Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/gL7kcy0CGpQ892sl0wMmU8AaiWw.roa
File: gL7kcy0CGpQ892sl0wMmU8AaiWw.roa (raw, json)
Hash identifier: WpJA+cPpaY+XCnbmHJGOXcvK6RUT0A/opePrapUqD8o=
Subject key identifier: 80:BE:E4:73:2D:02:1A:94:3C:F7:6B:25:D3:03:26:53:C0:1A:89:6C
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019F14CB507246CD4C70B6DDCFB577FBF14E
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/gL7kcy0CGpQ892sl0wMmU8AaiWw.roa
Signing time: Mon 29 Jun 2026 19:11:36 +0000
ROA not before: Mon 29 Jun 2026 19:11:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219319
IP address blocks: 2a0d:d940:40::/44 maxlen: 44
2a0d:d940:2015::/48 maxlen: 48
2a0d:d940:9015::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:cb:50:72:46:cd:4c:70:b6:dd:cf:b5:77:fb:f1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 29 19:11:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80bee4732d021a943cf76b25d3032653c01a896c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:ca:a1:33:9d:53:09:b2:3d:9b:a8:92:2b:
91:df:0b:74:cc:77:59:dc:46:7a:7a:60:cb:59:86:
71:ab:ff:b4:c6:d5:a2:b7:30:55:5b:cd:c3:ef:33:
67:6b:1e:d8:4c:8f:d0:18:bc:37:01:5e:7f:47:df:
7d:9b:b8:2c:49:f2:61:b9:ad:dd:d9:69:e3:86:27:
43:16:ce:f1:83:08:d7:0b:04:73:8e:63:b0:2b:d2:
57:9e:a6:b2:77:88:7b:1b:b2:b7:d7:59:31:09:35:
ba:b0:ee:a0:8c:5e:27:48:f8:ff:24:11:21:bc:6f:
a0:3c:e5:94:7c:48:46:07:36:93:56:4d:a1:08:63:
f7:60:05:d3:65:65:46:56:42:ce:2d:c1:df:64:a1:
3c:32:38:d5:be:37:01:8b:29:37:eb:07:91:d8:91:
79:8a:64:78:e9:f2:79:9f:d3:e2:7a:a2:a4:e1:65:
fb:b6:aa:8a:45:64:2b:ac:58:06:9d:8c:00:57:e9:
fb:25:28:15:37:3e:8a:13:80:4d:1b:8e:46:92:0e:
fa:17:42:c8:48:38:43:58:a6:02:00:a5:14:48:4f:
18:36:ae:7d:80:9b:cb:c2:29:15:f9:1b:b7:59:9b:
49:d2:f8:19:c0:b6:24:b8:97:74:da:8d:2c:ac:af:
29:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BE:E4:73:2D:02:1A:94:3C:F7:6B:25:D3:03:26:53:C0:1A:89:6C
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/gL7kcy0CGpQ892sl0wMmU8AaiWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:40::/44
2a0d:d940:2015::/48
2a0d:d940:9015::/48
Signature Algorithm: sha256WithRSAEncryption
b2:ca:dd:b8:f4:b5:e1:8c:6f:21:dd:32:13:c8:50:a0:dc:e7:
04:3b:46:38:31:d9:5f:df:e4:c6:b0:c2:16:8a:28:86:5f:a1:
35:04:28:9a:d5:bf:fc:f5:27:5a:d3:43:c3:64:84:0c:e6:8d:
b2:54:69:ef:80:90:8a:49:2d:2e:83:3d:7f:9b:05:9a:a4:33:
f4:e0:a5:e7:2b:97:a6:b4:b3:85:c4:b4:65:01:78:5d:51:14:
1c:1e:40:08:f0:bd:41:8c:18:98:c8:49:5a:c5:44:92:51:58:
3c:3d:68:5d:7d:99:7e:31:45:7d:03:3f:6a:33:e5:3d:bc:ff:
c0:28:f5:65:04:ee:75:8a:8a:af:b4:66:b7:58:39:46:02:95:
5f:d9:6e:64:0a:fd:5d:3a:83:e9:ba:20:f0:b9:67:ba:28:e3:
0f:a8:5d:ed:60:cc:a4:7a:40:81:f1:e4:7b:54:76:e6:95:97:
b9:d7:6a:d0:4c:25:96:5b:28:eb:a1:2f:92:9a:59:03:31:cf:
6c:c5:6b:3e:0e:84:8d:e6:5e:3b:86:ae:a5:2c:fc:74:18:0c:
ed:cd:90:b8:bf:3f:48:09:04:cc:38:09:07:e7:98:ac:e1:ba:
88:7d:a8:fa:b9:4d:ec:4a:6f:88:51:82:b6:cb:fb:9d:1f:29:
c8:ac:e4:b8
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ8Uy1ByRs1McLbdz7V3+/FOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwNjI5MTkxMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGJlZTQ3MzJkMDIxYTk0M2NmNzZiMjVkMzAzMjY1M2MwMWE4OTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jvKoTOdUwmyPZuokiuR3wt0zHdZ
3EZ6emDLWYZxq/+0xtWitzBVW83D7zNnax7YTI/QGLw3AV5/R999m7gsSfJhua3d
2WnjhidDFs7xgwjXCwRzjmOwK9JXnqayd4h7G7K311kxCTW6sO6gjF4nSPj/JBEh
vG+gPOWUfEhGBzaTVk2hCGP3YAXTZWVGVkLOLcHfZKE8MjjVvjcBiyk36weR2JF5
imR46fJ5n9PieqKk4WX7tqqKRWQrrFgGnYwAV+n7JSgVNz6KE4BNG45Gkg76F0LI
SDhDWKYCAKUUSE8YNq59gJvLwikV+Ru3WZtJ0vgZwLYkuJd02o0srK8pVQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIC+5HMtAhqUPPdrJdMDJlPAGolsMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvZ0w3a2N5MENHcFE4OTJzbDB3TW1VOEFhaVd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKg3ZQABA
AwcAKg3ZQCAVAwcAKg3ZQJAVMA0GCSqGSIb3DQEBCwUAA4IBAQCyyt249LXhjG8h
3TITyFCg3OcEO0Y4Mdlf3+TGsMIWiiiGX6E1BCia1b/89Sda00PDZIQM5o2yVGnv
gJCKSS0ugz1/mwWapDP04KXnK5emtLOFxLRlAXhdURQcHkAI8L1BjBiYyElaxUSS
UVg8PWhdfZl+MUV9Az9qM+U9vP/AKPVlBO51ioqvtGa3WDlGApVf2W5kCv1dOoPp
uiDwuWe6KOMPqF3tYMykekCB8eR7VHbmlZe512rQTCWWWyjroS+SmlkDMc9sxWs+
DoSN5l47hq6lLPx0GAztzZC4vz9ICQTMOAkH55is4bqIfaj6uU3sSm+IUYK2y/ud
HynIrOS4
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:44:44 2026 by rpki-client