Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/GKUTqwBP_GupgX8i_14DMKSPOFw.roa
File: GKUTqwBP_GupgX8i_14DMKSPOFw.roa (raw, json)
Hash identifier: tKZerLyqA3hhZTFh/tNFaqmbnlhdZTcyoiS51E8G/N0=
Subject key identifier: 18:A5:13:AB:00:4F:FC:6B:A9:81:7F:22:FF:5E:03:30:A4:8F:38:5C
Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial: 019DC3CED9F828599588A88FE41849D777C5
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/GKUTqwBP_GupgX8i_14DMKSPOFw.roa
Signing time: Sat 25 Apr 2026 08:43:26 +0000
ROA not before: Sat 25 Apr 2026 08:43:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13879
IP address blocks: 89.147.32.0/23 maxlen: 23
89.147.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c3:ce:d9:f8:28:59:95:88:a8:8f:e4:18:49:d7:77:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Validity
Not Before: Apr 25 08:43:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18a513ab004ffc6ba9817f22ff5e0330a48f385c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2f:bc:ed:c7:f4:d3:fe:65:3e:fc:18:93:02:
0a:8e:9e:25:42:5a:d8:40:5a:12:2c:a2:09:44:00:
98:5f:d1:d9:36:2e:5e:75:d0:be:b6:1f:ad:c0:d9:
7a:45:e6:c1:de:aa:5d:50:a6:76:92:c0:4c:2a:05:
e4:19:31:6b:90:a1:8c:ff:1f:55:a1:94:fb:0e:7e:
75:0a:4d:0a:ff:28:dd:9e:6a:87:5c:f4:79:b2:a5:
1b:e4:f6:38:5f:f5:30:6d:53:72:28:69:a2:af:2c:
74:2d:a6:80:eb:94:80:ad:7c:09:84:68:5d:62:de:
fd:0e:4a:a9:13:b1:ef:a9:da:7f:b3:6a:f1:95:91:
6b:d4:5a:c7:46:5e:89:48:d0:79:8d:91:9b:65:f0:
24:d2:e9:67:62:48:04:37:39:48:00:e5:7e:79:93:
40:32:14:f2:55:72:4a:d5:4a:32:b7:b1:ae:e0:61:
a8:bd:22:76:ea:9d:52:a2:70:fa:c0:b2:aa:a8:ec:
a7:8d:d4:f0:9b:37:94:2c:a1:df:44:4f:f9:e7:3c:
47:25:a3:b7:c8:aa:1a:4d:f7:16:b1:a4:12:28:16:
27:f8:87:d2:86:b2:4b:8d:97:78:35:c9:4d:81:31:
89:c3:a3:47:06:ec:05:05:b7:1e:5d:63:bf:e7:a9:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A5:13:AB:00:4F:FC:6B:A9:81:7F:22:FF:5E:03:30:A4:8F:38:5C
X509v3 Authority Key Identifier:
keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/GKUTqwBP_GupgX8i_14DMKSPOFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.32.0-89.147.34.255
Signature Algorithm: sha256WithRSAEncryption
33:d1:4d:c6:f8:d3:3b:cd:b2:dd:b0:10:ef:e2:8a:b6:59:24:
e2:e8:65:ae:eb:7f:74:b0:2a:5c:cf:96:a0:11:79:1c:2a:92:
3e:bb:c8:ec:c9:01:f3:98:26:0a:f5:f8:fb:74:6f:f5:76:67:
d2:d5:83:16:4a:0d:37:45:a7:ac:2c:b0:ba:01:4b:32:e3:96:
20:9b:e0:9b:98:ea:a0:41:1d:d2:f1:32:69:48:11:17:bb:d2:
96:e0:74:66:db:4a:7d:33:b6:a1:33:b5:f7:42:12:87:48:b8:
73:d2:b3:32:81:0d:6f:c8:01:e0:88:a6:1a:cd:46:52:ab:f4:
a0:cc:04:1b:56:d1:6e:1d:07:78:a7:89:9e:3f:b0:94:bd:92:
ae:ac:6d:74:6b:a5:6b:47:f7:c6:c1:e5:52:20:97:e0:e8:69:
fa:a3:e1:79:63:7b:cc:e5:e0:4e:5b:27:94:f6:18:a4:8a:56:
40:6b:11:b5:d6:3c:8f:54:5b:3a:5b:20:64:20:3b:1e:38:ba:
f3:37:4d:62:97:d5:5b:49:5e:42:c5:89:97:6f:5e:b6:65:d7:
f2:a4:86:a1:84:1f:ef:d7:41:9b:a1:ce:5c:71:a5:25:4c:be:
84:39:a9:d8:a1:ab:01:2b:98:e6:c7:af:97:24:8d:cc:a2:21:
2b:ac:cf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:51 2026 by rpki-client