Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/GabJ5twvONaV1oDv6R6xRBsqjPI.roa
File: GabJ5twvONaV1oDv6R6xRBsqjPI.roa (raw, json)
Hash identifier: VboUrV+ncooHpKApDm37rXqvF783TBpkHD8FibYc72I=
Subject key identifier: 19:A6:C9:E6:DC:2F:38:D6:95:D6:80:EF:E9:1E:B1:44:1B:2A:8C:F2
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 019F5DD193DAFCDB6C6170C6B1E74E4FB844
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/GabJ5twvONaV1oDv6R6xRBsqjPI.roa
Signing time: Mon 13 Jul 2026 23:30:43 +0000
ROA not before: Mon 13 Jul 2026 23:30:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215671
IP address blocks: 5.22.200.0/24 maxlen: 24
5.22.201.0/24 maxlen: 24
5.22.202.0/24 maxlen: 24
193.19.147.0/24 maxlen: 24
2a06:bd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5d:d1:93:da:fc:db:6c:61:70:c6:b1:e7:4e:4f:b8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Jul 13 23:30:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19a6c9e6dc2f38d695d680efe91eb1441b2a8cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d8:8a:a7:cb:25:fb:28:93:1a:e5:a3:de:64:
a1:30:a1:32:ba:c3:7c:6c:0c:95:03:63:2f:ca:96:
8b:98:4d:61:f4:cc:ef:95:7f:a4:4f:87:2b:f2:d5:
7a:01:7e:34:aa:b3:a5:48:92:d8:5d:17:68:c4:04:
1c:d6:01:ad:b9:54:28:0a:a7:9e:ef:25:f6:80:c0:
5f:ed:7d:05:d0:a4:ac:2d:ba:8d:7f:6f:8a:5b:cc:
99:0f:77:57:96:e4:51:d5:c4:81:d8:fb:32:d3:14:
6d:14:e6:30:f0:e8:9f:29:be:87:06:a4:b1:93:b0:
38:b7:57:78:1f:dc:1c:76:8f:b8:f1:ed:b4:c2:55:
f7:0d:ce:d3:12:0b:9a:5c:53:5e:fa:e1:5a:31:38:
dc:be:fd:3f:1d:3a:fb:64:3e:82:16:fe:13:88:0e:
a3:9f:88:9c:f6:3b:a0:4a:b2:93:51:4e:be:4a:7f:
21:64:ed:62:7a:2f:6b:95:2b:e7:89:22:ee:cb:c9:
54:ac:dc:42:00:16:9b:fb:0f:fa:fb:63:60:57:ad:
2a:3c:ed:66:1e:ed:21:b1:7f:fd:10:dc:0f:7f:00:
ad:09:4b:13:d6:84:21:7c:a4:d3:71:2e:5c:75:58:
dd:1b:9e:fa:e9:21:9e:eb:bd:d5:3b:6f:81:ff:b5:
8d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A6:C9:E6:DC:2F:38:D6:95:D6:80:EF:E9:1E:B1:44:1B:2A:8C:F2
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/GabJ5twvONaV1oDv6R6xRBsqjPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.200.0-5.22.202.255
193.19.147.0/24
IPv6:
2a06:bd40::/29
Signature Algorithm: sha256WithRSAEncryption
98:63:db:93:12:61:9f:03:71:27:ce:0c:74:b1:04:c2:88:78:
2e:1d:43:e1:a5:ba:c9:fe:2b:5b:60:73:8d:81:d2:90:af:3d:
cf:82:f1:fb:1e:b9:ba:58:d7:a8:1a:1a:fe:3a:c2:18:22:0c:
11:b3:9e:9e:e0:cd:84:1c:5e:04:3e:07:4b:2e:0e:73:79:f4:
37:32:fd:af:03:67:d7:c0:36:fe:14:62:c5:1c:e3:92:74:78:
a4:5b:7d:1d:ae:dd:c8:f4:66:cc:85:6f:06:0d:68:be:28:97:
3e:74:09:39:e4:29:8e:14:e0:65:d6:8c:20:a8:50:9b:b1:e0:
0c:0c:ce:ac:f0:48:29:32:87:c5:2b:01:7e:60:f9:d0:7d:85:
2d:7c:68:9d:e6:56:77:a1:c1:05:08:51:cc:62:48:80:4b:47:
13:de:5c:17:48:38:8e:9a:be:7b:5c:61:d2:d1:7c:1e:80:23:
fa:bd:55:f3:76:d4:6f:c9:04:3f:6c:de:8b:58:60:8e:3f:42:
e7:93:c7:8c:32:24:3d:85:2c:68:25:fe:c7:13:25:8c:62:43:
91:49:5e:1d:de:42:92:c8:d2:1b:10:56:12:49:8f:55:ed:df:
11:9d:09:be:f5:d4:a6:07:d7:b4:35:c2:52:9d:ad:42:1d:0a:
54:8f:52:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:31:59 2026 by rpki-client