Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/GZxpNzGC-1BStPRxl0AuXHTYpms.roa
File: GZxpNzGC-1BStPRxl0AuXHTYpms.roa (raw, json)
Hash identifier: N5+X5onvfO8vCXWo09NVsFmRf/WIuQPxs6kWhVhvR6c=
Subject key identifier: 19:9C:69:37:31:82:FB:50:52:B4:F4:71:97:40:2E:5C:74:D8:A6:6B
Certificate issuer: /CN=1e2b47803e137fd59eb45cfaed9362c430318ede
Certificate serial: 019F2368870B15AD80B66245096088D25B8A
Authority key identifier: 1E:2B:47:80:3E:13:7F:D5:9E:B4:5C:FA:ED:93:62:C4:30:31:8E:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/GZxpNzGC-1BStPRxl0AuXHTYpms.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58192
IP address blocks: 194.0.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:87:0b:15:ad:80:b6:62:45:09:60:88:d2:5b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e2b47803e137fd59eb45cfaed9362c430318ede
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=199c69373182fb5052b4f47197402e5c74d8a66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:ee:f6:52:36:d5:05:d5:58:56:58:5e:82:
e5:74:25:74:e6:7d:91:e4:6b:97:cf:98:e4:e5:65:
5e:67:08:6b:f8:6d:8e:c8:ef:b7:60:50:8f:03:4d:
21:db:83:ba:69:b3:77:68:03:5e:13:ca:08:d5:4b:
a6:9c:c9:75:64:1b:ed:f8:0d:d8:96:28:52:87:61:
8e:3f:fc:c4:09:54:83:d2:a8:01:43:b4:44:dd:7a:
62:97:3a:d3:93:6a:9d:33:be:8e:e5:13:59:81:59:
08:d5:7f:f6:62:6e:6a:b2:5b:d8:8a:fd:62:7b:0a:
5c:18:d6:d0:bd:88:b7:cb:80:fa:78:19:d4:40:bd:
1b:0a:2c:84:4c:8e:5a:c2:df:8c:48:dc:3c:2a:28:
5c:4b:64:dd:f8:bf:bf:6d:7b:b3:b7:2f:e5:99:b7:
60:78:58:1c:07:55:14:0f:5b:20:74:66:8b:72:79:
92:24:39:19:4c:7d:e4:5a:1e:d5:a3:87:d2:22:4d:
c2:32:63:1b:c8:d1:96:8b:d0:e0:fd:d8:9a:4b:37:
d2:2d:f0:48:1e:c8:b9:fd:f0:c3:dc:0a:c5:2e:ef:
94:a9:87:47:8f:e1:55:d4:5a:fb:fc:b8:c1:3a:a3:
b8:b6:71:2b:8b:0a:cd:7a:de:20:28:ad:8f:b0:38:
f9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9C:69:37:31:82:FB:50:52:B4:F4:71:97:40:2E:5C:74:D8:A6:6B
X509v3 Authority Key Identifier:
keyid:1E:2B:47:80:3E:13:7F:D5:9E:B4:5C:FA:ED:93:62:C4:30:31:8E:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/GZxpNzGC-1BStPRxl0AuXHTYpms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.234.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:cb:7e:07:ad:28:0a:56:90:ab:ef:72:82:d1:97:56:32:94:
84:9b:16:3e:0a:9a:7a:f6:97:01:89:45:88:f6:72:7f:10:8b:
fc:0f:4b:19:ee:c9:d5:dd:ea:15:ae:73:c9:76:83:a5:27:a4:
03:ca:74:bc:8d:eb:27:98:d1:9e:6f:d0:4b:e6:76:23:d4:00:
6e:a2:29:3e:92:1f:bc:87:6f:c6:d6:3c:80:3f:27:24:05:49:
cb:f6:1f:5f:a3:d2:fd:02:bf:11:7a:d5:ec:44:b0:41:72:d4:
01:6d:32:49:d2:cf:2c:dc:1b:cf:0d:25:8e:bc:7b:33:d9:73:
be:21:24:46:0f:cc:a3:c9:81:15:f6:df:c0:56:95:c9:d1:8a:
92:f1:3d:03:06:61:91:1b:92:71:c1:80:af:c1:fe:d7:2d:63:
56:19:38:3e:7a:26:85:25:2d:43:c8:36:75:d1:34:bf:88:b0:
86:4b:19:7a:5e:81:11:aa:53:2d:f4:2a:04:a6:c0:fc:7c:25:
7f:b9:6a:c8:09:12:2d:cb:d4:3f:47:48:f9:4b:50:d4:89:4e:
09:98:3e:ee:69:87:85:a4:e2:90:5b:21:f3:e5:38:cb:73:c9:
1e:33:f6:ed:8e:25:7b:9f:71:c5:31:8a:4d:4e:1d:98:d8:85:
4f:43:4d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:02 2026 by rpki-client