Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/C_GLVEyzOcBWrra4xLg2kec79IM.roa
File: C_GLVEyzOcBWrra4xLg2kec79IM.roa (raw, json)
Hash identifier: mHSIddXf7S/2+skg3jB/IQxIEzQrNG7v1jMFRc3QaEs=
Subject key identifier: 0B:F1:8B:54:4C:B3:39:C0:56:AE:B6:B8:C4:B8:36:91:E7:3B:F4:83
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A1B16464A9E7FD59048EFC858961AF8072
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/C_GLVEyzOcBWrra4xLg2kec79IM.roa
Signing time: Fri 06 Nov 2026 15:05:08 +0000
ROA not before: Fri 06 Nov 2026 15:05:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215197
IP address blocks: 89.32.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:64:64:a9:e7:fd:59:04:8e:fc:85:89:61:af:80:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Nov 6 15:05:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bf18b544cb339c056aeb6b8c4b83691e73bf483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:c4:40:24:98:10:7f:36:d2:18:c0:fa:7a:
f1:cd:04:81:36:18:3f:bf:2a:3e:61:96:31:0c:15:
e4:8f:db:39:dd:2e:ee:30:45:5b:15:be:2a:c9:a2:
ef:4e:4b:15:93:53:b2:4b:25:88:bf:7c:0c:2e:6a:
50:2e:44:02:98:fc:49:95:68:35:b6:e8:df:04:fe:
f2:a4:c1:db:69:9d:d6:32:8b:e6:d6:88:82:47:c9:
d9:c6:ec:05:bf:c1:9d:6a:04:b8:0f:47:65:f4:23:
a1:47:53:f6:db:f0:55:29:b4:d6:a7:31:35:13:af:
2d:bb:0e:93:31:17:95:32:89:f9:ee:9e:10:0e:01:
c9:a2:7a:79:5f:9b:f8:0f:f7:f4:a4:97:0a:ed:17:
0b:c5:de:6c:24:0a:7b:6a:63:86:92:cb:2b:aa:c8:
41:21:0f:b0:8d:8a:e3:40:6f:e2:ac:7a:e9:56:eb:
fd:66:b7:ab:01:19:79:6b:ea:f5:05:23:09:94:6f:
3a:9c:d0:d9:6c:f0:f3:70:d0:1a:aa:47:5d:78:2b:
69:58:21:12:29:7c:e3:aa:42:41:27:75:49:d9:db:
ee:83:9c:10:aa:bf:d2:26:c9:6d:65:be:1a:e6:7e:
a2:f8:69:05:42:0c:c3:4a:30:9d:76:3f:9c:4e:ef:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F1:8B:54:4C:B3:39:C0:56:AE:B6:B8:C4:B8:36:91:E7:3B:F4:83
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/C_GLVEyzOcBWrra4xLg2kec79IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.172.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5f:79:42:ee:92:17:56:9f:eb:85:e8:89:8b:f3:4b:7e:9e:
4f:48:a9:89:86:2e:8b:0c:f0:37:8e:82:71:15:4b:77:b3:db:
ac:be:3f:08:a0:e6:35:0a:ac:57:50:e6:58:56:5c:ca:68:75:
3b:31:f8:25:6a:d2:1c:89:d4:10:2d:11:9d:de:e7:7f:eb:dc:
0b:e6:6c:68:4d:6d:35:ff:12:63:13:ad:3e:58:bc:cf:a5:3b:
11:fd:b2:89:e4:8e:dd:df:6e:36:2b:13:a6:67:22:e6:60:11:
8d:57:36:8c:a6:e5:49:3a:5b:db:9b:44:7f:c5:36:4f:f4:bc:
65:ea:94:ed:11:00:50:40:dc:a0:df:7b:12:e5:9b:64:26:19:
a5:78:a3:34:3f:6d:35:81:d1:7a:3d:63:0c:47:d5:c7:1d:98:
86:11:56:94:7c:1c:f9:bf:bd:0b:19:fb:e8:ed:2c:8e:e7:35:
8c:8e:0b:cc:dd:2b:4b:72:24:71:01:d3:d0:8f:b3:00:79:11:
7f:27:30:16:6f:2e:7f:3d:09:dc:7e:1a:ce:cd:f6:f0:39:e5:
91:ba:b4:a6:56:45:49:38:ab:6d:5e:f2:ad:64:10:7b:00:c8:
91:10:fb:2d:ee:d3:de:f3:26:d7:61:96:b2:c9:96:14:9b:c4:
c4:dc:50:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:32 2026 by rpki-client