Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GIUaTVF2_7pGZ644jVUKb0maBVw.roa
File: GIUaTVF2_7pGZ644jVUKb0maBVw.roa (raw, json)
Hash identifier: 9de2c7Ltf536zozioHxhjeZkWQXFPpqBQ73QfJBdsTM=
Subject key identifier: 18:85:1A:4D:51:76:FF:BA:46:67:AE:38:8D:55:0A:6F:49:9A:05:5C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A09EE563631E9D44822494C767F1AF0A31
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GIUaTVF2_7pGZ644jVUKb0maBVw.roa
Signing time: Mon 14 Sep 2026 07:50:28 +0000
ROA not before: Mon 14 Sep 2026 07:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198128
IP address blocks: 82.109.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:e5:63:63:1e:9d:44:82:24:94:c7:67:f1:af:0a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 14 07:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18851a4d5176ffba4667ae388d550a6f499a055c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:31:18:b5:70:1f:cb:b5:81:e3:85:4b:da:b2:
0e:51:c8:f2:0a:d6:a8:ed:49:a7:58:80:72:6d:ce:
56:90:76:d8:1b:0a:38:69:ad:29:42:48:83:5c:0f:
1a:e5:b1:e4:6a:3b:59:8c:a9:1e:27:8d:a6:25:03:
82:c0:bb:26:b3:90:c5:1b:f0:f5:99:3b:17:eb:4c:
6f:94:f5:5c:34:f7:89:6f:55:f7:80:8e:a0:c6:b8:
cf:94:45:65:76:b5:4e:1a:4f:08:8f:c5:64:9c:8e:
87:0f:48:07:d8:70:8d:e6:74:31:88:fa:df:55:b1:
84:fc:62:f1:b9:fb:83:b1:01:ec:cb:1e:78:6a:7b:
b9:d8:ca:11:d0:8a:0a:ab:76:02:66:8e:0e:16:f2:
82:58:be:c0:48:80:4c:ad:0a:38:f7:25:51:44:86:
24:1a:e0:74:2b:de:58:7e:02:5b:be:b7:1f:17:53:
bc:19:0d:71:db:1f:4d:43:f2:52:52:0d:88:fa:57:
83:44:b2:2c:b4:8f:e6:10:62:e8:12:05:87:ab:c5:
c3:b1:ca:e0:50:35:e5:7b:57:b2:ec:a8:08:fa:40:
6c:a8:6e:54:04:c6:a5:37:92:85:0e:9c:bc:6e:60:
29:b6:9f:ba:52:06:8c:fc:f3:33:76:e6:22:73:00:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:85:1A:4D:51:76:FF:BA:46:67:AE:38:8D:55:0A:6F:49:9A:05:5C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GIUaTVF2_7pGZ644jVUKb0maBVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.200.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:85:d6:b2:f0:0b:f0:ef:25:ac:13:88:70:a2:98:be:c2:c3:
bf:99:61:0a:7b:8a:56:00:6b:8b:53:28:d3:6c:ce:c5:c7:7d:
0b:3d:2e:3c:ce:5f:e8:51:95:0f:4d:09:7c:96:f8:9d:96:58:
8e:e5:91:6d:78:8e:c0:7f:31:47:d8:09:56:5d:3d:de:ce:68:
8f:c9:e8:f9:e5:9c:13:28:f3:73:e8:ae:5d:80:90:f1:18:52:
ce:6f:10:e1:22:f6:00:86:55:b2:34:99:f3:25:19:14:b1:f0:
8e:bb:e8:3c:80:c2:29:d6:e9:67:b0:c3:2e:26:96:e2:cb:54:
e2:41:6d:ee:b0:de:e9:a0:28:dd:ce:b8:97:e4:17:a8:9d:f5:
f4:36:6b:98:e3:2b:fb:32:67:1e:78:d9:c6:d9:af:31:14:b3:
af:6f:a4:df:23:93:ee:52:36:e6:e9:b4:ff:f2:99:d0:15:92:
22:96:61:4a:3e:d0:58:f3:55:34:15:6b:d2:0d:8f:63:92:4e:
90:c1:4c:a4:ff:09:3e:20:5a:44:ea:8b:ec:c7:fa:e0:a3:e3:
cb:2d:a2:21:03:90:40:fe:42:a5:0e:e0:e7:fb:7e:26:57:51:
20:af:c5:0c:d7:26:db:19:48:b1:ee:fd:76:c7:61:4c:dd:0c:
bf:9f:73:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:21 2026 by rpki-client