Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/G1XLMo6ZuoyNI2cfPi3LgkELQrg.roa
File: G1XLMo6ZuoyNI2cfPi3LgkELQrg.roa (raw, json)
Hash identifier: v6XhkbNrVATpB1M40yqZVqm5IuVIDVG88573h2di5KA=
Subject key identifier: 1B:55:CB:32:8E:99:BA:8C:8D:23:67:1F:3E:2D:CB:82:41:0B:42:B8
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019F890348D0BA77BCCBA3CFCA11CF18C573
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/G1XLMo6ZuoyNI2cfPi3LgkELQrg.roa
Signing time: Wed 22 Jul 2026 08:48:41 +0000
ROA not before: Wed 22 Jul 2026 08:48:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154321
IP address blocks: 191.40.32.0/21 maxlen: 24
191.40.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:03:48:d0:ba:77:bc:cb:a3:cf:ca:11:cf:18:c5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Jul 22 08:48:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b55cb328e99ba8c8d23671f3e2dcb82410b42b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:d4:22:0a:a5:0a:85:0b:c2:dd:11:09:0c:
8b:27:c6:bb:d3:91:36:f2:3d:96:5c:06:ab:fe:9d:
3f:8b:bd:15:3e:30:de:ed:ca:a7:0c:24:44:a4:70:
fc:e3:d5:60:92:e2:73:db:11:ee:c8:69:f6:16:76:
a5:2e:93:5d:e6:7c:d8:9a:c1:6c:d5:9c:00:39:e0:
6e:1e:4e:b0:06:28:89:4f:3a:30:f3:32:13:51:71:
c3:06:93:ba:ba:05:04:5c:43:c2:ae:d6:34:49:5b:
e8:9a:cf:2f:a3:c4:a5:59:02:90:b6:fb:a8:ca:f3:
fb:64:7c:cd:84:b5:e3:b9:ec:1d:cb:fa:29:1d:6b:
3d:08:b6:9b:7c:03:81:a6:e8:ed:ee:da:c1:e3:bd:
4c:72:36:66:9b:fa:ef:e7:70:b4:68:a3:3a:1a:78:
84:06:3a:6e:14:97:55:fb:22:e1:c7:f7:62:ff:0a:
53:51:23:07:9a:0a:7a:1e:db:18:d9:97:34:7e:c1:
98:e0:e3:10:01:a6:6e:a1:11:9c:83:62:74:71:7f:
df:6e:af:d8:63:15:7e:d8:b4:17:0a:61:df:71:ca:
55:4f:2c:4e:b6:ca:21:89:7c:cb:3a:e8:b8:5e:ce:
25:fc:64:a1:b2:14:01:ca:5a:4e:bb:c9:f6:62:ab:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:55:CB:32:8E:99:BA:8C:8D:23:67:1F:3E:2D:CB:82:41:0B:42:B8
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/G1XLMo6ZuoyNI2cfPi3LgkELQrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.40.32.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:1e:8d:bd:b9:37:5c:63:b0:e9:bf:9f:5d:fc:33:9f:55:1a:
77:ea:17:6e:62:b0:5e:0f:dd:84:eb:89:f3:e6:16:ef:37:fe:
45:36:cd:a0:ab:36:b2:43:bc:f3:e8:32:c0:5c:9e:2c:fd:18:
bc:48:06:7e:a5:27:03:d0:bf:2d:a6:fb:07:55:d5:67:62:cc:
dd:b1:b4:70:db:9b:bf:94:b2:1f:ec:01:e5:cb:0c:6d:8d:93:
05:c0:a5:75:34:0a:a0:eb:35:2d:7f:86:41:8e:ff:35:7a:ea:
15:78:65:b9:90:88:66:f2:e1:a8:98:37:9a:c5:9d:80:26:bc:
04:42:fe:69:e6:da:29:02:b9:42:41:c2:41:70:89:c8:fb:95:
ee:f6:6b:7b:03:96:b3:09:eb:31:b6:b4:24:05:80:7d:af:fd:
7d:3f:85:ea:ee:df:4e:89:e0:aa:de:70:a4:bf:1f:80:c7:83:
a0:fd:54:21:76:9a:d4:46:28:d1:44:62:de:cc:10:70:66:eb:
f6:09:14:85:10:aa:ad:2a:93:b8:57:5c:c8:9a:85:d6:78:80:
77:fd:95:c6:85:56:70:7f:c0:f7:09:df:c5:1b:22:d8:de:20:
36:f8:e2:d7:9a:80:7f:c9:de:58:04:e0:b1:d0:34:e8:0d:31:
69:00:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:52 2026 by rpki-client