Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Gim9PnX5EH7B8TWQK--v2-JN8BM.roa
File: Gim9PnX5EH7B8TWQK--v2-JN8BM.roa (raw, json)
Hash identifier: eqrfOGpLv5wB4rQZq4xIrx9zsXmZR8wNfXbYJeVQaBw=
Subject key identifier: 1A:29:BD:3E:75:F9:10:7E:C1:F1:35:90:2B:EF:AF:DB:E2:4D:F0:13
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F9ECC462B16BB9F6B093E76E414965FBD
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Gim9PnX5EH7B8TWQK--v2-JN8BM.roa
Signing time: Sun 26 Jul 2026 14:20:15 +0000
ROA not before: Sun 26 Jul 2026 14:20:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 163.5.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:cc:46:2b:16:bb:9f:6b:09:3e:76:e4:14:96:5f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 26 14:20:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a29bd3e75f9107ec1f135902befafdbe24df013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:bc:84:bc:ef:6d:3c:a3:81:d6:76:2b:6b:
45:36:6b:27:a8:36:07:4f:ac:22:0a:78:1b:1d:7c:
80:62:8d:0e:1d:43:f2:9c:40:ba:c1:7c:b1:4b:c0:
31:2c:ee:e3:c8:da:38:16:55:29:0e:7c:ea:f5:06:
f1:c5:84:28:95:9a:c9:03:13:5c:c2:bf:48:21:2d:
75:1a:fe:00:67:b7:aa:69:90:ff:25:42:81:fb:1d:
36:1e:9c:e4:f0:67:6b:94:b1:d1:7e:13:e7:5d:05:
c1:b3:03:99:27:d0:c8:2a:ae:6f:3b:08:ab:6a:47:
a8:94:9b:b1:b2:30:38:8b:d0:5b:b3:32:5d:da:ce:
74:23:8f:d6:e7:ca:79:19:df:ac:3e:b9:94:f3:ce:
43:40:09:90:f3:2a:e5:5a:0e:40:b2:41:72:d5:4a:
2b:95:e8:7b:1b:24:98:58:9d:15:40:e4:cb:aa:d9:
09:a9:05:4b:45:75:94:c2:ca:80:70:f1:c5:39:ce:
bc:10:e5:a0:69:93:f5:3d:c8:46:81:f9:66:50:5b:
5e:f9:b6:8d:f8:25:27:d1:ea:bd:36:fd:d0:57:47:
9c:53:3c:7e:05:7a:a8:ec:2f:3b:21:bf:01:3d:ff:
32:30:c6:f3:cf:08:0d:b6:50:1f:aa:27:6c:c1:8c:
90:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:29:BD:3E:75:F9:10:7E:C1:F1:35:90:2B:EF:AF:DB:E2:4D:F0:13
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Gim9PnX5EH7B8TWQK--v2-JN8BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e9:93:df:6a:08:c8:a5:4e:d6:91:6f:45:47:6a:a5:0f:3c:
be:2f:79:16:c8:68:0e:f2:9c:63:0b:78:bc:ad:33:8d:a2:9c:
02:94:e8:f0:ca:f1:be:c0:4a:14:88:69:f9:22:66:d5:a9:83:
7d:39:6b:42:81:c5:81:d2:77:2f:dc:8c:62:48:91:42:a2:1c:
31:9d:94:60:f3:14:ce:12:2a:cd:6f:55:1b:7e:5e:fd:8b:ef:
9f:21:46:51:d1:38:3e:08:a4:4a:ab:3a:52:07:3b:b9:fb:e9:
60:11:65:a7:64:37:2f:c2:e5:81:78:bf:7d:10:01:0a:01:b8:
6e:aa:50:f6:77:41:23:72:cc:34:22:50:cf:81:e4:83:1d:92:
f2:66:a3:7a:b0:97:4e:cc:8b:2e:92:98:8c:e2:47:40:57:4a:
af:43:62:0b:5d:44:29:63:9d:c1:77:77:3e:a5:d5:2c:e6:0b:
db:8c:61:e9:df:df:96:e1:13:d9:b3:89:db:5f:01:af:9e:11:
9d:dc:1e:89:a6:50:cf:32:16:f5:9c:b5:ec:3f:83:49:16:4e:
af:9a:08:c9:39:18:f4:ac:2f:30:84:5d:44:bf:1a:1a:8f:7c:
3d:6f:22:b5:f1:1a:e1:35:d0:09:df:80:e0:a6:be:1c:08:7b:
7a:aa:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:28:40 2026 by rpki-client