Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/Gv-OCTPvFyWGiyGBqIxNzfUVq6Y.roa
File: Gv-OCTPvFyWGiyGBqIxNzfUVq6Y.roa (raw, json)
Hash identifier: 29R9TkWE0EShVGbcMzFSBtbK/A0y+JuXBz2DWwSID/g=
Subject key identifier: 1A:FF:8E:09:33:EF:17:25:86:8B:21:81:A8:8C:4D:CD:F5:15:AB:A6
Certificate issuer: /CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Certificate serial: 019C70BD7F1CD817334182D21EE334D05460
Authority key identifier: 2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/Gv-OCTPvFyWGiyGBqIxNzfUVq6Y.roa
Signing time: Wed 18 Feb 2026 12:33:12 +0000
ROA not before: Wed 18 Feb 2026 12:33:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214366
IP address blocks: 153.51.32.0/20 maxlen: 24
153.51.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:bd:7f:1c:d8:17:33:41:82:d2:1e:e3:34:d0:54:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Validity
Not Before: Feb 18 12:33:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aff8e0933ef1725868b2181a88c4dcdf515aba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:83:44:7d:35:ed:ed:04:ce:e3:56:7e:e1:
bb:6d:ef:30:dd:d9:15:89:cf:d9:1b:e2:d3:ef:e9:
c8:20:9c:a7:85:d0:21:13:a8:12:2e:7f:a2:20:8e:
98:cc:a1:08:9e:83:f3:b2:43:31:78:1b:15:cc:50:
97:af:84:7d:72:05:d4:30:73:38:6c:5d:2b:ec:cb:
57:78:4d:b2:82:b4:7f:f3:0b:e3:8c:1a:70:21:3a:
b9:6b:7f:92:76:5a:f2:f7:29:90:50:47:6a:c5:d0:
ec:03:bb:53:2c:0b:f6:c7:55:a3:42:b0:ae:26:27:
d6:f6:99:8b:f8:79:a8:41:4c:8b:5f:d4:6d:55:06:
8e:8f:75:8e:98:a1:aa:99:e2:73:49:44:66:e0:eb:
fc:72:8a:fe:e9:66:5c:dd:42:1b:34:e1:81:b0:c7:
32:a3:49:2b:28:fc:9b:f0:cd:6d:f9:35:11:85:26:
03:75:95:6c:9e:1f:7e:d4:c3:d5:c4:3f:14:68:9a:
c0:b6:c7:8b:2d:67:67:40:92:2c:23:11:3c:33:9d:
2a:c9:e2:45:44:09:ec:68:85:ab:dc:06:e9:3f:7d:
b1:4e:08:60:b3:f1:fc:af:d3:8f:ae:42:a3:af:fa:
54:45:bf:f0:3a:c4:6e:eb:88:78:d7:dd:21:72:2b:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FF:8E:09:33:EF:17:25:86:8B:21:81:A8:8C:4D:CD:F5:15:AB:A6
X509v3 Authority Key Identifier:
keyid:2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/Gv-OCTPvFyWGiyGBqIxNzfUVq6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.32.0-153.51.51.255
Signature Algorithm: sha256WithRSAEncryption
4d:1a:59:42:27:fe:88:9f:05:f8:28:e7:b5:33:be:bd:29:f9:
f7:4e:cd:3c:c8:6d:e8:e0:af:50:4f:c8:c1:d1:61:20:10:b0:
f6:a5:e4:05:db:61:7e:46:99:3e:8e:98:05:75:53:c0:a4:0d:
0d:72:14:7a:57:cf:7d:57:96:1f:a5:63:fc:47:48:f5:74:23:
c8:43:f5:8c:85:cd:0c:e7:80:13:78:d6:2f:6e:48:17:8a:a9:
e5:f6:66:83:fd:16:1f:6c:fe:38:18:07:56:2b:91:f8:43:0a:
83:0f:9e:73:1a:c7:77:5c:ee:ad:09:06:14:b2:cb:d2:aa:92:
51:32:8a:3f:62:21:8c:79:af:0a:6f:08:2d:24:0d:0c:ab:03:
0c:92:6e:d6:b1:1a:15:e5:6d:c9:fe:50:8d:89:ce:81:c1:9e:
70:a5:a7:a1:5a:32:c0:15:58:b8:c4:ba:be:1b:7c:12:ba:ae:
44:f4:68:05:10:2c:34:c2:31:48:ac:b7:31:a7:0a:6b:64:88:
1b:5c:a2:e1:37:02:85:3f:da:3c:7d:2a:41:3c:9d:94:a8:8e:
25:13:15:d4:ae:12:b8:19:f4:93:d9:eb:a6:b2:08:e2:b2:97:
a3:5a:0e:e9:5e:14:0b:47:a8:d9:f0:1a:2b:1c:0e:c8:eb:2c:
41:b3:80:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:46:08 2026 by rpki-client