Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/GjPVQb4kXTSvkfi7RIf8VINvr0I.roa
File: GjPVQb4kXTSvkfi7RIf8VINvr0I.roa (raw, json)
Hash identifier: IEYuHwwge+E1Azg2p77WeZYvh7BllQ5PwJDFCZ3eVLU=
Subject key identifier: 1A:33:D5:41:BE:24:5D:34:AF:91:F8:BB:44:87:FC:54:83:6F:AF:42
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 01A09A43C3B0A019BE8CED1C180DF74E8851
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/GjPVQb4kXTSvkfi7RIf8VINvr0I.roa
Signing time: Sun 13 Sep 2026 10:15:27 +0000
ROA not before: Sun 13 Sep 2026 10:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 2a00:f580:100a::/48 maxlen: 48
2a00:f580:100b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:43:c3:b0:a0:19:be:8c:ed:1c:18:0d:f7:4e:88:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Sep 13 10:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a33d541be245d34af91f8bb4487fc54836faf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:30:31:ed:b6:17:de:52:10:34:ee:12:15:
c9:54:35:b4:73:45:58:a0:86:7c:5a:ff:3f:66:7a:
55:b9:1d:e0:1a:15:e6:65:ca:d8:d0:4a:f0:4a:82:
1c:1d:af:c0:7e:e0:12:e4:2d:41:15:02:b0:bd:aa:
f9:8c:80:8e:1c:3c:04:89:5d:0d:0d:3d:12:74:43:
16:dc:7d:f8:09:6a:b1:47:14:1f:cd:0b:37:fe:ad:
50:3b:e7:e1:98:00:ac:52:69:ee:42:9c:a6:8c:81:
72:03:3e:48:e1:23:5c:b8:ee:86:6c:81:60:5f:88:
6d:1a:3c:5d:a0:7c:e7:ec:5f:4a:64:a0:87:f4:e8:
8d:f3:a5:3c:af:1f:ab:b0:6b:78:3e:12:37:a3:21:
04:d4:d5:96:b3:76:1a:8a:23:53:30:ed:eb:e8:bb:
a2:96:c8:8d:ae:11:40:ce:e9:0c:77:ab:41:08:a6:
6e:71:16:d1:b6:d5:61:7b:76:e2:0b:7b:77:5a:3d:
39:cb:e5:98:ad:75:a7:e4:6a:98:74:53:b3:e1:fe:
d2:42:25:f7:fc:a5:c9:f3:0c:72:ec:5d:23:f7:ee:
ed:24:db:5b:3e:3b:f1:ca:bd:fa:a5:bb:d1:70:5b:
69:ac:34:56:07:33:e6:29:05:1b:8a:a0:02:c7:d7:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:33:D5:41:BE:24:5D:34:AF:91:F8:BB:44:87:FC:54:83:6F:AF:42
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/GjPVQb4kXTSvkfi7RIf8VINvr0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:f580:100a::/47
Signature Algorithm: sha256WithRSAEncryption
62:88:e4:8d:aa:13:18:25:a4:f2:07:56:fb:c7:e6:0e:f0:fc:
75:1f:12:73:bf:67:6e:db:2c:76:f3:e4:61:d8:1e:ce:3f:39:
d9:69:74:7d:8d:48:3a:b1:eb:e8:34:34:75:39:d5:5b:1a:93:
05:59:3c:52:61:18:38:53:71:96:33:8d:39:9b:7f:ce:b7:be:
a2:7f:29:80:a2:8f:c8:e8:d5:84:f1:3e:a1:dd:64:3b:6c:1f:
71:ac:19:83:2d:4e:c9:be:7f:de:b5:d4:98:29:df:c7:b4:1e:
a8:c6:20:1a:bd:63:c4:f4:29:e5:52:db:f5:5d:7c:de:c8:7b:
0a:4e:0c:72:31:61:53:4a:4e:6f:d1:4b:ab:7f:a5:55:fc:ed:
b5:e2:b1:ad:6f:c5:31:d1:ce:dd:4d:7a:54:7e:57:9a:e0:fb:
49:db:88:c5:ac:c7:22:fb:87:15:c3:d5:32:b3:54:84:5f:c8:
26:41:34:e7:10:5c:25:15:39:7e:4c:3b:2d:b2:05:4a:87:34:
c6:0a:00:82:f9:45:65:6c:09:47:bb:54:e8:bf:d2:4f:a5:b7:
90:e3:8e:5b:c4:d0:9e:f6:17:aa:b9:2b:12:c4:a1:b6:e2:e0:
0b:4e:b6:db:79:e9:15:24:18:78:7c:60:87:67:7b:ae:0a:68:
30:53:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:54:32 2026 by rpki-client