Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GQndRi_KCbmw_my1jniQFKB-7CE.roa
File: GQndRi_KCbmw_my1jniQFKB-7CE.roa (raw, json)
Hash identifier: 3vhBVSbo8KE7fFVCGLDhs3LvWsfBYmRtN8C8J0sMqSk=
Subject key identifier: 19:09:DD:46:2F:CA:09:B9:B0:FE:6C:B5:8E:78:90:14:A0:7E:EC:21
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A075DDBBFD50C6718D41C84507C47B5A1C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GQndRi_KCbmw_my1jniQFKB-7CE.roa
Signing time: Sun 06 Sep 2026 08:37:40 +0000
ROA not before: Sun 06 Sep 2026 08:37:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6517
IP address blocks: 5.231.80.0/24 maxlen: 24
185.119.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:dd:bb:fd:50:c6:71:8d:41:c8:45:07:c4:7b:5a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 6 08:37:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1909dd462fca09b9b0fe6cb58e789014a07eec21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:43:da:03:03:ec:dd:3d:0d:cd:4c:5c:0c:
c0:54:ae:53:3e:71:cf:2a:99:e3:b0:31:d5:17:36:
57:1e:c4:0c:b6:c5:ce:e1:73:6b:fc:a9:bf:dc:14:
03:a9:ef:be:51:80:36:6e:ef:cd:b4:8a:e8:1b:3f:
c4:62:54:c9:da:8e:0b:56:05:6a:45:56:fe:b4:2f:
9e:fe:d4:c7:30:27:28:62:59:40:6a:71:5f:51:47:
40:bd:4e:5e:3c:1f:30:b2:2b:7c:93:48:ec:38:86:
b1:3c:97:db:3b:44:79:c1:36:b2:45:0f:88:58:71:
e8:65:a2:bb:9f:b2:e2:fd:1d:4e:44:49:ba:76:bf:
ed:3c:72:88:2c:9c:cd:c8:23:8c:f1:dc:38:3d:ae:
5c:e6:75:79:21:5b:54:87:24:bf:39:06:2a:07:f8:
f8:22:35:6b:15:ac:59:0f:e3:1f:ae:91:55:93:05:
64:2f:a4:1e:53:de:c2:af:69:40:86:c7:3b:10:af:
da:21:31:62:62:4b:ef:56:cf:c2:3a:2b:9d:07:b5:
e0:94:0f:e0:e8:d9:22:df:d2:6c:df:36:c3:6e:f8:
83:55:13:d6:f4:e9:a1:62:ad:6a:6c:ec:d6:62:9f:
c4:52:79:a5:6f:4f:e5:c2:b7:73:32:77:04:f0:06:
9b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:09:DD:46:2F:CA:09:B9:B0:FE:6C:B5:8E:78:90:14:A0:7E:EC:21
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GQndRi_KCbmw_my1jniQFKB-7CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.80.0/24
185.119.19.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:d0:f0:ba:d0:89:dc:c7:25:f0:b1:b7:10:23:29:91:65:b0:
8d:65:67:0a:64:24:6e:4d:15:26:f7:4e:b2:87:bb:d6:95:42:
3d:95:95:b2:7f:6d:b2:17:51:0d:f0:29:1e:67:38:cb:6b:32:
5b:d2:5d:0d:b5:ab:75:43:bc:38:c4:eb:29:a1:f8:2d:63:6e:
6a:79:35:d6:b1:74:cf:8a:01:36:6d:f3:28:2b:6e:4b:69:19:
65:73:76:69:45:b3:78:77:77:27:8b:59:62:a5:f9:9b:80:8b:
38:f1:79:fa:2f:ae:03:cf:5b:4e:a0:35:8f:1d:0a:a4:40:2b:
fc:9b:5e:0e:3d:de:4c:85:64:60:c0:4f:4e:23:33:e2:c4:45:
1a:45:7a:d3:8d:f7:fc:a0:47:68:e7:99:25:53:be:31:c3:ce:
bb:77:69:8b:88:c2:47:2e:82:7d:94:b6:f7:88:ff:0d:60:0d:
33:2e:c2:36:69:bf:d2:32:7e:45:c2:83:0f:b5:78:30:f5:d5:
32:b4:54:d8:d8:4e:19:5a:b2:e9:ac:96:ac:9a:59:7b:7d:20:
cb:57:0f:eb:04:55:63:35:a3:79:87:50:a3:27:51:4c:d5:2a:
6d:bc:ee:ed:fb:f9:3f:68:43:30:37:4a:41:04:7b:65:3c:22:
85:42:a2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:17:16 2026 by rpki-client