Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/gZUOlIzqhKz5srdBEwvo7aBCBHY.roa
File: gZUOlIzqhKz5srdBEwvo7aBCBHY.roa (raw, json)
Hash identifier: QYerguIuOXfl4vzShXRMaYeKTMX7gJ2V58FjjoR20A8=
Subject key identifier: 81:95:0E:94:8C:EA:84:AC:F9:B2:B7:41:13:0B:E8:ED:A0:42:04:76
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A041F1E9892A3963F1700DBA25EE94BD2A
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/gZUOlIzqhKz5srdBEwvo7aBCBHY.roa
Signing time: Thu 27 Aug 2026 06:39:27 +0000
ROA not before: Thu 27 Aug 2026 06:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45090
IP address blocks: 109.229.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:f1:e9:89:2a:39:63:f1:70:0d:ba:25:ee:94:bd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Aug 27 06:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81950e948cea84acf9b2b741130be8eda0420476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:00:45:0c:d2:22:0e:d0:5e:c1:8f:17:55:
81:de:21:5f:97:7a:f8:49:e3:a4:fb:0d:e0:fc:68:
5c:b9:5d:11:73:f6:0d:17:af:d9:23:20:2e:e6:be:
f2:df:22:a0:9f:c2:18:67:c3:f7:54:5b:fb:01:49:
a5:8b:1c:47:63:f0:9b:f6:9d:ab:e1:2c:f4:34:c2:
00:4e:ba:a6:95:72:0c:6e:0c:ab:ec:fb:d0:2c:45:
5c:80:7b:2a:7e:6f:29:7f:24:ac:79:02:f7:74:2c:
a1:37:bb:31:17:67:06:e8:f6:6c:f6:ab:ec:4b:84:
bc:39:3d:7c:79:97:a4:a9:ac:69:55:c4:51:11:92:
41:d9:59:37:40:75:98:d8:b2:69:21:54:73:96:b3:
4b:05:ea:38:07:92:b6:18:66:67:be:eb:a3:0b:5f:
99:b9:a5:f8:53:d4:3f:0d:4e:aa:ae:e1:19:b9:6d:
ce:91:eb:1c:d5:82:3d:3d:65:c2:0d:8d:c0:1b:a0:
4b:b0:dd:44:c6:25:a3:6f:25:6c:0c:2c:73:a6:ed:
61:6a:a6:be:aa:86:75:9e:c8:3b:d2:e7:0c:18:ed:
05:1c:9e:b8:22:79:b3:83:ae:3e:db:85:a6:05:b8:
7b:54:21:80:f1:aa:e0:9b:59:f3:cd:7c:0b:a5:5a:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:95:0E:94:8C:EA:84:AC:F9:B2:B7:41:13:0B:E8:ED:A0:42:04:76
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/gZUOlIzqhKz5srdBEwvo7aBCBHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.216.0/23
Signature Algorithm: sha256WithRSAEncryption
42:29:6f:d5:c1:d5:2d:6b:43:2e:be:b0:6e:99:45:41:3e:e7:
91:ab:c7:67:86:7d:28:50:51:5b:4b:94:0b:b6:d3:c8:bc:27:
b1:e1:a3:4a:89:94:63:df:70:29:aa:90:64:c7:91:54:e7:a0:
42:8b:c4:f7:34:17:66:26:a5:c0:3b:3e:9b:80:47:26:44:e3:
e3:74:57:94:44:2a:2e:ec:91:41:e5:72:35:2d:14:ec:74:9f:
b9:97:0b:a3:a8:11:17:09:84:af:47:0a:00:ff:87:fe:60:e7:
6b:99:77:ad:ce:54:77:3c:30:25:d4:d6:91:4a:ae:d0:4f:bb:
6e:7d:a1:5d:51:58:8f:1d:d6:01:fa:31:26:1c:41:d2:92:cb:
f7:70:77:6c:6a:f7:0e:d9:b1:ea:7c:2f:de:9e:f3:d6:03:a6:
ba:e5:50:3b:71:b5:7c:3f:a8:7b:24:c2:59:1f:41:df:84:9d:
b8:d0:fc:a3:40:e1:a3:ab:10:fb:9b:e7:1f:16:9d:3d:28:72:
a7:d6:ac:e8:51:1a:45:46:15:c3:b8:18:4d:b5:33:b0:2a:c3:
c7:c0:6e:cb:f0:80:3b:d9:e5:9d:77:1f:c2:18:03:3a:1f:43:
45:84:af:29:d2:38:0c:62:ff:dc:ab:11:4e:e7:5e:03:9e:e1:
ae:c0:e8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:22 2026 by rpki-client