Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/gW9EUsJq5KNlBgbKe1eUX3zrgqY.roa
File: gW9EUsJq5KNlBgbKe1eUX3zrgqY.roa (raw, json)
Hash identifier: zMFwfAdGlyXpJ1SGF0FbM4kodimFi74MUh3D60u8Iu4=
Subject key identifier: 81:6F:44:52:C2:6A:E4:A3:65:06:06:CA:7B:57:94:5F:7C:EB:82:A6
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F6A145E6DE9DF9589896CEC890D1A975
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/gW9EUsJq5KNlBgbKe1eUX3zrgqY.roa
Signing time: Thu 01 Oct 2026 08:42:39 +0000
ROA not before: Thu 01 Oct 2026 08:42:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197886
IP address blocks: 79.120.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:a1:45:e6:de:9d:f9:58:98:96:ce:c8:90:d1:a9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:42:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=816f4452c26ae4a3650606ca7b57945f7ceb82a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f2:af:c8:fa:0d:99:ee:db:db:73:bc:7e:e0:
82:34:d0:66:82:04:e2:7d:92:55:fd:86:ff:bd:8b:
f1:2a:0f:e8:14:88:1d:9f:33:35:a1:3c:b6:8d:49:
9c:a8:17:8d:01:d9:c4:c2:8f:0f:ef:ac:0a:84:30:
95:74:52:1b:90:c9:ea:b4:ab:85:23:0b:d1:48:07:
e1:24:07:4f:1f:7b:54:12:c7:5b:cb:99:76:04:1c:
88:87:df:3a:fd:69:63:8e:bb:50:34:d7:cd:c7:e6:
fa:8f:1c:87:64:03:23:1e:50:bc:77:5c:2a:45:c4:
50:42:2c:45:fa:54:22:9a:9d:98:83:69:a7:19:fc:
3a:c7:17:d6:0f:2a:1c:73:73:33:f8:fd:c5:b7:14:
48:17:47:77:b3:d7:c0:90:20:a4:92:79:d2:96:fd:
6a:8f:1c:48:1f:6a:98:20:3a:d9:0c:61:60:a7:96:
15:42:ed:ed:b7:62:26:cd:2e:c4:3e:d2:a5:61:2e:
41:56:f7:97:a9:af:94:4d:7f:3e:ae:68:dc:6a:56:
0a:2b:98:1a:4f:6b:4a:55:24:37:11:dd:8a:ad:be:
18:c1:08:d8:27:a6:eb:b5:48:a6:d2:c0:d1:4b:3f:
8a:69:90:d4:0e:0a:32:6c:30:f8:a9:8a:c0:61:43:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6F:44:52:C2:6A:E4:A3:65:06:06:CA:7B:57:94:5F:7C:EB:82:A6
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/gW9EUsJq5KNlBgbKe1eUX3zrgqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.120.244.0/23
Signature Algorithm: sha256WithRSAEncryption
81:5d:12:84:c7:f8:17:cb:75:31:a1:69:4e:6d:68:fc:3a:6e:
f5:cb:1f:bb:fc:b2:ef:57:8c:f6:cb:c5:78:36:ea:42:93:3d:
1b:3e:7d:69:c2:24:32:a8:73:af:25:4b:11:95:45:8f:ee:28:
5c:54:50:f6:8a:15:24:19:fa:03:56:cb:0c:00:f3:a3:31:40:
46:1d:ef:9e:4e:93:53:65:ee:96:17:b3:c3:2c:62:d9:e4:ea:
26:e4:2d:7c:db:38:5f:a0:29:10:3c:34:15:a0:3a:a5:5b:8d:
1a:a9:ca:f3:73:58:b5:58:12:53:bb:a6:66:9d:10:a3:f0:3d:
de:75:0b:be:77:e2:3b:16:04:9c:08:87:ac:1a:9d:7f:97:b9:
10:3c:ba:c9:c6:e1:9d:9b:6c:71:a4:e6:d2:05:54:9c:9d:d3:
57:b8:07:60:97:3d:bc:a6:5c:e7:62:54:d7:67:30:7d:d0:fb:
f7:cc:bf:aa:33:da:45:71:d0:ee:b5:9a:26:ad:0b:29:0d:1a:
e3:c3:82:16:15:0f:df:90:f8:dc:84:af:1a:03:e4:3b:94:1a:
27:ac:fb:ca:fc:82:46:e5:0e:35:44:a5:7b:14:55:55:a0:66:
19:36:51:14:88:2d:2d:9a:9d:f9:54:0c:76:e2:57:7b:d8:99:
42:08:0a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:34 2026 by rpki-client