Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/Gw2Q3NyTZf2dYGHDxE3r5tp-tSk.roa
File: Gw2Q3NyTZf2dYGHDxE3r5tp-tSk.roa (raw, json)
Hash identifier: MRU5e7pRB4AUwsc2cjanJCKk9BsA/Ymmye5RL8bOTC8=
Subject key identifier: 1B:0D:90:DC:DC:93:65:FD:9D:60:61:C3:C4:4D:EB:E6:DA:7E:B5:29
Certificate issuer: /CN=1550d10b7cc80e49917e5a51b1da3e7259d485b1
Certificate serial: 019D3EA5F8395861A79BDBCB871DA6AE25AB
Authority key identifier: 15:50:D1:0B:7C:C8:0E:49:91:7E:5A:51:B1:DA:3E:72:59:D4:85:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVDRC3zIDkmRflpRsdo-clnUhbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/Gw2Q3NyTZf2dYGHDxE3r5tp-tSk.roa
Signing time: Mon 30 Mar 2026 12:09:17 +0000
ROA not before: Mon 30 Mar 2026 12:09:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200570
IP address blocks: 195.138.41.0/24 maxlen: 24
2a0e:45c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/FVDRC3zIDkmRflpRsdo-clnUhbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/FVDRC3zIDkmRflpRsdo-clnUhbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FVDRC3zIDkmRflpRsdo-clnUhbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:a5:f8:39:58:61:a7:9b:db:cb:87:1d:a6:ae:25:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1550d10b7cc80e49917e5a51b1da3e7259d485b1
Validity
Not Before: Mar 30 12:09:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b0d90dcdc9365fd9d6061c3c44debe6da7eb529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:49:18:ae:bb:f1:a7:85:2e:55:a7:95:ea:81:
35:96:6a:0d:63:5e:e2:c3:68:94:aa:eb:32:b5:48:
6e:33:d8:ff:c9:c0:28:91:69:d3:21:3c:c8:74:09:
56:98:db:49:ba:7a:72:7a:92:fd:76:5e:8c:00:0f:
98:c6:bb:de:aa:6b:79:1c:0d:ad:27:42:2b:b6:73:
5a:7f:f3:2d:35:1c:6b:ee:9d:39:99:41:e0:91:9d:
c5:de:d6:dc:24:a9:eb:16:30:d7:b3:ca:fe:c8:74:
5f:29:37:ae:90:a2:f1:07:aa:8f:73:9f:0c:45:bd:
16:d4:92:58:c5:0e:31:60:15:9a:79:32:16:c3:34:
b9:fe:7d:8c:e7:c1:85:a2:dd:30:43:5a:c0:dc:03:
c6:7a:b3:35:0b:01:f1:f3:8d:bc:9b:de:0e:d4:96:
a3:9f:bd:ce:75:d6:a5:b6:10:97:08:73:db:d5:a6:
6c:ac:61:c8:51:0a:16:67:9c:02:67:fe:42:dc:5d:
1e:ce:35:ef:56:89:a9:1b:6d:d5:f1:65:c7:66:2d:
fd:91:b7:b1:a3:b7:8f:6a:de:2c:3c:7b:1d:a2:15:
40:d0:83:05:24:ef:ba:da:31:bb:7e:f6:62:5b:27:
5a:f7:25:ba:d9:4c:2a:46:5e:07:a4:0e:b0:5b:47:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0D:90:DC:DC:93:65:FD:9D:60:61:C3:C4:4D:EB:E6:DA:7E:B5:29
X509v3 Authority Key Identifier:
keyid:15:50:D1:0B:7C:C8:0E:49:91:7E:5A:51:B1:DA:3E:72:59:D4:85:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVDRC3zIDkmRflpRsdo-clnUhbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/Gw2Q3NyTZf2dYGHDxE3r5tp-tSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/FVDRC3zIDkmRflpRsdo-clnUhbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.41.0/24
IPv6:
2a0e:45c0::/29
Signature Algorithm: sha256WithRSAEncryption
9f:f7:af:6c:53:f9:c8:09:d3:a1:10:f0:94:4a:a5:a6:e8:0a:
0d:64:24:c7:3c:be:30:29:9e:b7:9a:d1:7f:f4:74:c7:ea:f4:
83:9a:ec:f5:9f:59:fa:e0:7f:72:e9:98:d3:06:f0:80:91:6f:
1e:71:06:24:2a:9b:e4:61:ac:fa:70:85:79:23:de:52:cf:61:
c0:04:e7:be:37:6c:eb:ab:a3:95:80:62:ec:4e:cb:a1:7e:e0:
06:ee:57:ec:80:3d:b6:fd:0d:b1:74:ce:ff:60:53:52:1b:d8:
81:34:85:65:57:ab:e9:83:63:8b:74:eb:41:d0:92:4a:73:c4:
82:ad:65:c0:ce:6a:05:14:39:bd:77:9b:5d:36:96:ad:00:0a:
b4:1f:ad:a4:c4:c6:2b:2e:d0:21:ae:da:da:f3:4e:95:9b:70:
f5:88:35:d8:3a:65:a0:18:01:76:5c:02:77:38:49:8f:45:85:
78:16:b4:6b:f8:ef:01:3b:b2:dc:6a:98:6f:11:b1:e1:79:0f:
75:55:e7:ea:20:bc:47:96:b8:ed:09:cb:ac:f1:fa:1a:ca:20:
b3:bd:77:3c:3a:af:1a:de:6c:71:ae:48:4d:f8:e2:40:5d:0a:
c1:8d:3b:88:c7:69:d5:b6:e5:9c:f8:8e:04:68:f8:d4:ec:de:
b3:a7:18:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:58:17 2026 by rpki-client