Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/geG4SlpQPLvMgA3uDyLTmIWmxGM.roa
File: geG4SlpQPLvMgA3uDyLTmIWmxGM.roa (raw, json)
Hash identifier: E3yg6GvX7SKVYNC0tw1auLyQDADDfhOFkHhX32lzfek=
Subject key identifier: 81:E1:B8:4A:5A:50:3C:BB:CC:80:0D:EE:0F:22:D3:98:85:A6:C4:63
Certificate issuer: /CN=75069917464d1c0b8a494ebef5ce3a5d6edea669
Certificate serial: 01A0EECEA88597215F1A0DDB533D80248298
Authority key identifier: 75:06:99:17:46:4D:1C:0B:8A:49:4E:BE:F5:CE:3A:5D:6E:DE:A6:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQaZF0ZNHAuKSU6-9c46XW7epmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/geG4SlpQPLvMgA3uDyLTmIWmxGM.roa
Signing time: Tue 29 Sep 2026 20:15:15 +0000
ROA not before: Tue 29 Sep 2026 20:15:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15943
IP address blocks: 2001:678:a08::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/dQaZF0ZNHAuKSU6-9c46XW7epmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/dQaZF0ZNHAuKSU6-9c46XW7epmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQaZF0ZNHAuKSU6-9c46XW7epmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:ce:a8:85:97:21:5f:1a:0d:db:53:3d:80:24:82:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75069917464d1c0b8a494ebef5ce3a5d6edea669
Validity
Not Before: Sep 29 20:15:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81e1b84a5a503cbbcc800dee0f22d39885a6c463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:42:39:f6:1f:73:a5:e3:fa:67:a5:75:b7:a1:
96:cd:fc:a2:50:44:ff:23:df:f4:79:60:11:6d:bb:
e1:96:6d:25:ea:4d:c6:0a:aa:46:c9:5f:32:4e:76:
41:ea:d9:73:18:0a:5d:26:7e:d5:48:8d:d1:b2:3a:
91:9c:b6:d8:48:12:9b:8c:49:58:24:ff:04:9b:d1:
ba:30:e4:6b:9e:44:80:f6:81:b5:2f:76:96:3e:7a:
84:13:5b:20:32:85:6b:22:f8:fa:86:5a:72:f5:d0:
be:43:89:72:07:99:0b:e9:ae:f2:23:8b:1a:54:8f:
85:d1:0b:de:20:a0:d5:61:ec:d6:3a:c0:8d:bb:50:
1f:53:59:e5:f9:da:d3:35:a2:b1:b6:39:7c:fd:90:
de:43:b6:2a:b1:ba:b7:eb:52:30:2e:ba:31:61:19:
cf:79:fa:c0:71:12:6d:25:71:6b:2a:15:91:09:fe:
e1:a2:2f:8e:8b:e6:79:f6:45:16:4f:05:36:e3:3c:
42:3f:b6:d1:bc:80:2a:60:5f:12:cf:c2:71:d2:83:
62:80:6a:f8:4a:77:12:c7:ca:66:6e:51:de:3a:0d:
d8:35:08:20:b3:ea:7c:ee:0e:fb:bc:24:cc:75:93:
ce:a9:95:52:a9:a6:2c:90:4f:df:53:5b:b8:52:d6:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E1:B8:4A:5A:50:3C:BB:CC:80:0D:EE:0F:22:D3:98:85:A6:C4:63
X509v3 Authority Key Identifier:
keyid:75:06:99:17:46:4D:1C:0B:8A:49:4E:BE:F5:CE:3A:5D:6E:DE:A6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQaZF0ZNHAuKSU6-9c46XW7epmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/geG4SlpQPLvMgA3uDyLTmIWmxGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/dQaZF0ZNHAuKSU6-9c46XW7epmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a08::/48
