Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/gLxqlSarCXEOyDso_FivpIh52Rc.roa
File: gLxqlSarCXEOyDso_FivpIh52Rc.roa (raw, json)
Hash identifier: pZ8QAD5U4pxh6BlWHn/SPJwcF8QjWnbc9JIfhkNn878=
Subject key identifier: 80:BC:6A:95:26:AB:09:71:0E:C8:3B:28:FC:58:AF:A4:88:79:D9:17
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 01A1BB50F944944A004A39DE7F7FCE01C03D
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/gLxqlSarCXEOyDso_FivpIh52Rc.roa
Signing time: Sun 08 Nov 2026 13:20:08 +0000
ROA not before: Sun 08 Nov 2026 13:20:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211421
IP address blocks: 31.7.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bb:50:f9:44:94:4a:00:4a:39:de:7f:7f:ce:01:c0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Nov 8 13:20:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80bc6a9526ab09710ec83b28fc58afa48879d917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1d:0b:ac:10:de:9a:52:02:80:09:84:5c:18:
73:5f:69:2f:e8:ce:1e:cb:38:26:65:6b:78:ce:6e:
bc:30:a9:3d:10:ca:55:f5:b1:2d:55:d5:03:a2:78:
5b:f4:49:77:d8:89:a1:9e:01:5a:ce:3f:70:cb:ca:
6b:cb:42:8d:50:9a:ad:1b:b6:d3:2a:06:7f:5d:f5:
42:2f:34:20:b7:ff:f5:a6:7d:e3:36:28:a3:f5:92:
c9:9c:4d:d7:cb:e6:38:2c:c7:d0:08:bb:60:9e:6a:
56:4e:5d:ff:54:b3:79:60:9b:e1:ae:ef:0f:95:ce:
02:4c:09:8a:fe:43:73:46:36:01:5a:9f:9e:f7:b6:
91:47:ff:3c:8b:b7:50:4a:9d:ec:b7:6f:5d:e5:34:
7f:fa:61:66:ce:13:a9:e1:9f:98:ff:49:9d:41:ed:
7f:a5:c7:80:eb:85:cd:33:01:bc:5f:8f:d5:55:fa:
fb:6c:e5:cc:b1:d3:5a:7d:c4:f0:f6:a7:21:f6:8d:
17:59:16:dc:92:ba:20:1c:1b:ad:f9:db:0f:99:f3:
18:79:2f:a7:1c:39:b1:af:1f:17:22:32:66:a7:39:
9c:3c:9d:ef:08:a8:71:03:67:11:72:10:24:8c:66:
49:0e:d6:f2:ca:b8:6e:93:50:b9:61:d8:9a:ff:fe:
a4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BC:6A:95:26:AB:09:71:0E:C8:3B:28:FC:58:AF:A4:88:79:D9:17
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/gLxqlSarCXEOyDso_FivpIh52Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:45:78:0a:61:d8:c0:61:0b:fb:31:40:2e:de:b6:88:44:40:
2f:e1:9b:5d:b1:7f:da:40:d8:b5:8e:22:72:e5:df:ee:b5:3a:
37:0e:df:aa:20:18:1f:ef:ac:ab:a4:99:0e:be:9c:87:83:4d:
0f:b1:9b:6a:8f:a3:65:5e:dd:ba:e4:da:ac:fe:58:69:68:8b:
b8:55:57:53:d7:11:22:22:ab:aa:b8:70:16:c4:73:69:7d:86:
85:f8:98:51:1a:9e:c1:4e:4a:c5:9a:0e:97:64:ee:42:6b:d0:
7c:6f:81:f8:0e:fd:dd:f1:d9:af:d0:8d:88:73:c1:2b:42:8f:
bf:ca:e2:b4:02:0b:a9:23:57:1d:48:e3:7d:f4:68:28:35:b9:
29:7c:91:c1:fe:9c:22:75:bd:e2:bc:55:98:db:77:8c:c3:74:
fe:8b:f3:4f:fb:d7:c8:72:32:02:da:3f:fb:76:43:31:65:71:
42:a7:e5:84:86:4b:64:68:89:62:a2:52:32:93:d2:b9:55:17:
d5:91:bd:ba:b4:d7:95:cd:98:45:1f:8a:43:2b:81:a5:44:7c:
d2:03:4e:19:0b:8a:b7:5d:23:8c:5e:53:4b:f9:f2:4f:85:b3:
2c:22:d3:7d:63:25:d7:d4:b8:49:ed:68:37:63:97:72:6e:23:
df:13:44:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:09:52 2026 by rpki-client