Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/GpPbNoyLVyrmQ4b8e1AhKTzfuOg.roa
File: GpPbNoyLVyrmQ4b8e1AhKTzfuOg.roa (raw, json)
Hash identifier: ghZh7XoU09TtPH2tIcN1D5InXaZeImBLFNLb0RMUPhs=
Subject key identifier: 1A:93:DB:36:8C:8B:57:2A:E6:43:86:FC:7B:50:21:29:3C:DF:B8:E8
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019F1DBFE7205281BED812824AD0FBF8D772
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/GpPbNoyLVyrmQ4b8e1AhKTzfuOg.roa
Signing time: Wed 01 Jul 2026 12:55:43 +0000
ROA not before: Wed 01 Jul 2026 12:55:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202468
IP address blocks: 37.32.36.0/22 maxlen: 24
45.140.228.0/22 maxlen: 24
45.156.180.0/22 maxlen: 24
45.156.192.0/22 maxlen: 24
85.198.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:bf:e7:20:52:81:be:d8:12:82:4a:d0:fb:f8:d7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jul 1 12:55:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a93db368c8b572ae64386fc7b5021293cdfb8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:f3:c4:08:f8:ad:da:63:d6:18:c1:ea:ad:
49:0b:5c:ae:36:1a:fd:e3:02:14:be:89:e3:a6:97:
0f:5a:39:d9:75:07:e8:d2:43:39:ea:e6:9e:d8:ea:
e0:c8:e8:2e:73:66:3c:18:ae:91:8e:6b:6e:46:4f:
dc:45:1e:80:ff:e4:d3:e6:23:4c:9b:b4:38:dc:91:
4f:57:d9:bb:0b:35:04:54:a4:ad:0c:cf:a8:d5:a9:
4f:b6:70:21:0c:05:65:04:62:bc:87:6e:53:7e:0b:
45:f9:50:7d:03:41:02:a2:f5:e3:04:ff:c7:6d:d6:
d9:30:73:f1:14:fb:bb:10:20:fe:14:ba:72:91:7f:
50:9c:be:88:04:28:96:fc:04:7e:4a:de:04:46:df:
9c:c3:fd:4a:36:d6:39:3d:3d:da:ea:70:2e:11:40:
ee:3e:09:0e:93:bb:81:c4:58:f0:33:04:42:83:de:
53:e0:d5:d0:bd:af:04:ff:3a:69:44:e6:71:46:cb:
c9:9e:bd:52:17:06:33:c4:4b:06:fa:8d:30:62:52:
ba:b1:83:d6:35:ad:18:b3:02:a0:96:2f:30:9c:77:
79:8a:ab:85:df:b4:29:2c:1a:6d:37:01:d8:fe:e0:
cf:d2:07:a4:4c:ec:27:e3:b8:9e:eb:ee:29:da:72:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:93:DB:36:8C:8B:57:2A:E6:43:86:FC:7B:50:21:29:3C:DF:B8:E8
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/GpPbNoyLVyrmQ4b8e1AhKTzfuOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.36.0/22
45.140.228.0/22
45.156.180.0/22
45.156.192.0/22
85.198.48.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:c0:41:7e:d4:36:b5:2b:41:b7:fb:53:47:fc:b2:83:23:0f:
a0:44:b9:db:0e:cd:c0:1e:b4:39:60:9f:64:31:80:c3:0d:79:
2b:46:7f:04:de:6c:59:db:4d:b0:1c:ea:bf:00:c5:62:bc:8f:
ae:01:e8:4d:84:82:e9:e2:71:5f:1e:99:d1:e4:ec:05:0e:5b:
cf:3f:b2:09:44:fe:c2:8f:97:d0:11:3d:e3:dc:68:a7:a3:d9:
a1:41:78:d2:b9:a9:b5:14:19:c3:b0:c6:bf:9b:0a:5b:f4:5b:
a8:90:11:b8:aa:0e:1b:22:46:1f:84:b9:c1:f9:f7:54:6c:c8:
f6:a9:bb:91:be:b9:3c:ec:e9:e2:81:db:f2:84:74:74:2b:c3:
d5:6a:f9:65:8f:bc:02:36:ef:f8:a0:e9:cd:1b:a2:58:6a:88:
00:b2:dc:7b:e1:a7:c2:f7:21:95:ad:7f:19:b7:8a:d9:14:d1:
1d:11:2b:48:37:16:da:72:e9:0c:f3:cc:9b:88:4e:9b:98:40:
67:94:cb:01:f3:3f:82:99:24:b3:95:51:7a:4d:93:0d:b2:f9:
2c:3f:8e:59:e7:bf:f8:fe:44:d5:27:1b:a9:75:25:a1:d4:1a:
25:a6:c1:b5:e6:4c:97:b1:c0:0f:5b:ca:1b:9d:20:a7:61:fa:
3f:59:14:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:22 2026 by rpki-client