Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/1_GujOxczMIwwsPIRuZZ135IW8Q.roa
File: 1_GujOxczMIwwsPIRuZZ135IW8Q.roa (raw, json)
Hash identifier: r9N1NX13HUSdP2RDEYVlg+KFesYDMAwBdVyxzf9SF0I=
Subject key identifier: D7:F1:AE:8C:EC:5C:CC:C2:30:C2:C3:C8:46:E6:59:D7:7E:48:5B:C4
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01A0D82CE2DD1CE1EC5AFA0DEA2D55034034
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/1_GujOxczMIwwsPIRuZZ135IW8Q.roa
Signing time: Fri 25 Sep 2026 10:46:55 +0000
ROA not before: Fri 25 Sep 2026 10:46:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402475
IP address blocks: 195.35.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:2c:e2:dd:1c:e1:ec:5a:fa:0d:ea:2d:55:03:40:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Sep 25 10:46:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7f1ae8cec5cccc230c2c3c846e659d77e485bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:58:3d:fa:ef:3d:ba:c3:85:64:1e:3b:64:
2a:f8:ed:70:43:a6:67:b8:b9:77:d1:7f:f3:73:a8:
8b:ad:47:47:bc:8a:aa:1e:c2:66:34:ae:bc:bd:d5:
0f:97:8b:40:9d:98:d8:28:8c:c7:44:5c:d4:53:fb:
83:b9:9c:7b:02:15:e2:21:37:6e:22:0a:06:31:da:
46:f1:b3:e3:2a:4e:0e:27:6e:fc:9b:dc:f0:f0:eb:
58:e7:e3:04:8f:a5:56:9d:15:f1:1c:93:d1:6e:32:
48:99:dd:90:9c:fe:13:62:c6:84:60:be:0b:e2:c8:
b7:4b:ca:88:5d:43:14:eb:36:8b:e7:e2:db:7e:26:
38:88:cf:bb:96:3b:ea:30:58:97:e1:6d:7f:78:5f:
3f:61:ec:50:99:45:e5:5e:ef:cd:cd:7a:11:9b:ce:
bc:fc:00:ec:de:ea:db:9e:a9:18:f9:0a:93:c0:c6:
3f:fd:79:ca:2f:fd:ad:6a:cc:b1:51:f2:de:7c:1c:
12:cf:23:8b:20:a1:ab:b9:26:b3:ff:a9:52:86:ba:
ba:c1:1f:9a:8b:7c:a0:f9:eb:4f:5f:44:90:f3:92:
be:70:83:15:45:c4:89:df:62:bb:00:24:bb:34:81:
cc:bc:8f:b0:cf:60:70:9e:80:4c:d9:7a:49:a0:03:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F1:AE:8C:EC:5C:CC:C2:30:C2:C3:C8:46:E6:59:D7:7E:48:5B:C4
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/1_GujOxczMIwwsPIRuZZ135IW8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:7a:d6:4b:25:df:30:08:1a:35:93:88:dc:c3:69:7c:04:e5:
97:f6:bb:54:58:11:4d:9a:be:55:1a:8f:de:17:bd:62:8a:e5:
6c:ee:bb:48:d6:08:6e:d2:72:7f:2d:01:05:e6:24:4c:39:b4:
d9:2f:00:61:97:f7:92:b0:7a:fe:5d:4f:d2:5a:93:9b:68:48:
3c:9a:0a:64:17:c6:81:78:5c:44:bc:b7:90:56:d8:78:34:7d:
9f:3b:12:0f:14:7a:b3:f4:5b:71:d4:e7:b1:eb:bd:b6:e6:7a:
17:0a:6f:c2:1b:1b:0e:fb:9e:af:52:59:ca:af:3f:82:f2:5b:
24:d8:89:58:b1:ee:a8:3e:26:88:eb:80:c6:b9:e5:02:31:3b:
cc:37:32:19:2b:94:de:47:48:40:e1:5c:d6:ed:3f:51:9b:d1:
0a:ee:fd:f7:e0:bc:0d:5c:fa:9b:e0:6f:b0:e6:b0:d3:8c:12:
8d:2b:61:4c:5f:fa:53:3c:c1:2c:85:40:12:0c:e3:0c:55:32:
db:e1:88:00:fe:a1:f6:05:ad:94:74:c6:ee:70:c7:aa:7f:e1:
8b:67:1c:b0:8f:fa:5d:82:4f:ea:db:05:08:df:dc:0c:35:5a:
c0:05:b2:fd:b6:27:11:b1:43:d9:6a:4e:73:15:e7:d2:57:c5:
fc:57:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:31:50 2026 by rpki-client