Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/cGtwdpfhHL2EdldtoWcE3kBi6Uc.roa
File: cGtwdpfhHL2EdldtoWcE3kBi6Uc.roa (raw, json)
Hash identifier: FuV6xrO/bK9VTcoP0tR4LEc8Me8SXVxqt9OJJrzA7XA=
Subject key identifier: 70:6B:70:76:97:E1:1C:BD:84:76:57:6D:A1:67:04:DE:40:62:E9:47
Certificate issuer: /CN=a8691eb2c3edef276e50b10ac46705ff3d06f2ce
Certificate serial: 019F23687579B9375A91E097F3DA964A1D28
Authority key identifier: A8:69:1E:B2:C3:ED:EF:27:6E:50:B1:0A:C4:67:05:FF:3D:06:F2:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/cGtwdpfhHL2EdldtoWcE3kBi6Uc.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208346
IP address blocks: 217.198.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:75:79:b9:37:5a:91:e0:97:f3:da:96:4a:1d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8691eb2c3edef276e50b10ac46705ff3d06f2ce
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=706b707697e11cbd8476576da16704de4062e947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:ed:32:0e:75:8b:70:2f:c5:4a:d3:2d:8e:
7b:32:d5:f2:e1:98:12:60:54:ab:b1:6a:40:1b:be:
dd:87:87:12:a1:26:6c:58:e6:ec:42:a0:4d:64:63:
45:b3:52:82:7f:40:5d:54:ad:40:c1:c8:1f:26:a5:
00:97:42:3a:d8:31:d9:f2:dc:d0:28:34:ef:69:30:
d0:68:e9:7f:9c:85:e9:b7:32:da:8d:cd:cb:8a:a6:
48:5b:8f:e8:0a:ad:f7:4b:1f:7c:34:a1:9a:c8:ac:
25:ef:e6:3b:70:c4:2d:b5:7b:43:76:d3:62:e9:9e:
c6:f2:1e:1c:81:00:b2:b1:ef:cf:c0:38:aa:91:f9:
85:67:31:9a:ab:5c:41:c6:fd:a0:ba:12:3a:45:8b:
a2:83:40:7a:2f:5c:8d:d5:40:c5:32:4a:19:e3:86:
11:c1:be:cd:54:e4:6e:a6:42:d7:92:15:6c:44:78:
1a:72:12:eb:e0:61:f2:4b:76:bc:c6:82:d6:67:6e:
03:d4:1e:2b:08:b5:16:92:c9:51:ac:68:a7:98:c6:
1f:4c:d1:d9:69:6e:e9:73:b6:3e:9c:0e:32:23:81:
9f:3a:95:c5:21:bc:8d:1a:16:57:2e:d2:c1:b0:53:
17:5e:6e:72:66:65:ec:97:08:8e:c0:34:85:a5:16:
2c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:70:76:97:E1:1C:BD:84:76:57:6D:A1:67:04:DE:40:62:E9:47
X509v3 Authority Key Identifier:
keyid:A8:69:1E:B2:C3:ED:EF:27:6E:50:B1:0A:C4:67:05:FF:3D:06:F2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/cGtwdpfhHL2EdldtoWcE3kBi6Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.186.0/24
Signature Algorithm: sha256WithRSAEncryption
23:31:b0:35:82:c3:72:7d:04:05:45:10:a4:8e:46:58:98:8a:
54:24:03:e3:d3:58:3c:41:fc:17:4b:e3:b0:39:fe:8a:98:31:
62:2b:e2:8f:0c:8f:48:88:ac:4d:ed:bf:8c:33:65:a0:f7:b6:
31:0a:a8:a4:e2:52:8b:41:04:d6:1b:35:7d:25:c4:f7:47:b4:
7e:2e:e0:d5:77:dd:98:38:9a:df:7b:4a:f8:13:2c:12:6a:9f:
05:cd:14:18:51:da:aa:ea:9c:f4:a7:fe:e4:ac:55:f3:ff:41:
2e:4c:3a:80:cc:86:f9:55:64:99:77:7e:cd:36:36:13:3d:5e:
c2:02:b9:1f:85:dd:5e:79:9f:cc:3a:af:0b:8d:56:7a:8a:72:
c9:32:ca:68:05:b3:e3:50:c3:98:e7:1b:9e:52:20:45:c6:ce:
e9:f1:99:b2:1a:4d:d2:bd:6f:df:7f:13:7b:d0:8f:0b:2d:5a:
1a:b3:34:87:38:9b:40:53:84:70:78:b4:16:29:96:08:1b:4e:
d3:fc:1b:33:50:73:d1:23:9d:f7:6a:fb:41:e2:a0:72:97:64:
85:ee:6a:c7:9e:d0:56:e8:59:db:90:1a:5d:bb:e3:41:7d:a6:
0b:09:9d:05:8d:0d:49:75:f3:ee:6b:11:a4:53:4c:a2:90:52:
1e:5e:87:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:23:29 2026 by rpki-client