Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/GW4dInsub7k2BztNc9KO0RXqd4A.roa
File: GW4dInsub7k2BztNc9KO0RXqd4A.roa (raw, json)
Hash identifier: IMiWrs6n4JNtZ7SiOWqNyYDbPpDBAplDzPrQ8pcJs/g=
Subject key identifier: 19:6E:1D:22:7B:2E:6F:B9:36:07:3B:4D:73:D2:8E:D1:15:EA:77:80
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 01A0C34224EF23D31BF704C10B45A530E213
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/GW4dInsub7k2BztNc9KO0RXqd4A.roa
Signing time: Mon 21 Sep 2026 09:18:06 +0000
ROA not before: Mon 21 Sep 2026 09:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214608
IP address blocks: 188.125.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:42:24:ef:23:d3:1b:f7:04:c1:0b:45:a5:30:e2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Sep 21 09:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=196e1d227b2e6fb936073b4d73d28ed115ea7780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:b0:09:f4:8c:68:78:20:14:93:f3:06:f3:
95:81:37:28:42:27:c8:04:c2:3a:27:31:bb:ec:6a:
dc:fb:a8:03:86:0a:f0:25:ff:57:fd:78:5e:70:20:
88:aa:9f:67:e6:6d:3e:14:4b:b1:07:fa:81:ee:e0:
61:b1:b7:67:85:21:3e:b9:70:60:a0:1d:07:f3:ae:
2d:57:d8:8d:a8:c4:f9:f6:a7:67:83:93:ff:11:5b:
ab:65:b1:d9:fc:f2:9f:21:fc:f9:ec:13:1b:cf:19:
f1:48:0a:5f:9a:51:46:4a:66:6f:b5:f9:50:15:78:
50:da:6e:3d:e8:43:9a:63:27:fe:d5:1d:68:5b:ac:
5c:43:28:86:31:00:d8:7e:10:59:15:e0:ac:83:74:
7b:5a:29:32:f7:58:d3:1f:32:db:e1:15:b5:79:45:
e0:77:f2:f0:b4:18:ce:cf:ee:63:9d:5a:f9:66:57:
e7:7e:39:3b:b3:71:5d:4e:e5:30:8f:61:2c:66:d6:
13:d2:fd:de:80:1f:65:28:fd:ba:3b:60:78:9d:00:
c2:14:14:98:c3:39:e9:01:82:3d:1d:58:79:9c:2b:
08:00:4c:4f:9a:96:d7:f5:d6:d5:a8:22:cc:6a:8e:
bf:52:fd:e9:de:6b:ec:83:68:3f:da:21:4a:fe:67:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6E:1D:22:7B:2E:6F:B9:36:07:3B:4D:73:D2:8E:D1:15:EA:77:80
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/GW4dInsub7k2BztNc9KO0RXqd4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.161.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b9:20:35:c9:7b:c3:82:50:f4:a0:0e:9c:0a:96:6e:50:e5:
8f:9d:ae:80:ae:eb:67:88:7a:98:03:49:0a:46:4d:a1:ae:f5:
6c:d0:95:7b:cb:b1:6a:96:85:7e:4f:c4:0c:19:55:a3:36:0f:
91:73:82:57:90:30:16:55:b3:78:5b:38:67:dd:45:93:46:05:
1b:6b:77:96:61:42:e5:74:5c:00:06:99:07:b4:db:79:62:63:
25:8c:ce:bc:53:6d:56:ae:25:a0:76:60:ea:c7:79:2a:04:ca:
77:20:d8:75:51:b7:81:66:fc:18:25:69:3f:de:a6:63:5c:72:
9f:62:99:b5:ba:b4:06:16:b6:0e:a1:1f:3e:2a:f4:6b:9a:46:
11:35:d2:4e:e5:d5:0d:e7:e9:f3:ef:e9:27:eb:cd:db:98:e0:
a6:41:17:3a:88:75:be:01:12:74:ad:16:20:dd:47:19:cf:a6:
1d:76:e3:85:2b:2c:6c:7c:e8:55:a6:a9:65:06:e6:6e:51:8b:
26:94:19:7e:1c:88:de:91:0a:70:af:1c:b0:24:03:55:6f:95:
42:51:5c:6a:df:e6:30:bf:30:3f:9d:01:3c:fe:9d:43:6b:a8:
57:8c:5a:74:01:76:90:2c:46:56:be:8d:3f:71:fa:88:21:11:
78:8a:99:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:45:44 2026 by rpki-client