Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/GyuAEgIFAw6BfvqrW3BHFJvD9_k.roa
File: GyuAEgIFAw6BfvqrW3BHFJvD9_k.roa (raw, json)
Hash identifier: BfKRr85K9QVCwO3BEvWIdP+vSGKt1uPIkNdAAelvY7k=
Subject key identifier: 1B:2B:80:12:02:05:03:0E:81:7E:FA:AB:5B:70:47:14:9B:C3:F7:F9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A0B000F4AB5F2A475E099D42BCF4610EE1
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/GyuAEgIFAw6BfvqrW3BHFJvD9_k.roa
Signing time: Thu 17 Sep 2026 15:34:07 +0000
ROA not before: Thu 17 Sep 2026 15:34:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61413
IP address blocks: 192.36.213.0/24 maxlen: 24
192.165.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:00:f4:ab:5f:2a:47:5e:09:9d:42:bc:f4:61:0e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 17 15:34:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b2b80120205030e817efaab5b7047149bc3f7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:75:c8:90:bb:0d:20:db:d8:7e:ed:5d:9c:
d5:4d:11:80:18:25:3d:fd:5b:45:7d:0c:a4:a5:e4:
d6:74:0b:86:67:cb:0a:cf:68:4d:e6:48:ac:66:cb:
79:cf:a6:32:19:db:0c:1c:fb:85:76:05:84:05:92:
44:ea:15:ac:9d:68:7a:e3:74:36:65:33:78:c7:ce:
43:fc:70:d5:f1:f1:a7:80:9a:93:35:b9:00:21:05:
69:1c:7e:99:5c:08:aa:05:e3:b3:20:06:97:79:29:
1c:0e:b8:57:45:63:22:5a:62:2a:f0:66:72:89:90:
01:03:1d:d3:88:0f:0e:1e:68:0f:da:5c:02:e3:11:
af:53:05:66:ac:d7:39:26:cc:b5:58:64:f4:cf:ee:
47:73:bd:a9:71:1f:85:93:c9:f5:29:ee:61:37:12:
d8:95:fe:18:f5:90:de:52:7a:28:c0:d8:fa:f0:e3:
f5:6a:72:9d:ad:d5:cc:6b:2c:27:94:ef:11:b2:43:
5f:a8:4f:50:e9:fc:60:2b:44:14:75:31:df:b2:f5:
9b:87:4d:c6:27:e6:73:35:2e:74:5b:68:78:cb:2b:
fe:29:42:a4:10:a6:e6:51:8e:ff:78:e9:34:9e:67:
a6:33:d6:80:f1:90:71:a4:18:4b:5e:b7:35:58:a3:
4c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2B:80:12:02:05:03:0E:81:7E:FA:AB:5B:70:47:14:9B:C3:F7:F9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/GyuAEgIFAw6BfvqrW3BHFJvD9_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.213.0/24
192.165.64.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d8:05:d4:a3:1a:ea:5d:ee:e6:f7:fc:bb:e1:00:7a:d2:b3:
b3:15:f8:04:1c:90:23:14:a3:1b:c5:21:a8:77:bc:94:c3:b1:
c9:36:d9:37:11:01:06:81:70:5e:00:6d:62:f2:53:28:f2:bd:
97:fe:28:26:fa:03:b8:df:83:1e:64:73:2a:f8:c5:40:a4:24:
c2:3b:d5:11:89:34:a3:4f:65:ae:2b:a1:6e:41:1c:c8:42:63:
48:b9:87:6d:d5:cc:e9:02:44:81:9c:0c:af:c0:8e:d4:04:98:
fc:ab:bf:d2:88:e2:a5:c8:62:81:e3:24:bb:6a:d5:b2:19:79:
96:fa:64:92:e3:58:e9:11:8c:51:54:a5:b5:36:cc:bf:a9:7f:
39:62:5c:76:c9:69:a2:31:ee:fb:a0:94:09:6e:74:b0:24:ca:
17:a8:d2:c1:3f:b9:0f:05:eb:0e:4b:06:f9:83:34:e6:83:df:
13:5c:0e:96:d6:7f:4e:76:fe:68:af:5a:ee:48:4f:99:bf:97:
69:ef:58:bd:9c:70:24:d8:a1:d8:40:9a:26:f7:68:2f:92:af:
cc:fc:20:36:8d:12:c3:4f:1e:b6:14:a8:18:24:d3:1b:bc:b8:
8f:a1:25:e3:b0:85:4f:71:88:7a:78:16:4d:1f:73:74:6e:cc:
b8:a1:3e:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCwAPSrXypHXgmdQrz0YQ7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwOTE3MTUzNDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjJiODAxMjAyMDUwMzBlODE3ZWZhYWI1YjcwNDcxNDliYzNmN2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBJ1yJC7DSDb2H7tXZzVTRGAGCU9
/VtFfQykpeTWdAuGZ8sKz2hN5kisZst5z6YyGdsMHPuFdgWEBZJE6hWsnWh643Q2
ZTN4x85D/HDV8fGngJqTNbkAIQVpHH6ZXAiqBeOzIAaXeSkcDrhXRWMiWmIq8GZy
iZABAx3TiA8OHmgP2lwC4xGvUwVmrNc5Jsy1WGT0z+5Hc72pcR+Fk8n1Ke5hNxLY
lf4Y9ZDeUnoowNj68OP1anKdrdXMaywnlO8RskNfqE9Q6fxgK0QUdTHfsvWbh03G
J+ZzNS50W2h4yyv+KUKkEKbmUY7/eOk0nmemM9aA8ZBxpBhLXrc1WKNMAQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBsrgBICBQMOgX76q1twRxSbw/f5MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvR3l1QUVnSUZBdzZCZnZxclczQkhGSnZEOV9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCTVAwQA
wKVAMA0GCSqGSIb3DQEBCwUAA4IBAQAa2AXUoxrqXe7m9/y74QB60rOzFfgEHJAj
FKMbxSGod7yUw7HJNtk3EQEGgXBeAG1i8lMo8r2X/igm+gO434MeZHMq+MVApCTC
O9URiTSjT2WuK6FuQRzIQmNIuYdt1czpAkSBnAyvwI7UBJj8q7/SiOKlyGKB4yS7
atWyGXmW+mSS41jpEYxRVKW1Nsy/qX85Ylx2yWmiMe77oJQJbnSwJMoXqNLBP7kP
BesOSwb5gzTmg98TXA6W1n9Odv5or1ruSE+Zv5dp71i9nHAk2KHYQJom92gvkq/M
/CA2jRLDTx62FKgYJNMbvLiPoSXjsIVPcYh6eBZNH3N0bsy4oT7U
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:26:05 2026 by rpki-client