Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/g7raxSm3_Gd1W67GWI98P-YJ6e8.roa
File: g7raxSm3_Gd1W67GWI98P-YJ6e8.roa (raw, json)
Hash identifier: E+IMIxEsz77jqGUmol6mnW+1sPJh8YL/IAo2w/YvhXo=
Subject key identifier: 83:BA:DA:C5:29:B7:FC:67:75:5B:AE:C6:58:8F:7C:3F:E6:09:E9:EF
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A0DA6569954327B9671FB270505EDE2B1C
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/g7raxSm3_Gd1W67GWI98P-YJ6e8.roa
Signing time: Fri 25 Sep 2026 21:07:54 +0000
ROA not before: Fri 25 Sep 2026 21:07:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213382
IP address blocks: 78.108.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:65:69:95:43:27:b9:67:1f:b2:70:50:5e:de:2b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Sep 25 21:07:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83badac529b7fc67755baec6588f7c3fe609e9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:e6:89:6b:79:b9:24:72:9f:fb:4f:17:5b:
e6:6d:74:78:7b:89:6f:d5:96:3e:f9:e0:44:93:8a:
bf:99:5d:d4:2a:3b:b2:48:32:fc:05:fc:5a:86:67:
76:63:db:8f:16:fb:19:2c:bd:40:a3:c2:d5:31:af:
3b:0c:62:5e:8c:67:63:d1:e5:5d:28:aa:0a:c4:cd:
a2:7f:42:b1:5c:d4:f0:ed:9c:03:c0:28:ad:e0:6f:
99:b6:44:64:92:54:52:66:c8:a5:7a:1b:31:c8:e5:
83:de:4f:11:dd:83:23:e3:71:63:68:95:b1:6a:16:
4d:23:88:b2:87:2c:fa:3e:c1:ad:d4:82:54:51:40:
60:53:1b:40:4e:19:c7:9c:bb:a0:30:98:ce:fa:7d:
9f:a0:20:60:12:39:63:dd:32:91:8f:2e:1b:df:d5:
92:f8:0b:54:8f:1b:f0:cc:98:aa:7f:50:b0:47:32:
2f:79:83:69:6c:4e:32:63:2e:f6:03:0a:bf:3c:a4:
8e:3d:43:8d:90:9b:af:b6:98:38:9c:cb:dd:15:6c:
30:52:56:9b:84:ec:ea:03:5a:95:97:2f:23:d4:d6:
3b:56:81:c2:83:13:9d:19:cd:55:50:e5:ce:62:7a:
35:f4:0d:a1:90:10:37:c6:08:ff:8a:b5:a6:8b:71:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BA:DA:C5:29:B7:FC:67:75:5B:AE:C6:58:8F:7C:3F:E6:09:E9:EF
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/g7raxSm3_Gd1W67GWI98P-YJ6e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.119.0/24
Signature Algorithm: sha256WithRSAEncryption
43:10:17:56:c6:ca:11:2a:5d:23:95:41:38:53:e9:4a:03:97:
1c:d2:0a:0b:12:ad:16:f2:11:b8:60:a9:df:01:db:b4:dd:84:
34:6a:1c:61:51:43:fc:b9:ff:98:22:7d:4c:e1:9a:c7:5c:97:
35:cd:3a:3e:6a:c9:84:9b:cc:75:d5:55:b0:0e:af:8b:70:9f:
8f:6c:3e:fc:20:74:85:fb:ec:06:28:81:41:e4:88:8c:f2:2b:
1f:a5:4c:8e:d4:45:44:4d:45:ad:86:bb:25:5a:64:a7:4b:24:
db:8d:26:2b:75:c2:6b:75:04:a8:8b:07:47:7a:ce:62:35:3f:
ea:2b:19:3b:61:16:88:93:a0:b6:a2:42:d8:9f:01:68:7c:42:
ca:81:33:65:05:6e:ab:36:0c:15:34:ca:13:c9:22:01:1b:4d:
31:07:00:87:05:96:73:8b:0a:67:b0:31:f5:cc:4d:86:b5:03:
e8:c6:23:58:cb:b4:99:a9:96:1b:5a:62:f4:7c:a0:dc:07:d3:
2c:d1:09:db:7a:b9:c7:12:e7:ea:87:ab:92:f3:55:af:8f:12:
91:cc:1b:bf:8c:e7:3f:2f:15:06:4a:39:8f:1a:7e:d4:f9:69:
7b:81:b3:74:8f:1e:46:48:8d:ac:5b:a8:fd:0c:46:78:9b:05:
48:64:13:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:48:38 2026 by rpki-client