Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/gbkqHPXzaQ3DlkJBDMA5JR1B9NQ.roa
File: gbkqHPXzaQ3DlkJBDMA5JR1B9NQ.roa (raw, json)
Hash identifier: 8GSrAXD1lG9/MEHecHJM+nvUsNP01C7HMiA9iF4E+WA=
Subject key identifier: 81:B9:2A:1C:F5:F3:69:0D:C3:96:42:41:0C:C0:39:25:1D:41:F4:D4
Certificate issuer: /CN=e413a6c76b131448e30a0dc6a23000747014033a
Certificate serial: 01A0EC1B2BA00587F03B032C7A0770E64C15
Authority key identifier: E4:13:A6:C7:6B:13:14:48:E3:0A:0D:C6:A2:30:00:74:70:14:03:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BOmx2sTFEjjCg3GojAAdHAUAzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/gbkqHPXzaQ3DlkJBDMA5JR1B9NQ.roa
Signing time: Tue 29 Sep 2026 07:39:58 +0000
ROA not before: Tue 29 Sep 2026 07:39:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51946
IP address blocks: 192.100.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BOmx2sTFEjjCg3GojAAdHAUAzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:1b:2b:a0:05:87:f0:3b:03:2c:7a:07:70:e6:4c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e413a6c76b131448e30a0dc6a23000747014033a
Validity
Not Before: Sep 29 07:39:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81b92a1cf5f3690dc39642410cc039251d41f4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ec:ed:35:40:da:cf:f2:4c:33:6c:b4:09:c1:
64:8e:2a:15:9d:b6:f5:bc:33:5d:e9:af:e1:c8:db:
9d:00:b5:cc:0b:dd:c2:d2:c7:1e:18:1c:15:fd:ee:
bd:4c:1e:84:f3:a1:fa:01:cc:7a:ec:7e:b8:06:ab:
9e:8b:47:83:4d:79:e8:c9:07:a2:10:fe:fb:fd:11:
52:aa:26:8b:1f:4f:42:17:f6:b9:08:74:44:56:6e:
93:84:33:ca:1f:c1:00:ef:e8:fa:3e:c8:2c:09:c4:
30:16:d8:1c:22:cb:21:f6:70:01:40:59:98:13:8c:
73:00:56:ec:8f:c5:de:72:6f:14:da:a2:fa:70:b9:
22:c7:9a:94:c0:3d:84:1f:6a:26:83:cc:4b:34:25:
0c:f6:2f:4f:08:23:58:53:07:b4:5b:11:ac:1b:8a:
61:f8:82:6c:d7:13:a2:8e:db:16:c7:2b:eb:96:5b:
6a:66:4f:78:a8:f5:f0:41:7d:38:a2:b2:26:7a:ba:
97:51:9a:25:d2:a1:17:03:eb:0e:d7:f7:f9:cb:ab:
97:cc:7e:7d:aa:d8:50:94:ef:ea:47:3d:e0:4d:4b:
5d:0b:4e:42:46:3a:d8:10:66:40:11:80:32:e6:b4:
cd:f6:f7:66:88:30:bc:79:d8:dc:65:07:3d:e4:77:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B9:2A:1C:F5:F3:69:0D:C3:96:42:41:0C:C0:39:25:1D:41:F4:D4
X509v3 Authority Key Identifier:
keyid:E4:13:A6:C7:6B:13:14:48:E3:0A:0D:C6:A2:30:00:74:70:14:03:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BOmx2sTFEjjCg3GojAAdHAUAzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/gbkqHPXzaQ3DlkJBDMA5JR1B9NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b73f54-9a89-4d26-b438-4169c1f263b7/1/5BOmx2sTFEjjCg3GojAAdHAUAzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.100.135.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:34:90:78:8c:05:a3:70:bc:06:2e:2b:73:a1:c6:b4:3e:ab:
