Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/IM-GaBMyAt8Wx5LQkr0Q2YeWPKo.roa
File: IM-GaBMyAt8Wx5LQkr0Q2YeWPKo.roa (raw, json)
Hash identifier: WNroGT5F6T4UYLI7vxb3TnN4UxlV1OI9972pLF7MpP8=
Subject key identifier: 20:CF:86:68:13:32:02:DF:16:C7:92:D0:92:BD:10:D9:87:96:3C:AA
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F236895DCAE892592C19297B22A3463A0
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/IM-GaBMyAt8Wx5LQkr0Q2YeWPKo.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138987
IP address blocks: 2a0d:1a40:faf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:95:dc:ae:89:25:92:c1:92:97:b2:2a:34:63:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20cf8668133202df16c792d092bd10d987963caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7e:55:ba:7f:97:a6:bb:53:15:c7:31:b4:3a:
40:f0:67:13:19:f5:6f:33:7b:48:cf:55:bc:15:a0:
0a:fc:80:1d:a7:3f:f4:9d:71:43:4c:b2:5d:80:45:
b2:93:32:1a:94:02:3e:f3:1f:96:ab:2e:73:3a:f3:
28:86:d4:aa:4c:4c:01:ba:4d:04:53:da:ad:53:b2:
a3:0e:d4:19:64:8b:6f:b3:33:78:bc:dc:3c:f2:63:
c9:51:40:48:cd:c2:ef:25:e7:72:83:44:d9:d4:e1:
20:a7:a7:f6:a0:62:80:d5:c6:53:fd:7d:e4:3d:09:
e5:a5:b2:1d:5c:64:06:37:57:38:a0:e2:1e:2a:25:
e8:5c:1e:3f:f7:d4:0d:f0:21:89:8b:ba:62:0d:c3:
e2:35:f2:08:4e:9d:a2:5f:90:12:14:bd:74:9f:f9:
6f:d8:ff:56:af:c8:0b:8b:f2:3b:d3:f6:af:6f:e6:
a3:a5:e2:98:23:f7:35:ff:e5:a4:66:30:9f:32:8b:
52:06:0c:aa:a8:1f:c6:06:f5:59:87:3e:64:14:96:
6b:29:cd:d5:f3:1c:d8:bf:a7:bc:e8:ef:78:bc:25:
c3:e6:2b:2a:b0:3c:94:84:d6:96:52:ff:07:a4:75:
28:2e:83:c7:52:f8:16:25:e2:e4:a4:61:b1:06:39:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CF:86:68:13:32:02:DF:16:C7:92:D0:92:BD:10:D9:87:96:3C:AA
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/IM-GaBMyAt8Wx5LQkr0Q2YeWPKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:faf::/48
Signature Algorithm: sha256WithRSAEncryption
1a:27:b0:27:ba:10:b6:8d:ee:3d:a9:08:18:cc:bc:0b:2c:b7:
99:68:cf:42:00:2c:5c:a4:77:d5:03:44:f4:57:36:41:68:4d:
82:e3:1f:b2:83:46:3a:27:64:75:a7:db:54:e8:c7:25:a6:b8:
ca:01:ee:92:b3:5a:43:4f:78:c8:32:76:e8:0c:15:63:da:68:
00:0b:90:15:3d:05:fb:d5:df:6c:5b:e1:01:cd:92:5e:62:2b:
1f:61:d4:c9:2f:b7:a9:1a:4c:8a:1f:6d:cc:4c:da:d3:45:8e:
ea:fe:a0:03:e4:36:c0:52:fc:95:30:28:4e:9f:05:f6:d8:82:
53:22:b8:fd:08:3d:17:fd:19:93:f1:f3:b1:d1:ab:aa:2e:44:
f1:67:a4:58:d0:88:9b:81:9f:93:cf:04:15:98:b8:71:45:95:
1b:4a:67:be:16:8a:9b:2a:78:3f:f2:a2:de:62:7c:8d:6d:f6:
ad:69:ec:fe:39:2d:71:3b:53:1e:64:7e:7d:36:99:30:53:76:
0b:bd:28:05:d9:7d:e1:0b:8c:8d:5f:57:1b:56:5f:9d:f9:36:
8a:dc:b0:b0:77:96:7a:e6:a2:e7:95:6b:95:7f:e0:8d:c2:0f:
70:21:aa:7d:02:82:8b:a1:48:d3:1d:9a:4d:60:77:08:22:7f:
34:a6:04:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:41:22 2026 by rpki-client