Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/gOZ6TXT8sfMU5a3OW6nvJDUaFsI.roa
File: gOZ6TXT8sfMU5a3OW6nvJDUaFsI.roa (raw, json)
Hash identifier: JLYLzMod9vl4lvHhqYpTpvU8XLLSIggyRce5PEY8++k=
Subject key identifier: 80:E6:7A:4D:74:FC:B1:F3:14:E5:AD:CE:5B:A9:EF:24:35:1A:16:C2
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 01A10ADDACDF50AF55B756785A9CCC455EFD
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/gOZ6TXT8sfMU5a3OW6nvJDUaFsI.roa
Signing time: Mon 05 Oct 2026 07:01:02 +0000
ROA not before: Mon 05 Oct 2026 07:01:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43503
IP address blocks: 46.30.80.0/21 maxlen: 21
46.226.112.0/21 maxlen: 21
83.137.96.0/21 maxlen: 21
91.203.200.0/22 maxlen: 22
109.234.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:dd:ac:df:50:af:55:b7:56:78:5a:9c:cc:45:5e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Oct 5 07:01:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80e67a4d74fcb1f314e5adce5ba9ef24351a16c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:0f:f2:ce:3c:66:ff:ce:ca:fe:15:23:6d:
05:ce:97:b9:ce:54:1b:47:cb:4d:05:d3:4f:1f:cf:
b9:a0:aa:ec:a4:ca:40:f5:47:b9:0b:c1:94:bf:3f:
48:87:1d:e0:48:e2:78:50:4f:90:b6:b5:75:aa:c3:
f7:1f:90:15:56:21:bf:7d:86:34:7c:02:da:6d:66:
16:a5:61:95:44:44:21:b0:f9:aa:50:a4:78:ec:51:
3b:46:69:60:c5:44:c6:58:5b:d0:79:00:9c:20:9c:
74:c1:7a:46:ef:39:ec:b0:13:99:0e:43:70:5f:d5:
e0:34:a5:b7:96:a8:04:48:14:b5:d2:81:b9:7f:11:
fe:8d:38:57:89:85:53:f8:d2:45:de:a9:bd:c7:9d:
f8:a8:6c:cb:bd:e3:68:b3:50:c2:dd:11:e0:15:64:
2d:26:2c:e3:83:59:79:55:fd:e5:53:11:b7:57:90:
76:5a:b5:0c:c8:86:64:11:65:bf:c5:a0:da:8d:14:
dc:bf:18:7a:87:80:15:3a:e4:65:ec:a8:cd:48:1a:
49:75:68:c2:e6:72:f2:31:b1:d7:ac:eb:b8:43:f9:
65:17:e8:03:21:13:2b:20:02:0a:8c:b7:0e:73:e2:
da:c3:04:41:9b:a1:e4:93:e9:ee:ae:5c:53:95:73:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E6:7A:4D:74:FC:B1:F3:14:E5:AD:CE:5B:A9:EF:24:35:1A:16:C2
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/gOZ6TXT8sfMU5a3OW6nvJDUaFsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.80.0/21
46.226.112.0/21
83.137.96.0/21
91.203.200.0/22
109.234.120.0/21
Signature Algorithm: sha256WithRSAEncryption
86:e3:41:93:70:2e:4e:5e:3d:14:62:8f:02:94:96:36:e9:92:
09:d2:27:5d:7c:5f:e2:f7:6c:9f:1d:bf:5c:26:d7:f2:d7:8e:
68:ba:54:b6:1c:08:91:57:de:95:31:0a:5f:51:13:a7:1b:4e:
f8:43:c6:34:4b:2e:87:f2:24:b1:4d:a6:e7:d6:b9:75:9e:84:
6b:eb:41:f9:77:1a:31:e1:dd:2e:dd:90:50:4b:08:ef:79:3f:
ec:0e:4f:d5:7f:b8:40:4a:bc:3e:5c:75:aa:61:ba:56:34:55:
ed:42:00:97:f5:ce:c2:f4:9d:99:db:18:51:bd:76:ad:81:2f:
c4:77:0a:0a:4c:f8:9b:6e:98:1a:d0:3e:4f:33:02:74:32:b5:
df:e2:2b:b5:0b:4d:1e:71:b5:16:df:37:5d:3b:ad:7b:a7:b0:
76:e3:1e:72:77:1b:8c:13:ae:b2:94:11:b2:e6:8e:8d:4c:2b:
0f:da:ea:e7:d1:b3:7f:9b:1b:4e:78:fa:e9:3c:63:bf:2d:a1:
1b:67:7b:73:84:44:5f:53:9a:01:e6:c8:67:d8:73:d3:eb:2b:
17:74:9a:86:21:97:d8:48:94:9a:53:44:c1:51:79:ef:1e:a2:
2a:30:2b:b5:3a:cb:0a:76:09:8f:cd:e0:1f:26:b3:2d:ab:33:
39:a5:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:47:14 2026 by rpki-client