Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/GPgE8Js570-QLkZUKoJ1126aifk.roa
File: GPgE8Js570-QLkZUKoJ1126aifk.roa (raw, json)
Hash identifier: 8t2EybYwOYg8iaMpOVbMKmfuxyVmfmhAErNMOv+rkx0=
Subject key identifier: 18:F8:04:F0:9B:39:EF:4F:90:2E:46:54:2A:82:75:D7:6E:9A:89:F9
Certificate issuer: /CN=ec7e3dd4e3e6186fc857f410014109185fd3e0b3
Certificate serial: 01A0AE863A4B903D9333C135F297BF261406
Authority key identifier: EC:7E:3D:D4:E3:E6:18:6F:C8:57:F4:10:01:41:09:18:5F:D3:E0:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H491OPmGG_IV_QQAUEJGF_T4LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/GPgE8Js570-QLkZUKoJ1126aifk.roa
Signing time: Thu 17 Sep 2026 08:40:27 +0000
ROA not before: Thu 17 Sep 2026 08:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 62.68.82.0/24 maxlen: 24
2a07:9400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H491OPmGG_IV_QQAUEJGF_T4LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:86:3a:4b:90:3d:93:33:c1:35:f2:97:bf:26:14:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7e3dd4e3e6186fc857f410014109185fd3e0b3
Validity
Not Before: Sep 17 08:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18f804f09b39ef4f902e46542a8275d76e9a89f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:21:55:56:62:7f:10:ef:5e:d0:f1:a3:54:
5e:c8:32:1e:ad:8b:30:a4:eb:37:ad:9a:46:32:a9:
44:23:81:77:b7:14:0d:ab:2b:fb:7a:c3:e5:07:98:
f2:f7:46:67:d5:f1:9a:d9:a2:d9:aa:84:ce:6d:51:
56:8b:d6:6d:27:7c:7b:9a:ae:60:1b:33:cf:cd:8d:
8f:ce:3d:21:27:04:10:3a:2b:0b:1e:9c:90:4e:60:
7a:8c:c7:0d:f4:dd:c1:83:5b:ed:76:14:b2:6c:3c:
39:a0:8e:82:3a:0a:4f:1b:b9:e2:18:ca:8a:af:ef:
4b:d7:ea:0c:a9:89:0a:ff:f0:50:93:93:13:c3:80:
42:4b:f3:4c:b8:22:f5:b0:c7:38:93:2a:8b:eb:d8:
82:14:1c:c5:39:e4:66:e4:f7:1f:54:cb:ca:59:ae:
3f:57:b6:cb:ed:24:58:07:b1:d0:b1:45:cc:93:05:
03:1f:27:70:d3:5d:99:67:5b:56:36:79:91:0e:2d:
96:b9:47:3a:e2:6b:e3:d9:83:ee:66:7c:4c:26:0e:
27:37:e1:67:d8:d0:98:c7:d5:94:cb:7d:0f:5b:10:
13:98:6f:6f:ce:84:59:32:be:38:dc:66:fb:41:bf:
3e:fc:1b:f0:32:46:cd:92:01:60:7b:19:49:da:ac:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F8:04:F0:9B:39:EF:4F:90:2E:46:54:2A:82:75:D7:6E:9A:89:F9
X509v3 Authority Key Identifier:
keyid:EC:7E:3D:D4:E3:E6:18:6F:C8:57:F4:10:01:41:09:18:5F:D3:E0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H491OPmGG_IV_QQAUEJGF_T4LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/GPgE8Js570-QLkZUKoJ1126aifk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.82.0/24
IPv6:
2a07:9400::/29
Signature Algorithm: sha256WithRSAEncryption
28:e8:87:cb:3c:88:34:4b:34:8e:01:5e:47:70:63:20:ac:2c:
5f:7c:29:b1:24:ec:20:22:ce:40:4a:44:df:d0:dd:1f:0f:96:
5f:71:eb:fc:1a:58:c2:b6:65:be:e2:ac:45:e1:56:3f:33:0b:
dd:09:a0:a2:73:f0:6a:91:35:f4:18:7e:36:ee:f4:64:61:2d:
73:2e:b4:2c:ad:f1:47:72:50:e7:6c:82:c9:26:a2:3d:2b:c7:
ca:c3:01:dc:8a:1f:35:f9:04:49:0b:67:70:ff:61:22:e0:9e:
eb:eb:93:9c:44:81:32:7b:77:57:4a:18:32:40:fb:cd:b7:07:
c6:56:32:c5:e6:03:61:72:b9:94:05:3b:24:30:19:5b:a6:6e:
e2:17:0d:70:2a:c9:e4:30:78:5d:be:e7:2b:6f:d7:d0:f0:9b:
39:c1:5b:e1:84:1e:49:5a:0f:a1:c0:37:8b:a1:75:0c:ed:1d:
85:9e:2c:35:e7:19:97:56:45:a0:f8:7b:08:2d:d8:e9:51:df:
7b:18:4e:fc:66:d9:4b:b4:5b:09:b2:61:40:84:1a:09:2d:0a:
db:95:e5:53:7c:54:52:02:18:56:67:21:a3:a2:21:81:05:10:
e1:5a:1b:93:db:9b:32:18:43:11:e9:ad:80:32:2c:43:b9:8d:
26:5e:d1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 14:36:13 2026 by rpki-client