Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/GKLH9FqR5ufpCylhCN6FbfGgLDY.roa
File: GKLH9FqR5ufpCylhCN6FbfGgLDY.roa (raw, json)
Hash identifier: 1rknG1DoHjPJltge0cSGVjsDeu8yylMyucM/PEibazg=
Subject key identifier: 18:A2:C7:F4:5A:91:E6:E7:E9:0B:29:61:08:DE:85:6D:F1:A0:2C:36
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 019FA9373248C0FA7B98B5CADA52F06DACFB
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/GKLH9FqR5ufpCylhCN6FbfGgLDY.roa
Signing time: Tue 28 Jul 2026 14:53:14 +0000
ROA not before: Tue 28 Jul 2026 14:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51791
IP address blocks: 153.56.128.0/24 maxlen: 24
153.56.129.0/24 maxlen: 24
153.56.130.0/24 maxlen: 24
2a11:1fc0::/32 maxlen: 32
2a11:1fc0::/48 maxlen: 48
2a11:1fc0:3::/48 maxlen: 48
2a11:1fc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:37:32:48:c0:fa:7b:98:b5:ca:da:52:f0:6d:ac:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Jul 28 14:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18a2c7f45a91e6e7e90b296108de856df1a02c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:36:f8:92:9b:72:eb:4b:35:06:a3:e7:6c:
50:2b:7c:89:49:1f:2a:0b:41:2e:e9:cb:77:60:0f:
5f:6a:88:a1:73:a6:f3:95:e5:0f:56:dc:a7:f2:4b:
f1:d3:f4:06:53:b5:63:d2:eb:da:c9:24:31:f6:ec:
56:14:0f:af:46:67:4a:13:f5:75:e7:0d:0a:aa:e3:
3b:74:65:99:42:74:87:c7:aa:fb:fa:5c:5e:09:48:
be:08:ab:09:0e:e5:92:fc:c9:dd:10:c6:b4:98:26:
28:d0:f6:62:ac:59:76:87:c4:44:08:8c:4a:ce:14:
52:39:0e:ce:f1:76:63:b3:0c:f4:51:ca:80:93:8b:
6a:b4:18:b1:34:5b:e7:2e:af:f3:b6:0f:fd:1f:88:
a2:83:67:d8:8e:60:1e:2f:19:26:7a:ca:99:03:b7:
1c:a1:76:2d:df:ba:0b:37:98:98:83:de:c6:73:02:
96:1d:71:c4:cc:b6:0c:34:98:ac:35:c2:59:48:9f:
48:d3:89:c3:80:80:5b:b1:4d:c2:96:0e:3b:4b:e7:
aa:5e:a2:ee:4e:d5:4a:2c:ce:be:7a:e5:f5:02:13:
3f:b3:59:c9:fc:bb:8c:d4:4f:6c:d0:bc:bb:f4:26:
85:08:78:99:28:6f:71:1e:5a:fd:91:94:6b:31:ee:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A2:C7:F4:5A:91:E6:E7:E9:0B:29:61:08:DE:85:6D:F1:A0:2C:36
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/GKLH9FqR5ufpCylhCN6FbfGgLDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.128.0-153.56.130.255
IPv6:
2a11:1fc0::/32
2a11:1fc2::/32
Signature Algorithm: sha256WithRSAEncryption
cf:5d:3f:5e:47:70:ef:f8:de:d3:9b:6a:9b:ea:76:c9:c9:f3:
94:de:54:05:b6:09:da:c2:35:0a:9d:2b:e6:e9:b3:05:2a:08:
bb:82:cd:44:d4:d4:14:f0:7b:1a:8b:9b:70:7f:88:a9:e7:f4:
94:69:99:84:7c:1d:b5:df:7f:a5:92:59:7b:5b:a5:0c:59:cd:
60:d0:a2:c9:34:d3:1b:78:c5:11:27:8f:57:ee:6b:80:d3:c4:
3c:5e:b7:bc:e3:83:bb:0f:26:55:67:e0:36:c1:a4:d5:d6:88:
0d:20:82:ef:b0:b3:d6:6b:94:1b:32:33:35:86:78:e6:1d:22:
c4:38:ff:b8:58:9a:77:71:75:cb:6a:83:ba:e2:6d:95:0c:49:
3a:e7:da:57:a1:e2:bb:7c:59:19:23:1b:cd:98:ea:85:29:42:
ac:93:67:a6:8a:3b:46:ca:7f:d9:09:3e:9c:2f:b9:ee:4f:61:
db:5d:65:07:00:21:95:72:fc:4a:be:b5:14:8e:be:09:e0:d6:
15:bf:83:7b:be:0a:4b:77:3d:38:c7:44:8f:1c:42:9b:82:12:
b3:03:1c:4a:ae:4e:bb:c1:34:cf:95:00:28:59:bb:cf:ab:94:
81:53:41:3a:c4:54:a2:58:cb:12:c0:2f:76:9d:63:96:f7:93:
79:15:0a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:12 2026 by rpki-client