Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/GAkPYv8UHYs_EoZPb4jWXtDDAC0.roa
File: GAkPYv8UHYs_EoZPb4jWXtDDAC0.roa (raw, json)
Hash identifier: lnLCFUL9tM4n3iWBg5iwZCi3PtIQMScXWDpeh/kO248=
Subject key identifier: 18:09:0F:62:FF:14:1D:8B:3F:12:86:4F:6F:88:D6:5E:D0:C3:00:2D
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 01A0BCF7BC51D078EFABAD30AE40A522109E
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/GAkPYv8UHYs_EoZPb4jWXtDDAC0.roa
Signing time: Sun 20 Sep 2026 03:59:07 +0000
ROA not before: Sun 20 Sep 2026 03:59:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 194.61.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:f7:bc:51:d0:78:ef:ab:ad:30:ae:40:a5:22:10:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Sep 20 03:59:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18090f62ff141d8b3f12864f6f88d65ed0c3002d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:83:28:7f:90:24:ef:36:a9:e5:d8:4f:b1:
13:55:8e:ee:6c:8f:08:62:c7:9c:e3:43:ec:64:b4:
23:49:2b:d0:41:f6:d4:ef:f9:95:bf:33:be:40:34:
f9:fe:33:96:e3:1c:b7:a5:69:ee:de:16:da:f0:ff:
8c:fa:ff:45:50:a9:49:42:30:7f:6e:c1:ef:28:37:
fb:46:85:97:c4:b3:fb:dc:bc:91:32:98:1b:3a:61:
39:00:6b:c4:3f:a7:67:f1:da:7a:75:f4:48:a5:30:
8f:2a:13:c4:79:9e:c7:ab:cf:36:b6:49:a1:93:62:
96:bb:50:83:4d:cf:e5:6b:65:fa:ad:6f:51:f0:8f:
46:a5:5b:b4:bf:16:43:60:98:06:a0:b7:48:f7:a4:
87:12:2e:a6:8d:dd:fb:00:60:69:e0:1c:12:83:af:
3f:bd:d1:54:11:b0:b4:48:fc:8b:84:8c:ca:d0:15:
38:76:f2:56:67:74:44:22:1e:44:b6:91:8b:8a:ac:
06:dd:86:ac:8e:3d:8d:77:da:50:cf:95:0f:1e:8d:
e2:41:dd:2a:36:d2:23:4b:80:3a:d4:a8:f8:8f:8a:
ea:35:f6:57:8e:e0:13:90:99:aa:07:88:07:6b:d7:
03:63:88:38:ce:fa:a3:5a:46:fb:d1:c1:93:a7:a5:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:09:0F:62:FF:14:1D:8B:3F:12:86:4F:6F:88:D6:5E:D0:C3:00:2D
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/GAkPYv8UHYs_EoZPb4jWXtDDAC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.236.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ee:dc:23:b6:7c:c8:4d:fc:a5:47:5f:6c:88:56:18:eb:95:
6d:84:a1:f6:ab:23:c6:a5:be:94:0b:a1:6b:74:e3:c5:30:5c:
a8:76:ef:32:cf:da:c0:24:05:0b:76:f8:93:04:3f:98:3b:b7:
91:53:f1:5c:4f:99:0d:51:64:f6:f0:07:1e:08:39:cf:b3:2a:
75:6d:fa:de:dd:4b:75:b6:be:54:69:e6:25:9d:2d:ba:b2:7d:
fc:2c:92:e2:ca:d7:87:f2:11:fd:40:50:36:a6:27:34:58:b0:
ed:e1:63:11:f0:6d:39:b7:f6:c0:fb:2c:34:e6:94:b6:8c:ab:
5e:bf:75:49:6d:bf:b4:9c:ec:22:d1:6d:76:98:44:56:24:33:
87:21:3d:a4:a8:e6:71:da:f2:e3:af:e6:dc:a7:fc:49:32:3e:
fa:81:a0:8e:23:32:b2:40:88:b6:45:2c:92:a7:c8:41:23:5b:
34:5e:52:d8:c5:bf:fb:f9:48:d6:d5:1b:68:59:58:4e:27:a8:
76:f4:e3:a4:d6:8a:93:5a:f7:48:97:04:c4:c0:37:96:df:bd:
ac:68:57:44:e0:ab:6f:6f:4e:5f:12:52:cf:18:d6:b0:0d:59:
50:03:34:30:c6:c4:b1:a3:ed:c1:d6:81:0d:2a:c7:a5:60:a3:
47:9c:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:45:14 2026 by rpki-client