Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Gm_Ttu8H2pJsGmIleXD4dVPfvKs.roa
File: Gm_Ttu8H2pJsGmIleXD4dVPfvKs.roa (raw, json)
Hash identifier: JMn9Xn24q3oN67KmRN/XQB0f1nkwbVE6Jv9A3Lcdkfk=
Subject key identifier: 1A:6F:D3:B6:EF:07:DA:92:6C:1A:62:25:79:70:F8:75:53:DF:BC:AB
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019CCEE877B2288A256271BB645D364A5CE4
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Gm_Ttu8H2pJsGmIleXD4dVPfvKs.roa
Signing time: Sun 08 Mar 2026 19:24:27 +0000
ROA not before: Sun 08 Mar 2026 19:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210815
IP address blocks: 2a0b:ac00::/29 maxlen: 29
2a13:c440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ce:e8:77:b2:28:8a:25:62:71:bb:64:5d:36:4a:5c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 8 19:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a6fd3b6ef07da926c1a62257970f87553dfbcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:d4:da:5c:2e:9d:ed:8d:2f:2f:65:89:02:
bf:93:02:e3:c5:ee:88:cb:78:c4:59:24:87:d9:2b:
07:7e:c3:0d:ef:d7:f1:84:ad:a0:33:74:bb:e2:83:
ff:08:f6:76:05:d0:71:60:65:94:4b:3d:0f:1c:23:
89:1a:29:f1:9d:68:e5:a8:1f:cd:33:8b:45:6f:aa:
01:7b:9f:9b:5b:8a:d0:27:06:5e:6f:4b:88:55:80:
9c:79:92:ed:85:d1:2c:4e:8f:5b:ac:cf:62:e1:24:
a2:53:51:0b:99:7b:27:83:fa:db:f0:3b:0f:0c:e6:
09:8e:f1:fd:8b:84:0f:2c:e1:6e:35:4a:f0:43:f3:
8a:39:ae:0c:65:e4:48:48:12:f3:a2:d8:38:f7:92:
49:e1:51:9c:95:9c:19:22:14:02:f2:2a:4a:a9:d9:
75:34:ed:3f:02:6e:c4:a6:39:e7:ad:1d:91:fd:98:
58:24:55:3e:2a:b5:76:22:6f:7b:ca:4b:1f:88:6d:
e4:c4:30:7e:06:ae:d5:02:7e:6b:18:be:49:41:a0:
5d:57:af:64:09:32:ad:8a:2a:23:73:01:07:3b:28:
b3:82:7f:b3:df:59:84:b0:fd:ec:91:06:d7:1a:fe:
71:45:d4:25:a5:bb:e7:1e:4d:20:08:e7:ab:8b:40:
f8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6F:D3:B6:EF:07:DA:92:6C:1A:62:25:79:70:F8:75:53:DF:BC:AB
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Gm_Ttu8H2pJsGmIleXD4dVPfvKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ac00::/29
2a13:c440::/29
Signature Algorithm: sha256WithRSAEncryption
a6:eb:4d:33:97:6e:fc:a7:a6:d3:5a:fd:89:ca:cb:54:8c:2a:
81:72:b3:88:3b:b2:fb:4a:45:4a:90:89:5d:ef:47:d4:91:e5:
c7:e7:23:39:4b:95:a9:44:96:30:b0:cd:ea:08:0a:e5:7c:43:
69:37:20:2e:fa:91:5d:5c:83:9c:47:73:21:10:bc:18:30:5c:
db:64:80:14:d0:ea:fa:8c:bb:e6:d0:20:4e:c0:fc:18:4d:af:
dd:ab:c9:b2:35:5e:3d:e4:2d:94:ba:5d:66:2d:05:eb:ea:0e:
0b:7b:4c:2b:45:a0:86:74:92:92:f5:70:78:dc:5e:7e:74:23:
cc:1c:14:00:c8:df:0c:93:d0:97:5e:b2:57:a6:08:35:b4:13:
08:30:39:f9:1c:6a:cf:4a:a7:42:9d:61:9b:11:53:37:65:7d:
58:dd:d2:bf:7f:36:71:46:7b:56:15:03:17:e2:bc:9f:01:95:
28:0b:8e:31:45:95:26:32:7e:7a:15:d9:06:0a:0a:78:d9:9c:
8e:80:50:40:d8:87:11:72:81:b0:b8:fd:d3:3c:4e:7a:5d:d4:
29:67:fd:4e:20:4d:4b:ed:89:7e:be:c6:71:67:1b:35:44:9b:
b6:f1:dd:26:5e:70:04:04:aa:b9:7e:78:78:57:ef:ce:76:2a:
18:b4:1b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:53:00 2026 by rpki-client