Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/gzdL0sFbow4oKk4EDaQigF6YR8Q.roa
File: gzdL0sFbow4oKk4EDaQigF6YR8Q.roa (raw, json)
Hash identifier: 4PAEVvmW4MXMjw9QDDNLfFTVziTN0X8TybCtWVl8Bwc=
Subject key identifier: 83:37:4B:D2:C1:5B:A3:0E:28:2A:4E:04:0D:A4:22:80:5E:98:47:C4
Certificate issuer: /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial: 01A105CD1C7389A9F918E40CA0C179B4373A
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/gzdL0sFbow4oKk4EDaQigF6YR8Q.roa
Signing time: Sun 04 Oct 2026 07:24:50 +0000
ROA not before: Sun 04 Oct 2026 07:24:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56766
IP address blocks: 91.203.232.0/24 maxlen: 24
91.203.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:cd:1c:73:89:a9:f9:18:e4:0c:a0:c1:79:b4:37:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Validity
Not Before: Oct 4 07:24:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83374bd2c15ba30e282a4e040da422805e9847c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:62:a4:61:09:ff:b9:19:58:96:69:1d:27:4d:
0c:ad:0d:10:49:e6:ad:d5:d7:6a:f9:32:af:a3:cb:
9f:17:24:e6:41:28:70:5f:f7:71:b5:cc:28:b8:59:
ed:29:cc:96:61:a7:f4:6b:c3:1e:a1:09:25:92:6c:
ad:56:1a:68:cb:35:33:e9:98:b8:c8:ea:5e:54:e5:
ad:a0:ad:92:0e:76:2d:e0:e6:cc:69:9e:aa:20:f0:
5a:90:0c:16:f8:6c:2a:72:0d:25:06:4e:40:eb:f6:
af:a4:f9:1b:4b:a6:ff:de:e0:99:65:5a:7a:ee:f3:
db:7a:8e:0f:52:0f:5e:69:a4:0e:db:c3:1e:6c:5e:
47:f5:1f:10:57:f3:86:aa:12:77:0e:d1:19:8a:38:
a3:10:d8:a2:4d:5a:90:8a:7c:0e:86:12:ba:74:1a:
dc:19:50:c6:57:f4:3a:f0:9f:55:cb:0d:c4:e2:fe:
4a:9b:4f:95:c5:80:dd:15:59:dd:9e:1c:69:18:02:
d9:20:f8:e7:a9:fe:fe:86:31:8b:78:6f:e9:e2:9d:
24:98:d8:43:21:23:90:04:ea:c8:96:06:d1:8a:1e:
e8:1c:da:9c:e7:61:d2:76:e0:dc:45:f7:6f:f8:ef:
a9:0a:83:92:bb:4d:d8:21:df:c1:17:8f:9c:73:fa:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:37:4B:D2:C1:5B:A3:0E:28:2A:4E:04:0D:A4:22:80:5E:98:47:C4
X509v3 Authority Key Identifier:
keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/gzdL0sFbow4oKk4EDaQigF6YR8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.232.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:de:3b:ca:3c:cf:79:c3:26:3b:ac:ce:6b:1e:09:8d:8f:ec:
ee:38:d2:c1:79:fb:65:f6:48:f8:1c:2d:15:e5:08:90:48:c9:
3f:5b:85:0c:63:7d:0b:2d:f6:75:02:0d:8b:84:2a:cd:e1:0d:
30:a2:69:10:d7:3a:9a:a0:c1:c2:05:92:82:59:4a:20:6b:4a:
17:cb:0e:2d:f4:cc:db:f9:51:f0:49:9c:e3:49:de:c4:59:2e:
4f:dc:3c:95:5e:af:be:3e:ed:38:3e:c2:3f:98:8b:5a:4f:cb:
04:8e:7b:fc:1e:1e:9e:ef:22:9d:db:ed:5a:bb:e1:5d:f2:7e:
10:51:45:b3:bb:58:a8:f0:b7:f8:70:e6:22:a1:83:48:b8:e2:
97:47:9a:a5:1a:1f:93:68:c0:fd:df:ae:8d:b5:ff:2c:86:8a:
7c:4c:20:71:19:31:ed:82:5d:22:ac:a3:35:ad:75:4b:e9:62:
3f:6b:93:d5:f4:a6:6c:c2:4a:02:5d:cf:fe:3f:81:80:41:ca:
07:24:b0:07:99:d6:aa:e4:97:8d:26:4d:6e:3d:d0:a8:f3:bf:
dc:31:c0:1b:0b:a6:17:48:be:d7:02:79:93:34:17:7c:a0:e9:
f8:3e:25:27:83:20:45:39:8d:20:ed:94:a7:bb:a7:71:71:da:
bc:eb:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:41:05 2026 by rpki-client