Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/GtaUr1pVDYR4nA-DpuJ2QCpNuw8.roa
File: GtaUr1pVDYR4nA-DpuJ2QCpNuw8.roa (raw, json)
Hash identifier: mG29UJlTWQAPMIt0L2ia2KsTcVs37XsyB6zB2jjrPLM=
Subject key identifier: 1A:D6:94:AF:5A:55:0D:84:78:9C:0F:83:A6:E2:76:40:2A:4D:BB:0F
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 019EC7D035E674073D749762D388C998A983
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/GtaUr1pVDYR4nA-DpuJ2QCpNuw8.roa
Signing time: Sun 14 Jun 2026 20:26:11 +0000
ROA not before: Sun 14 Jun 2026 20:26:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50979
IP address blocks: 46.28.64.0/24 maxlen: 24
193.238.155.0/24 maxlen: 24
195.123.208.0/21 maxlen: 21
2a02:27ac::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c7:d0:35:e6:74:07:3d:74:97:62:d3:88:c9:98:a9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Jun 14 20:26:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ad694af5a550d84789c0f83a6e276402a4dbb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:a4:2d:11:45:48:44:39:07:eb:cb:03:3c:
db:c5:47:34:76:48:91:87:79:df:10:e9:4f:56:11:
3c:31:57:f1:de:fb:e5:6c:3f:cc:35:a2:4c:4d:48:
75:b4:6e:f0:87:f5:f9:01:23:f6:0a:dc:e2:b4:4e:
cd:d9:3e:b2:54:60:66:eb:ae:09:56:0c:77:e2:a1:
e5:7c:de:66:e8:b1:37:0f:0b:69:24:60:72:fe:78:
c5:ba:f0:83:63:b5:25:6b:bf:98:6a:65:45:bd:db:
cd:b9:9b:c9:7c:4e:4b:f9:5b:1c:e7:36:fa:c3:ff:
83:22:21:9a:3e:d3:d9:be:6c:df:0c:c4:5c:75:79:
8c:8c:05:ab:06:f3:a3:b7:d7:fc:ba:47:eb:62:d7:
a3:f3:80:66:6e:0d:87:a3:36:06:35:04:10:46:91:
04:77:ec:f8:74:b0:80:c1:75:28:39:c5:7d:59:20:
b6:aa:1c:8e:cf:95:f6:f9:b5:f0:10:90:01:d6:6a:
7e:52:fb:d8:19:9a:9a:7e:5b:e7:c4:af:48:b9:9e:
41:ff:2d:17:e5:b8:21:ed:4b:f2:4f:dc:5d:05:e4:
c4:b0:eb:12:b9:8c:f8:a2:ad:5b:c2:27:0a:50:4e:
af:b6:d5:3c:d0:b0:7f:6c:35:d3:31:68:6b:6c:36:
f7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D6:94:AF:5A:55:0D:84:78:9C:0F:83:A6:E2:76:40:2A:4D:BB:0F
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/GtaUr1pVDYR4nA-DpuJ2QCpNuw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.64.0/24
193.238.155.0/24
195.123.208.0/21
IPv6:
2a02:27ac::/32
Signature Algorithm: sha256WithRSAEncryption
4c:43:97:bb:2b:96:47:77:45:13:2e:c1:f2:9f:81:9a:9b:10:
fe:cf:85:93:4b:6c:70:7b:c6:8a:0f:67:bb:82:69:45:7b:64:
29:50:8d:11:2d:6d:ba:b0:74:bf:32:b1:49:21:9f:f2:bc:03:
a5:80:f0:53:23:43:63:9f:16:f8:a7:5c:02:79:6e:34:4e:38:
ce:13:f0:c7:ad:6b:4d:73:1a:ee:eb:24:27:84:08:0b:34:67:
ff:a3:8b:cc:2a:91:13:24:e9:85:bc:8a:51:c3:61:7c:1c:ae:
bf:36:66:f5:8a:27:72:24:2e:a0:24:38:5d:f7:87:8d:a4:d6:
b1:6e:b5:eb:68:85:39:da:06:61:ea:39:26:8d:ab:74:7d:43:
f0:6c:74:ae:1e:f3:1f:ea:73:d9:c6:f8:85:0f:e2:5c:02:5c:
41:0f:11:6b:34:a8:1a:c8:b1:df:e8:28:c9:95:a2:7e:76:46:
a6:2f:44:48:76:f3:91:d5:29:10:d8:e5:11:1b:10:f5:08:9a:
3a:d0:29:b0:4c:ca:82:7e:1e:64:27:9b:c7:12:55:05:89:7c:
7c:d9:05:df:71:6a:59:3e:b0:4f:74:0e:f0:2b:61:fe:3d:6e:
0b:c2:7d:88:ae:e8:da:e3:03:1b:69:fb:c0:1f:47:a1:dd:bb:
53:ff:3b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:30 2026 by rpki-client