Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/GxEm1KAYx1EaaM9vnLw4zKeoy8s.roa
File: GxEm1KAYx1EaaM9vnLw4zKeoy8s.roa (raw, json)
Hash identifier: yKdLPkbxMhk4y0yXKwsRzEIoL/f56tRZaFXGiNAI0m4=
Subject key identifier: 1B:11:26:D4:A0:18:C7:51:1A:68:CF:6F:9C:BC:38:CC:A7:A8:CB:CB
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 019FF60C09CB0C5D4B2EA018CF11AC866976
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/GxEm1KAYx1EaaM9vnLw4zKeoy8s.roa
Signing time: Wed 12 Aug 2026 12:56:51 +0000
ROA not before: Wed 12 Aug 2026 12:56:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25074
IP address blocks: 212.40.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:0c:09:cb:0c:5d:4b:2e:a0:18:cf:11:ac:86:69:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Aug 12 12:56:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b1126d4a018c7511a68cf6f9cbc38cca7a8cbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:15:94:df:ae:85:7a:36:f2:da:86:2d:a7:
a9:02:b4:32:17:c4:21:d5:d6:d5:0e:04:8d:45:fb:
07:be:0f:23:a5:86:83:bd:1e:7c:b0:43:05:d8:03:
a1:ab:d2:23:4c:c0:8d:cd:8f:b4:01:46:13:1a:ff:
9e:1a:79:63:78:1b:3b:67:c2:b6:42:5e:65:0f:76:
51:35:d5:1d:5f:f2:a8:7c:f6:ec:46:2b:db:fa:90:
34:a7:07:92:d0:ae:43:3e:d3:4f:99:ad:a4:95:65:
56:07:3f:0e:d9:8a:8c:b3:02:a0:ee:75:40:c2:3d:
44:39:d6:0e:91:ee:7e:c5:87:fc:a8:12:bc:3e:0a:
58:ca:9d:4c:08:3e:c7:c7:6c:e9:e2:0d:a3:62:75:
cf:9e:08:a7:13:5b:42:9e:75:c3:77:4e:51:a4:bd:
de:5e:5d:e6:42:82:41:ec:07:56:1e:01:4d:f9:da:
33:a6:81:c9:5e:95:bb:ad:fe:d1:a7:14:25:43:4e:
98:be:87:55:5e:30:e3:c7:32:cf:e8:ff:7f:85:76:
ac:55:3c:a3:b0:65:b9:58:45:28:92:2b:cb:e2:c8:
ad:99:f1:e6:8d:2a:81:c1:d6:54:c2:b7:b2:f3:c4:
e5:72:60:23:c8:0e:2d:f6:36:d2:ba:68:7f:bc:90:
26:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:11:26:D4:A0:18:C7:51:1A:68:CF:6F:9C:BC:38:CC:A7:A8:CB:CB
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/GxEm1KAYx1EaaM9vnLw4zKeoy8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.40.186.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ad:f7:f3:da:cb:6e:8d:5a:1c:3d:cc:6c:25:05:82:f2:12:
40:d1:52:91:28:10:15:6e:e2:5f:5d:ca:93:b2:34:56:76:a1:
16:49:31:66:98:5a:3b:d4:b4:19:be:3d:97:0a:08:e7:bb:05:
51:b3:bb:70:d8:85:d7:7b:99:71:43:05:6e:7a:15:67:fd:83:
bb:84:af:c0:ad:91:3d:ba:c8:2e:92:97:5e:1d:ba:f2:72:af:
72:ba:45:6b:9b:5c:a6:62:7a:59:10:6e:c5:cc:d3:53:b7:a3:
d0:ac:06:ae:cc:21:49:af:ff:71:ab:bd:a0:47:a8:0d:a6:e8:
9f:d8:96:44:da:35:d8:34:4f:27:d2:19:07:d4:d2:3c:9e:10:
e6:ef:65:45:83:06:ff:89:56:4f:69:4b:bc:c4:4b:fa:03:84:
20:e3:f2:53:b1:ac:57:1b:8a:15:db:32:b6:b1:6d:f0:8e:fe:
28:49:b0:01:69:1a:9b:22:08:44:ae:ab:4b:26:29:59:70:b9:
ac:f7:80:5f:7d:2e:6a:65:88:69:e0:cb:b3:b9:16:2e:12:df:
5a:ae:88:1c:6e:35:36:ef:1f:65:cd:af:11:3c:41:bc:7f:ec:
13:6c:d4:14:db:46:f7:02:ee:91:48:f0:e9:49:a1:9c:d7:a8:
c8:06:40:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:28:39 2026 by rpki-client