Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/g6P-T_7zIeAnaaKvj3sulXSqtOI.roa
File: g6P-T_7zIeAnaaKvj3sulXSqtOI.roa (raw, json)
Hash identifier: p1wLwbpWXmBF6YFhqGbuSJYR/O+Q9V0gdZtdsFQxFfM=
Subject key identifier: 83:A3:FE:4F:FE:F3:21:E0:27:69:A2:AF:8F:7B:2E:95:74:AA:B4:E2
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019CBF538293D1CAF4A70757EDC2D780D1E8
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/g6P-T_7zIeAnaaKvj3sulXSqtOI.roa
Signing time: Thu 05 Mar 2026 18:47:27 +0000
ROA not before: Thu 05 Mar 2026 18:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210135
IP address blocks: 45.89.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Mar 2026 15:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:53:82:93:d1:ca:f4:a7:07:57:ed:c2:d7:80:d1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 5 18:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83a3fe4ffef321e02769a2af8f7b2e9574aab4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:31:ec:42:d5:45:8d:37:d7:c7:4f:91:92:
63:9a:8f:0a:81:ff:fb:2c:ff:aa:65:2b:e9:48:19:
20:f7:88:69:11:19:f9:83:25:12:9e:03:2e:e6:ce:
31:25:a6:3c:e3:23:7f:c4:fc:9a:cb:51:f6:91:4b:
7d:1f:e9:7e:56:4e:fe:48:e7:e2:1d:a6:eb:a0:28:
a6:da:d8:96:7c:21:52:89:3a:b2:b6:df:b9:60:ae:
c0:44:9a:37:ec:9e:58:fe:c8:b5:25:4e:d7:c5:95:
0d:28:e9:ee:4a:da:19:7c:b8:bb:9c:92:36:02:e1:
ca:f4:c7:46:e4:8c:ba:19:21:8a:1f:b4:1f:36:42:
7b:5b:13:fd:11:1d:79:d5:f9:09:64:56:4f:b5:7e:
fb:6e:f2:05:c7:5f:c9:38:cb:e9:79:f3:af:5d:6a:
ea:a8:f4:81:a0:ad:ba:10:fe:a5:c7:4b:58:4c:4d:
87:3b:46:c9:96:f2:f9:d8:41:33:6e:53:5d:a0:6d:
42:37:2c:e3:e2:2e:fe:f9:d5:af:e6:f7:b1:b8:aa:
45:dd:61:4f:78:a5:68:58:5c:c7:6d:c6:46:0f:01:
c2:30:d9:8f:e9:ab:0b:fe:51:43:52:1c:da:7f:f1:
36:2e:ae:1d:33:bb:01:3a:c8:4e:a4:4e:46:5b:98:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A3:FE:4F:FE:F3:21:E0:27:69:A2:AF:8F:7B:2E:95:74:AA:B4:E2
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/g6P-T_7zIeAnaaKvj3sulXSqtOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.70.0/24
Signature Algorithm: sha256WithRSAEncryption
51:06:25:98:6c:4d:7d:86:dd:ed:49:18:2b:72:38:91:72:fc:
57:80:13:13:6e:1f:ff:8a:9a:ec:0d:1c:a3:ce:d1:8c:a1:5b:
ee:cb:52:4c:a0:87:5e:83:75:0e:79:69:13:ea:29:eb:46:44:
58:60:72:01:d0:b3:ab:71:c7:4b:79:1e:63:0a:f6:9b:2d:19:
29:21:45:ff:e2:92:40:2f:d8:eb:b7:39:6d:50:54:96:db:03:
e1:72:10:3b:d6:7e:f5:1f:f4:d7:29:e8:5a:14:ae:b9:50:88:
bf:50:2d:05:e9:aa:9a:23:f5:72:93:dc:20:5a:2b:8f:54:82:
ae:b6:60:79:6d:73:2c:10:ae:ce:aa:d7:b8:d4:e1:c5:ff:82:
18:9b:ce:a9:dc:db:24:c4:77:1f:cf:2c:95:fa:d0:b0:ed:c6:
5d:18:a5:53:61:1a:56:84:7f:69:72:96:9b:ff:f4:9d:19:35:
3a:12:ae:86:d2:48:57:fd:b8:f2:a9:10:66:e9:da:35:8b:95:
2b:e4:c9:11:32:ac:85:82:40:27:90:97:69:8b:c0:da:f4:a8:
b4:ec:c5:fd:b1:7f:96:33:96:81:47:c1:8f:a3:db:3b:5e:29:
48:02:25:b3:16:54:43:56:b5:c0:85:3d:96:f0:de:3c:3b:e0:
94:8d:57:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 9 21:44:08 2026 by rpki-client