Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/GswXHTULLoWzI1OTWlwbV-50iRw.roa
File: GswXHTULLoWzI1OTWlwbV-50iRw.roa (raw, json)
Hash identifier: lap3amc+8J7NkMwCQP+QgOYqBNTNS0Wv0ZCr3/HqfJM=
Subject key identifier: 1A:CC:17:1D:35:0B:2E:85:B3:23:53:93:5A:5C:1B:57:EE:74:89:1C
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01A0F4036BADFB400ECF4447ED8582F8F170
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/GswXHTULLoWzI1OTWlwbV-50iRw.roa
Signing time: Wed 30 Sep 2026 20:30:59 +0000
ROA not before: Wed 30 Sep 2026 20:30:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54903
IP address blocks: 95.164.128.0/23 maxlen: 24
95.164.130.0/24 maxlen: 24
95.164.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:03:6b:ad:fb:40:0e:cf:44:47:ed:85:82:f8:f1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Sep 30 20:30:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1acc171d350b2e85b32353935a5c1b57ee74891c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:24:ea:a5:02:2f:0b:a9:32:f5:48:3d:be:
02:6e:b6:ff:be:7a:cc:b5:87:dc:8c:15:6d:99:16:
90:03:2f:b4:e1:2b:6e:5e:6b:24:e9:47:a3:11:10:
70:e5:c5:45:32:81:6f:e1:33:bc:cd:43:1b:f0:94:
21:19:88:15:e6:74:92:20:98:66:aa:c8:1b:0c:7c:
29:5c:64:bb:23:26:f4:5a:42:42:26:7f:02:cf:d3:
df:7a:b1:20:7e:2a:d5:81:27:a8:58:c8:b0:4d:2f:
b5:c6:8d:5e:eb:90:0b:3d:83:43:33:4f:54:07:34:
7b:a0:46:7c:25:cf:bb:cf:59:24:c8:a8:79:16:32:
47:00:3b:b9:81:13:50:1f:0e:e8:d1:a0:37:3c:ac:
d6:fb:5f:3e:ed:14:44:74:b0:2a:c6:06:01:bb:9c:
93:3f:e0:77:d3:3a:7b:3a:49:58:96:a5:fd:df:fd:
3e:71:f4:9d:2b:6d:ec:3a:fd:76:97:5a:ce:2c:83:
60:b9:04:82:2a:1c:29:ba:2d:1e:09:fd:21:b4:50:
94:fb:d1:18:7c:92:61:0c:53:6a:83:73:c5:96:a3:
d3:60:c9:04:07:6b:ca:af:0f:03:69:d7:e9:0e:65:
ee:db:3d:6a:6a:91:99:16:d8:17:92:0a:ee:fb:03:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CC:17:1D:35:0B:2E:85:B3:23:53:93:5A:5C:1B:57:EE:74:89:1C
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/GswXHTULLoWzI1OTWlwbV-50iRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.128.0-95.164.130.255
95.164.136.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:75:37:f4:74:76:f0:0a:91:ee:55:fb:5b:06:38:b3:25:c9:
35:dc:6a:00:a1:59:b2:9b:6d:1f:6f:a4:c0:e1:25:b8:e9:43:
07:7a:63:f4:21:47:81:c5:98:ff:11:53:ae:02:04:00:7b:0b:
33:53:92:9b:ec:03:42:ec:8a:c7:b8:64:22:38:33:90:4d:6d:
6a:2c:18:11:88:72:d0:85:3c:4a:59:1b:ee:07:79:58:a1:66:
52:83:f8:0b:10:cc:22:a3:32:f7:b6:ea:c3:93:0c:18:b8:9a:
6c:57:c7:7a:ba:a5:b9:43:64:71:32:12:32:32:5b:77:77:38:
fa:97:39:ee:75:7e:9c:e0:05:eb:9e:90:bb:36:4c:c8:97:d7:
e6:49:8f:ab:68:ac:af:42:a9:1e:da:e9:01:47:79:5f:47:2c:
cd:e3:30:a8:40:cc:8f:1f:4f:6e:be:7d:62:53:a2:ab:c5:24:
ed:c7:c7:cd:58:c8:08:af:08:4a:8c:87:5f:9b:ef:cc:33:3e:
4c:fa:20:4e:12:d8:58:7c:19:52:a2:b1:8f:e3:bb:a8:71:0a:
da:0c:13:93:71:9e:76:33:76:74:6c:86:63:07:81:b6:73:d7:
94:85:f8:27:e6:c7:9e:0a:68:63:bb:66:30:c0:1e:b1:b3:e9:
ef:d5:b7:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:32:46 2026 by rpki-client