Signature Algorithm: sha256WithRSAEncryption
92:cd:7b:1b:57:0e:c1:4f:c0:4f:2a:ae:13:64:87:c1:70:9d:
4c:ca:9f:c1:77:13:eb:d3:7a:34:1a:0c:82:50:03:e0:2c:b8:
fb:7a:8f:5f:05:fe:81:e1:85:a7:fc:43:8e:35:7a:0f:3d:75:
d5:c1:f5:2e:5a:7e:9d:c6:d6:6b:5f:f6:b9:e5:f8:94:e3:8a:
ea:db:5a:2b:59:c0:c2:7f:9b:07:b7:1e:4c:90:b5:45:3f:36:
d8:5a:3f:3f:d9:bb:95:b6:46:bb:07:6c:e1:4a:1c:66:06:e1:
3e:62:a1:da:2e:a7:d7:5b:21:64:2e:f7:89:84:c6:22:b8:82:
95:e4:ea:7c:2e:69:40:f3:75:86:0c:c1:5d:35:c6:78:84:a2:
d7:17:30:da:99:5b:99:5e:d3:6c:0b:81:2d:06:b9:9e:79:08:
3d:fd:9c:c2:57:d7:6c:4f:2f:3e:75:a8:00:f1:c2:7f:b7:ec:
bd:c6:f1:67:79:31:d0:28:5b:0a:19:45:6f:af:c9:c8:21:53:
d3:57:5a:bc:60:ad:89:5f:be:e3:42:22:11:8b:60:9e:06:ae:
96:5a:57:40:1c:41:ab:70:90:c8:cc:10:d8:94:78:b5:17:4d:
8f:59:59:5e:b9:76:93:62:3d:7d:de:e1:f6:03:a0:80:53:70:
04:d8:75:8d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaDuzqiFlyFfGg3bUz2AJIKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDY5OTE3NDY0ZDFjMGI4YTQ5NGViZWY1Y2UzYTVkNmVk
ZWE2NjkwHhcNMjYwOTI5MjAxNTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWUxYjg0YTVhNTAzY2JiY2M4MDBkZWUwZjIyZDM5ODg1YTZjNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30I59h9zpeP6Z6V1t6GWzfyiUET/
I9/0eWARbbvhlm0l6k3GCqpGyV8yTnZB6tlzGApdJn7VSI3RsjqRnLbYSBKbjElY
JP8Em9G6MORrnkSA9oG1L3aWPnqEE1sgMoVrIvj6hlpy9dC+Q4lyB5kL6a7yI4sa
VI+F0QveIKDVYezWOsCNu1AfU1nl+drTNaKxtjl8/ZDeQ7Yqsbq361IwLroxYRnP
efrAcRJtJXFrKhWRCf7hoi+Oi+Z59kUWTwU24zxCP7bRvIAqYF8Sz8Jx0oNigGr4
SncSx8pmblHeOg3YNQggs+p87g77vCTMdZPOqZVSqaYskE/fU1u4UtZgxQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIHhuEpaUDy7zIAN7g8i05iFpsRjMB8GA1UdIwQY
MBaAFHUGmRdGTRwLiklOvvXOOl1u3qZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFhWkYwWk5IQXVLU1U2LTljNDZYVzdlcG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi83M2E0YzMtMzRhMi00OTNjLTliNTkt
NjU0MjQxZDRlMTJjLzEvZ2VHNFNscFFQTHZNZ0EzdUR5TFRtSVdteEdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi83M2E0YzMtMzRhMi00OTNjLTliNTktNjU0MjQxZDRlMTJj
LzEvZFFhWkYwWk5IQXVLU1U2LTljNDZYVzdlcG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAoI
MA0GCSqGSIb3DQEBCwUAA4IBAQCSzXsbVw7BT8BPKq4TZIfBcJ1Myp/BdxPr03o0
GgyCUAPgLLj7eo9fBf6B4YWn/EOONXoPPXXVwfUuWn6dxtZrX/a55fiU44rq21or
WcDCf5sHtx5MkLVFPzbYWj8/2buVtka7B2zhShxmBuE+YqHaLqfXWyFkLveJhMYi
uIKV5Op8LmlA83WGDMFdNcZ4hKLXFzDamVuZXtNsC4EtBrmeeQg9/ZzCV9dsTy8+
dagA8cJ/t+y9xvFneTHQKFsKGUVvr8nIIVPTV1q8YK2JX77jQiIRi2CeBq6WWldA
HEGrcJDIzBDYlHi1F02PWVleuXaTYj193uH2A6CAU3AE2HWN
-----END CERTIFICATE-----
Generated at Wed Oct 7 19:16:42 2026 by rpki-client