Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/gw8sf4HzgLZ7-g8VfW9xVDOKE9s.roa
File: gw8sf4HzgLZ7-g8VfW9xVDOKE9s.roa (raw, json)
Hash identifier: lCnNOaKR0j1nglBlf1Lw5MaBT7dcsfRs92nVBL3s55c=
Subject key identifier: 83:0F:2C:7F:81:F3:80:B6:7B:FA:0F:15:7D:6F:71:54:33:8A:13:DB
Certificate issuer: /CN=4f4b2aab1d67f6d4c058392b9137bd03228f7d2a
Certificate serial: 01A12FC6543A2ED029B07D7D86FBC0AFDDB5
Authority key identifier: 4F:4B:2A:AB:1D:67:F6:D4:C0:58:39:2B:91:37:BD:03:22:8F:7D:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/gw8sf4HzgLZ7-g8VfW9xVDOKE9s.roa
Signing time: Mon 12 Oct 2026 11:01:29 +0000
ROA not before: Mon 12 Oct 2026 11:01:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 2a02:60a0:1000::/44 maxlen: 48
2a02:60a0:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c6:54:3a:2e:d0:29:b0:7d:7d:86:fb:c0:af:dd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4b2aab1d67f6d4c058392b9137bd03228f7d2a
Validity
Not Before: Oct 12 11:01:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=830f2c7f81f380b67bfa0f157d6f7154338a13db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:37:a0:fc:be:f2:14:8b:a0:c2:49:d3:bc:
a8:c5:3f:7c:95:a3:db:01:68:e1:a3:d7:01:71:27:
c7:5c:44:37:73:06:4f:26:f7:06:f7:cb:31:c5:89:
99:09:ce:31:c4:08:5c:9d:fa:16:b2:e1:ee:9e:33:
7a:42:1a:69:ba:09:cd:4b:e5:67:d9:5b:03:6d:5a:
8a:f0:f9:7f:fa:dd:97:96:20:8c:c4:35:22:77:d8:
75:df:db:c5:8a:52:ef:5f:f6:0c:42:55:84:ab:09:
34:8b:b5:68:d7:6c:68:d8:cc:d8:f7:70:59:73:d4:
77:6b:9a:c0:a0:f7:a6:22:d4:5d:d1:09:b5:7f:e9:
97:f3:0f:12:f5:f5:a3:86:86:4b:c1:3e:63:7e:c5:
03:d8:1c:62:ab:0a:59:ba:33:5d:6a:c9:28:b2:be:
5f:a5:17:62:8f:d1:3d:73:d0:db:f0:a9:0b:a8:cc:
99:83:82:f2:ec:7a:29:7c:f8:48:17:45:d2:92:ea:
05:ca:4a:8b:ab:d5:82:ad:ee:e0:19:2f:49:e2:7a:
98:f1:71:96:a3:20:e3:f2:ab:a3:af:4e:a8:69:b0:
dd:2d:5a:b1:b0:8b:e6:46:13:b2:4c:aa:a1:9e:6e:
00:81:9c:61:89:92:d9:1c:a5:cc:7b:18:57:91:5c:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0F:2C:7F:81:F3:80:B6:7B:FA:0F:15:7D:6F:71:54:33:8A:13:DB
X509v3 Authority Key Identifier:
keyid:4F:4B:2A:AB:1D:67:F6:D4:C0:58:39:2B:91:37:BD:03:22:8F:7D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/gw8sf4HzgLZ7-g8VfW9xVDOKE9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:60a0:1000::/44
Signature Algorithm: sha256WithRSAEncryption
06:cf:17:57:9e:db:dc:8c:c2:17:58:5f:25:7b:18:b4:b7:a3:
59:5c:2f:ac:b8:14:c3:4b:a9:32:32:65:15:80:54:4f:0f:97:
7f:06:d2:ea:96:52:df:b3:1f:a3:00:00:31:55:f2:48:f0:09:
3b:9d:91:6b:4f:cb:47:40:10:01:fe:78:e0:71:8b:d9:a5:a0:
65:79:3d:f8:fa:de:15:30:e3:b7:d5:c5:d6:b5:95:47:82:cf:
7b:f4:34:ac:b6:16:89:2f:02:e2:ab:74:bb:4b:b5:ec:3d:10:
ac:88:09:65:f3:2a:9a:67:d5:77:f9:47:52:66:33:c9:39:bb:
7c:e6:be:b5:14:f3:f5:d2:03:8f:71:f4:aa:70:60:68:6c:7e:
bb:40:f9:88:05:98:fe:0d:64:c4:a8:19:d4:34:3d:2a:cf:53:
d9:94:95:79:df:24:95:35:b0:0f:0a:7a:fc:40:ac:f5:1d:e8:
ab:a3:96:0c:9c:5e:c2:21:40:ac:bb:b2:47:cf:47:b5:49:f5:
75:13:4c:ac:81:f6:0f:be:06:83:00:9a:a4:40:e2:de:38:39:
83:79:11:19:05:ac:ff:a6:dc:ee:3b:f8:69:51:8b:bd:53:8f:
33:b6:95:89:20:af:7a:d0:9f:e5:6e:a9:73:41:77:5f:50:c5:
be:9b:e4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:10:26 2026 by rpki-client