Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/gsW8nDY--9jLTeDChs0GJukKCls.roa
File: gsW8nDY--9jLTeDChs0GJukKCls.roa (raw, json)
Hash identifier: p0mhdZcoaW4w8Zea4FyKGneJi9WoYwCQHfMiCPW536w=
Subject key identifier: 82:C5:BC:9C:36:3E:FB:D8:CB:4D:E0:C2:86:CD:06:26:E9:0A:0A:5B
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019CE7E8F3972C506BC6724CDEAC1D7C9455
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/gsW8nDY--9jLTeDChs0GJukKCls.roa
Signing time: Fri 13 Mar 2026 15:55:29 +0000
ROA not before: Fri 13 Mar 2026 15:55:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 87.232.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:e8:f3:97:2c:50:6b:c6:72:4c:de:ac:1d:7c:94:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Mar 13 15:55:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82c5bc9c363efbd8cb4de0c286cd0626e90a0a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:cd:83:3b:d4:2d:f6:8a:14:82:4e:cd:85:
d4:d2:95:f9:a5:96:d1:e5:30:b9:86:c7:a0:b1:e0:
af:e7:9a:61:f8:ea:e4:07:42:a0:9d:63:b7:c3:ee:
47:49:00:93:32:b0:c5:46:2a:9f:2b:be:8c:28:e5:
53:8a:f9:c4:51:ff:d1:7b:f7:8d:4c:9f:d5:a9:74:
be:42:33:02:6d:23:44:1f:65:f4:de:70:0a:03:a6:
a8:82:e6:99:9f:3e:77:76:91:9a:ff:47:98:3b:3f:
4d:10:07:da:6e:5b:6c:79:6f:93:87:0f:f3:af:c1:
92:c6:7d:0f:59:5b:1d:ca:7e:6f:0a:5c:64:95:df:
14:35:4e:4d:d6:fb:8f:5b:99:42:34:ea:89:ac:a1:
4c:4f:5c:23:7d:4e:a4:b1:4f:15:4f:5a:ef:7a:a0:
fa:47:62:2a:88:82:66:f3:fd:82:11:53:f9:4a:ea:
69:f2:20:20:79:e7:a7:44:51:a2:6b:ea:c0:ad:f1:
ab:7e:d0:a8:30:6f:11:13:59:1c:ef:58:8d:2e:8a:
34:a7:ac:9a:96:37:cb:49:89:33:ed:a1:10:0b:91:
2c:98:4b:7e:5e:fa:71:0c:e9:28:78:f1:bd:97:ad:
6c:4e:8f:f5:39:f6:89:2c:12:4d:ba:c1:1e:65:b4:
2a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C5:BC:9C:36:3E:FB:D8:CB:4D:E0:C2:86:CD:06:26:E9:0A:0A:5B
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/gsW8nDY--9jLTeDChs0GJukKCls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1b:00:e4:3a:22:ce:56:59:ed:3d:8b:18:bc:3b:31:eb:33:
01:bf:60:03:f8:d4:91:de:d9:31:7f:f8:b5:eb:43:b4:a5:59:
29:94:79:f1:d8:bc:6f:1f:18:e9:05:48:16:f3:09:5f:a5:cd:
54:1d:92:6e:12:55:82:fd:b5:89:a8:a6:a3:ec:64:d5:1a:58:
4e:60:38:dd:8a:d6:e3:f2:90:34:a4:ce:36:c4:04:42:95:c3:
36:45:ce:55:91:34:e7:76:bf:be:8f:d6:53:65:0d:06:28:ba:
6c:1f:72:76:4f:c0:b3:75:37:4a:c8:25:57:16:b3:f6:2f:17:
b7:e6:5f:4c:62:07:33:d9:4e:41:c6:92:80:45:63:ee:e7:7c:
4d:69:30:77:d1:ef:31:b1:ec:8d:15:60:f8:b2:3a:f3:7a:94:
23:5d:00:4e:cb:7f:e7:96:8d:f1:52:7d:c5:5b:a5:4d:f4:f0:
35:5f:60:ea:da:17:46:f6:0b:10:2c:29:18:a5:e0:c9:b3:8b:
05:74:37:d0:a8:ff:b1:e5:77:c3:02:b1:9f:de:ec:99:a3:69:
f6:9b:b9:28:b1:09:a9:86:5c:6b:84:a6:f2:3d:7e:a1:4d:8e:
6c:e8:bd:07:47:6f:f3:ee:a9:b3:39:e3:44:29:97:72:89:5a:
40:bd:06:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:18 2026 by rpki-client