Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/glCPJ2S6o9uZKjCAdlQQmibg5oU.roa
File: glCPJ2S6o9uZKjCAdlQQmibg5oU.roa (raw, json)
Hash identifier: r5yLJSYgpWVCtbKMSEubh57fs1HDMOGe6waujl24LNg=
Subject key identifier: 82:50:8F:27:64:BA:A3:DB:99:2A:30:80:76:54:10:9A:26:E0:E6:85
Certificate issuer: /CN=877aad307ad330ebb8cf44ec21389a170436fd53
Certificate serial: 019DCFF6BBBFC7C2085BF6580B531C1CE233
Authority key identifier: 87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/glCPJ2S6o9uZKjCAdlQQmibg5oU.roa
Signing time: Mon 27 Apr 2026 17:22:26 +0000
ROA not before: Mon 27 Apr 2026 17:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.14.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:f6:bb:bf:c7:c2:08:5b:f6:58:0b:53:1c:1c:e2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877aad307ad330ebb8cf44ec21389a170436fd53
Validity
Not Before: Apr 27 17:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82508f2764baa3db992a30807654109a26e0e685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:4f:4c:9d:fd:df:70:27:34:3e:4e:db:6d:
bb:e3:f9:20:a6:ba:35:a3:06:9d:07:6a:f3:a4:79:
9b:f7:72:1d:d0:88:91:54:c7:5d:43:73:6e:fb:d3:
df:8d:ee:8c:49:b0:87:6f:29:14:3a:34:a5:49:2a:
88:8c:45:03:2d:a7:d3:d7:a1:7c:95:67:99:b1:8a:
53:26:7d:bd:69:fb:a2:17:30:a8:9a:e4:80:04:16:
6c:66:ae:b2:b2:3d:d6:f5:1a:17:00:d5:2d:39:ae:
02:47:6b:64:76:73:d9:35:25:a1:c6:4a:99:e3:1e:
15:a2:64:8f:65:29:64:70:0b:2e:1b:7f:26:4c:0c:
d1:75:f6:b6:b6:fc:db:3e:61:36:bc:a9:78:c9:de:
c7:dd:97:40:b6:a7:ea:3c:ef:ac:25:b4:97:38:ad:
64:fa:7e:17:ea:87:1f:27:b9:4c:7e:33:2c:ac:85:
09:55:37:42:28:36:5e:53:3e:0f:33:da:88:9c:47:
47:c7:f0:d5:34:ce:5a:9e:19:85:34:e7:b1:c4:ae:
63:a7:df:70:c5:9a:b5:74:b6:68:e7:7a:93:70:a3:
0d:8e:07:43:f9:14:ff:02:41:e7:77:6b:ae:9a:4a:
d5:de:f6:23:18:37:71:f2:7e:41:3b:1c:84:4d:2f:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:50:8F:27:64:BA:A3:DB:99:2A:30:80:76:54:10:9A:26:E0:E6:85
X509v3 Authority Key Identifier:
keyid:87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/glCPJ2S6o9uZKjCAdlQQmibg5oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.27.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e2:b5:03:c2:53:bc:92:cf:f7:b2:d9:49:58:f2:0a:1e:08:
d1:c4:06:ee:a1:57:ff:c0:ea:ee:42:d7:0a:85:8d:b4:b4:ea:
e2:f5:3c:87:ed:5f:81:f5:dc:bf:47:6f:31:17:52:59:7f:5e:
83:be:00:0e:3e:be:82:c2:e6:c1:f3:fd:97:ea:15:2c:db:bf:
13:e1:da:92:ff:14:bb:f5:04:54:8b:ec:e8:2a:8a:5c:6b:32:
b5:b7:8b:8c:bd:d0:26:aa:4f:4e:85:1e:1c:f9:e6:91:dc:8c:
c3:a3:2e:cb:c6:9b:03:b3:9a:d0:34:e3:cb:9e:40:83:95:1d:
85:0d:52:60:ae:68:78:62:8a:79:96:0b:2f:61:33:e9:9d:d2:
2a:38:55:fc:1e:69:95:98:da:e6:c3:0b:85:a8:61:31:82:23:
db:e6:a7:fa:be:29:fa:1e:97:e0:4d:53:86:18:de:5a:eb:03:
11:8f:7d:ca:2a:c7:c7:bd:7d:0e:35:93:1d:47:b1:7f:23:07:
6a:a4:c4:bd:ca:f8:f7:ef:ab:35:6c:00:e0:92:ec:43:23:6b:
72:4d:27:69:75:ad:e5:43:c6:54:3e:69:6a:f2:dc:74:d3:15:
3c:3a:29:03:f0:1e:75:f5:0b:73:f7:8c:0b:70:e2:77:b7:90:
a5:69:f7:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3P9ru/x8IIW/ZYC1McHOIzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3N2FhZDMwN2FkMzMwZWJiOGNmNDRlYzIxMzg5YTE3MDQz
NmZkNTMwHhcNMjYwNDI3MTcyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjUwOGYyNzY0YmFhM2RiOTkyYTMwODA3NjU0MTA5YTI2ZTBlNjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMlPTJ3933AnND5O22274/kgpro1
owadB2rzpHmb93Id0IiRVMddQ3Nu+9Pfje6MSbCHbykUOjSlSSqIjEUDLafT16F8
lWeZsYpTJn29afuiFzComuSABBZsZq6ysj3W9RoXANUtOa4CR2tkdnPZNSWhxkqZ
4x4VomSPZSlkcAsuG38mTAzRdfa2tvzbPmE2vKl4yd7H3ZdAtqfqPO+sJbSXOK1k
+n4X6ocfJ7lMfjMsrIUJVTdCKDZeUz4PM9qInEdHx/DVNM5anhmFNOexxK5jp99w
xZq1dLZo53qTcKMNjgdD+RT/AkHnd2uumkrV3vYjGDdx8n5BOxyETS9pUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIJQjydkuqPbmSowgHZUEJom4OaFMB8GA1UdIwQY
MBaAFId6rTB60zDruM9E7CE4mhcENv1TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNxdE1IclRNT3U0ejBUc0lUaWFGd1EyX1ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85YWUyMjEtYzEwMS00OTdmLTkxZmUt
NTA4MDk5YzEzM2JiLzEvZ2xDUEoyUzZvOXVaS2pDQWRsUVFtaWJnNW9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85YWUyMjEtYzEwMS00OTdmLTkxZmUtNTA4MDk5YzEzM2Ji
LzEvaDNxdE1IclRNT3U0ejBUc0lUaWFGd1EyX1ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ4bMA0G
CSqGSIb3DQEBCwUAA4IBAQAP4rUDwlO8ks/3stlJWPIKHgjRxAbuoVf/wOruQtcK
hY20tOri9TyH7V+B9dy/R28xF1JZf16DvgAOPr6CwubB8/2X6hUs278T4dqS/xS7
9QRUi+zoKopcazK1t4uMvdAmqk9OhR4c+eaR3IzDoy7LxpsDs5rQNOPLnkCDlR2F
DVJgrmh4Yop5lgsvYTPpndIqOFX8HmmVmNrmwwuFqGExgiPb5qf6vin6HpfgTVOG
GN5a6wMRj33KKsfHvX0ONZMdR7F/IwdqpMS9yvj376s1bADgkuxDI2tyTSdpda3l
Q8ZUPmlq8tx00xU8OikD8B519Qtz94wLcOJ3t5Clafct
-----END CERTIFICATE-----
Generated at Wed May 13 02:40:42 2026 by rpki-client