2f:0e:77:0c:6a:76:
eb:5f:a8:f6:9f:fe:83:d4:09:9a:d9:a1:9a:0a:23:34:e2:83:
d9:14:3c:87:b6:fe:f7:a9:c8:76:27:12:4a:df:4c:39:7f:b9:
87:ab:a5:8c:91:30:d6:84:e2:0a:69:57:02:2e:93:0b:41:05:
85:0b:ae:fa:a9:32:17:89:16:57:31:dc:e5:e7:2f:48:1a:6d:
b5:d4:9e:31:00:0a:13:71:cf:10:f7:7d:8d:c8:86:6a:b2:a6:
a3:cf:23:97:08:61:e6:cf:8e:bb:59:34:b0:ef:95:56:90:be:
bb:78:01:11:94:09:e7:e5:a0:9d:26:f6:4a:35:1a:73:6b:c8:
43:78:60:86:9b:ec:13:1d:3c:89:14:ee:ff:f3:b9:f5:e1:14:
b5:ce:05:c9:9e:14:1d:30:c0:26:b4:03:55:42:ac:59:7d:2f:
2a:fa:3c:95:94:c2:21:4d:09:09:1e:be:a6:c4:c4:34:5d:07:
f4:2f:be:36:f0:a0:b9:dd:cb:77:c8:74:03:ea:d1:bd:f6:5f:
9e:33:92:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:49:00 2026 by rpki-client