Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/gfZI4IQTC0ezUMVBFSxLag6FqdI.roa
File: gfZI4IQTC0ezUMVBFSxLag6FqdI.roa (raw, json)
Hash identifier: uT4KnHoYYVdfwJWh8J9YXV6bwz4BpsS1dLHpl2DqdnI=
Subject key identifier: 81:F6:48:E0:84:13:0B:47:B3:50:C5:41:15:2C:4B:6A:0E:85:A9:D2
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019FEA5D0096257258963A1C6F11C2289E2C
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/gfZI4IQTC0ezUMVBFSxLag6FqdI.roa
Signing time: Mon 10 Aug 2026 06:29:51 +0000
ROA not before: Mon 10 Aug 2026 06:29:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2497
IP address blocks: 89.30.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:5d:00:96:25:72:58:96:3a:1c:6f:11:c2:28:9e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 10 06:29:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81f648e084130b47b350c541152c4b6a0e85a9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:58:eb:dd:cf:cf:6f:72:79:c8:e8:63:6c:
9b:e0:fb:3c:b0:25:6c:32:f1:6f:53:08:3b:08:33:
f8:a8:fc:53:4d:ef:ab:fa:53:f5:e8:13:d3:21:2e:
ba:0d:59:51:d8:07:c8:c8:32:76:39:6d:16:97:db:
2a:e2:88:49:a5:15:1f:e8:14:1b:6c:ef:28:2b:5e:
6d:ed:ad:a4:d4:d7:ef:fc:04:24:dc:6a:e7:0e:61:
39:24:02:08:c3:b1:39:4a:ce:a5:cf:72:a1:f7:0b:
28:3b:3f:b2:99:5a:28:82:3c:66:8e:cf:aa:1b:58:
55:82:7c:d5:fb:55:01:78:d1:12:8b:85:c4:4f:e5:
0f:6f:f2:ef:99:87:2a:95:1b:55:f4:83:cb:a8:0d:
1b:ac:92:94:a4:d0:cd:42:d7:14:19:2b:64:ce:ad:
71:33:49:fa:ea:c6:ad:14:ef:b6:23:4e:8f:f5:8e:
b2:7b:1d:95:df:19:29:2d:85:4e:a0:49:5f:65:74:
5f:44:a1:e0:cf:3f:4b:51:b4:e7:2e:cc:43:39:92:
4f:ec:88:c9:33:5f:99:20:60:22:df:70:40:05:c2:
cb:f9:d5:a3:e7:5f:8a:08:13:77:2e:33:fe:7d:0b:
c6:f7:f9:1a:15:68:4c:a0:e3:c6:dc:4e:1a:2b:e4:
7e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F6:48:E0:84:13:0B:47:B3:50:C5:41:15:2C:4B:6A:0E:85:A9:D2
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/gfZI4IQTC0ezUMVBFSxLag6FqdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.176.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:ff:69:71:6d:b5:85:e4:51:f0:03:5d:77:62:52:d9:09:cf:
2f:27:3b:a6:6b:2e:76:8f:c8:f4:d9:5e:c9:5b:df:c8:c3:a1:
f1:32:b8:d0:fb:06:0e:a1:d6:ee:f7:ae:1d:41:66:52:ea:44:
e1:7a:4f:8e:f3:45:2d:fa:52:1e:0f:2a:8b:71:b7:f2:ef:65:
7c:ba:40:ff:54:07:77:ef:6a:e3:4d:ca:67:f9:d6:d1:81:76:
1b:93:69:bf:14:d0:70:1b:bf:ed:81:d8:b1:4e:81:ef:c8:6a:
63:fe:11:bd:49:75:66:4b:c5:4c:11:a3:db:bd:e5:76:40:00:
65:50:c4:f5:0a:70:dd:bc:5c:41:35:0c:47:7d:3f:dc:2a:c5:
80:70:8a:2b:08:35:73:bf:ce:b0:a6:50:65:0d:37:55:f1:7b:
a6:3d:4c:df:7a:7a:50:0b:01:7b:b8:68:29:7b:13:cf:ad:47:
7e:39:eb:30:46:45:87:f5:9c:ba:29:54:f2:a5:7c:1c:5c:9d:
88:63:d1:9c:49:72:86:2b:72:79:0c:a7:4a:4c:a2:50:fd:cb:
c1:9f:c8:7a:6e:d3:4a:d1:e8:1b:7a:ab:1c:e5:8d:48:6e:23:
52:16:be:4b:4c:c5:54:2d:bc:af:17:58:c0:b4:18:5e:c7:4e:
09:1b:66:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:57 2026 by rpki-client