Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/gEJvFR8PsrUne5oELsB0PV7jSGU.roa
File: gEJvFR8PsrUne5oELsB0PV7jSGU.roa (raw, json)
Hash identifier: mpcorMON4i4mafITifxuEzyDa+A1SVT5nIbq/8eGhJA=
Subject key identifier: 80:42:6F:15:1F:0F:B2:B5:27:7B:9A:04:2E:C0:74:3D:5E:E3:48:65
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 019E468846CED928F893BD05B3E8E0378C6E
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/gEJvFR8PsrUne5oELsB0PV7jSGU.roa
Signing time: Wed 20 May 2026 17:56:36 +0000
ROA not before: Wed 20 May 2026 17:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 185.16.98.0/24 maxlen: 24
185.16.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:46:88:46:ce:d9:28:f8:93:bd:05:b3:e8:e0:37:8c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: May 20 17:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80426f151f0fb2b5277b9a042ec0743d5ee34865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:d7:91:b0:9a:24:11:ff:38:aa:f3:de:3a:
81:7f:b2:5d:73:d3:1a:65:9d:5b:43:4a:d6:de:fb:
27:90:3e:a7:b7:bf:00:48:28:20:6b:20:3b:85:77:
5b:a9:f7:cc:32:30:74:ab:84:93:62:cc:83:c5:99:
40:df:7e:99:5b:3d:8e:3e:6f:1d:96:34:0d:7d:eb:
10:0b:c0:5d:f4:9c:55:11:50:74:be:83:1f:4e:d7:
06:24:24:02:1f:35:eb:4b:2b:2d:2d:94:9e:cf:56:
c4:0c:54:3e:df:29:2e:e1:4d:57:bd:06:1a:d5:a8:
8e:60:43:91:01:2e:32:d6:95:36:9c:ae:1f:52:2f:
d7:53:b8:17:14:56:22:fc:a0:e3:4b:1f:63:fb:8a:
e6:5b:22:88:ad:6b:c8:0d:61:c2:b9:29:bf:82:21:
bd:f9:2d:3b:6a:fa:37:4f:8a:53:9f:22:37:37:d1:
bf:72:d5:3e:fe:3f:ab:3a:a7:5d:14:9c:39:4e:a3:
9b:61:53:97:42:53:83:84:fd:04:67:89:0a:34:97:
f5:05:c1:8e:fc:8f:d0:53:1a:0d:b2:43:c8:67:24:
9c:1b:0c:bc:3b:cc:9d:5c:82:98:b6:06:31:af:f1:
79:b4:f8:62:57:92:ee:2a:e2:b7:d7:cf:46:2d:a7:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:42:6F:15:1F:0F:B2:B5:27:7B:9A:04:2E:C0:74:3D:5E:E3:48:65
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/gEJvFR8PsrUne5oELsB0PV7jSGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.98.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:68:ea:f7:1b:89:69:0f:fd:f3:be:10:90:fd:94:9b:ad:62:
f0:f1:ce:56:00:ec:de:25:92:db:b2:31:60:d7:e8:f8:63:6b:
f0:22:ed:be:bc:4e:99:df:5d:8e:0f:38:c2:54:4f:32:b6:69:
07:4e:41:05:88:ba:19:c0:2f:80:c3:af:4f:6b:cc:53:d1:7e:
13:81:dd:40:74:c3:41:d5:45:d8:57:82:01:ed:08:59:f7:9a:
81:cb:9a:06:66:a8:17:71:61:47:57:a9:02:5b:9a:e6:d0:82:
58:92:2f:0b:d4:04:04:08:52:68:ac:dd:ec:d5:07:4b:66:ea:
50:78:69:e3:ed:d7:6b:af:f5:90:c2:12:cf:6f:16:79:d1:04:
56:60:00:e8:80:50:1e:13:6d:ec:d1:ba:1f:43:f9:6d:76:c6:
30:eb:70:16:9e:19:6e:36:cc:20:1f:4c:b9:ff:8d:db:03:b5:
07:ea:67:79:d1:a6:85:5a:c4:54:b5:c3:cc:85:7c:2f:4e:77:
2a:d1:c8:ab:ab:07:00:3b:64:26:3b:f9:16:31:43:de:e9:b5:
4b:6d:f0:fb:38:87:64:a7:f8:a1:b5:27:39:9b:14:86:3a:21:
b3:42:6e:95:02:81:68:5e:c8:5e:7d:a5:c0:1c:2a:ce:7e:08:
84:a4:54:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:03:04 2026 by rpki-client