Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GPZrwVgHdlp0zfXR9hC75fjouG4.roa
File: GPZrwVgHdlp0zfXR9hC75fjouG4.roa (raw, json)
Hash identifier: H6kozJ8IXAaEw+1TXSuIxqJQrxnIj6MUNDfbJQ1uhbQ=
Subject key identifier: 18:F6:6B:C1:58:07:76:5A:74:CD:F5:D1:F6:10:BB:E5:F8:E8:B8:6E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D68BB075366B33DD052F000F7DC265CD6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GPZrwVgHdlp0zfXR9hC75fjouG4.roa
Signing time: Tue 07 Apr 2026 16:16:20 +0000
ROA not before: Tue 07 Apr 2026 16:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201988
IP address blocks: 2.26.122.0/24 maxlen: 24
2.26.123.0/24 maxlen: 24
144.31.53.0/24 maxlen: 24
144.31.148.0/24 maxlen: 24
144.31.169.0/24 maxlen: 24
144.31.223.0/24 maxlen: 24
144.31.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:bb:07:53:66:b3:3d:d0:52:f0:00:f7:dc:26:5c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 7 16:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18f66bc15807765a74cdf5d1f610bbe5f8e8b86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:7e:77:e2:c0:fa:1f:8d:b6:79:c9:e6:1d:
e2:0b:00:5e:4b:f6:a2:63:7f:83:64:f5:4a:e3:61:
bf:d5:07:ed:39:21:97:43:45:b8:5b:a3:a7:bf:2c:
1f:39:fe:4c:cc:eb:13:14:ae:19:11:5e:cf:9f:b2:
3b:1b:0e:ee:b3:35:1f:7a:75:fa:71:ba:29:b7:f3:
00:bf:55:55:0f:98:b5:58:d3:db:d1:c0:43:9d:2a:
39:74:31:4c:d4:ff:cd:5b:66:67:c2:84:d7:46:f4:
70:1d:31:6c:c4:61:d4:b8:27:bc:5d:06:39:30:1f:
36:9b:7e:46:28:3f:03:b0:c6:79:1f:7c:30:03:bc:
6f:88:f8:d3:b6:ae:43:e3:57:b6:b3:fa:05:de:31:
e5:ab:79:f4:e8:30:14:bd:12:35:ae:75:1f:db:3d:
04:83:4b:45:6a:29:83:66:68:01:c0:95:c1:2a:63:
59:a2:b1:1b:b4:85:bb:ff:54:59:c9:1c:b9:69:61:
fa:9d:ea:2c:74:6c:40:01:3b:f4:ed:9c:26:57:05:
d2:71:3a:7e:df:65:ce:b2:48:4e:96:d8:30:4b:41:
b7:d4:a9:6f:f3:20:be:c9:ad:60:05:95:e6:f9:d0:
1c:63:49:c7:71:c3:e3:a4:ad:81:93:53:de:96:2d:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F6:6B:C1:58:07:76:5A:74:CD:F5:D1:F6:10:BB:E5:F8:E8:B8:6E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/GPZrwVgHdlp0zfXR9hC75fjouG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.122.0/23
144.31.53.0/24
144.31.148.0/24
144.31.169.0/24
144.31.223.0/24
144.31.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:9c:3c:e8:aa:e8:b2:c0:fd:a0:a7:ec:18:9a:7f:2c:22:02:
6f:7b:45:4f:09:81:9a:c3:de:fd:b0:23:f2:d5:3c:41:ea:90:
e2:d2:0b:bb:7f:3a:20:42:42:9d:2e:ce:ef:ed:c1:8b:55:b6:
d8:9b:38:58:44:39:2a:cf:ab:a1:fe:31:05:49:f2:f6:b8:14:
ab:c0:34:79:5f:10:f6:04:78:be:4c:fc:7e:56:d3:6e:d3:63:
af:64:e3:e2:41:c3:38:d8:b4:5f:9f:97:6b:41:16:29:e0:86:
6c:98:f7:89:84:a0:0d:c9:25:21:ff:c6:d1:9a:a6:75:66:a0:
58:6e:f0:c5:83:b4:13:9e:14:57:69:86:bd:b8:47:9c:5d:96:
3f:fd:ba:65:ec:f9:7c:22:36:33:9a:10:16:33:64:3d:e8:79:
72:5b:b7:1b:30:51:d7:b7:4c:20:74:a9:d7:84:4c:c4:8d:fd:
c7:04:5b:13:70:b8:bd:da:08:8a:a1:df:31:60:94:78:27:30:
c6:17:ee:09:0e:59:a6:a4:56:b8:48:66:51:77:0c:cf:fd:16:
ad:06:20:9e:19:54:27:04:0e:28:01:22:6f:2d:e3:1b:da:c2:
f9:29:b7:c2:d1:eb:ea:65:34:a5:e0:35:71:26:0d:6e:4f:83:
55:05:20:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:06 2026 by rpki-client