Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/gVT7WHWOpKoeuWf1YpGh6GktCwk.roa
File: gVT7WHWOpKoeuWf1YpGh6GktCwk.roa (raw, json)
Hash identifier: skIYaxJD3wVcOeWH+NsicqBKZ2I8NxbZ8WrxWRzxFmc=
Subject key identifier: 81:54:FB:58:75:8E:A4:AA:1E:B9:67:F5:62:91:A1:E8:69:2D:0B:09
Certificate issuer: /CN=e5b58d8ee231b9e2be042ddf726e23ba0a2940c4
Certificate serial: 019F2368A9A1A9FBDD1824575B0AE7702735
Authority key identifier: E5:B5:8D:8E:E2:31:B9:E2:BE:04:2D:DF:72:6E:23:BA:0A:29:40:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bWNjuIxueK-BC3fcm4jugopQMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/gVT7WHWOpKoeuWf1YpGh6GktCwk.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210026
IP address blocks: 151.90.0.0/16 maxlen: 24
185.86.84.0/22 maxlen: 24
2a05:b740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5bWNjuIxueK-BC3fcm4jugopQMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a9:a1:a9:fb:dd:18:24:57:5b:0a:e7:70:27:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5b58d8ee231b9e2be042ddf726e23ba0a2940c4
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8154fb58758ea4aa1eb967f56291a1e8692d0b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9c:75:b0:52:17:3f:df:25:c8:98:04:3d:aa:
df:8c:a7:79:ed:c3:32:58:5d:b3:0a:85:76:2e:83:
30:e6:e0:cb:e5:1a:f1:47:03:88:6f:dc:97:ee:f6:
b1:e6:9e:ab:74:b9:0e:5d:03:bf:1e:5e:0c:43:05:
4b:0b:21:49:40:8e:74:f9:b9:55:64:0f:34:f6:c8:
66:c4:c4:e6:d0:87:be:f7:5a:d9:04:2d:c2:9f:a7:
ee:ca:ec:ba:bf:21:c5:72:42:c8:d3:5b:00:ae:df:
a6:25:3c:ac:26:93:2a:5f:d0:e5:2f:d1:1f:89:4e:
c9:a1:cc:61:df:40:e0:7f:26:ec:77:11:3d:ea:fc:
db:39:6f:34:d8:ea:e9:2b:2d:43:0c:9f:87:fb:bd:
90:2d:e5:58:9d:2a:0f:fe:e7:28:0e:35:e5:81:5b:
9e:bb:8f:37:90:49:e5:82:42:71:6a:a0:db:64:1d:
ef:d7:4c:83:e6:90:9d:ae:64:6e:e3:55:f9:54:32:
97:52:02:35:01:7b:1b:b4:cc:23:de:14:5f:c2:fe:
3e:e8:cf:21:40:68:12:10:1d:2e:15:6f:82:28:75:
32:d0:50:56:0b:c4:88:25:1c:4c:4f:fc:34:0a:b9:
dc:c3:44:6d:53:f4:38:59:67:2c:4d:44:18:c7:3c:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:54:FB:58:75:8E:A4:AA:1E:B9:67:F5:62:91:A1:E8:69:2D:0B:09
X509v3 Authority Key Identifier:
keyid:E5:B5:8D:8E:E2:31:B9:E2:BE:04:2D:DF:72:6E:23:BA:0A:29:40:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bWNjuIxueK-BC3fcm4jugopQMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/gVT7WHWOpKoeuWf1YpGh6GktCwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/5bWNjuIxueK-BC3fcm4jugopQMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.90.0.0/16
185.86.84.0/22
IPv6:
2a05:b740::/29
Signature Algorithm: sha256WithRSAEncryption
77:aa:99:2b:37:93:4a:b9:91:0d:85:87:8b:43:33:40:6a:32:
37:01:af:c9:2f:1e:f0:73:62:1b:45:dd:a6:28:08:06:10:dc:
d5:73:88:22:f4:3c:02:c1:b1:81:a7:2c:e9:10:52:15:35:7e:
97:f3:ff:38:b0:49:89:05:9e:74:b0:f2:cf:d6:03:b6:19:a3:
5f:fa:37:f4:ee:41:ce:8d:75:a5:79:86:24:53:fd:27:c6:1a:
84:db:cf:14:b1:a5:6f:a8:7e:6a:e3:4d:b7:3e:4b:5a:60:6f:
d9:55:02:bb:36:13:59:bd:a5:7c:1b:4e:d0:85:ff:05:d5:72:
95:cc:38:6e:88:b7:58:9b:17:c4:d8:76:66:4f:86:15:ca:30:
c1:de:8a:04:6e:cb:86:80:05:68:27:44:94:e9:29:50:df:b7:
44:ab:a8:9f:8b:1d:e9:8d:9c:c3:e5:32:5f:6c:ad:a8:5e:bf:
55:3b:da:e8:3d:8d:ca:b1:87:96:30:b4:bf:b8:f6:fc:5b:4f:
e0:fd:37:a8:fc:05:c6:32:0b:55:5b:ed:41:0b:53:70:c6:2c:
83:24:4c:e7:ed:43:85:0d:ff:a2:04:35:64:33:4b:b7:9d:08:
0f:f8:ef:69:76:14:03:db:7d:70:55:26:ce:da:27:42:a6:6c:
9c:5f:06:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:37 2026 by rpki-client