Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/GjzJfP5IkOGcN3HKe054p3wSXqM.roa
File: GjzJfP5IkOGcN3HKe054p3wSXqM.roa (raw, json)
Hash identifier: xXrOlEKdLDP+yenBmYi9D4dXR36vksCAml0XooBUFaY=
Subject key identifier: 1A:3C:C9:7C:FE:48:90:E1:9C:37:71:CA:7B:4E:78:A7:7C:12:5E:A3
Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial: 019F1C92B1A41E42EC1166F9099637D92440
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/GjzJfP5IkOGcN3HKe054p3wSXqM.roa
Signing time: Wed 01 Jul 2026 07:26:43 +0000
ROA not before: Wed 01 Jul 2026 07:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50833
IP address blocks: 45.159.110.0/23 maxlen: 23
45.159.110.0/24 maxlen: 24
91.224.59.0/24 maxlen: 24
146.255.24.0/21 maxlen: 21
193.150.128.0/20 maxlen: 20
193.150.129.0/24 maxlen: 24
193.150.144.0/21 maxlen: 21
2001:7f8:f6::/48 maxlen: 48
2a02:5e80:2::/48 maxlen: 48
2a10:24c0::/32 maxlen: 32
2a10:24c0:272::/48 maxlen: 48
2a10:24c0:6c2::/48 maxlen: 48
2a10:24c0:ad1b::/48 maxlen: 48
2a10:24c0:ada1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:92:b1:a4:1e:42:ec:11:66:f9:09:96:37:d9:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Validity
Not Before: Jul 1 07:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a3cc97cfe4890e19c3771ca7b4e78a77c125ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:cb:32:87:ee:ac:c1:2b:31:1b:7e:61:d8:
d6:89:72:b6:0e:b8:0e:52:cd:29:91:42:0f:e7:9d:
52:76:ff:a5:fe:1f:ab:6c:a7:95:ef:8a:ec:67:36:
e7:ee:25:07:47:09:46:63:ba:20:db:61:05:19:9e:
eb:9d:90:62:74:93:a8:a4:7a:36:b4:89:e0:7a:b9:
1a:8f:63:8d:5b:1a:7a:6a:82:37:4a:61:e1:3d:d7:
34:a3:47:70:00:24:39:4d:bb:dc:72:52:6c:08:82:
15:a9:f7:c4:41:d6:7a:d6:18:80:f8:e1:b3:c5:9b:
37:77:57:cd:52:3f:ce:dd:fc:f7:dd:8c:43:41:22:
aa:82:cb:c2:71:c6:68:50:54:b7:31:ad:c8:97:cc:
81:11:35:bd:3a:b7:90:e1:16:f3:7b:29:63:16:ea:
3f:2f:a2:45:d6:b0:e5:d7:63:b0:55:f6:7b:b6:32:
ee:77:c0:8c:fb:30:04:9f:5a:cc:3b:32:36:6e:76:
84:bd:f8:c4:65:a0:fe:07:5c:86:62:73:fc:88:b3:
10:68:97:80:b6:ff:c3:03:f9:f6:e9:e7:e1:b0:64:
ec:58:82:0f:17:5f:1b:65:3e:44:00:68:1f:c1:d6:
cf:6d:9a:c1:cc:aa:e5:d1:29:bf:47:59:00:c1:ef:
9c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3C:C9:7C:FE:48:90:E1:9C:37:71:CA:7B:4E:78:A7:7C:12:5E:A3
X509v3 Authority Key Identifier:
keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/GjzJfP5IkOGcN3HKe054p3wSXqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.110.0/23
91.224.59.0/24
146.255.24.0/21
193.150.128.0-193.150.151.255
IPv6:
2001:7f8:f6::/48
2a02:5e80:2::/48
2a10:24c0::/32
Signature Algorithm: sha256WithRSAEncryption
89:17:5b:8a:98:e5:bb:28:b0:98:6f:b6:15:0a:62:21:90:cf:
48:e3:96:ae:42:63:c7:22:dd:f7:b2:23:8a:90:af:06:f1:5d:
ce:23:b0:7f:eb:2e:e2:78:4c:67:96:f2:8a:cb:89:1a:24:c9:
2f:2f:18:30:c4:3f:23:97:96:93:68:e1:10:1b:82:a8:d3:8e:
d8:1f:fc:96:62:e3:06:e4:c0:96:d2:e9:fd:4f:83:69:1b:84:
b6:15:0b:92:31:5a:42:5d:f1:71:cc:f2:50:51:08:d9:60:80:
9a:ed:6d:a9:e7:04:72:52:03:72:f0:69:51:a8:96:5f:c8:0f:
07:38:28:f4:84:09:8f:2d:de:c1:e1:4d:ed:82:eb:c7:c6:77:
cf:f2:76:93:f0:56:bf:c2:fa:ec:5f:ad:80:02:c9:5b:6e:6a:
40:5b:1b:5e:fd:49:ef:fe:13:dd:21:a3:e1:7a:a6:20:0c:92:
91:92:8f:b5:1e:98:8b:e2:19:77:b9:5c:ea:a9:d5:ee:33:24:
4d:62:27:0c:5b:3e:a8:2f:be:ac:0f:ba:79:fb:89:23:2e:a4:
9d:df:6e:f2:47:31:04:5a:24:57:c2:bd:0b:62:58:a5:13:08:
18:d1:c2:d2:f9:0e:4f:91:40:bb:cf:08:a0:e9:7a:ef:43:17:
7f:d6:64:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:17 2026 by rpki-client