Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/gVl71Z9b8wU-S9yqhPd5ZdFteVI.roa
File: gVl71Z9b8wU-S9yqhPd5ZdFteVI.roa (raw, json)
Hash identifier: sswgZk6i6rrlOBQqzZIh6p/aw0/5hvDwbsqXElGm9G8=
Subject key identifier: 81:59:7B:D5:9F:5B:F3:05:3E:4B:DC:AA:84:F7:79:65:D1:6D:79:52
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A041F2D44851C9A502C5B6CF3E0E79B4A8
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/gVl71Z9b8wU-S9yqhPd5ZdFteVI.roa
Signing time: Thu 27 Aug 2026 06:40:28 +0000
ROA not before: Thu 27 Aug 2026 06:40:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 37963
IP address blocks: 109.229.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:f2:d4:48:51:c9:a5:02:c5:b6:cf:3e:0e:79:b4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Aug 27 06:40:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81597bd59f5bf3053e4bdcaa84f77965d16d7952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:7f:2c:94:eb:19:7c:fb:c3:07:42:03:70:
46:10:e5:98:a0:a1:7d:21:f5:7b:2d:3c:8e:70:e0:
8a:a5:ae:47:d8:7c:65:a0:0d:38:2f:0c:a5:46:79:
21:7f:17:96:6a:11:a3:bc:8a:dc:f0:58:76:45:fa:
bc:03:33:4b:59:05:42:b6:1f:34:db:29:02:d9:82:
1a:16:25:12:c2:3b:7d:c2:6c:60:36:3b:94:a5:58:
65:83:12:26:bc:80:58:26:c8:4c:b7:a8:22:4f:74:
30:51:16:18:ce:e9:0a:0f:d6:c1:f2:25:52:40:a5:
15:59:88:b7:1a:25:26:45:1b:4f:da:f5:0e:4a:62:
be:e7:da:03:68:f4:f3:12:50:c1:08:c4:98:5e:09:
92:fd:33:f1:c1:ca:11:4a:7e:8c:e0:3c:d5:0b:fe:
7a:1a:a7:77:6d:9b:db:64:28:d8:e7:45:e9:35:dc:
4c:c7:e5:c6:94:e8:39:72:fa:86:00:f6:ab:0b:e4:
25:c9:5c:bb:39:aa:0d:95:20:48:1f:7a:ab:e9:8b:
62:0c:0e:e3:9a:6a:47:d0:a7:08:f2:38:bf:18:d0:
3e:89:82:c7:69:1f:db:22:c9:b6:78:de:6a:82:ff:
b3:29:35:af:9c:ad:30:55:52:70:23:50:d6:49:cf:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:59:7B:D5:9F:5B:F3:05:3E:4B:DC:AA:84:F7:79:65:D1:6D:79:52
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/gVl71Z9b8wU-S9yqhPd5ZdFteVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.216.0/23
Signature Algorithm: sha256WithRSAEncryption
17:71:c8:9b:2f:70:20:ac:da:82:70:a1:93:00:f0:f6:cb:5e:
4b:7d:d2:55:35:0f:48:e9:7e:c9:23:f9:f1:24:02:11:fc:4e:
b0:9c:d6:c2:cb:7a:eb:ec:41:85:52:91:cc:bf:be:f5:c1:b6:
ce:54:0c:f4:b1:35:c9:ec:f9:bd:a7:d3:19:f6:d3:92:13:2f:
ca:36:02:56:a8:91:ea:e9:b6:aa:a3:e7:8c:03:3b:b5:6d:2c:
8d:76:c5:0a:86:72:98:ad:e9:a3:ba:cf:e6:f2:ee:cb:66:a8:
71:1d:90:8b:89:60:97:ac:31:b8:9b:c4:25:f1:0e:59:55:14:
0c:d1:c0:92:f1:c3:64:99:ad:48:51:2b:49:47:41:0a:d3:0b:
75:77:fc:ca:67:02:0d:3c:67:c6:6b:51:77:1c:96:52:a9:9f:
34:1a:ff:55:41:64:76:86:83:5b:9c:21:42:d1:3a:49:58:8e:
f9:69:6b:1e:6e:59:8f:c7:39:57:fa:ad:50:11:2f:fd:b4:2a:
5e:8d:0f:a9:9d:de:81:87:50:22:f2:99:c4:2a:4b:4e:5c:75:
85:6d:db:b3:c0:16:7b:b5:60:fc:77:cd:81:69:e8:c9:ff:5a:
72:d3:8f:08:30:f3:d7:6d:01:a1:aa:71:a4:32:af:bb:f7:84:
db:0a:20:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:15:21 2026 by rpki-client