Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/GcPrPHGVncEuFnODCW4ngX3ZQE8.roa
File: GcPrPHGVncEuFnODCW4ngX3ZQE8.roa (raw, json)
Hash identifier: 9U3tDv9Npae/FEnqBXW/Bi1yx4I34R4F2zK1MTG5y2g=
Subject key identifier: 19:C3:EB:3C:71:95:9D:C1:2E:16:73:83:09:6E:27:81:7D:D9:40:4F
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 019D91942BD21F1A58661FC15E102E2CE6A7
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/GcPrPHGVncEuFnODCW4ngX3ZQE8.roa
Signing time: Wed 15 Apr 2026 14:38:20 +0000
ROA not before: Wed 15 Apr 2026 14:38:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 109.68.66.0/24 maxlen: 24
109.68.67.0/24 maxlen: 24
109.68.69.0/24 maxlen: 24
109.68.70.0/24 maxlen: 24
109.68.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:94:2b:d2:1f:1a:58:66:1f:c1:5e:10:2e:2c:e6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Apr 15 14:38:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19c3eb3c71959dc12e167383096e27817dd9404f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:79:2b:1f:75:4f:b1:c8:b9:99:8d:bf:1d:
74:a1:d8:dc:5e:dc:d8:64:4a:a6:60:b0:fb:1f:1b:
d8:44:05:f4:dc:13:bd:14:b8:9d:45:fb:60:63:10:
bb:c7:52:33:0f:a5:69:ef:58:64:2d:d0:99:09:7d:
59:9d:67:f7:d4:13:c2:8f:1c:bd:5e:78:2b:7d:8a:
2b:b7:be:4f:58:b7:96:74:4a:1b:38:ba:88:26:8d:
0b:7f:5a:e2:68:86:46:9b:9c:26:8f:17:e5:dc:50:
3d:c2:a3:b3:6d:4b:06:a5:a6:9d:0d:31:b9:76:66:
f6:c0:c7:b7:09:41:61:1a:09:2d:ed:d9:a3:62:a8:
dc:ac:cf:62:dc:4b:eb:da:83:1e:cf:e4:dc:30:be:
97:76:8b:33:79:e4:51:8e:c5:c0:61:27:a5:97:c8:
1a:fe:2c:ac:ce:da:bb:fd:24:d8:60:8d:a1:f5:78:
b7:f9:96:91:c7:f2:14:2e:0f:6b:6f:5b:2c:03:9e:
6a:a8:77:7c:4a:c6:d4:0f:ec:46:ca:76:bb:42:1f:
cf:e8:bc:cd:63:6a:22:15:50:68:66:af:61:09:13:
f3:81:2c:94:bf:92:dc:da:c4:5c:f2:e4:24:b3:65:
cc:97:67:ca:68:ca:28:ac:b5:0d:5c:d9:57:1d:17:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C3:EB:3C:71:95:9D:C1:2E:16:73:83:09:6E:27:81:7D:D9:40:4F
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/GcPrPHGVncEuFnODCW4ngX3ZQE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.66.0/23
109.68.69.0-109.68.71.255
Signature Algorithm: sha256WithRSAEncryption
62:bf:df:69:95:36:55:98:2c:40:97:de:0e:db:20:6d:32:d6:
42:d1:e0:53:dc:c5:a4:29:9f:41:4c:f2:78:29:97:01:48:90:
9b:1e:63:99:df:15:5c:1e:c5:1e:de:61:2a:5f:8d:a7:3d:56:
4d:f4:22:d7:46:14:96:7c:cf:a4:d8:e5:aa:1b:f8:d5:f2:22:
bc:f9:b6:d6:ea:40:fa:0f:7c:6c:3d:6f:6e:81:ac:60:fb:95:
7e:ed:c9:1e:f5:dd:11:c8:d8:eb:67:fc:70:ae:db:2c:07:b4:
63:9b:73:6c:37:9a:9f:a5:b3:27:ab:76:6d:ad:ab:08:8a:7c:
b7:2c:b3:29:4c:87:9a:b7:51:80:0f:90:88:00:f5:b7:6f:40:
13:71:8f:fb:36:c3:8f:44:90:3c:7b:dc:56:23:03:20:2e:f5:
66:eb:f9:32:0a:05:8e:b6:80:d2:f2:3a:61:f3:22:ed:79:03:
ab:0b:57:52:2f:1f:66:aa:81:2e:e6:ee:1e:f1:aa:af:0d:6a:
db:c3:f7:3b:79:48:9a:1e:22:02:94:5b:d4:4c:dc:f1:67:02:
35:c5:27:4b:01:79:53:20:05:f7:cc:e8:94:f9:f8:17:70:11:
5f:ac:a5:7b:64:3c:32:57:20:3c:81:ba:3e:8c:22:fa:54:96:
d4:21:4f:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:41 2026 by rpki-client