Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/GEV1H-S0fvCn0-Zv3Sh8DcQCeUo.roa
File: GEV1H-S0fvCn0-Zv3Sh8DcQCeUo.roa (raw, json)
Hash identifier: +Zh/5d+GedMdUjtJfyVNDVmiSZQQl2T9ug1QDC+TuMI=
Subject key identifier: 18:45:75:1F:E4:B4:7E:F0:A7:D3:E6:6F:DD:28:7C:0D:C4:02:79:4A
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A17DCD8F61CA3D314385DCD5AF1DE385BA
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/GEV1H-S0fvCn0-Zv3Sh8DcQCeUo.roa
Signing time: Tue 27 Oct 2026 14:39:45 +0000
ROA not before: Tue 27 Oct 2026 14:39:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218285
IP address blocks: 2a06:9801:1592::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:cd:8f:61:ca:3d:31:43:85:dc:d5:af:1d:e3:85:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 27 14:39:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1845751fe4b47ef0a7d3e66fdd287c0dc402794a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a1:7b:be:28:96:d8:2d:99:69:7b:8d:7d:1c:
9d:34:8e:f1:97:de:d0:57:8e:d7:0c:d8:c9:02:01:
9d:1d:eb:db:2d:3a:1b:91:6c:c9:56:4c:b8:bc:e2:
c0:1f:17:1b:86:29:04:c0:0d:85:28:62:29:03:f5:
e4:e8:cf:7a:c6:37:83:8d:b7:f7:80:e1:ca:a7:03:
a8:a4:84:eb:8b:19:89:19:54:a2:93:53:59:7e:8c:
ac:2d:0c:f3:77:73:4b:67:06:91:00:08:ef:0f:eb:
52:a1:4c:fc:42:67:28:be:b4:ef:33:9b:54:4a:07:
48:07:2a:d7:87:c0:73:97:df:f6:0c:89:f0:78:69:
d3:70:c8:48:95:5a:9f:0b:1d:e6:ab:7d:92:7c:c8:
a0:0e:07:e0:dd:a2:72:52:5e:e2:8b:19:90:85:b2:
bc:e6:51:d5:59:1f:8f:20:dd:b8:a0:5f:f2:b1:24:
08:bf:ad:ea:25:5c:46:83:0c:bb:e1:3c:0b:4e:12:
d3:38:ce:46:6d:74:9e:89:51:85:b6:59:06:30:7c:
d0:6a:ff:a9:5e:bb:e8:b1:a9:7e:98:3d:91:fe:60:
7d:96:49:cd:00:12:5e:66:93:8d:1e:44:7f:90:2c:
75:08:d3:f9:b1:05:bf:9e:c4:f0:cf:e7:6e:ed:95:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:45:75:1F:E4:B4:7E:F0:A7:D3:E6:6F:DD:28:7C:0D:C4:02:79:4A
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/GEV1H-S0fvCn0-Zv3Sh8DcQCeUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1592::/48
Signature Algorithm: sha256WithRSAEncryption
41:79:97:48:88:77:91:74:53:5c:32:80:ab:53:58:6c:ae:5a:
15:27:3f:df:24:b7:5d:21:f6:60:de:5f:dc:b1:eb:31:77:ba:
21:2c:c5:67:5d:56:e6:09:e8:e7:e9:29:04:c6:db:16:29:9d:
e9:75:0a:04:dd:24:e1:02:fb:13:c5:6d:eb:0a:74:13:ae:fe:
d0:ed:70:52:77:fe:62:64:12:b6:7c:69:03:e7:47:ab:42:07:
bf:bf:39:97:c6:e6:f1:3b:52:8a:c3:e6:65:c2:a1:3c:9d:08:
94:fa:73:79:5c:99:8b:52:c5:52:b0:de:e0:e3:b7:34:54:a9:
68:16:5b:6e:99:1b:5b:c4:24:57:66:35:3f:8d:0c:81:7e:63:
2c:8a:97:a8:50:78:55:8b:67:eb:fc:74:e8:d2:ac:3c:9f:c1:
3f:d2:3f:0c:d2:6f:3d:da:c9:27:47:bd:fe:c2:cd:d6:39:91:
92:d5:b8:b5:69:84:7e:03:45:0b:a7:0b:dd:68:bb:c4:f4:17:
8c:0c:86:20:4e:7c:d0:31:9c:a6:8e:55:90:97:f2:76:42:68:
f9:68:c4:eb:04:0d:4e:18:0c:75:f8:8f:e3:ab:3d:60:31:65:
55:e7:c0:5c:a4:7a:3d:ca:ba:16:f7:a4:6f:a7:89:da:bf:30:
12:63:80:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:26 2026 by rpki-client