Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/GzMKu8jXjKBUVxDX-5sQgFMQgJs.roa
File: GzMKu8jXjKBUVxDX-5sQgFMQgJs.roa (raw, json)
Hash identifier: 0LE/1Wb9HCROg7521ihQ2bGsxl+ElnIJTcDjDH1Uxqs=
Subject key identifier: 1B:33:0A:BB:C8:D7:8C:A0:54:57:10:D7:FB:9B:10:80:53:10:80:9B
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 019C0A2E455A36DC260D90E9AE7B91592082
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/GzMKu8jXjKBUVxDX-5sQgFMQgJs.roa
Signing time: Thu 29 Jan 2026 14:35:30 +0000
ROA not before: Thu 29 Jan 2026 14:35:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35699
IP address blocks: 80.91.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0a:2e:45:5a:36:dc:26:0d:90:e9:ae:7b:91:59:20:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Jan 29 14:35:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b330abbc8d78ca0545710d7fb9b10805310809b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:be:9f:9a:6a:8f:d6:6f:b9:16:6f:43:9f:
a1:8c:ba:a3:8b:80:b8:8d:70:58:89:9f:e2:ee:70:
92:34:48:3a:d5:d1:b0:65:39:07:fb:cf:17:eb:a2:
b7:56:51:f7:91:bc:d5:d8:c7:93:de:e3:5b:4d:da:
c4:84:61:53:a2:db:b8:a4:99:a6:2e:de:6f:51:15:
61:ee:63:c7:4d:b2:58:92:14:4c:ee:ad:65:6b:d5:
e1:ec:f5:28:28:d0:6a:a9:8c:9f:6b:2c:5c:17:69:
f0:14:75:fb:e1:5a:cf:5b:c3:30:97:d2:32:9a:36:
0c:26:44:ef:f9:34:59:c6:38:94:b6:5b:0c:b3:a7:
48:fb:0e:d8:e9:06:b2:4d:79:22:63:82:61:b6:da:
32:35:58:ac:3a:18:a7:5e:41:76:28:60:3f:3b:e4:
5d:62:59:90:7b:40:ea:08:2b:33:9f:98:dc:ba:c8:
68:65:79:15:f8:5e:c0:12:ea:95:b6:b6:4f:f0:ce:
fb:bb:bd:66:ec:78:c9:19:02:e9:4e:45:5d:4d:02:
a5:e3:ea:10:ea:dc:76:28:ab:1c:c6:2f:d1:37:de:
32:57:99:19:27:60:b7:1c:c9:7c:03:c1:d7:80:31:
56:8f:ea:47:9e:b4:36:f3:44:d3:5a:18:ea:45:bc:
44:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:33:0A:BB:C8:D7:8C:A0:54:57:10:D7:FB:9B:10:80:53:10:80:9B
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/GzMKu8jXjKBUVxDX-5sQgFMQgJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.82.0/24
Signature Algorithm: sha256WithRSAEncryption
47:2e:50:46:7c:ac:f4:66:b4:ae:a9:c3:9c:e9:31:71:87:01:
20:a2:be:36:a7:93:ec:d2:c1:87:68:8b:64:04:d4:65:02:42:
26:f8:b1:38:b6:89:bc:ec:6d:81:5a:6e:5b:9f:4a:00:ab:94:
20:0d:7a:66:d1:4b:fb:d0:3f:22:e3:dd:ea:ed:3e:cf:f7:e5:
d1:09:28:65:21:8f:83:a1:4c:0d:36:5c:84:73:dc:fe:5a:59:
e1:41:73:a0:4d:61:dd:c0:db:b0:a6:03:64:0a:a0:40:bd:41:
3c:21:63:46:7c:d3:6d:84:02:b6:09:ab:32:27:06:54:32:6a:
b2:af:73:2a:50:c4:2e:5f:e7:93:a6:9c:30:b9:9c:cc:01:e7:
df:41:d1:b2:5c:f2:5a:57:c1:ba:4b:9a:00:2a:ff:13:f5:94:
93:d8:cd:db:d6:91:b7:c0:07:2f:e4:f5:10:ef:3b:fd:73:f9:
0d:08:71:ab:1e:50:50:40:0f:46:fb:13:1d:c8:85:b9:f1:f3:
18:24:00:21:f0:87:7f:59:4a:82:a3:b0:56:f3:19:ae:b4:b2:
85:b6:eb:48:3f:52:e1:03:48:06:f3:a4:dd:93:50:4f:c4:9e:
e3:56:c9:44:7e:20:a6:6a:c5:df:0e:4b:cb:5b:dd:be:b5:a1:
8d:49:cf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:09:41 2026 by rpki-client