Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/GCIY39mdKn4XaLZc1V010cDHuY4.roa
File: GCIY39mdKn4XaLZc1V010cDHuY4.roa (raw, json)
Hash identifier: i1e7UNBK5RKG15upUyAZiaHClZuMWzZJKFm+Q1QJI3w=
Subject key identifier: 18:22:18:DF:D9:9D:2A:7E:17:68:B6:5C:D5:5D:35:D1:C0:C7:B9:8E
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A0638512EDB6BB54AD0BB3FEF4BEA99E4B
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/GCIY39mdKn4XaLZc1V010cDHuY4.roa
Signing time: Wed 02 Sep 2026 19:07:40 +0000
ROA not before: Wed 02 Sep 2026 19:07:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218776
IP address blocks: 2a0e:4001:600::/40 maxlen: 48
2a0e:4001:600::/48 maxlen: 48
2a0e:4001:601::/48 maxlen: 48
2a0e:4001:602::/48 maxlen: 48
2a0e:4001:603::/48 maxlen: 48
2a0e:4001:604::/48 maxlen: 48
2a0e:4001:605::/48 maxlen: 48
2a0e:4001:606::/48 maxlen: 48
2a0e:4001:607::/48 maxlen: 48
2a0e:4001:608::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:85:12:ed:b6:bb:54:ad:0b:b3:fe:f4:be:a9:9e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Sep 2 19:07:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=182218dfd99d2a7e1768b65cd55d35d1c0c7b98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:62:a6:0c:0e:a1:80:f6:65:03:d4:49:8a:58:
c1:1c:43:44:66:11:50:89:c8:ce:5e:e8:cf:25:44:
76:b9:d9:bb:50:c0:33:76:c7:22:6d:ff:a1:21:71:
23:68:73:a0:ac:4c:52:7b:90:32:7c:2c:2a:32:a1:
55:0c:82:c5:e2:a5:2b:23:9b:7b:f7:d9:e0:76:73:
6f:d5:d4:d6:78:bb:16:9f:20:ad:3c:b3:46:ef:fc:
0d:39:7d:c7:48:38:47:24:63:01:ca:24:02:4b:10:
a8:89:40:64:7d:ec:93:ee:43:49:64:f5:c2:76:09:
dd:a5:fc:19:6f:de:b5:4f:f5:af:3b:bb:10:af:19:
ae:bb:c7:d5:0d:9e:9f:e3:38:13:e3:ed:34:bb:18:
94:e8:ef:29:a1:89:39:b0:5d:bc:bf:01:3a:4e:d1:
05:03:17:a6:e1:e6:a7:4b:5c:b0:2c:56:f0:78:a2:
4b:bf:c7:53:25:88:58:c7:aa:e5:6f:dd:c1:6b:df:
66:b4:b3:ba:5b:50:d1:c1:44:e9:82:da:02:4e:85:
a9:fc:47:33:8a:91:da:05:94:8a:76:84:b3:d8:fe:
5d:9c:1a:37:af:81:80:fb:c3:3b:c5:6d:b1:56:50:
a9:42:85:32:58:20:f3:eb:30:69:51:61:40:14:55:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:22:18:DF:D9:9D:2A:7E:17:68:B6:5C:D5:5D:35:D1:C0:C7:B9:8E
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/GCIY39mdKn4XaLZc1V010cDHuY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:600::/40
Signature Algorithm: sha256WithRSAEncryption
7e:a9:bd:bc:46:7e:cb:22:b1:f4:fa:e9:d6:9b:e5:eb:d5:e7:
06:e2:df:5e:08:37:e1:d9:7e:83:4a:56:02:5b:44:8b:a1:42:
bf:76:13:ab:85:02:54:67:ff:a5:cb:4c:40:a2:46:05:0f:76:
c7:54:9c:6e:4d:61:a4:d9:a6:62:21:f8:13:87:18:3f:0a:51:
7b:3e:ae:24:cc:a2:39:bb:1b:cf:56:57:ea:f9:4b:1e:f7:c7:
3f:b7:b8:4c:7a:71:b9:88:31:e4:11:7e:44:21:7d:31:58:c5:
5e:4e:d7:a3:93:92:5e:d7:ef:e9:34:78:2e:5a:60:52:2c:8e:
60:b0:4a:d9:9b:ae:18:ec:7a:2c:e4:e1:cf:b9:24:85:af:d8:
a8:d9:73:02:2d:c4:bd:64:60:fc:a0:a3:86:82:c5:1e:9f:f9:
16:e1:e7:41:c1:b0:84:67:4e:c8:aa:72:3b:d6:af:16:eb:fd:
f9:f0:6a:b7:d8:b5:0c:ae:e1:78:40:08:86:ad:a2:d7:f6:d8:
ff:e7:63:5b:ac:ec:94:61:67:79:fc:ae:0b:b0:7b:3b:48:4c:
77:cf:a9:42:6c:bd:f4:eb:d4:ac:e5:2c:8a:3d:fd:18:e2:ff:
ab:a2:3f:ff:49:52:03:f1:64:ac:7b:29:4f:c2:89:d5:a8:d0:
32:3b:82:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:17 2026 by rpki-client