Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/GKNBUzbX6fk_ZGvEdYf3qJ03AqY.roa
File: GKNBUzbX6fk_ZGvEdYf3qJ03AqY.roa (raw, json)
Hash identifier: Yk5Z2ApUIFrV+C536vj94AjIDEb8pim9xmLcinHBJbs=
Subject key identifier: 18:A3:41:53:36:D7:E9:F9:3F:64:6B:C4:75:87:F7:A8:9D:37:02:A6
Certificate issuer: /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial: 019F2368A78825BD5B397124C8799A53EE7E
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/GKNBUzbX6fk_ZGvEdYf3qJ03AqY.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1267
IP address blocks: 194.20.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a7:88:25:bd:5b:39:71:24:c8:79:9a:53:ee:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18a3415336d7e9f93f646bc47587f7a89d3702a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:14:89:89:d3:b4:4b:6e:55:64:87:e6:b6:
8f:fe:32:a1:c0:20:b9:b9:92:85:5a:08:c9:96:3b:
77:ae:19:a0:83:b4:a6:2e:aa:b3:89:dc:33:75:68:
5c:50:31:74:30:f7:33:24:4f:5b:c0:52:ae:ba:4b:
da:37:36:53:8a:81:70:41:0f:b0:68:2f:fd:e7:d8:
c5:88:74:b6:c1:78:cc:98:f4:64:bf:38:65:78:15:
66:d1:b8:a3:f5:d1:86:d1:05:1d:0c:84:d3:4d:a5:
89:c7:0b:01:53:fc:7b:df:7b:e4:7c:84:12:0d:dc:
e6:dd:96:cd:b7:c4:47:b7:69:84:51:72:03:05:79:
47:78:c6:1c:48:23:53:28:43:24:ff:3d:f9:49:7a:
f6:e7:8b:0f:66:36:f1:60:c5:a1:d0:ed:9f:76:71:
7c:e5:f9:16:57:96:b6:fa:aa:f6:10:25:59:ec:3c:
8a:a2:73:14:0d:13:c3:05:d5:f1:af:02:05:53:61:
78:66:00:f8:bf:ab:5a:bd:43:92:92:1c:6d:8f:f2:
cc:f5:ad:61:b1:81:ae:aa:27:ca:6b:eb:2a:66:8a:
e3:68:52:c3:51:d8:0b:6e:c1:2a:47:a1:40:8e:44:
ae:36:24:5a:86:e1:cd:19:96:02:05:36:c5:06:c5:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A3:41:53:36:D7:E9:F9:3F:64:6B:C4:75:87:F7:A8:9D:37:02:A6
X509v3 Authority Key Identifier:
keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/GKNBUzbX6fk_ZGvEdYf3qJ03AqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.24.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:6a:df:ec:34:a3:6c:7a:75:f1:c1:5b:37:aa:5c:ba:69:28:
1c:3f:05:f9:2a:48:85:8c:7e:28:a2:75:d0:e3:fd:7c:e2:30:
7c:d4:c6:eb:61:23:e5:1a:d8:4b:1f:ff:da:99:01:a2:99:3c:
66:ae:eb:ff:b9:bf:e2:f8:64:65:74:6b:30:25:e9:72:83:a8:
48:87:69:98:b2:45:39:61:c0:91:94:38:bd:e3:16:91:5c:89:
fa:ea:5a:89:c1:9c:5f:ba:82:e0:96:ac:97:e1:3b:64:3d:53:
6a:2e:fb:b7:f8:5f:48:82:2b:36:11:ae:76:7b:56:95:01:97:
ec:fd:ae:18:ef:c7:88:00:cb:98:b8:e2:b3:b8:f3:39:e1:2e:
9f:51:d6:bd:1f:86:b9:88:3f:d3:b3:32:ba:e1:98:75:24:80:
91:19:93:0b:b5:15:88:8d:33:a7:f3:90:06:0b:23:e7:ff:b9:
b4:94:52:63:fe:37:01:f5:f0:9e:4d:23:63:a7:c8:26:f8:45:
e2:15:94:08:fc:54:27:b3:f7:d5:15:39:7c:30:89:06:40:18:
02:95:92:97:29:02:7e:a7:b1:36:30:b1:cf:66:be:00:24:48:
a6:d8:53:bf:52:97:fb:d2:68:cb:95:b8:36:83:05:fe:76:a4:
30:6b:be:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:10 2026 by rpki-client