Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/GBiCQBi8m4-enxXZqw25PlMWPLQ.roa
File: GBiCQBi8m4-enxXZqw25PlMWPLQ.roa (raw, json)
Hash identifier: gTvW1OlNiz8hjMHgTUjrVGo7tVYa1kNXNiD2T8nmxFU=
Subject key identifier: 18:18:82:40:18:BC:9B:8F:9E:9F:15:D9:AB:0D:B9:3E:53:16:3C:B4
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 019D720206B7C0731C156393A6708DBC0283
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/GBiCQBi8m4-enxXZqw25PlMWPLQ.roa
Signing time: Thu 09 Apr 2026 11:30:28 +0000
ROA not before: Thu 09 Apr 2026 11:30:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39402
IP address blocks: 185.124.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:02:06:b7:c0:73:1c:15:63:93:a6:70:8d:bc:02:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Apr 9 11:30:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1818824018bc9b8f9e9f15d9ab0db93e53163cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:af:b9:c0:e3:fa:08:c3:5b:84:d9:67:4e:
4f:8c:c2:52:2b:70:73:cf:1b:fa:87:3c:e8:c8:37:
4d:ea:06:83:4a:a4:04:cd:65:35:d1:c4:60:98:13:
42:a2:37:22:4f:b9:d2:d2:d6:f0:23:ab:96:52:aa:
88:36:dc:ed:68:0a:d9:b6:26:bf:a3:18:cf:44:2f:
18:23:1a:21:8f:67:95:ec:4e:2c:a6:1c:2b:c8:52:
23:ae:09:51:f5:3e:ec:3f:5f:de:18:8f:d7:13:3b:
f2:ba:b7:3c:4b:7c:a0:8f:15:38:41:9a:0b:f5:cd:
1c:88:7e:c9:e5:77:f9:f9:19:6a:31:5b:39:ed:5d:
82:d2:e1:37:f1:cf:83:6e:e2:73:b2:60:12:6b:a8:
68:bb:c1:20:ff:4a:16:f3:b9:27:01:fb:1b:b1:40:
ac:a2:f8:dd:4d:fd:c4:1c:7d:d8:03:83:d1:db:2e:
60:22:3e:6d:1e:67:94:15:4c:ba:6e:3a:ff:89:3c:
9d:5c:a4:e0:2c:38:37:63:bd:e9:34:3e:02:79:ef:
da:ad:1f:a9:20:db:b6:9c:36:6b:ac:14:de:19:67:
a7:84:70:bb:9d:a4:3e:a5:8e:3a:77:c6:c9:75:44:
ee:69:2c:46:f0:59:7a:81:e0:9d:55:e6:91:9b:95:
8f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:18:82:40:18:BC:9B:8F:9E:9F:15:D9:AB:0D:B9:3E:53:16:3C:B4
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/GBiCQBi8m4-enxXZqw25PlMWPLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:13:f3:f1:d9:bf:bd:e3:bb:81:0d:08:83:d7:9e:a4:d8:79:
2c:a4:cc:e7:39:67:02:89:4d:51:44:db:e4:5f:3a:16:9b:91:
68:91:9d:59:c4:49:35:f7:24:c7:2f:63:05:b4:13:63:a3:db:
de:c6:fd:8e:b0:8d:61:ac:a3:5f:3d:a3:7d:ca:17:40:6f:7b:
a8:bd:2f:f9:91:97:76:6a:b1:ed:2c:41:da:e9:32:e5:ec:8c:
d9:7c:70:1d:d2:75:47:13:e3:3f:7a:d5:fb:6a:05:41:35:98:
42:02:c5:d5:45:72:37:61:7c:40:06:97:ac:f2:3e:40:70:f0:
d4:cf:55:dd:63:7e:55:1d:be:21:c3:d2:8c:eb:e8:78:15:19:
36:a8:b2:18:4e:00:5a:fb:df:33:ed:d1:99:64:37:c4:cd:8f:
49:b8:f1:eb:75:83:86:b1:25:1d:94:e1:1e:36:64:62:5a:11:
af:7f:57:09:aa:dc:31:73:a6:f6:40:f1:9d:f8:6c:9e:0b:53:
b7:cb:c5:dc:76:57:e0:f4:11:ad:b4:e9:c3:9b:40:30:3f:cd:
71:4c:d2:fa:c8:10:13:98:93:bc:c4:02:9f:52:9d:69:39:b9:
93:33:97:33:fa:13:92:16:71:5a:b1:e1:fd:e4:d3:0c:3a:22:
f0:90:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:55:35 2026 by rpki-client