Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/GWyAGqdOn5bYyHYnvLDvJP7OcDo.roa
File: GWyAGqdOn5bYyHYnvLDvJP7OcDo.roa (raw, json)
Hash identifier: aePs2l3qizlCTkevGtE9e7vqvgCIXjUea/ZI4K6j0lQ=
Subject key identifier: 19:6C:80:1A:A7:4E:9F:96:D8:C8:76:27:BC:B0:EF:24:FE:CE:70:3A
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 019C8A36191F1A5EC7FC1EC611CC8221ECCF
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/GWyAGqdOn5bYyHYnvLDvJP7OcDo.roa
Signing time: Mon 23 Feb 2026 11:15:27 +0000
ROA not before: Mon 23 Feb 2026 11:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 217.147.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:36:19:1f:1a:5e:c7:fc:1e:c6:11:cc:82:21:ec:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Feb 23 11:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=196c801aa74e9f96d8c87627bcb0ef24fece703a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:c6:e9:c7:97:d6:74:cf:de:b0:f9:87:ec:
b8:a1:33:e7:9f:6f:d4:cc:36:93:4b:a3:21:0c:f7:
c4:8f:20:94:d7:04:3a:a4:8c:b3:77:25:a0:16:cd:
e9:44:f2:a2:b2:65:2c:0e:c4:be:7f:fc:f6:93:e9:
f9:97:67:02:d8:6f:6b:d0:57:2e:35:57:a2:15:30:
ea:35:ba:15:09:23:a3:2b:f8:7d:39:64:b6:6b:17:
77:ad:f8:da:3e:b1:01:e9:3d:0d:47:e8:68:f6:73:
ca:89:f0:aa:33:be:cd:af:76:2f:fa:ee:a8:bf:af:
e3:ca:9a:17:15:e8:e1:4f:12:67:99:37:be:45:23:
07:b9:d3:e4:0d:a5:24:bc:09:ff:13:39:6b:b1:62:
77:55:93:bb:8b:a9:01:28:57:87:22:1f:2f:36:9e:
7d:49:9b:2f:3b:31:1b:75:24:6e:a8:eb:d1:bb:7c:
12:ed:6d:52:5b:8f:0a:e4:9a:a0:b9:7c:ee:09:7d:
de:6d:15:6c:2a:19:55:a0:5d:ba:8d:ea:f8:ca:30:
6c:cb:20:57:e4:94:2d:72:2d:8d:5e:9b:b3:79:1c:
01:7e:82:56:5f:f4:fb:0b:b9:20:3d:21:ed:8b:ab:
d1:96:8c:d4:52:f9:1e:a4:11:b6:45:76:4d:f5:a9:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6C:80:1A:A7:4E:9F:96:D8:C8:76:27:BC:B0:EF:24:FE:CE:70:3A
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/GWyAGqdOn5bYyHYnvLDvJP7OcDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.167.0/24
Signature Algorithm: sha256WithRSAEncryption
91:3d:6d:61:69:ad:ce:ec:a3:74:75:d6:1f:4d:cf:e7:2b:86:
fa:2f:5a:5d:0e:ab:0b:06:73:93:93:62:34:7c:aa:aa:a3:ff:
20:7d:c7:6b:ef:74:a6:72:e9:ab:fe:ec:be:f7:cb:09:47:3a:
b5:3d:d3:67:60:f0:c8:60:18:8c:0d:ed:19:e3:98:53:ed:21:
3c:99:b5:3c:1d:20:8c:3a:60:35:56:bc:78:aa:c0:b7:fb:bc:
70:36:07:8f:bb:fd:7a:a1:f3:45:5f:6f:ec:20:56:46:89:2e:
06:90:8b:7f:97:e4:1d:f2:d0:81:2e:cf:6c:10:1b:bc:e9:34:
69:74:9c:d5:6a:69:32:f8:b8:5e:84:68:32:b6:aa:db:2e:1d:
6b:fe:02:b4:74:8d:bf:ec:90:99:7f:28:e9:a8:2d:07:71:73:
06:23:d1:01:a7:4c:ce:fd:df:57:f0:01:6f:fa:4e:ff:ca:43:
5c:6e:5f:89:15:4f:f5:9b:b1:3f:dc:4e:24:d1:82:71:0a:6e:
4c:0d:b4:87:64:a8:f7:d2:8d:6a:5b:9d:96:c4:80:69:29:62:
19:9d:f3:bb:ac:8e:e9:96:70:ca:20:8c:76:9b:8f:66:ae:7f:
3a:d0:9d:f9:0e:77:28:88:33:f4:36:7d:8f:3b:55:b8:b5:0d:
53:f1:1c:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyKNhkfGl7H/B7GEcyCIezPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2
NTZkNWEwHhcNMjYwMjIzMTExNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTZjODAxYWE3NGU5Zjk2ZDhjODc2MjdiY2IwZWYyNGZlY2U3MDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV3G6ceX1nTP3rD5h+y4oTPnn2/U
zDaTS6MhDPfEjyCU1wQ6pIyzdyWgFs3pRPKismUsDsS+f/z2k+n5l2cC2G9r0Fcu
NVeiFTDqNboVCSOjK/h9OWS2axd3rfjaPrEB6T0NR+ho9nPKifCqM77Nr3Yv+u6o
v6/jypoXFejhTxJnmTe+RSMHudPkDaUkvAn/EzlrsWJ3VZO7i6kBKFeHIh8vNp59
SZsvOzEbdSRuqOvRu3wS7W1SW48K5JqguXzuCX3ebRVsKhlVoF26jer4yjBsyyBX
5JQtci2NXpuzeRwBfoJWX/T7C7kgPSHti6vRlozUUvkepBG2RXZN9al1CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBlsgBqnTp+W2Mh2J7yw7yT+znA6MB8GA1UdIwQY
MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt
MTc2OWZlZjZiZTk2LzEvR1d5QUdxZE9uNWJZeUhZbnZMRHZKUDdPY0RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2
LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZOnMA0G
CSqGSIb3DQEBCwUAA4IBAQCRPW1haa3O7KN0ddYfTc/nK4b6L1pdDqsLBnOTk2I0
fKqqo/8gfcdr73Smcumr/uy+98sJRzq1PdNnYPDIYBiMDe0Z45hT7SE8mbU8HSCM
OmA1Vrx4qsC3+7xwNgePu/16ofNFX2/sIFZGiS4GkIt/l+Qd8tCBLs9sEBu86TRp
dJzVamky+LhehGgytqrbLh1r/gK0dI2/7JCZfyjpqC0HcXMGI9EBp0zO/d9X8AFv
+k7/ykNcbl+JFU/1m7E/3E4k0YJxCm5MDbSHZKj30o1qW52WxIBpKWIZnfO7rI7p
lnDKIIx2m49mrn860J35DncoiDP0Nn2PO1W4tQ1T8RzC
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:32 2026 by rpki-client