Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/GT1TKA4rV1OP_xJGzsCFQYpWhGg.roa
File: GT1TKA4rV1OP_xJGzsCFQYpWhGg.roa (raw, json)
Hash identifier: HG/pHQ1DuBKD68MX3r3/b2+tAgjgwKx/kNjIgxZtYug=
Subject key identifier: 19:3D:53:28:0E:2B:57:53:8F:FF:12:46:CE:C0:85:41:8A:56:84:68
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01A03475A60377141E79274705B135993605
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/GT1TKA4rV1OP_xJGzsCFQYpWhGg.roa
Signing time: Mon 24 Aug 2026 15:48:40 +0000
ROA not before: Mon 24 Aug 2026 15:48:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198798
IP address blocks: 94.131.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:75:a6:03:77:14:1e:79:27:47:05:b1:35:99:36:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Aug 24 15:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=193d53280e2b57538fff1246cec085418a568468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:d3:25:58:d5:ff:3a:04:d8:93:23:90:25:
ec:ac:e3:d8:38:85:2d:b7:44:1d:16:49:38:0e:f7:
12:72:f5:8f:e8:d7:29:cc:df:75:a2:d8:79:51:c3:
37:8a:42:dc:fb:4a:a7:86:34:7b:b3:c3:a0:9e:ad:
19:fb:24:58:0d:1c:b9:ee:95:97:2e:03:d0:17:7f:
6e:60:02:ad:ef:d7:16:14:0d:e9:c4:f9:68:59:4f:
0e:df:fb:5c:44:18:14:56:9d:02:e9:e2:62:44:0a:
e9:2b:e0:07:d7:28:80:9b:1d:cb:d8:f1:12:6f:87:
bb:75:95:39:05:68:4b:21:58:12:bd:9c:da:6d:18:
55:68:3f:4e:95:3c:72:e9:42:dd:1b:aa:21:c6:79:
6b:95:31:b1:6f:2a:9d:82:4f:6d:f6:7c:70:b2:5a:
3e:e5:c7:75:8f:65:4f:ad:15:7d:99:49:6a:08:1f:
9e:dc:e8:26:5f:4a:42:08:b7:dd:98:3d:5c:ac:3e:
f4:b3:77:f6:ad:e9:52:78:8a:cd:87:e3:ac:37:d3:
c3:f3:dc:5b:d2:3e:ac:b9:79:52:76:94:cb:58:59:
05:ef:63:08:72:d0:35:56:82:5e:59:e2:7b:fa:f4:
03:44:6b:be:24:95:86:a5:7d:da:95:a4:51:69:87:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3D:53:28:0E:2B:57:53:8F:FF:12:46:CE:C0:85:41:8A:56:84:68
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/GT1TKA4rV1OP_xJGzsCFQYpWhGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.28.0/22
Signature Algorithm: sha256WithRSAEncryption
93:f5:af:74:36:97:de:e6:fb:d1:8e:42:16:e5:67:ec:68:21:
ce:91:37:c6:ff:cc:04:42:c8:17:93:57:9a:89:90:a6:6c:02:
7a:8e:04:b7:69:b9:2b:18:a9:ab:2f:6d:49:05:0b:78:05:be:
cb:94:64:40:c9:8a:15:1e:67:31:fa:4a:2a:df:b6:cb:90:2c:
60:b6:44:cf:42:d7:bf:42:9f:cd:5c:71:ab:85:fc:09:9b:9a:
76:4e:27:38:8d:ec:62:a7:22:a7:c0:f4:e8:51:96:00:eb:a4:
af:79:20:5f:e1:4c:8a:f4:6a:66:2b:cc:fe:2a:53:48:57:00:
63:3f:ff:8f:bd:d1:6a:f4:63:00:e4:47:14:f9:7d:a7:b3:07:
7c:f2:19:09:cd:3b:85:03:d8:1e:bf:74:9d:be:89:b9:7b:4d:
87:02:04:db:ff:4c:ac:14:05:95:c4:69:97:8e:f0:40:a0:90:
0c:f3:9d:d5:d6:c8:8d:8b:b7:8b:04:ce:47:26:28:fb:44:2f:
7d:6a:2d:d0:cf:96:bb:01:8a:aa:7e:d2:33:e7:09:c3:b3:5c:
9d:07:8f:b5:08:dd:fd:90:68:bf:0c:ce:ea:e0:a6:79:97:67:
6f:a8:67:c8:9a:24:aa:44:49:d8:88:9f:bb:69:d1:c4:6a:b4:
10:48:c3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:09:19 2026 by rpki-client