Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/GmtGk4SLn-DDmgyrRY3obXFqmv0.roa
File: GmtGk4SLn-DDmgyrRY3obXFqmv0.roa (raw, json)
Hash identifier: mR8U2nhz9ny7+9ARenqxmpCgIeORt3ULne143pofros=
Subject key identifier: 1A:6B:46:93:84:8B:9F:E0:C3:9A:0C:AB:45:8D:E8:6D:71:6A:9A:FD
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A08AD8ED8D88703EE1C5DBE998277E1DD0
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/GmtGk4SLn-DDmgyrRY3obXFqmv0.roa
Signing time: Thu 10 Sep 2026 10:24:27 +0000
ROA not before: Thu 10 Sep 2026 10:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 177.1.53.0/24 maxlen: 24
201.50.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:d8:ed:8d:88:70:3e:e1:c5:db:e9:98:27:7e:1d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Sep 10 10:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a6b4693848b9fe0c39a0cab458de86d716a9afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:47:4f:16:45:eb:47:e7:23:27:33:b8:4a:
11:41:40:ba:8f:ad:6e:0b:cb:e5:08:c8:73:a4:ca:
62:a7:9f:3d:b1:9c:80:b4:a6:c6:4b:c0:cf:6b:ff:
21:8f:e3:da:92:77:61:0b:78:0d:14:81:1f:07:db:
cb:b7:40:0e:ef:ef:31:02:cf:a3:83:6e:9c:0c:70:
e9:43:4d:b6:2c:9b:a6:1f:02:a9:af:33:1d:92:6d:
be:b8:8a:ec:cd:df:59:cf:b0:f6:ad:b6:19:49:86:
56:7d:87:f3:df:c7:72:ab:4c:ac:39:d9:13:75:d6:
07:62:7b:d9:64:91:77:11:5c:3a:4e:e7:a9:bf:11:
be:01:f5:a1:06:8a:92:3c:97:5c:de:81:4f:93:31:
08:1b:90:40:f8:26:c2:cc:51:58:05:95:22:04:b0:
a5:dc:7d:98:82:bf:d0:08:57:56:d8:2c:bd:a6:0e:
e6:76:e0:ad:80:84:09:9a:bd:73:28:dd:0c:df:08:
c3:85:80:b2:90:34:e0:79:04:2c:6b:b4:03:90:ab:
e9:3b:30:ed:25:0d:58:e4:a5:7e:d2:b7:2e:e5:51:
8a:0b:92:cc:55:12:8c:84:97:59:3e:fb:9f:bb:58:
83:46:0e:e4:e7:e4:9c:4e:9b:b0:19:eb:2a:5e:fe:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6B:46:93:84:8B:9F:E0:C3:9A:0C:AB:45:8D:E8:6D:71:6A:9A:FD
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/GmtGk4SLn-DDmgyrRY3obXFqmv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.1.53.0/24
201.50.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:da:a4:a5:f1:3f:f2:24:dd:fb:8d:a5:d6:b3:8e:4a:0d:f3:
91:2b:cd:24:17:db:62:59:68:d8:98:67:41:da:66:06:2f:cb:
06:94:ac:36:8f:a9:94:ad:32:ca:c4:c1:d9:e9:e5:05:0f:07:
cc:83:fa:c7:f0:a9:7a:ee:95:69:ce:86:6a:97:9d:ee:d9:52:
ee:23:5f:d9:d5:07:ee:40:aa:32:ce:c0:36:bc:29:94:85:5c:
b4:d0:1a:3c:e0:02:f1:04:9e:3d:44:03:d6:78:41:36:4b:76:
cf:5f:b0:04:d5:13:b6:58:b6:d7:31:32:f9:f2:eb:f2:3e:bd:
5d:8b:07:60:d3:8e:1c:ef:ae:94:c8:c1:84:2c:3f:81:f5:dd:
fe:65:6c:06:f9:99:cb:61:ad:7a:c1:32:d6:3d:7a:23:95:1b:
ef:38:10:2e:0b:66:c8:2a:c1:90:6b:04:2d:2a:19:19:cd:65:
72:e1:b8:88:0a:38:84:97:93:30:23:f3:a3:e6:81:d3:19:e8:
69:24:cd:02:cb:4e:62:fe:4b:22:41:7e:72:d6:08:58:da:32:
e3:5c:f7:d2:ab:ae:25:84:db:22:6b:22:5c:f7:ab:23:e3:bc:
3d:f0:91:b3:82:02:ea:1b:14:ec:3a:af:5d:3e:21:f7:f1:a1:
72:1f:42:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCK2O2NiHA+4cXb6Zgnfh3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZmEyNjIzYjIyMmQwOGQ5MzU2OTc1MDQ0Yjk0MDdiNWZl
YTQ4YmEwHhcNMjYwOTEwMTAyNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTZiNDY5Mzg0OGI5ZmUwYzM5YTBjYWI0NThkZTg2ZDcxNmE5YWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6ZHTxZF60fnIyczuEoRQUC6j61u
C8vlCMhzpMpip589sZyAtKbGS8DPa/8hj+PakndhC3gNFIEfB9vLt0AO7+8xAs+j
g26cDHDpQ022LJumHwKprzMdkm2+uIrszd9Zz7D2rbYZSYZWfYfz38dyq0ysOdkT
ddYHYnvZZJF3EVw6TuepvxG+AfWhBoqSPJdc3oFPkzEIG5BA+CbCzFFYBZUiBLCl
3H2Ygr/QCFdW2Cy9pg7mduCtgIQJmr1zKN0M3wjDhYCykDTgeQQsa7QDkKvpOzDt
JQ1Y5KV+0rcu5VGKC5LMVRKMhJdZPvufu1iDRg7k5+ScTpuwGesqXv7JcwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBprRpOEi5/gw5oMq0WN6G1xapr9MB8GA1UdIwQY
MBaAFGn6JiOyItCNk1aXUES5QHtf6ki6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt
NzJmYjk3ZDU5Y2U0LzEvR210R2s0U0xuLUREbWd5clJZM29iWEZxbXYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0
LzEvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsQE1AwQA
yTJ4MA0GCSqGSIb3DQEBCwUAA4IBAQCn2qSl8T/yJN37jaXWs45KDfORK80kF9ti
WWjYmGdB2mYGL8sGlKw2j6mUrTLKxMHZ6eUFDwfMg/rH8Kl67pVpzoZql53u2VLu
I1/Z1QfuQKoyzsA2vCmUhVy00Bo84ALxBJ49RAPWeEE2S3bPX7AE1RO2WLbXMTL5
8uvyPr1diwdg044c766UyMGELD+B9d3+ZWwG+ZnLYa16wTLWPXojlRvvOBAuC2bI
KsGQawQtKhkZzWVy4biICjiEl5MwI/Oj5oHTGehpJM0Cy05i/ksiQX5y1ghY2jLj
XPfSq64lhNsiayJc96sj47w98JGzggLqGxTsOq9dPiH38aFyH0Ko
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:06:59 2026 by rpki-client