Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/Gjl2RpEwdOS5o6zJf8wpdh1hzU8.roa
File: Gjl2RpEwdOS5o6zJf8wpdh1hzU8.roa (raw, json)
Hash identifier: jYEPrUYBib8AqNU7rjlO4YMohxNp1Tb65NhyewGt9eQ=
Subject key identifier: 1A:39:76:46:91:30:74:E4:B9:A3:AC:C9:7F:CC:29:76:1D:61:CD:4F
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 01A018ACB86B905721ED7F585E559E17A16E
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/Gjl2RpEwdOS5o6zJf8wpdh1hzU8.roa
Signing time: Wed 19 Aug 2026 06:19:27 +0000
ROA not before: Wed 19 Aug 2026 06:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8544
IP address blocks: 185.42.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:ac:b8:6b:90:57:21:ed:7f:58:5e:55:9e:17:a1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Aug 19 06:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a397646913074e4b9a3acc97fcc29761d61cd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:9d:3c:b4:7e:b1:68:79:f4:a9:50:64:49:
a4:69:78:97:c7:5f:a8:3e:aa:bc:30:eb:4c:61:f4:
58:0c:32:3d:7c:1d:c0:5f:3d:77:04:06:b9:fe:95:
77:b3:be:83:d3:8d:f4:8d:ec:05:05:de:ab:b7:fb:
3e:20:61:36:58:c6:08:48:ee:84:2d:c0:eb:43:11:
b2:64:2c:f2:54:c1:85:1c:24:f7:1b:59:04:59:9b:
1b:5b:10:eb:89:ee:35:cb:67:48:1c:3c:b8:56:5a:
44:64:b4:14:0d:03:7e:15:14:a1:ec:13:b6:32:83:
46:63:89:bf:3f:44:9c:87:d6:3f:8a:f9:3f:9f:40:
32:74:9f:9c:dd:91:50:b7:ab:0d:be:4e:4c:97:b6:
be:ca:65:a3:44:07:9d:9f:94:87:98:76:41:2c:84:
6d:03:1a:d1:53:8b:2d:c4:c0:b1:70:5e:3b:50:ce:
25:5d:40:9a:a9:70:da:7f:93:8d:e1:f9:48:a4:02:
4b:2f:b2:c9:f4:47:28:48:26:3f:96:e4:67:9b:91:
28:47:5e:0c:5f:1e:6b:5f:f2:71:00:1c:9e:92:26:
5b:e9:8c:16:13:e1:04:dd:36:d0:ff:fc:ab:e5:0c:
c0:59:91:0d:0f:8e:51:a7:66:a5:5c:93:36:40:ae:
45:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:39:76:46:91:30:74:E4:B9:A3:AC:C9:7F:CC:29:76:1D:61:CD:4F
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/Gjl2RpEwdOS5o6zJf8wpdh1hzU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.32.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ed:57:a3:d0:f5:6d:eb:90:f1:95:68:b0:c6:a6:2e:4c:32:
87:02:00:87:4e:fa:df:e1:6f:77:22:a3:75:51:5e:29:84:1a:
5a:4d:b5:f1:ff:ce:36:6e:3a:5c:57:f6:90:35:c5:c8:14:e0:
cf:37:f6:c7:86:1e:44:48:7e:43:86:79:74:b8:ac:df:5f:3d:
59:9c:c8:94:1a:94:9b:49:3b:2d:b8:31:36:b9:a2:b1:61:99:
8c:af:cf:ac:08:e6:f4:6c:df:c6:7f:ac:02:d9:55:2c:5a:66:
fb:8f:b9:ea:b5:65:0c:c8:c0:15:02:8f:3a:8f:f0:94:30:08:
59:23:3f:50:0c:d2:96:90:51:de:f3:e8:2f:fa:30:47:7c:54:
46:73:80:4b:ff:ad:58:d4:78:d1:0e:6d:da:d7:ea:19:8b:b9:
31:c6:36:d6:e4:63:cc:05:86:dd:b7:32:48:01:7f:38:23:56:
e1:64:95:c2:10:fb:1a:c9:13:e8:16:77:39:8a:e4:0b:8c:a7:
b1:4c:cd:1b:ba:44:3b:69:ab:e3:74:5d:51:8a:21:b4:10:b0:
30:c1:53:88:36:e1:09:09:5f:b3:bd:40:69:d2:0e:c8:bb:d1:
3c:62:96:cb:87:e0:0b:f2:27:ad:75:17:62:99:f5:82:9d:1d:
d0:be:b1:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAYrLhrkFch7X9YXlWeF6FuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDI5YTM2ZmMwY2NhMmUwYThkMDQ1ZjAyMmRmYzgzMWE1
MTczMDgwHhcNMjYwODE5MDYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTM5NzY0NjkxMzA3NGU0YjlhM2FjYzk3ZmNjMjk3NjFkNjFjZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsASdPLR+sWh59KlQZEmkaXiXx1+o
Pqq8MOtMYfRYDDI9fB3AXz13BAa5/pV3s76D0430jewFBd6rt/s+IGE2WMYISO6E
LcDrQxGyZCzyVMGFHCT3G1kEWZsbWxDrie41y2dIHDy4VlpEZLQUDQN+FRSh7BO2
MoNGY4m/P0Sch9Y/ivk/n0AydJ+c3ZFQt6sNvk5Ml7a+ymWjRAedn5SHmHZBLIRt
AxrRU4stxMCxcF47UM4lXUCaqXDaf5ON4flIpAJLL7LJ9EcoSCY/luRnm5EoR14M
Xx5rX/JxAByekiZb6YwWE+EE3TbQ//yr5QzAWZEND45Rp2alXJM2QK5F3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBo5dkaRMHTkuaOsyX/MKXYdYc1PMB8GA1UdIwQY
MBaAFCcCmjb8DMouCo0EXwIt/IMaUXMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTct
NTBkMGE1MzIzNjQxLzEvR2psMlJwRXdkT1M1bzZ6SmY4d3BkaDFoelU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTctNTBkMGE1MzIzNjQx
LzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSogMA0G
CSqGSIb3DQEBCwUAA4IBAQAC7Vej0PVt65DxlWiwxqYuTDKHAgCHTvrf4W93IqN1
UV4phBpaTbXx/842bjpcV/aQNcXIFODPN/bHhh5ESH5Dhnl0uKzfXz1ZnMiUGpSb
STstuDE2uaKxYZmMr8+sCOb0bN/Gf6wC2VUsWmb7j7nqtWUMyMAVAo86j/CUMAhZ
Iz9QDNKWkFHe8+gv+jBHfFRGc4BL/61Y1HjRDm3a1+oZi7kxxjbW5GPMBYbdtzJI
AX84I1bhZJXCEPsayRPoFnc5iuQLjKexTM0bukQ7aavjdF1RiiG0ELAwwVOINuEJ
CV+zvUBp0g7Iu9E8YpbLh+AL8ietdRdimfWCnR3QvrHd
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:02:43 2026 by rpki-client