Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GlCr1W3EnymuKKragWpg6fr_LeI.roa
File: GlCr1W3EnymuKKragWpg6fr_LeI.roa (raw, json)
Hash identifier: RPzMPiep4NnYyMpNwS5+6E98lIAFuQoI2xnGTMwGFyk=
Subject key identifier: 1A:50:AB:D5:6D:C4:9F:29:AE:28:AA:DA:81:6A:60:E9:FA:FF:2D:E2
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8097BB09B91E459DB478BD1A78F7FF93
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GlCr1W3EnymuKKragWpg6fr_LeI.roa
Signing time: Mon 20 Jul 2026 17:34:15 +0000
ROA not before: Mon 20 Jul 2026 17:34:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 2.26.152.0/24 maxlen: 24
2.27.152.0/24 maxlen: 24
13.143.108.0/23 maxlen: 24
13.143.112.0/23 maxlen: 24
13.143.120.0/24 maxlen: 24
13.143.123.0/24 maxlen: 24
13.143.125.0/24 maxlen: 24
13.143.127.0/24 maxlen: 24
31.77.231.0/24 maxlen: 24
31.77.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:97:bb:09:b9:1e:45:9d:b4:78:bd:1a:78:f7:ff:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 20 17:34:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a50abd56dc49f29ae28aada816a60e9faff2de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3b:fa:70:24:5d:2b:ea:c2:96:0a:bd:0b:84:
43:73:fd:7c:93:cd:a6:48:7a:a5:aa:2f:3d:2d:26:
37:e1:a1:91:41:41:9c:9a:9e:49:0d:53:ca:0a:2e:
df:46:44:fa:14:66:62:01:b0:aa:ba:c8:1c:3c:6c:
ef:6c:5f:1d:e2:e6:cb:a4:69:53:c3:8e:93:ac:dd:
b1:64:1e:02:82:91:2d:fc:fc:05:98:47:5d:1a:e7:
09:02:1b:ed:d1:74:b3:7b:ca:8e:85:44:29:ea:33:
5b:55:05:54:37:90:d6:cd:eb:3f:13:d5:15:ce:79:
af:a4:5f:b6:55:43:e5:27:b1:f6:15:95:65:68:20:
ab:1b:f1:c4:fc:82:0f:46:e2:3c:b0:ad:eb:a4:68:
80:cb:ef:ed:73:2c:d8:c9:06:66:da:54:a5:67:00:
c0:31:d3:83:36:6d:5b:79:cd:11:b8:b8:64:2e:8f:
35:74:4d:ea:b1:fb:0d:3d:5a:44:6a:59:18:b7:42:
87:1f:b9:9e:7a:ba:0a:3e:e8:9a:4e:cf:a5:4a:18:
9b:2c:85:6a:76:48:75:78:c5:8c:66:20:77:2a:14:
7b:c9:21:b8:eb:fa:73:9d:49:bd:31:e3:1f:e2:6f:
6d:31:1d:9e:04:9d:23:39:0c:79:a6:f3:c1:0b:cc:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:50:AB:D5:6D:C4:9F:29:AE:28:AA:DA:81:6A:60:E9:FA:FF:2D:E2
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GlCr1W3EnymuKKragWpg6fr_LeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.152.0/24
2.27.152.0/24
13.143.108.0/23
13.143.112.0/23
13.143.120.0/24
13.143.123.0/24
13.143.125.0/24
13.143.127.0/24
31.77.231.0/24
31.77.233.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8a:d2:3d:39:1d:5b:a7:71:cd:ee:b1:5f:d8:4a:da:e1:87:
82:89:31:d7:23:ce:71:ff:45:14:46:c0:1b:a3:c8:e9:c1:e0:
ee:ae:f9:42:03:0e:1e:3d:a6:a0:e4:90:e8:90:78:15:36:a3:
b8:80:b8:b1:8c:b9:db:38:df:fa:18:d0:aa:59:c6:d3:f7:b3:
d6:c3:51:28:b5:e3:1a:2b:2c:62:ae:a8:98:8e:3e:a2:35:1a:
07:fb:2c:b2:35:f2:9d:7c:74:f7:98:3e:b3:28:86:4b:fd:bb:
63:67:50:bd:ca:4b:15:b7:af:54:a8:29:12:e4:ed:b2:06:cd:
56:97:c2:26:8b:6a:18:ad:28:7a:bc:26:3b:a7:0e:8d:1f:ad:
3e:75:5b:b7:0d:06:5e:b8:85:63:e2:d3:92:fb:3e:9f:04:a6:
e6:85:60:49:0f:b2:52:13:98:c8:f0:9d:ad:bf:2a:ad:b2:f2:
1e:e9:d8:8d:a8:10:c2:09:0e:e5:2f:a4:ed:70:b9:e6:2c:05:
16:b6:a2:c1:89:ae:6c:80:07:f3:d2:d1:de:9d:df:44:ef:42:
46:3d:be:76:fc:9f:21:13:af:2f:3b:48:01:65:fd:3b:1b:6d:
b9:fd:6e:88:11:4b:ed:5e:8d:98:84:a3:4d:b0:f0:e1:99:e9:
8d:b8:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:21 2026 by rpki-client