Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/rGLSFEm3Y7kKmct7XWI472xUoTY.roa
File: rGLSFEm3Y7kKmct7XWI472xUoTY.roa (raw, json)
Hash identifier: eAV1/LHM3VjIqdpFQdCDlaSaMHVt7jz/VCHC/XCO/90=
Subject key identifier: AC:62:D2:14:49:B7:63:B9:0A:99:CB:7B:5D:62:38:EF:6C:54:A1:36
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A11BCA03DEBD5564C1780E91D00A0EB850
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/rGLSFEm3Y7kKmct7XWI472xUoTY.roa
Signing time: Thu 08 Oct 2026 13:53:06 +0000
ROA not before: Thu 08 Oct 2026 13:53:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209658
IP address blocks: 146.19.56.0/24 maxlen: 24
194.61.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:ca:03:de:bd:55:64:c1:78:0e:91:d0:0a:0e:b8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 8 13:53:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac62d21449b763b90a99cb7b5d6238ef6c54a136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:0b:e2:67:c1:b2:28:86:e2:a9:f6:79:99:
7b:c2:fe:43:57:bf:4c:a0:f4:8d:34:a8:b2:68:13:
8f:3e:ed:3f:2d:bd:1f:f6:86:bc:92:42:a2:b2:21:
6c:72:bb:e6:bc:85:33:1f:a9:52:e3:49:c2:64:e6:
6c:a4:07:5d:ae:d1:3d:76:b0:66:7b:19:d8:6f:66:
1c:ba:e0:b1:f3:20:62:02:a9:31:c2:bf:c1:db:b4:
14:37:93:f2:9c:79:d7:b1:30:92:31:44:d1:aa:50:
b8:b2:0c:87:af:bc:a5:1b:e4:02:85:99:69:a2:d0:
d8:ef:44:d2:6e:54:5c:a3:ce:e4:8d:3b:e5:23:9c:
f5:16:bf:99:63:b5:c1:66:68:5a:b5:86:57:ee:6c:
c2:c0:41:5c:7d:c0:4f:1b:29:10:61:2a:59:cb:32:
f5:da:96:e2:f5:54:d3:7c:a8:e1:67:27:73:a1:d9:
65:68:b7:20:ee:72:b4:52:82:cb:85:2f:bd:1c:a3:
c0:e5:55:8b:b0:43:04:4e:58:24:0d:1f:ab:fc:72:
30:22:da:ed:26:b8:c9:b2:a0:87:b2:70:31:bf:55:
da:1b:29:c5:68:68:3a:f9:ac:b3:f0:f1:2b:ac:af:
5c:68:85:87:fa:97:4c:d3:ce:6a:8f:9b:ea:23:d6:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:62:D2:14:49:B7:63:B9:0A:99:CB:7B:5D:62:38:EF:6C:54:A1:36
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/rGLSFEm3Y7kKmct7XWI472xUoTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.56.0/24
194.61.75.0/24
Signature Algorithm: sha256WithRSAEncryption
56:53:36:5a:80:fc:32:9b:dd:bf:55:67:07:91:8b:6f:4a:ad:
d3:f7:f5:86:c5:8f:03:9a:d0:59:e7:18:c7:06:bd:ba:e2:7a:
b3:51:42:56:ef:f4:e5:7a:6d:20:83:b5:a4:7d:ad:cd:d3:40:
06:b9:4a:bf:ce:91:bb:10:0d:50:fe:a8:25:1c:18:99:74:5b:
39:03:72:4d:a4:d6:e3:8b:55:cf:10:5a:57:04:9f:0f:2a:9e:
55:e1:1b:8f:1e:5c:9a:ab:cb:a5:fd:7b:59:f9:5d:cc:09:7e:
fe:59:d0:55:cf:f6:5e:f0:36:e7:54:ac:45:56:0c:6a:fd:97:
01:30:db:fb:3b:c0:ff:b5:a2:f4:e8:a3:ab:07:34:a6:90:1c:
b0:1e:9b:7d:24:a1:15:60:4d:af:85:0b:2d:1c:a7:b6:51:31:
22:f0:5b:99:76:c3:41:10:85:49:6b:39:83:4c:05:2d:2a:23:
6a:61:6a:f3:99:b2:2a:a8:3d:6c:db:ab:43:d5:67:de:8f:ce:
01:6b:60:bd:fd:f0:8b:02:3f:4b:ea:3c:36:4a:22:0c:8e:d3:
ab:2f:4f:af:81:1d:8e:79:d3:f0:15:57:e9:37:26:74:36:02:
fb:0c:6d:4b:22:30:4b:f2:25:1c:ac:b1:d5:2b:26:c9:c9:8a:
d8:1c:fb:ec
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEbygPevVVkwXgOkdAKDrhQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYxMDA4MTM1MzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzYyZDIxNDQ5Yjc2M2I5MGE5OWNiN2I1ZDYyMzhlZjZjNTRhMTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB0L4mfBsiiG4qn2eZl7wv5DV79M
oPSNNKiyaBOPPu0/Lb0f9oa8kkKisiFscrvmvIUzH6lS40nCZOZspAddrtE9drBm
exnYb2YcuuCx8yBiAqkxwr/B27QUN5PynHnXsTCSMUTRqlC4sgyHr7ylG+QChZlp
otDY70TSblRco87kjTvlI5z1Fr+ZY7XBZmhatYZX7mzCwEFcfcBPGykQYSpZyzL1
2pbi9VTTfKjhZydzodllaLcg7nK0UoLLhS+9HKPA5VWLsEMETlgkDR+r/HIwItrt
JrjJsqCHsnAxv1XaGynFaGg6+ayz8PErrK9caIWH+pdM085qj5vqI9YtqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKxi0hRJt2O5CpnLe11iOO9sVKE2MB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvckdMU0ZFbTNZN2tLbWN0N1hXSTQ3MnhVb1RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkhM4AwQA
wj1LMA0GCSqGSIb3DQEBCwUAA4IBAQBWUzZagPwym92/VWcHkYtvSq3T9/WGxY8D
mtBZ5xjHBr264nqzUUJW7/Tlem0gg7Wkfa3N00AGuUq/zpG7EA1Q/qglHBiZdFs5
A3JNpNbji1XPEFpXBJ8PKp5V4RuPHlyaq8ul/XtZ+V3MCX7+WdBVz/Ze8DbnVKxF
Vgxq/ZcBMNv7O8D/taL06KOrBzSmkBywHpt9JKEVYE2vhQstHKe2UTEi8FuZdsNB
EIVJazmDTAUtKiNqYWrzmbIqqD1s26tD1Wfej84Ba2C9/fCLAj9L6jw2SiIMjtOr
L0+vgR2OedPwFVfpNyZ0NgL7DG1LIjBL8iUcrLHVKybJyYrYHPvs
-----END CERTIFICATE-----
Generated at Fri Oct 9 10:58:54 2026 by rpki-client