Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/GWLPm0EaGoN4BtEyzXiiEIZ-GTE.roa
File: GWLPm0EaGoN4BtEyzXiiEIZ-GTE.roa (raw, json)
Hash identifier: w7giHRJ/Hm+CuvJmm/pIjg11UlpDd5+GD+ZEyWmk2uc=
Subject key identifier: 19:62:CF:9B:41:1A:1A:83:78:06:D1:32:CD:78:A2:10:86:7E:19:31
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019D3F7EF54B771D93A9C2584FFF72D1A5C0
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/GWLPm0EaGoN4BtEyzXiiEIZ-GTE.roa
Signing time: Mon 30 Mar 2026 16:06:18 +0000
ROA not before: Mon 30 Mar 2026 16:06:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201907
IP address blocks: 80.174.96.0/21 maxlen: 24
80.174.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3f:7e:f5:4b:77:1d:93:a9:c2:58:4f:ff:72:d1:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Mar 30 16:06:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1962cf9b411a1a837806d132cd78a210867e1931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:59:3c:08:0d:84:06:cf:68:1d:47:c2:44:
74:a3:85:5e:50:2b:e1:42:87:72:46:cf:f3:15:db:
57:fd:0f:c3:7f:b3:f0:cc:90:fd:15:82:93:9c:ef:
78:ed:d9:6a:16:51:2e:7a:42:18:77:2e:9f:7e:40:
fc:93:d4:25:ff:be:ac:df:76:91:ba:c1:de:a1:db:
63:d6:f6:6d:93:a9:ba:f1:30:1a:4c:fc:f1:c6:3b:
ff:f0:10:6a:e2:71:ff:b2:6c:56:e9:61:73:ad:f3:
6a:d5:f8:ac:12:44:f3:3b:60:f9:2d:eb:81:f9:39:
a5:1f:ca:89:ac:62:ca:e1:e6:50:ff:ee:4e:bc:96:
4b:e9:5c:1f:2b:20:40:46:6b:80:47:47:ba:1d:e8:
e2:b9:28:92:0f:bd:ff:14:52:1c:25:75:69:bf:cd:
da:7f:db:3b:11:58:a2:6c:18:2d:5d:5d:02:91:e8:
96:92:06:f6:68:48:f4:3d:b2:e3:78:c8:5a:db:7a:
a1:29:b8:26:1d:54:7e:3f:8b:bf:c2:73:57:51:d6:
0e:4e:63:aa:55:37:93:4a:6a:69:d8:0d:a2:44:f9:
cd:97:fa:4d:53:0d:ec:7e:6f:d6:40:c7:c4:54:6e:
ad:13:66:81:28:65:38:ac:3f:49:e1:2b:b3:61:11:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:CF:9B:41:1A:1A:83:78:06:D1:32:CD:78:A2:10:86:7E:19:31
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/GWLPm0EaGoN4BtEyzXiiEIZ-GTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.96.0-80.174.107.255
Signature Algorithm: sha256WithRSAEncryption
52:ce:1f:8d:58:3d:eb:8f:b7:1d:a2:2c:57:ac:e0:6a:a6:ac:
d7:ac:0b:aa:06:af:65:45:24:58:4d:f1:21:32:d1:60:d7:9b:
41:78:c6:8f:a6:85:10:6d:4b:5e:96:8f:84:4c:a3:1c:bf:23:
f2:a0:de:e8:a8:68:67:1a:fa:69:06:f1:c4:59:9e:38:21:7c:
9f:5e:d7:fd:d9:1b:07:3a:75:2a:7f:82:c9:ef:05:ba:90:98:
fb:cf:0b:e7:97:cf:52:8f:71:0f:e9:d5:de:5b:9e:00:ec:09:
70:78:88:87:8e:2a:d2:b6:54:82:f8:72:b4:95:1e:92:15:c9:
d1:9f:ec:15:50:60:48:19:e7:4b:54:2d:4f:62:5c:5f:91:a8:
58:a2:c5:07:85:44:56:a9:66:94:f6:5c:98:cf:cf:3a:b3:2c:
4b:b6:8a:0c:e4:7a:70:53:9e:05:56:e0:84:d5:bc:c0:b7:24:
4b:62:ea:11:69:48:23:48:39:ac:32:48:24:5a:26:fc:f9:46:
f4:11:83:8c:c8:63:95:09:6a:cb:e6:73:64:00:0c:16:e1:93:
f1:70:6e:56:05:41:32:7e:52:00:ec:73:8a:35:a5:61:66:1a:
7e:ce:3f:03:28:df:27:c8:44:26:c7:7f:c1:ab:ab:30:65:02:
15:79:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:32 2026 by rpki-client