Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/GwFP20MnHcDLa889Vr0NRpN1jKw.roa
File: GwFP20MnHcDLa889Vr0NRpN1jKw.roa (raw, json)
Hash identifier: ydzsTAHTZRTqP3ydi4ynQMZ0OrFyWwXpXzSvfKX7KaI=
Subject key identifier: 1B:01:4F:DB:43:27:1D:C0:CB:6B:CF:3D:56:BD:0D:46:93:75:8C:AC
Certificate issuer: /CN=1c877ec4282d12d8c8fe60cb99e1b6f968fd352f
Certificate serial: 01A0A5A8A273ECBA4DE5D2DE884CBFC38497
Authority key identifier: 1C:87:7E:C4:28:2D:12:D8:C8:FE:60:CB:99:E1:B6:F9:68:FD:35:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HId-xCgtEtjI_mDLmeG2-Wj9NS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/GwFP20MnHcDLa889Vr0NRpN1jKw.roa
Signing time: Tue 15 Sep 2026 15:21:27 +0000
ROA not before: Tue 15 Sep 2026 15:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204103
IP address blocks: 195.138.200.0/24 maxlen: 24
2a03:3ea0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/HId-xCgtEtjI_mDLmeG2-Wj9NS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/HId-xCgtEtjI_mDLmeG2-Wj9NS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HId-xCgtEtjI_mDLmeG2-Wj9NS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:a8:a2:73:ec:ba:4d:e5:d2:de:88:4c:bf:c3:84:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c877ec4282d12d8c8fe60cb99e1b6f968fd352f
Validity
Not Before: Sep 15 15:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b014fdb43271dc0cb6bcf3d56bd0d4693758cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:30:26:5d:62:b3:35:f0:21:1e:ee:56:dc:
a2:3c:95:7b:40:a8:a8:af:95:9c:b0:37:64:58:58:
30:d2:90:51:13:94:bd:08:c4:ea:db:6f:4a:fa:7f:
8c:ee:b8:c1:01:59:bb:fb:dc:69:d7:92:4e:8d:50:
43:4c:7d:cf:2c:a7:5b:68:1a:d8:c6:dd:96:2c:87:
db:52:34:3a:c1:80:9e:78:87:bc:68:73:93:a7:ed:
32:73:d2:a5:49:20:62:61:a7:25:c9:30:59:1f:de:
17:c7:72:7b:7d:6b:45:78:cc:8a:58:a7:0c:62:40:
11:91:45:09:53:63:33:fd:61:20:5c:a6:bf:4e:08:
04:d7:bb:65:47:c9:f6:1e:22:a0:a6:c8:63:fa:90:
c9:10:27:aa:20:44:2a:e6:6a:9a:2c:e9:e9:d9:b2:
17:13:c6:4d:2b:f1:da:47:43:26:dd:55:da:85:25:
7f:fd:f8:ac:7d:e9:dc:82:0c:3c:3f:ce:dc:27:1e:
da:83:f9:36:1d:1f:a7:10:a0:6a:88:9f:d8:41:60:
9e:df:a6:96:fa:4c:6d:ee:3b:2c:d7:de:07:5b:26:
eb:ec:c2:6e:e6:e6:13:f5:2f:fe:96:3d:34:e5:d4:
96:d4:c2:7a:c2:a0:5d:6d:a2:cd:3b:ef:bc:aa:83:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:01:4F:DB:43:27:1D:C0:CB:6B:CF:3D:56:BD:0D:46:93:75:8C:AC
X509v3 Authority Key Identifier:
keyid:1C:87:7E:C4:28:2D:12:D8:C8:FE:60:CB:99:E1:B6:F9:68:FD:35:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HId-xCgtEtjI_mDLmeG2-Wj9NS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/GwFP20MnHcDLa889Vr0NRpN1jKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1c1641-0f81-4d76-b4fb-e8d0ee6e8312/1/HId-xCgtEtjI_mDLmeG2-Wj9NS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.200.0/24
IPv6:
2a03:3ea0::/32
Signature Algorithm: sha256WithRSAEncryption
b3:82:8d:cf:e4:2c:c5:1a:9d:65:25:9c:ef:32:8f:3b:0d:9a:
ba:48:5d:0a:95:87:bf:3f:24:18:2e:8a:08:21:dd:e7:e8:0e:
11:b8:73:44:69:68:4c:16:27:0d:af:11:06:4f:70:91:53:d2:
71:11:dd:46:69:c9:3e:c7:67:54:ea:5f:b2:c1:20:2b:85:e6:
1e:19:35:b8:fa:fa:21:55:55:13:18:de:06:3d:39:b6:3a:73:
ba:e0:88:70:09:54:5d:cd:87:e9:b8:22:67:7f:fd:81:62:9c:
ce:c6:2b:b4:9b:f6:55:7a:49:fe:f3:9d:31:84:ff:70:30:28:
fe:7a:ad:11:54:3d:a0:11:39:30:d4:8e:7b:0a:37:aa:01:48:
aa:27:f2:5c:b2:3e:61:7d:7c:3a:8c:c2:4b:1a:95:1a:88:7a:
82:d5:58:ce:28:10:0d:c6:46:9a:3c:fb:fb:0f:a4:99:d8:58:
ac:6e:27:18:1b:da:58:dc:12:9b:9c:22:38:a7:f2:a0:35:2b:
b9:13:df:da:3b:4b:4b:17:47:c3:28:ac:2a:64:0f:f0:bd:2b:
7e:f8:f8:0e:40:87:3b:c6:37:bb:b7:47:53:da:af:39:28:fc:
37:ab:69:fd:63:e5:c9:82:35:c2:b2:a1:ad:ee:74:de:5b:da:
83:21:26:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:40:33 2026 by rpki-client