Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/GT8HhSbeb_3esKlX1octkP1xuGA.roa
File: GT8HhSbeb_3esKlX1octkP1xuGA.roa (raw, json)
Hash identifier: osq6NafXIn3g0iTu717OFvhm5sqA/xI35v+FmjAzOiE=
Subject key identifier: 19:3F:07:85:26:DE:6F:FD:DE:B0:A9:57:D6:87:2D:90:FD:71:B8:60
Certificate issuer: /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Certificate serial: 01A0861746E776116328A5E3A27042A105E0
Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/GT8HhSbeb_3esKlX1octkP1xuGA.roa
Signing time: Wed 09 Sep 2026 12:14:27 +0000
ROA not before: Wed 09 Sep 2026 12:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210139
IP address blocks: 89.190.32.0/21 maxlen: 21
89.190.39.0/24 maxlen: 24
185.73.160.0/22 maxlen: 22
2a05:43c0::/29 maxlen: 29
2a05:43c2::/32 maxlen: 32
2a05:43c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:17:46:e7:76:11:63:28:a5:e3:a2:70:42:a1:05:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Validity
Not Before: Sep 9 12:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=193f078526de6ffddeb0a957d6872d90fd71b860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:91:9d:8a:80:88:b9:17:76:3a:34:49:f7:
7e:2b:a4:3c:8d:c6:5d:21:29:52:e0:03:55:c9:ef:
d6:3d:27:54:c4:b2:62:d7:3f:d3:28:07:6f:f5:b4:
eb:90:bd:b7:41:99:81:60:1a:b9:30:19:56:94:ea:
05:d8:da:e0:95:c6:7f:27:8e:5a:b2:c2:e7:c4:ae:
1d:03:ed:89:ea:e1:36:06:5e:98:1c:e8:5c:f5:fa:
70:ce:d6:6f:70:d5:29:ec:22:47:42:ff:b4:61:d5:
70:00:19:dc:8f:0c:27:eb:00:2f:78:11:8a:39:7e:
a2:b8:68:d5:80:2b:ac:4a:5e:4f:d7:82:0b:4d:85:
b4:12:33:9d:65:f1:02:bc:fa:b1:02:6d:d0:bd:6e:
31:3e:4d:ce:aa:54:45:02:56:99:0c:ec:5c:8a:c1:
d1:75:9a:91:c5:bb:29:f0:f0:72:d2:08:55:e4:52:
ec:d9:8c:d7:0b:6c:21:83:b7:f8:8a:e0:6f:6a:e6:
2c:01:24:ae:22:d3:d6:db:d8:77:f5:93:be:ca:52:
ba:b0:86:96:a8:fc:1b:4e:82:a8:87:91:bd:74:45:
02:88:f5:48:d5:31:9b:cb:7c:09:83:1f:4c:a5:08:
71:25:22:64:8a:17:14:12:25:66:8c:66:71:52:9d:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3F:07:85:26:DE:6F:FD:DE:B0:A9:57:D6:87:2D:90:FD:71:B8:60
X509v3 Authority Key Identifier:
keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/GT8HhSbeb_3esKlX1octkP1xuGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.32.0/21
185.73.160.0/22
IPv6:
2a05:43c0::/29
Signature Algorithm: sha256WithRSAEncryption
a4:83:ec:b6:b8:cf:51:22:60:58:63:13:f1:26:f4:f4:cc:b2:
b8:a5:f6:6d:eb:73:7d:ff:ec:bc:48:8c:34:02:ef:5f:00:06:
43:41:d6:ba:59:4a:58:b4:c5:8b:8b:d0:8d:21:d1:86:ec:c5:
85:7d:82:87:df:0e:4d:e6:3f:93:d1:1c:28:a9:13:92:72:b8:
87:ca:13:43:7d:53:2e:8d:17:ff:71:50:00:68:f6:fb:88:33:
2f:c9:4e:b7:b8:d2:c3:6b:d0:30:59:a0:01:72:9b:f0:d3:eb:
72:e7:f7:3b:dc:38:ab:9e:bb:c7:b2:ab:a3:6d:9f:0e:ca:5f:
19:d5:2d:a0:83:56:fb:4e:f8:e0:e4:b0:ee:3e:62:4b:05:7a:
79:e5:d6:5f:d7:0c:23:c5:f8:09:74:20:62:23:b0:53:2f:9e:
44:d8:21:63:7c:97:1c:eb:91:c7:c2:17:99:3c:7b:69:be:72:
ba:27:fa:72:da:44:2a:5b:2c:db:12:a6:8c:41:ad:c7:b9:c6:
d6:11:3a:25:b6:aa:ba:75:ba:4f:98:3b:f0:14:f7:bd:83:36:
cf:7e:b7:56:ac:19:84:da:e5:a1:f4:76:b8:00:b5:7c:4e:f0:
e8:fb:19:23:66:68:fc:19:e7:75:fc:d6:29:14:86:89:20:50:
6a:78:45:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:32 2026 by rpki-client