Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ggT99RQQXFa-77DbXLrR8E6auJI.roa
File: ggT99RQQXFa-77DbXLrR8E6auJI.roa (raw, json)
Hash identifier: 9C3Bano3F60mtgl1ftf5OQcwyAAQslMGebZ5jRPOqhY=
Subject key identifier: 82:04:FD:F5:14:10:5C:56:BE:EF:B0:DB:5C:BA:D1:F0:4E:9A:B8:92
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A0E20E7B2E3B1B651CDB4BBF94B2B2B19C
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ggT99RQQXFa-77DbXLrR8E6auJI.roa
Signing time: Sun 27 Sep 2026 08:49:54 +0000
ROA not before: Sun 27 Sep 2026 08:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135120
IP address blocks: 89.23.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:0e:7b:2e:3b:1b:65:1c:db:4b:bf:94:b2:b2:b1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Sep 27 08:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8204fdf514105c56beefb0db5cbad1f04e9ab892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:aa:52:a9:d4:66:3c:8f:3e:90:31:e7:fd:
f9:08:c4:21:38:2f:d4:ee:e3:2e:1d:6e:8a:2c:bf:
f5:78:07:48:3c:91:65:b1:0d:88:26:cc:7f:58:5c:
d4:56:7f:ee:56:d5:35:1b:d9:b0:6f:4f:da:0a:53:
c3:e1:1c:15:20:40:07:e0:08:b5:11:15:f7:59:4f:
f0:55:10:88:3c:0e:33:96:a5:47:2b:e0:e3:73:b6:
99:33:9f:1d:03:1e:ad:63:58:f7:39:4f:3f:a7:f5:
9b:46:45:64:3f:65:e7:42:6f:07:f1:2f:25:51:f9:
78:98:02:79:b0:2b:a4:fe:3b:3e:a4:54:22:9f:3c:
7a:cb:74:ce:d7:c9:f6:8d:2a:a2:95:2f:62:e2:25:
93:b1:f3:a4:57:89:e2:88:76:49:18:9f:ae:1d:dc:
13:8a:4b:b9:78:e7:5a:f4:28:31:84:0d:c1:ee:0d:
33:3f:86:d7:4f:4a:ab:2f:79:c9:dc:76:e2:61:db:
b8:6a:b4:87:f6:d3:70:73:d1:d8:de:59:29:52:49:
42:f2:08:57:e1:f9:71:ed:50:ae:de:47:2a:57:17:
7d:7f:16:6e:34:90:d6:6d:b7:68:0d:a5:f6:40:f3:
2b:05:69:9e:4a:03:24:4e:26:2c:52:f3:6a:34:b1:
b0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:04:FD:F5:14:10:5C:56:BE:EF:B0:DB:5C:BA:D1:F0:4E:9A:B8:92
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ggT99RQQXFa-77DbXLrR8E6auJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.91.0/24
Signature Algorithm: sha256WithRSAEncryption
03:80:34:79:e2:99:74:e9:73:83:66:9f:7a:a3:43:93:10:08:
00:6d:a4:f2:d9:77:57:d6:7b:d8:d9:94:9b:72:ff:24:bc:a0:
96:ae:23:fe:de:3f:1b:6f:80:f0:ce:92:bb:a1:ae:91:d8:56:
75:5d:47:c9:53:1e:49:fa:0a:79:df:98:a4:16:9f:8d:96:ea:
b2:ce:17:b6:90:54:bb:5d:91:2d:0b:4f:d2:12:0a:53:18:f9:
17:b2:10:24:98:40:0e:cb:c7:ef:b6:54:67:9a:23:bf:52:d6:
8c:65:60:e1:4b:d6:b7:b7:0c:28:74:e7:92:ac:4e:5a:82:44:
7c:fb:ba:4d:22:e3:a6:9d:60:dc:39:e4:da:40:f0:a0:96:b6:
54:05:d5:9a:9a:86:db:42:c4:68:46:2f:d9:e4:58:ff:d0:e0:
a1:11:2e:85:19:b2:8e:00:41:18:9e:32:e9:bb:20:d0:c3:95:
7a:26:a3:ea:92:78:5c:5a:e8:17:b4:6e:16:e8:2a:46:fe:d2:
5c:46:f9:bd:fd:0c:fd:7d:b3:fc:80:b3:d7:00:5f:73:5f:d1:
65:41:51:be:72:22:0d:57:d5:ae:a6:4e:35:00:ef:02:ca:38:
8e:5b:e1:29:13:45:b9:54:ae:36:e2:f6:0b:97:ac:aa:ea:37:
81:a9:c5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:17:08 2026 by rpki-client