36:b2:1b:87:75:83:a6:75:fd:5d:0d:83:7b:38:f5:55:ea:5e:
da:db:2e:0f:74:d9:b7:53:59:fc:59:20:b2:32:77:d6:da:29:
c7:ab:8d:46:73:c7:85:23:65:3d:35:11:d7:01:27:ea:27:d4:
d1:2b:9c:3f:bb:44:7c:73:e8:4c:e6:a1:74:98:01:c9:6e:04:
da:4a:73:b0:ff:ea:c8:4e:6d:58:fc:c3:23:47:6b:02:72:7a:
c8:9d:a9:83:c9:bf:4e:80:9f:52:96:50:3a:fc:6b:4d:70:30:
78:69:60:7d:08:91:8e:8c:be:97:5c:a6:16:20:7c:f9:65:f3:
c0:29:cb:39:5b:f0:ae:20:b8:51:c2:05:93:b2:e7:52:35:32:
7a:0d:d5:d9:e0:d2:6f:4c:d1:76:80:83:f2:55:9c:8e:15:38:
f9:0e:c3:76:01:57:eb:c5:fd:de:ca:d2:f6:23:c7:2f:bf:90:
92:46:d5:a1:3f:1f:84:98:f5:b6:af:7b:bf:fb:55:14:d7:89:
3e:03:88:f3:11:c1:fb:d0:12:8d:5a:e2:51:ac:17:36:ba:be:
2a:e0:ba:39:db:a3:c6:37:53:b6:ae:7f:41:63:cb:89:01:04:
50:52:a3:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDsGyugBYfwOwMsegdw5kwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MTNhNmM3NmIxMzE0NDhlMzBhMGRjNmEyMzAwMDc0NzAx
NDAzM2EwHhcNMjYwOTI5MDczOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWI5MmExY2Y1ZjM2OTBkYzM5NjQyNDEwY2MwMzkyNTFkNDFmNGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eztNUDaz/JMM2y0CcFkjioVnbb1
vDNd6a/hyNudALXMC93C0sceGBwV/e69TB6E86H6Acx67H64Bquei0eDTXnoyQei
EP77/RFSqiaLH09CF/a5CHREVm6ThDPKH8EA7+j6PsgsCcQwFtgcIssh9nABQFmY
E4xzAFbsj8Xecm8U2qL6cLkix5qUwD2EH2omg8xLNCUM9i9PCCNYUwe0WxGsG4ph
+IJs1xOijtsWxyvrlltqZk94qPXwQX04orImerqXUZol0qEXA+sO1/f5y6uXzH59
qthQlO/qRz3gTUtdC05CRjrYEGZAEYAy5rTN9vdmiDC8edjcZQc95HcsAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIG5Khz182kNw5ZCQQzAOSUdQfTUMB8GA1UdIwQY
MBaAFOQTpsdrExRI4woNxqIwAHRwFAM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJPbXgyc1RGRWpqQ2czR29qQUFkSEFVQXpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNzNmNTQtOWE4OS00ZDI2LWI0Mzgt
NDE2OWMxZjI2M2I3LzEvZ2JrcUhQWHphUTNEbGtKQkRNQTVKUjFCOU5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNzNmNTQtOWE4OS00ZDI2LWI0MzgtNDE2OWMxZjI2M2I3
LzEvNUJPbXgyc1RGRWpqQ2czR29qQUFkSEFVQXpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGSHMA0G
CSqGSIb3DQEBCwUAA4IBAQDNNJB4jAWjcLwGLitzoca0Pqs2shuHdYOmdf1dDYN7
OPVV6l7a2y4PdNm3U1n8WSCyMnfW2inHq41Gc8eFI2U9NRHXASfqJ9TRK5w/u0R8
c+hM5qF0mAHJbgTaSnOw/+rITm1Y/MMjR2sCcnrInamDyb9OgJ9SllA6/GtNcDB4
aWB9CJGOjL6XXKYWIHz5ZfPAKcs5W/CuILhRwgWTsudSNTJ6DdXZ4NJvTNF2gIPy
VZyOFTj5DsN2AVfrxf3eytL2I8cvv5CSRtWhPx+EmPW2r3u/+1UU14k+A4jzEcH7
0BKNWuJRrBc2ur4q4Lo526PGN1O2rn9BY8uJAQRQUqM9
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:05:18 2026 by rpki-client