Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GdYssawZMLuKhV5BuvoOQ-2muhc.roa
File: GdYssawZMLuKhV5BuvoOQ-2muhc.roa (raw, json)
Hash identifier: /hsRNvbpKx/YAuAKrSl6RLJjdVzKso5Lw5wQ3s1p6VY=
Subject key identifier: 19:D6:2C:B1:AC:19:30:BB:8A:85:5E:41:BA:FA:0E:43:ED:A6:BA:17
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019D96647C1102C4B2C86DCF476BF598217B
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GdYssawZMLuKhV5BuvoOQ-2muhc.roa
Signing time: Thu 16 Apr 2026 13:04:20 +0000
ROA not before: Thu 16 Apr 2026 13:04:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150423
IP address blocks: 62.105.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:64:7c:11:02:c4:b2:c8:6d:cf:47:6b:f5:98:21:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 16 13:04:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19d62cb1ac1930bb8a855e41bafa0e43eda6ba17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:ce:0b:0a:d2:90:d8:ef:27:51:eb:82:a3:
cd:90:cd:b0:b2:91:bf:6d:61:7c:d7:98:53:9b:9b:
9d:51:b1:c2:2c:41:28:48:9a:25:45:02:e2:d4:be:
2d:db:a7:e5:34:22:7c:c1:2a:90:ad:fc:69:67:3f:
58:29:48:df:63:6b:65:a3:32:ea:60:98:46:f9:82:
09:fe:81:1e:45:71:70:37:b6:6a:1e:2e:21:9f:65:
d1:eb:92:5b:cb:0b:96:fa:a2:b8:69:fb:60:ea:1e:
00:a2:16:ef:9d:6e:7f:90:e5:df:c0:45:bd:11:01:
ac:79:37:75:9e:49:f4:63:3e:8b:c4:15:f2:22:d8:
32:7d:49:1b:7e:ad:8e:2e:f9:d9:cb:5f:21:ea:52:
67:fa:77:a0:b9:9f:96:87:71:2d:f7:d0:be:28:df:
08:4a:00:70:1d:5c:c9:92:85:d8:e1:83:40:f1:78:
5e:ce:e6:86:2b:b9:5d:ab:6c:48:91:12:25:02:dd:
22:87:ce:cc:86:d7:e3:1d:ca:8e:25:4e:27:02:44:
8f:3a:ae:52:d2:3a:8b:3a:19:4c:e8:9d:06:da:b6:
3c:2a:3a:51:38:d4:2a:6b:42:b1:5e:b7:d5:ce:7d:
92:b4:dd:ab:13:6d:9a:fd:f4:dd:d9:b1:bb:fc:f5:
de:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D6:2C:B1:AC:19:30:BB:8A:85:5E:41:BA:FA:0E:43:ED:A6:BA:17
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/GdYssawZMLuKhV5BuvoOQ-2muhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.204.0/23
Signature Algorithm: sha256WithRSAEncryption
91:8b:65:e9:59:95:08:2e:58:99:1c:b3:67:13:e1:df:72:83:
04:b8:7a:55:52:6f:bd:0a:2e:d5:a5:e6:fa:32:98:6b:75:f9:
10:69:c1:28:3d:0e:a8:d6:6e:32:7a:df:79:a9:92:67:19:3d:
cf:18:43:1d:cd:bc:ec:49:3f:ca:8a:a1:39:b7:2d:1a:fa:49:
4e:42:d1:26:df:23:40:42:f5:43:21:6f:f7:f7:59:a3:2a:dc:
8a:a0:d0:da:61:a6:4e:1f:a5:e1:08:94:e5:cf:63:86:fb:e7:
5a:e3:ae:19:d1:c6:b3:7b:2e:4f:1f:59:19:30:ae:54:b4:95:
ee:2f:a2:07:48:d5:14:f3:32:9d:fb:34:1c:68:83:b4:b7:52:
c1:a4:f0:f4:43:13:5c:4f:7d:29:42:b0:69:64:f1:b5:62:1b:
08:93:5c:d8:49:24:af:21:e5:e3:b7:01:8e:8a:d3:e3:e9:93:
13:52:a4:cd:50:14:fc:ed:36:22:c7:f7:6a:a1:c4:62:b5:cd:
c3:6a:d8:ce:a6:5f:93:e5:f4:34:11:43:03:a7:8a:4b:9f:b3:
58:5d:17:6c:1a:81:eb:55:55:ab:8b:12:f2:ec:8e:9d:96:11:
85:ce:28:fa:95:70:f7:88:f3:ba:8c:77:56:8c:6e:0e:75:92:
64:08:80:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2WZHwRAsSyyG3PR2v1mCF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNDE2MTMwNDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWQ2MmNiMWFjMTkzMGJiOGE4NTVlNDFiYWZhMGU0M2VkYTZiYTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HnOCwrSkNjvJ1HrgqPNkM2wspG/
bWF815hTm5udUbHCLEEoSJolRQLi1L4t26flNCJ8wSqQrfxpZz9YKUjfY2tlozLq
YJhG+YIJ/oEeRXFwN7ZqHi4hn2XR65JbywuW+qK4aftg6h4AohbvnW5/kOXfwEW9
EQGseTd1nkn0Yz6LxBXyItgyfUkbfq2OLvnZy18h6lJn+neguZ+Wh3Et99C+KN8I
SgBwHVzJkoXY4YNA8XhezuaGK7ldq2xIkRIlAt0ih87MhtfjHcqOJU4nAkSPOq5S
0jqLOhlM6J0G2rY8KjpRONQqa0KxXrfVzn2StN2rE22a/fTd2bG7/PXe2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBnWLLGsGTC7ioVeQbr6DkPtproXMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvR2RZc3Nhd1pNTHVLaFY1QnV2b09RLTJtdWhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPmnMMA0G
CSqGSIb3DQEBCwUAA4IBAQCRi2XpWZUILliZHLNnE+HfcoMEuHpVUm+9Ci7Vpeb6
MphrdfkQacEoPQ6o1m4yet95qZJnGT3PGEMdzbzsST/KiqE5ty0a+klOQtEm3yNA
QvVDIW/391mjKtyKoNDaYaZOH6XhCJTlz2OG++da464Z0cazey5PH1kZMK5UtJXu
L6IHSNUU8zKd+zQcaIO0t1LBpPD0QxNcT30pQrBpZPG1YhsIk1zYSSSvIeXjtwGO
itPj6ZMTUqTNUBT87TYix/dqocRitc3DatjOpl+T5fQ0EUMDp4pLn7NYXRdsGoHr
VVWrixLy7I6dlhGFzij6lXD3iPO6jHdWjG4OdZJkCIC5
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:53:49 2026 by rpki-client