Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/GkVwWwc0MLTA3E7CoHPkKApx1q8.roa
File: GkVwWwc0MLTA3E7CoHPkKApx1q8.roa (raw, json)
Hash identifier: lycBTupsKZcvpxAb5ozHJMATwTw5l6vtI0v9Zg8asrQ=
Subject key identifier: 1A:45:70:5B:07:34:30:B4:C0:DC:4E:C2:A0:73:E4:28:0A:71:D6:AF
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019F8FA9BF7DC0C457DFA1821719C2CEB18A
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/GkVwWwc0MLTA3E7CoHPkKApx1q8.roa
Signing time: Thu 23 Jul 2026 15:48:14 +0000
ROA not before: Thu 23 Jul 2026 15:48:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210464
IP address blocks: 2a10:fa81:b00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:a9:bf:7d:c0:c4:57:df:a1:82:17:19:c2:ce:b1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 23 15:48:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a45705b073430b4c0dc4ec2a073e4280a71d6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:7a:39:c7:20:64:3d:fd:86:84:2a:11:a2:
80:03:ce:b2:e8:e4:85:04:11:2e:e1:e8:e8:eb:5b:
fe:14:e5:7c:56:8e:a7:06:e1:f0:71:cb:59:d7:84:
9f:d5:94:b5:20:3f:88:a6:71:cd:bb:ae:5a:e7:e8:
b5:5f:45:7a:7e:e7:65:e0:f1:0a:64:be:75:c2:a5:
4e:35:69:65:56:cf:ce:58:c1:f1:89:1a:03:bf:c3:
2e:86:e0:e7:ac:fd:68:b6:48:2c:06:e0:ae:28:a4:
d1:1d:b3:7e:2e:ed:04:0c:e3:e1:e0:c9:ee:45:2b:
4d:4e:41:0d:14:34:67:69:10:69:1a:ce:81:a9:df:
8f:85:c2:13:e7:68:eb:1c:0b:d7:0c:1e:12:ab:5b:
c2:66:32:9c:60:e6:4a:f9:e8:f3:2f:46:ec:c8:90:
aa:8f:00:71:aa:ee:f4:9a:71:8d:18:9c:fe:20:b0:
ee:7f:2a:02:40:ea:78:be:67:df:11:36:1c:b6:93:
85:05:37:bb:9f:f8:40:29:6c:76:9e:7f:a3:59:34:
75:69:e1:34:29:7c:68:24:ae:1a:a1:49:84:0f:ec:
93:8f:a5:46:a7:6e:dc:c2:74:44:49:48:0a:1f:71:
65:0f:10:25:84:0c:44:d0:9c:0d:67:6f:8f:c5:f2:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:45:70:5B:07:34:30:B4:C0:DC:4E:C2:A0:73:E4:28:0A:71:D6:AF
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/GkVwWwc0MLTA3E7CoHPkKApx1q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:b00::/40
Signature Algorithm: sha256WithRSAEncryption
78:bc:4b:e1:00:4b:f0:7a:ce:c0:cd:24:d2:15:ae:7d:04:86:
c2:d3:59:fe:2e:1a:7c:e1:15:9c:f0:2c:b0:97:75:32:10:25:
e1:af:bc:60:1c:48:f5:46:5e:6e:d7:96:87:ba:01:3b:9b:1a:
98:a5:4c:e8:3b:45:43:b7:2b:3c:bd:e5:dd:70:0e:3c:d7:b1:
25:63:06:e2:2f:ad:e1:e1:f4:83:1f:9e:4b:30:54:41:e6:4d:
da:27:aa:94:41:18:e5:03:ce:b2:fb:85:df:96:0a:59:60:dc:
7e:cb:56:dc:33:97:3c:e5:4f:71:d3:29:23:ab:cb:fd:5c:66:
4a:5d:f9:cf:a7:8f:ed:d6:3e:68:82:cd:eb:07:93:39:9f:a0:
6a:c9:e0:69:74:b0:31:ab:3b:b3:8a:3f:61:86:fc:0a:89:af:
7d:d5:c0:01:c4:6c:eb:1e:d6:8e:c3:55:18:45:77:e1:c6:c5:
07:95:01:8a:48:44:ea:9b:4e:70:a5:46:96:04:20:0d:70:5a:
fa:fb:dd:b0:f4:5e:6b:29:63:6f:63:98:75:f0:7f:d8:47:be:
d1:2a:6f:6f:ea:dd:c0:86:b3:fa:1b:1b:4f:01:1a:11:48:52:
b4:10:5a:5b:71:11:f1:4a:d6:a8:02:4e:69:e7:8d:5d:85:06:
9d:42:d9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:06 2026 by rpki-client