Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/GCR5fStnI30XKdsvCkEU8-FA8yY.roa
File: GCR5fStnI30XKdsvCkEU8-FA8yY.roa (raw, json)
Hash identifier: GCd9XNROyyN1UpPkKaJbAUZq33QgeZj03xTsm9ooCLA=
Subject key identifier: 18:24:79:7D:2B:67:23:7D:17:29:DB:2F:0A:41:14:F3:E1:40:F3:26
Certificate issuer: /CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Certificate serial: 019C06C131E168869237CAB30BE355619CA0
Authority key identifier: 0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/GCR5fStnI30XKdsvCkEU8-FA8yY.roa
Signing time: Wed 28 Jan 2026 22:37:30 +0000
ROA not before: Wed 28 Jan 2026 22:37:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213001
IP address blocks: 195.39.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:06:c1:31:e1:68:86:92:37:ca:b3:0b:e3:55:61:9c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Validity
Not Before: Jan 28 22:37:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1824797d2b67237d1729db2f0a4114f3e140f326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:c2:08:c9:2f:49:20:cb:ff:59:52:c1:4d:
42:5c:36:19:4d:7b:0e:72:ef:74:9d:3c:74:a7:75:
34:61:38:75:bf:31:da:f6:a4:44:48:a5:ea:c2:a3:
62:9b:89:2e:74:47:73:e7:0e:39:ce:21:83:21:a7:
82:f1:f7:88:81:2e:29:c8:ce:e0:bb:2d:aa:1d:8d:
e8:a9:b6:83:18:eb:ef:cb:7a:c1:da:20:9e:9b:8a:
ed:bb:58:85:90:96:4b:35:39:16:e5:15:1c:b0:55:
16:7a:0d:de:99:50:3c:10:ba:06:a4:5c:2d:20:2f:
03:5a:a6:9b:25:77:db:24:40:81:a2:12:76:87:6d:
21:84:4e:ef:f7:db:dc:ec:36:cc:c0:98:28:ab:dd:
55:ac:76:57:5d:c3:d4:7b:25:6d:16:bc:5f:89:69:
93:35:99:d0:96:24:86:25:cb:18:5a:16:51:f1:9b:
fa:5b:8a:4f:40:cf:51:35:1a:55:c3:34:cb:a2:0c:
a2:c9:1b:49:53:b3:e2:f5:ab:43:d1:53:5c:ae:83:
83:b4:49:c6:8c:7f:8c:f6:70:54:4c:f9:6a:b8:da:
23:69:97:98:a8:58:c4:3b:45:b6:a2:8f:13:7d:6e:
44:d8:b0:eb:4d:be:a7:0b:44:c6:71:22:42:d7:dd:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:24:79:7D:2B:67:23:7D:17:29:DB:2F:0A:41:14:F3:E1:40:F3:26
X509v3 Authority Key Identifier:
keyid:0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/GCR5fStnI30XKdsvCkEU8-FA8yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.221.0/24
Signature Algorithm: sha256WithRSAEncryption
03:08:b6:2d:c0:8c:17:cf:f2:b7:15:66:31:11:f6:0f:e8:eb:
00:52:d7:a1:3d:47:c8:dd:90:ce:99:5b:f9:d8:c8:a1:a7:79:
53:2a:bd:2c:ef:7f:26:17:b5:7b:d5:d3:68:2e:79:90:dc:b2:
cb:ed:33:1d:59:5d:fb:c2:ca:c3:e7:f1:33:bf:4c:67:ec:31:
13:ab:49:24:5d:36:d9:89:26:8b:66:30:32:0a:9c:eb:6a:80:
05:d7:39:36:97:fa:34:f5:09:d5:d6:cc:cf:d2:2f:9f:44:56:
cf:bb:d0:10:5c:2f:08:3c:b0:80:6b:5e:4e:c6:58:35:85:31:
b6:44:e7:4f:ef:5e:68:6b:a5:11:b2:bf:e3:88:fa:fd:83:56:
13:3c:e2:d9:35:bf:83:f3:32:2d:a2:6b:fe:6c:99:31:af:fa:
c8:4d:02:64:0c:8f:7c:65:e1:2f:38:6d:bd:1d:39:1f:7a:91:
52:c6:52:91:57:a6:c2:96:5e:86:0d:5e:1b:86:c7:b7:81:b9:
db:4b:35:38:28:41:82:bd:d0:31:90:b5:35:e7:a9:bc:6d:4a:
d0:66:1c:07:b3:73:6b:20:74:b7:c7:ee:51:d9:c7:2c:31:a8:
a1:e2:bb:2f:29:9b:eb:00:49:13:36:84:f0:a7:c1:fa:54:39:
55:c7:72:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:54 2026 by rpki-client