Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GAcb_1BsAJ4XYOZZMOLdsHyfW5M.roa
File: GAcb_1BsAJ4XYOZZMOLdsHyfW5M.roa (raw, json)
Hash identifier: DbiAytHltA71Mfm+CWa2uVDthhxhpTJLnLaENqIfGeQ=
Subject key identifier: 18:07:1B:FF:50:6C:00:9E:17:60:E6:59:30:E2:DD:B0:7C:9F:5B:93
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A09A41F69AD3552EB40A31899438E6671B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GAcb_1BsAJ4XYOZZMOLdsHyfW5M.roa
Signing time: Sun 13 Sep 2026 10:13:29 +0000
ROA not before: Sun 13 Sep 2026 10:13:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149513
IP address blocks: 87.83.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:41:f6:9a:d3:55:2e:b4:0a:31:89:94:38:e6:67:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 13 10:13:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18071bff506c009e1760e65930e2ddb07c9f5b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:e4:f5:d8:90:0e:bd:17:4d:22:50:01:1e:
df:12:d1:4d:b9:14:58:e4:86:5e:c4:a3:2a:bc:87:
77:0b:35:46:47:44:37:3d:82:45:d1:c6:1a:1a:db:
7d:2a:f2:d8:3a:6c:88:84:60:28:3f:11:16:6e:a8:
bf:17:a0:b0:42:86:71:9f:b7:fd:73:93:84:88:c6:
b2:86:46:ac:12:f0:16:6c:c7:bf:ce:47:10:d5:a1:
b9:52:88:d9:0a:47:95:a7:8c:1d:2e:da:74:05:a9:
ab:8c:01:43:d3:f3:f3:bc:74:cc:96:7f:07:d5:b6:
a0:c2:99:fa:48:eb:fd:4d:7d:b5:1a:e1:1e:43:4c:
a2:a5:08:96:09:8e:75:2d:fe:38:f9:6e:20:ec:f3:
70:b1:06:7d:83:16:c0:b2:e9:a1:5f:ef:63:c6:1d:
e9:5c:9c:62:a0:19:21:60:4d:e0:5e:cc:67:77:16:
3e:73:fb:67:2f:dc:1c:c9:ba:e2:1d:c1:27:1c:25:
35:a5:49:a8:e8:80:46:7a:1c:16:fb:07:40:0b:ed:
2e:d9:ea:a7:e1:48:b9:17:e5:97:e6:e3:ad:3c:e1:
e8:4e:c8:a4:a1:17:0a:37:9a:5b:4b:9d:bb:ef:96:
76:51:9b:3f:9d:bc:a5:e1:2c:46:cc:7b:70:ce:7c:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:07:1B:FF:50:6C:00:9E:17:60:E6:59:30:E2:DD:B0:7C:9F:5B:93
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GAcb_1BsAJ4XYOZZMOLdsHyfW5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.216.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:5b:74:f7:80:c7:7e:54:e8:88:70:0c:87:d6:6b:71:c1:2e:
92:ab:fe:9c:a3:f8:b3:f0:53:fd:c9:fe:21:9d:cf:8e:1b:24:
ee:46:62:47:92:ee:e7:da:0e:36:f7:e0:a5:29:0a:6a:9f:d2:
07:4f:30:87:c9:ed:17:e0:dd:cf:05:f2:9e:43:e2:96:e0:c8:
bc:ad:ac:7e:9f:81:df:a1:a0:ec:7a:b8:c2:22:4e:f8:43:dc:
db:e8:77:16:40:64:83:87:4a:82:23:62:9f:9e:8a:12:97:73:
1e:6e:24:23:bc:84:0f:b4:7c:76:ab:46:19:82:b3:c8:aa:61:
f8:0b:5b:c1:ac:8c:0c:b6:c1:ab:36:fe:98:4f:de:ae:26:f0:
6f:42:0d:8c:ae:21:b1:f1:11:96:f6:bb:05:9b:54:5e:c5:a4:
da:e4:6d:e1:3d:f4:38:59:40:3b:3a:3f:d3:65:4c:a4:19:75:
21:1c:aa:72:8f:c8:2d:ff:66:e3:15:6b:d8:d5:6a:98:50:a6:
09:aa:49:c4:6a:5d:dc:67:2f:0f:fd:3b:fd:2e:85:2d:78:09:
8c:24:c0:f1:cf:9a:7f:5b:18:a8:25:2f:d9:2f:d5:72:24:98:
fb:08:b9:4e:5d:bf:0b:73:66:cd:0f:2e:db:29:78:48:66:4b:
cb:9c:ad:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCaQfaa01UutAoxiZQ45mcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTEzMTAxMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODA3MWJmZjUwNmMwMDllMTc2MGU2NTkzMGUyZGRiMDdjOWY1YjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0snk9diQDr0XTSJQAR7fEtFNuRRY
5IZexKMqvId3CzVGR0Q3PYJF0cYaGtt9KvLYOmyIhGAoPxEWbqi/F6CwQoZxn7f9
c5OEiMayhkasEvAWbMe/zkcQ1aG5UojZCkeVp4wdLtp0BamrjAFD0/PzvHTMln8H
1bagwpn6SOv9TX21GuEeQ0yipQiWCY51Lf44+W4g7PNwsQZ9gxbAsumhX+9jxh3p
XJxioBkhYE3gXsxndxY+c/tnL9wcybriHcEnHCU1pUmo6IBGehwW+wdAC+0u2eqn
4Ui5F+WX5uOtPOHoTsikoRcKN5pbS52775Z2UZs/nbyl4SxGzHtwznzzLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBgHG/9QbACeF2DmWTDi3bB8n1uTMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvR0FjYl8xQnNBSjRYWU9aWk1PTGRzSHlmVzVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV1PYMA0G
CSqGSIb3DQEBCwUAA4IBAQCbW3T3gMd+VOiIcAyH1mtxwS6Sq/6co/iz8FP9yf4h
nc+OGyTuRmJHku7n2g429+ClKQpqn9IHTzCHye0X4N3PBfKeQ+KW4Mi8rax+n4Hf
oaDserjCIk74Q9zb6HcWQGSDh0qCI2KfnooSl3MebiQjvIQPtHx2q0YZgrPIqmH4
C1vBrIwMtsGrNv6YT96uJvBvQg2MriGx8RGW9rsFm1RexaTa5G3hPfQ4WUA7Oj/T
ZUykGXUhHKpyj8gt/2bjFWvY1WqYUKYJqknEal3cZy8P/Tv9LoUteAmMJMDxz5p/
WxioJS/ZL9VyJJj7CLlOXb8Lc2bNDy7bKXhIZkvLnK1b
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:15:04 2026 by rpki-client