Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Gd1jgkbYPMlLshrmT5bN1iKt1Zc.roa
File: Gd1jgkbYPMlLshrmT5bN1iKt1Zc.roa (raw, json)
Hash identifier: 6E+Sma6MsZfgSjGZCxQl81Nm/7sMb7NSZ9dIkuBxamk=
Subject key identifier: 19:DD:63:82:46:D8:3C:C9:4B:B2:1A:E6:4F:96:CD:D6:22:AD:D5:97
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 019FACEC97B7D20325643C8D792D25B940B4
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Gd1jgkbYPMlLshrmT5bN1iKt1Zc.roa
Signing time: Wed 29 Jul 2026 08:10:14 +0000
ROA not before: Wed 29 Jul 2026 08:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13301
IP address blocks: 146.19.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ec:97:b7:d2:03:25:64:3c:8d:79:2d:25:b9:40:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jul 29 08:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19dd638246d83cc94bb21ae64f96cdd622add597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:97:43:fd:83:fc:f9:64:fb:bd:d8:d9:bd:9c:
9f:d4:d2:f4:9b:8e:17:b4:72:3d:fc:b9:3d:95:c4:
08:c6:5a:c6:f4:f2:75:a6:fb:22:b4:e7:d4:9c:ad:
8d:0c:21:6d:f4:7d:26:3c:36:d1:6e:f9:fd:b9:af:
fb:50:6d:bf:1c:56:4d:73:2e:af:5c:43:79:ba:11:
78:d5:1d:18:95:79:10:e3:ac:27:52:6b:f2:47:a9:
55:7c:10:83:69:31:11:97:f4:7a:21:45:07:1e:64:
a4:79:9e:a8:90:cb:c4:5b:ba:78:fd:91:21:53:83:
1f:70:80:f2:b6:57:04:30:07:94:97:19:82:11:dc:
8e:ea:c5:e1:13:c8:f7:a3:8b:b5:8f:28:8b:1b:15:
eb:f5:77:dc:53:d0:01:37:5f:66:cb:cd:55:15:e0:
e8:fc:5c:a1:3d:a2:fa:20:7a:ba:a5:0f:d4:9a:bb:
00:59:ec:fe:2a:27:51:41:cf:45:58:69:62:05:78:
58:3d:b5:0e:b4:fc:51:9f:e4:51:00:39:31:00:73:
d3:6a:6e:f3:e0:06:83:11:a8:fe:20:5d:6d:da:9f:
93:a6:7c:cd:15:40:62:53:2a:c3:31:a2:ce:b9:4d:
c8:c4:99:ac:17:9e:83:5f:eb:fe:fa:93:bb:0c:ec:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DD:63:82:46:D8:3C:C9:4B:B2:1A:E6:4F:96:CD:D6:22:AD:D5:97
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Gd1jgkbYPMlLshrmT5bN1iKt1Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.166.0/24
Signature Algorithm: sha256WithRSAEncryption
87:01:c3:28:49:b6:ba:0c:74:72:03:d4:98:39:cc:37:cf:c8:
70:0d:36:9a:b9:72:e7:85:07:39:d3:f9:ab:07:19:30:80:02:
a6:1c:e0:95:12:05:36:f4:91:e4:fd:04:e6:7e:b2:0b:30:6b:
05:47:0f:d0:7d:cb:ca:80:1e:76:6b:27:db:d9:48:28:9f:73:
9d:80:26:a8:5e:e3:85:0d:bf:b9:09:66:e0:b9:29:8d:25:c7:
61:a6:3c:21:da:85:9e:6f:ea:8c:74:a3:9a:78:bb:37:cb:9a:
be:f9:65:1e:a1:b6:72:b0:32:ed:cf:87:75:25:7c:73:8a:af:
73:39:34:f4:16:35:47:7e:0d:53:7f:82:f9:e6:c8:8d:74:e5:
89:d0:18:91:31:42:29:93:c4:02:e7:02:e0:c0:04:99:e1:49:
01:ba:fc:20:d6:7c:7c:f5:81:ca:51:1b:c5:76:99:ed:d5:79:
b4:3f:bc:0e:e2:f3:9e:1b:18:15:6d:0f:9b:d5:a0:8c:64:92:
e3:58:06:40:a1:ce:f5:91:ed:5b:33:8a:0e:47:3a:72:74:fd:
d3:27:51:91:c8:5f:da:5a:99:54:88:bc:d4:53:5a:ef:04:9b:
39:9c:5f:10:f4:70:a4:6f:07:1c:a5:2f:a7:c0:54:da:27:83:
45:30:2c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:29:42 2026 by rpki-client