Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/GpsXVdWfTVrTw1I71qKjHAi-OwY.roa
File: GpsXVdWfTVrTw1I71qKjHAi-OwY.roa (raw, json)
Hash identifier: 37jMyQ9qnFLk9VNqPb2W6JdCqnsDuBdiD0ur3v/oEEw=
Subject key identifier: 1A:9B:17:55:D5:9F:4D:5A:D3:C3:52:3B:D6:A2:A3:1C:08:BE:3B:06
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 019D7627E88BD0A18B6D919CD12D9F9290EC
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/GpsXVdWfTVrTw1I71qKjHAi-OwY.roa
Signing time: Fri 10 Apr 2026 06:50:20 +0000
ROA not before: Fri 10 Apr 2026 06:50:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50386
IP address blocks: 77.73.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:27:e8:8b:d0:a1:8b:6d:91:9c:d1:2d:9f:92:90:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Apr 10 06:50:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a9b1755d59f4d5ad3c3523bd6a2a31c08be3b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:a2:66:6f:1d:f2:2d:97:07:43:69:f9:cc:
c4:a0:99:2f:3d:a1:fe:d5:85:b9:c6:92:60:12:8c:
56:e6:15:bc:b0:a0:11:00:dd:ae:0b:ad:15:6d:34:
f7:67:b5:a4:a7:d3:ab:e0:92:27:81:b1:4d:b9:18:
38:16:f8:1a:d1:ac:11:37:12:14:53:eb:54:49:d3:
ad:1e:5e:93:47:1e:1f:b1:90:e9:2e:43:f6:b4:e9:
ef:68:3b:c0:a7:0b:74:95:12:f2:71:6f:df:e3:aa:
fc:d4:5f:b9:5a:80:1b:8b:8b:89:80:b7:91:b7:1c:
fd:2b:03:25:08:5f:24:54:75:d4:1e:0c:ab:97:07:
a9:2d:e1:e8:ae:1b:7c:ee:88:64:8b:a8:35:9e:fd:
5e:7b:e3:f6:77:f2:65:5c:c6:73:1e:5a:cc:02:37:
f3:cb:f0:a2:1a:43:3d:05:b1:3e:0e:ec:b5:7d:23:
0e:4f:8a:50:f2:91:3c:c3:1e:48:6f:3c:22:f8:90:
11:78:c8:2d:b7:0c:11:c2:d1:6e:21:24:50:25:4a:
35:bf:55:c5:df:85:b7:14:5f:66:26:02:61:b7:38:
c0:b1:c0:5c:41:9b:8c:cf:34:da:8c:6a:52:c0:fa:
e1:ed:37:e1:37:82:de:d7:00:09:eb:8e:0c:3b:de:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9B:17:55:D5:9F:4D:5A:D3:C3:52:3B:D6:A2:A3:1C:08:BE:3B:06
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/GpsXVdWfTVrTw1I71qKjHAi-OwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.130.0/24
Signature Algorithm: sha256WithRSAEncryption
91:65:3f:2a:f9:dd:5b:4e:c1:40:03:b2:74:f5:bd:9e:22:e8:
1f:4f:c3:0c:bc:35:86:44:44:0c:60:4a:58:00:a4:5a:23:0d:
71:30:18:65:bb:04:2c:4e:5b:f5:46:55:3e:a9:88:6d:df:0f:
57:c1:ea:f6:a0:60:8d:53:7f:a2:ed:e3:d9:5f:0c:4e:42:28:
c1:cf:46:b7:d5:d5:14:a7:6e:f9:52:61:9d:7c:37:7e:fb:18:
ad:71:ba:5b:89:fa:fa:5c:92:0f:48:0f:52:53:08:e6:a7:bd:
16:13:a8:b7:b6:26:63:8b:29:45:20:4f:d6:5d:a7:dd:9d:89:
93:cf:76:08:bb:9b:6a:67:6d:11:da:30:0e:d2:c5:98:f9:58:
9b:5b:b7:e9:80:6f:c7:96:a4:a4:57:c3:db:da:b9:d6:a6:da:
a4:0e:e7:08:25:86:6e:d4:62:bc:b5:78:a1:20:f4:38:fa:21:
ad:0b:fe:e8:74:5f:0b:11:dc:e0:07:76:fc:90:12:4b:e0:f6:
1a:db:b5:ab:8a:78:44:e4:1f:55:c5:8f:eb:e5:9c:3b:38:20:
f9:09:39:84:16:08:56:23:1d:9b:ef:0d:a2:23:26:6c:c0:8e:
35:7c:9a:67:e1:52:40:e7:f7:83:36:c6:e7:f4:ca:24:79:bc:
b7:e1:bd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:37 2026 by rpki-client