Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/GbMgngzItY4uIndF-XcuFLKJhR4.roa
File: GbMgngzItY4uIndF-XcuFLKJhR4.roa (raw, json)
Hash identifier: wGyJex/ofBYcPy2R1/ePo/0rQqidiA5P6cvt53DFaE4=
Subject key identifier: 19:B3:20:9E:0C:C8:B5:8E:2E:22:77:45:F9:77:2E:14:B2:89:85:1E
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 019B7F15F56E8544A912239043F9DCA83736
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/GbMgngzItY4uIndF-XcuFLKJhR4.roa
Signing time: Fri 02 Jan 2026 14:21:44 +0000
ROA not before: Fri 02 Jan 2026 14:21:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199637
IP address blocks: 193.24.96.0/24 maxlen: 24
2a13:e480::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:f5:6e:85:44:a9:12:23:90:43:f9:dc:a8:37:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Jan 2 14:21:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19b3209e0cc8b58e2e227745f9772e14b289851e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:74:2d:f0:d0:0a:46:73:1e:c8:78:80:b4:
1c:2c:4e:71:66:e6:20:7d:bf:03:02:2f:01:6d:95:
51:4d:78:86:d1:76:84:f2:b0:a1:aa:7b:d7:32:05:
ce:a8:f2:f1:7c:8e:de:df:d1:0e:c1:c9:58:e4:d7:
ac:a0:ea:c7:a3:d6:ab:c0:7d:ba:34:96:59:1e:06:
9a:15:f6:8c:5d:54:8b:b9:c2:26:2a:de:ed:91:aa:
3e:7d:d6:38:1f:d8:f8:58:32:11:83:ec:f4:41:05:
88:33:a8:2a:b7:6a:f1:c7:2a:61:c6:31:6b:5a:d9:
66:e0:a6:b5:22:6b:15:b3:c2:cf:8d:7b:a3:cd:43:
e7:45:55:e4:ba:92:c0:a8:82:e2:30:e9:76:be:ad:
b3:69:1e:87:c0:75:17:94:ed:8f:51:ef:e5:01:3f:
f5:4b:bf:da:e3:96:89:dd:b2:3f:86:b0:81:7e:e2:
09:1d:f2:57:76:2a:be:a5:8f:4f:be:bc:01:a6:f0:
f2:e6:71:d4:ff:53:86:b3:dd:05:ba:64:96:a0:a3:
f4:eb:f7:92:73:0e:03:ec:76:5f:bf:85:de:76:8a:
45:e4:60:dd:f9:d8:98:15:b8:b3:4d:07:3b:c2:30:
85:3b:99:62:06:7a:14:4d:54:7e:4f:ae:89:43:73:
6c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B3:20:9E:0C:C8:B5:8E:2E:22:77:45:F9:77:2E:14:B2:89:85:1E
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/GbMgngzItY4uIndF-XcuFLKJhR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.96.0/24
IPv6:
2a13:e480::/29
Signature Algorithm: sha256WithRSAEncryption
42:33:e3:e7:b0:a9:37:10:7d:d1:a3:d0:ee:c7:b3:04:43:15:
4c:4b:2a:ed:ee:db:fa:e6:3f:21:db:90:be:cf:0a:70:59:d5:
5a:d4:35:67:a7:00:7b:75:47:2e:82:cb:06:84:96:9c:83:e3:
6a:83:b9:f5:47:d4:8a:f6:a2:4d:33:2c:67:f4:36:c1:fe:37:
bf:89:05:c6:26:1e:4c:5a:c0:ba:ea:1c:37:1e:1e:c6:59:6b:
a9:36:2e:85:40:bd:51:27:e9:3c:ba:41:f3:4e:1e:48:e9:2f:
bf:e1:c8:79:a4:d9:e7:88:4f:b5:d3:43:99:f8:e2:d8:05:51:
51:0e:6d:ae:08:f0:dc:0b:a3:d0:0b:2b:d1:01:67:db:79:0e:
a5:87:9e:f7:16:51:2a:51:0f:74:01:cc:61:07:43:56:18:27:
11:23:1a:a9:93:0b:77:30:c0:02:20:95:5b:5f:12:63:4b:b4:
b9:48:49:97:f3:d9:d2:81:a9:95:91:d9:de:bf:02:f0:70:cf:
5d:ae:24:c8:ce:c7:24:a3:df:82:b0:68:e7:3b:7e:e9:14:c0:
5c:81:1a:11:32:56:81:c5:97:a7:33:9c:bb:82:a6:25:68:10:
35:9f:ca:33:a0:68:36:99:90:c7:eb:10:5c:12:5c:95:b1:ba:
40:c2:ef:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:32:51 2026 by rpki-client