Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/GczknFyVtiqKEdHd2-B_sb0p9T8.roa
File: GczknFyVtiqKEdHd2-B_sb0p9T8.roa (raw, json)
Hash identifier: Uc7AtvGKZCQRXYTh0ShgjFxEu/21BkvS76LHDyC+CfU=
Subject key identifier: 19:CC:E4:9C:5C:95:B6:2A:8A:11:D1:DD:DB:E0:7F:B1:BD:29:F5:3F
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 019EA197F1E59E59D225E0952FE2F53058CF
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/GczknFyVtiqKEdHd2-B_sb0p9T8.roa
Signing time: Sun 07 Jun 2026 10:19:10 +0000
ROA not before: Sun 07 Jun 2026 10:19:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.165.27.0/24 maxlen: 24
194.169.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a1:97:f1:e5:9e:59:d2:25:e0:95:2f:e2:f5:30:58:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jun 7 10:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19cce49c5c95b62a8a11d1dddbe07fb1bd29f53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5d:6a:ab:7a:19:36:21:17:9c:b3:ae:6b:af:
a6:9f:9d:b1:d9:20:93:1f:98:71:73:8f:31:d0:25:
95:b7:89:61:e7:4f:ca:54:97:43:19:c2:09:22:92:
0e:81:5e:18:d7:5a:c9:30:a0:bb:fb:1d:2e:b6:e6:
dd:dd:15:0c:d4:fb:15:9f:37:48:2d:73:a3:84:5e:
b5:45:41:83:7a:dd:74:e7:b4:fb:56:5e:28:30:6e:
39:04:6a:a8:35:a1:02:e4:20:48:d4:1e:57:b6:fa:
a4:82:0b:de:ac:4e:e7:64:4a:5f:1a:91:b4:64:63:
3a:a9:8b:e8:62:ce:eb:45:73:94:5a:b1:a7:41:0c:
60:b8:48:c7:0e:c8:a5:24:17:45:14:e0:fc:26:1b:
22:d3:36:4d:13:e6:e6:ec:71:2e:7a:9a:98:8b:54:
a5:5f:7f:9c:ff:2e:0c:97:8b:79:58:66:df:10:16:
91:c0:09:57:d8:88:ad:fc:5b:89:b8:12:51:3e:80:
d8:50:2e:75:f6:be:db:da:95:f2:b8:59:6a:b0:68:
a6:ea:60:63:25:a7:5b:b4:5f:08:5d:b9:ee:15:08:
82:b4:ea:bf:e1:22:65:22:4f:a0:32:e7:d2:ae:1d:
42:d0:5f:ab:f0:a7:f3:43:10:e3:b7:8e:41:c1:27:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CC:E4:9C:5C:95:B6:2A:8A:11:D1:DD:DB:E0:7F:B1:BD:29:F5:3F
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/GczknFyVtiqKEdHd2-B_sb0p9T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.27.0/24
194.169.49.0/24
Signature Algorithm: sha256WithRSAEncryption
90:25:60:26:12:58:62:a2:cf:9b:90:19:cd:cc:8a:b2:65:0f:
63:d3:54:00:4d:a7:69:8c:d2:dd:be:78:a5:90:7c:23:c6:39:
9c:d4:2b:3a:a4:4f:8a:0c:30:e1:47:1d:5c:51:58:5a:dc:09:
ff:f7:20:44:ce:9d:01:2e:ca:fe:6b:af:e7:9f:b1:4d:44:5c:
9a:7a:23:08:14:40:93:04:3e:03:d3:16:5c:5f:c1:f3:fd:ba:
40:26:60:74:57:82:95:18:27:92:d2:6e:35:d5:f5:19:77:f6:
38:b8:d3:70:b8:14:a0:88:de:d3:86:c2:1c:f4:c5:1b:b9:f0:
1e:ad:ee:a1:fd:b7:b5:d4:11:6b:58:95:52:05:b4:3d:0f:b4:
45:a6:2e:df:72:8c:7e:72:23:84:4f:02:56:5b:d8:5a:e9:d8:
ea:60:03:b4:d8:2c:6a:44:84:7e:9c:be:90:43:8e:55:9a:11:
45:f2:7d:ef:bc:ce:96:3d:d8:5e:5f:5e:4c:45:61:a1:e2:78:
ff:09:fe:28:c6:13:81:16:c2:fc:79:6c:47:6a:23:26:6e:53:
fd:3c:db:f6:67:4a:c0:27:cc:5e:80:8e:18:7d:c8:2d:3f:7b:
28:65:a7:d8:90:73:1a:5c:75:a0:25:00:33:cc:23:c4:42:55:
c3:23:1d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:10 2026 by rpki-client