Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/gTLQO7IRUIt1he_tfQZ5R50CmzQ.roa
File: gTLQO7IRUIt1he_tfQZ5R50CmzQ.roa (raw, json)
Hash identifier: 13NsbCK446j3nwsRrmw3vucE5FkbNbCaICNVdshkbns=
Subject key identifier: 81:32:D0:3B:B2:11:50:8B:75:85:EF:ED:7D:06:79:47:9D:02:9B:34
Certificate issuer: /CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Certificate serial: 019F23689FB3639F7B168D17734722E0B0A7
Authority key identifier: 03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/gTLQO7IRUIt1he_tfQZ5R50CmzQ.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 137.44.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 18:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9f:b3:63:9f:7b:16:8d:17:73:47:22:e0:b0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8132d03bb211508b7585efed7d0679479d029b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:fb:3e:54:4d:a4:78:48:a4:f8:73:9f:4d:
4b:3f:91:02:f5:ad:b7:a3:ca:9a:fe:41:d6:bc:b1:
ec:41:df:68:8c:f1:d6:8d:4f:f3:6e:3d:a0:47:d4:
16:2b:83:7a:88:1e:43:9f:29:6a:43:48:e3:b0:5a:
db:e4:a3:78:e4:c3:2f:43:52:7a:21:18:17:d1:f8:
d5:80:c9:d4:1a:29:3d:0c:b3:3a:3b:d0:28:45:a7:
c2:77:70:5f:77:88:4d:d8:39:f4:f4:00:d4:74:c4:
55:ac:31:e0:78:a9:06:7b:9b:de:0e:d5:4b:d0:76:
cb:a2:38:7c:fc:ef:80:3a:da:47:1d:d9:ae:15:34:
81:80:c4:dd:dc:5d:b6:52:8d:74:be:88:35:53:df:
dc:2f:a0:70:82:b4:7e:3b:61:1c:ec:d0:e6:9f:37:
11:45:6e:5d:53:59:97:58:38:e5:39:cd:47:8e:21:
34:45:78:24:1e:ba:14:16:84:11:85:18:4c:f0:e1:
e0:fd:32:ae:61:0c:50:8b:80:c7:83:77:cc:13:bc:
29:7f:f3:f8:ab:36:80:31:40:c8:97:ef:98:5a:e9:
a4:05:73:07:a0:a3:c5:5a:0a:91:95:3d:a3:08:ab:
f3:52:83:b9:55:85:00:98:68:08:7d:4f:8b:7b:64:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:32:D0:3B:B2:11:50:8B:75:85:EF:ED:7D:06:79:47:9D:02:9B:34
X509v3 Authority Key Identifier:
keyid:03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/gTLQO7IRUIt1he_tfQZ5R50CmzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.44.124.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:47:91:35:e0:c8:70:bf:71:75:de:5f:e3:61:0e:17:09:14:
94:f7:a8:06:63:f9:40:19:b5:76:95:25:0d:c7:8d:2b:a1:1d:
86:d1:47:74:65:00:0e:d9:db:f8:67:40:ab:14:67:2c:1b:b1:
26:20:9c:ed:a1:73:78:f6:8a:2f:59:a4:93:dd:f9:fd:c7:7a:
67:1c:0d:18:76:a9:2a:b7:c2:b3:75:ac:b5:23:f5:fc:08:39:
cf:75:9d:b3:88:3f:bb:a7:ef:3e:1c:12:8e:f7:0f:a6:5f:2d:
98:f1:43:b4:55:04:17:02:a1:8c:9d:6e:10:33:0f:a8:e7:35:
42:31:68:11:8d:ec:b8:f7:f2:32:0d:ba:99:a5:c7:8c:20:aa:
4b:fb:f6:91:14:20:9e:13:01:6e:62:5e:3f:04:2c:ff:5d:fa:
c6:9a:cc:2d:19:ca:78:2d:a5:60:69:de:c8:99:86:fe:b5:0a:
68:25:31:5a:d3:df:81:ac:58:e1:9d:1b:10:16:b9:84:ac:36:
ac:cc:cf:09:f4:c0:93:04:e6:92:e7:41:1a:0e:c2:eb:10:43:
59:db:d3:d5:86:f3:6f:5b:e5:e7:27:59:1d:d8:e4:59:98:0e:
4e:04:d0:2e:7d:8c:01:cd:47:54:e9:58:57:da:31:fd:b8:03:
66:a5:f8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 02:43:25 2026 by rpki-client