Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/gpmKeKSdu4P8fyG-FV5jxZupaHc.roa
File: gpmKeKSdu4P8fyG-FV5jxZupaHc.roa (raw, json)
Hash identifier: XMF8G4sRkLuyi87lc6ccIATt2gmpyKahxczUcJ2Z9rc=
Subject key identifier: 82:99:8A:78:A4:9D:BB:83:FC:7F:21:BE:15:5E:63:C5:9B:A9:68:77
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019C8C14017655E9C7CB5126ACBB3DB3C499
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/gpmKeKSdu4P8fyG-FV5jxZupaHc.roa
Signing time: Mon 23 Feb 2026 19:57:27 +0000
ROA not before: Mon 23 Feb 2026 19:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209181
IP address blocks: 216.162.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8c:14:01:76:55:e9:c7:cb:51:26:ac:bb:3d:b3:c4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Feb 23 19:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82998a78a49dbb83fc7f21be155e63c59ba96877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:9e:a9:f8:3b:90:18:19:b3:85:d4:5c:43:
ac:6c:4d:76:7c:a8:5a:1a:af:9c:b7:97:15:1c:92:
5b:70:96:87:73:85:8f:38:a6:f2:fa:51:41:c7:43:
0c:84:b0:53:f1:20:21:05:b2:4d:c0:9e:d4:40:06:
b3:ac:76:d1:13:93:4e:60:61:15:7e:6a:13:91:ff:
8f:58:37:69:ef:e8:7d:ac:9d:4d:0a:4d:b4:54:db:
3a:d6:d7:ab:bd:f3:a9:26:63:be:48:8c:c7:3f:74:
37:cb:ce:d9:8f:e9:2d:5d:34:12:48:74:2e:da:f3:
66:53:21:a3:ec:81:53:1c:e9:40:20:b2:e7:3e:d0:
d0:8e:0b:ae:4e:27:ab:65:a9:d9:32:31:13:08:21:
50:b7:28:25:7f:f2:ba:70:71:a9:49:c2:e0:be:dc:
73:b2:9c:6d:95:9b:aa:d8:36:6d:b1:09:b4:0b:e9:
32:97:73:33:2b:e8:f5:04:d7:8d:e5:18:8c:8d:03:
f0:55:c4:6c:dc:74:1d:e7:12:a2:0b:85:f7:ef:3e:
da:d9:df:e3:25:1d:92:9c:91:bf:8b:39:eb:e4:85:
87:31:6d:8b:24:0a:70:eb:5b:7b:a6:53:fb:6c:48:
4f:f2:0c:78:5a:d1:89:c0:04:b2:ce:33:15:13:d1:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:99:8A:78:A4:9D:BB:83:FC:7F:21:BE:15:5E:63:C5:9B:A9:68:77
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/gpmKeKSdu4P8fyG-FV5jxZupaHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.162.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:8f:9a:e5:62:e3:dc:8e:0e:c9:87:61:7e:96:48:35:74:bc:
20:13:6e:55:f8:21:85:fb:9a:fd:47:68:97:a9:c8:70:bb:de:
c3:c0:20:aa:3d:43:bd:44:f9:37:46:c8:81:8c:88:5d:71:e3:
80:81:8e:c0:15:27:b3:e2:3b:4f:86:46:e5:50:17:5a:33:16:
d2:f6:16:a5:6e:76:32:15:58:de:7b:e7:ac:af:0d:ef:46:36:
52:6b:f5:46:8e:6a:29:16:df:05:36:3a:72:4b:c6:dd:c9:02:
ef:c4:60:34:49:00:dd:8c:f6:cc:3e:6f:e6:06:2b:81:84:e3:
a4:5a:9d:06:c3:50:f3:fa:c0:14:04:df:b9:b0:07:ed:b6:c7:
ee:6a:30:2d:c2:09:fe:ad:c3:ae:a6:5b:16:5e:3e:55:97:4f:
f7:33:b8:6a:4f:8e:5d:d4:35:c5:f9:73:52:5f:f4:d6:f9:93:
a3:ef:35:b8:73:56:e9:c4:76:b8:af:99:e7:ce:54:7a:83:09:
68:6d:d3:10:c1:f4:04:79:2c:67:06:c3:23:34:4c:b2:1e:f4:
57:5e:40:b5:89:41:88:7f:2f:5a:86:1a:98:41:78:f5:3d:c9:
f8:e7:49:af:06:2b:6d:dd:86:9f:a6:80:fc:aa:f5:fd:aa:a0:
c3:4c:91:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:09 2026 by rpki-client