Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/GyHd5XuUbP3bqI0dxyUVPdpwj6o.roa
File: GyHd5XuUbP3bqI0dxyUVPdpwj6o.roa (raw, json)
Hash identifier: rtTDD2F5BI2NqSlLQh/8z44B+hw/oJmiGSOJJOhHzMw=
Subject key identifier: 1B:21:DD:E5:7B:94:6C:FD:DB:A8:8D:1D:C7:25:15:3D:DA:70:8F:AA
Certificate issuer: /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial: 019E6DB964CD3C7D19079497DB27263F0AC0
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/GyHd5XuUbP3bqI0dxyUVPdpwj6o.roa
Signing time: Thu 28 May 2026 08:35:26 +0000
ROA not before: Thu 28 May 2026 08:35:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41913
IP address blocks: 91.103.152.0/23 maxlen: 23
91.103.154.0/23 maxlen: 23
136.143.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:b9:64:cd:3c:7d:19:07:94:97:db:27:26:3f:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Validity
Not Before: May 28 08:35:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b21dde57b946cfddba88d1dc725153dda708faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:ad:04:05:e6:4f:dc:57:57:dd:4d:94:8c:
20:cd:e4:eb:d2:df:37:8a:77:d1:9e:a9:b3:f0:2f:
6c:52:69:13:80:ee:e0:7c:9f:d1:b5:6f:b7:6d:ee:
8c:04:7e:c4:54:80:bc:d4:1e:ba:ee:31:51:58:8e:
24:f9:d7:b5:75:4f:fc:20:02:ef:7c:99:f5:1f:86:
81:4f:2e:19:d4:fb:e2:75:d7:c2:6e:6b:15:b8:60:
cc:28:b2:ff:fd:19:87:5f:78:0c:84:72:10:72:35:
12:1a:be:d8:50:66:9f:1a:a6:e7:ae:25:0d:7b:b0:
f5:23:2d:c1:c4:e3:12:94:fc:64:e6:5f:65:2d:04:
0c:6c:d3:d7:08:e5:98:9f:df:93:d9:8b:23:ce:e4:
28:e4:27:29:66:4b:c2:6b:fc:b2:3a:63:fc:6f:52:
2a:17:3e:77:94:cc:17:2c:f3:ab:be:ed:62:5d:a5:
8c:0d:6a:7d:73:f9:7f:45:b0:32:03:36:84:aa:18:
aa:44:ee:33:7b:19:d8:5f:bb:32:67:ff:f6:f5:fd:
91:ad:d0:33:ad:b7:09:da:f8:a7:81:a3:c6:07:65:
b4:75:f7:77:8d:f5:4c:16:f7:2e:6b:dc:8b:da:fb:
6c:8a:00:ba:d6:d1:1c:42:b3:f6:3f:f4:f9:3f:92:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:21:DD:E5:7B:94:6C:FD:DB:A8:8D:1D:C7:25:15:3D:DA:70:8F:AA
X509v3 Authority Key Identifier:
keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/GyHd5XuUbP3bqI0dxyUVPdpwj6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.152.0/22
136.143.168.0/23
Signature Algorithm: sha256WithRSAEncryption
02:39:bd:2b:81:30:6e:ef:ba:7e:fc:24:75:e3:94:c4:28:61:
fb:ae:db:3c:68:b0:8b:f4:11:57:71:bf:36:c6:4a:73:83:b0:
cc:64:13:80:89:ac:35:ab:e6:d7:6f:68:90:7c:93:e3:d4:d2:
f6:11:77:2b:65:ba:22:35:50:ce:9d:80:b2:5f:95:9f:98:71:
7e:68:42:5f:bc:40:d4:ad:cd:ca:98:f4:4e:b9:3c:94:2b:49:
7b:0b:9d:07:3e:e8:a7:fe:72:6a:86:a3:15:2f:c3:0f:71:34:
fe:9c:80:55:4d:aa:08:09:87:28:75:27:de:1d:6e:cb:7e:65:
b6:9b:c0:8e:fa:fe:2a:42:bc:3a:24:51:ec:8e:17:14:2e:92:
b8:f8:87:a3:5c:b4:fd:ea:c2:c8:bc:b3:5a:7e:f5:38:0c:10:
5a:23:15:be:26:ae:4a:02:e6:80:d5:a5:5b:b9:9b:e3:9d:b0:
d1:a2:8a:e2:16:f5:e7:1c:2b:93:5f:03:68:3d:e7:60:21:95:
eb:c8:d5:18:2b:d2:61:f4:80:a8:2a:98:40:3a:f0:c2:e7:d5:
52:c1:cf:72:4e:b6:8d:ae:45:6b:d2:be:c5:a7:7b:0d:39:bf:
2f:27:da:69:9a:e9:fc:ff:cb:0b:c7:1f:a6:29:68:67:3b:42:
13:7d:a8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:07:13 2026 by rpki-client