Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/GU2GsgvvxDIzu0J3LT-2kkK8RMo.roa
File: GU2GsgvvxDIzu0J3LT-2kkK8RMo.roa (raw, json)
Hash identifier: nP0lDARBEATLaWhYMKJWCgHhBeTpVKHXhkLXZPpWw+o=
Subject key identifier: 19:4D:86:B2:0B:EF:C4:32:33:BB:42:77:2D:3F:B6:92:42:BC:44:CA
Certificate issuer: /CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Certificate serial: 019FAD857C2792E442A8CAA89514F3B81F9A
Authority key identifier: 2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/GU2GsgvvxDIzu0J3LT-2kkK8RMo.roa
Signing time: Wed 29 Jul 2026 10:57:14 +0000
ROA not before: Wed 29 Jul 2026 10:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 2a01:e5c0:2000::/36 maxlen: 36
2a01:e5c0:3000::/36 maxlen: 36
2a01:e5c0:4000::/36 maxlen: 36
2a01:e5c0:5000::/36 maxlen: 36
2a01:e5c0:6000::/36 maxlen: 36
2a01:e5c0:7000::/36 maxlen: 36
2a01:e5c0:8004::/48 maxlen: 48
2a01:e5c0:8004:ec3b::/64 maxlen: 64
2a01:e5c0:8008::/48 maxlen: 48
2a01:e5c0:9000::/36 maxlen: 36
2a01:e5c0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:85:7c:27:92:e4:42:a8:ca:a8:95:14:f3:b8:1f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Validity
Not Before: Jul 29 10:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=194d86b20befc43233bb42772d3fb69242bc44ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ba:7e:bf:51:db:c4:63:12:65:04:bc:f7:bb:
af:9b:17:0f:60:65:f6:ef:45:04:99:87:73:96:c3:
2a:5e:d9:08:f7:5e:80:6d:c4:c1:7f:19:14:68:27:
7c:58:53:d9:eb:eb:51:37:d8:a2:3e:dc:f7:9f:13:
f4:cb:03:98:a9:0d:98:e6:00:81:31:3a:01:f1:84:
b5:17:47:a0:a5:13:37:4e:b2:52:75:b5:49:b5:b6:
c3:a7:fd:e3:2b:de:a6:e6:dd:23:a9:f6:db:4f:d3:
50:ba:f4:a7:8c:6b:47:2a:6b:eb:1b:1a:60:b8:8c:
e3:47:59:c5:42:aa:11:40:34:62:ba:db:1a:5d:44:
15:34:f6:54:f8:b4:c1:5b:6d:de:e7:47:a2:26:a9:
f3:b2:fc:6e:66:d4:2f:b2:7f:d1:0e:8f:e1:1c:88:
47:23:c7:e7:9b:b1:f5:ca:1c:62:1e:43:c7:15:e8:
05:23:82:89:cd:5c:5e:73:ce:87:e7:27:d9:07:c1:
81:b1:1a:74:34:ad:bd:29:b8:46:e6:e2:e9:71:bd:
7b:f1:0f:e3:56:dc:a4:92:b4:30:b7:26:9f:3c:b3:
59:4f:11:93:3a:38:e7:95:a3:93:0f:11:28:d4:a1:
b3:cf:18:2d:3c:4f:d1:79:dd:7a:f3:71:0c:28:d1:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4D:86:B2:0B:EF:C4:32:33:BB:42:77:2D:3F:B6:92:42:BC:44:CA
X509v3 Authority Key Identifier:
keyid:2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/GU2GsgvvxDIzu0J3LT-2kkK8RMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e5c0:2000::-2a01:e5c0:7fff:ffff:ffff:ffff:ffff:ffff
2a01:e5c0:8004::/48
2a01:e5c0:8008::/48
2a01:e5c0:9000::/36
2a01:e5c0:f000::/36
Signature Algorithm: sha256WithRSAEncryption
82:b3:0d:64:ad:bb:2f:0f:9c:6a:42:f3:0e:3c:45:69:e9:b8:
cd:f0:96:8f:09:a2:8b:c4:cf:2d:d6:5a:c5:fd:57:4e:59:96:
cb:38:07:d5:f9:09:53:3c:11:94:1f:03:a8:2c:d2:9d:b5:1d:
0c:ab:38:1c:1e:cf:0a:ea:6a:0f:ce:06:d5:4e:c4:77:ac:66:
94:bd:f5:73:95:5e:d8:b4:51:c4:f7:06:db:c7:1a:1e:96:a0:
0c:05:b3:c7:d9:a0:9c:2c:07:8d:da:4e:db:e4:ab:42:c3:cf:
d0:79:07:25:50:b9:e0:44:b4:86:d3:c7:27:14:64:20:e2:40:
88:67:eb:f1:9c:88:ce:a2:45:d9:58:06:7c:65:ed:f5:1a:7f:
64:09:a1:38:75:02:01:3f:c9:fd:ac:c2:f2:f6:3f:2a:37:c6:
af:d2:f6:6d:35:4a:9c:e5:7d:0e:4e:09:9a:6a:c8:64:b9:1b:
e5:44:0b:6b:f9:1b:cb:d3:47:cf:aa:b8:10:7e:cc:ef:98:4e:
f4:7a:b2:8e:22:03:41:30:19:96:96:73:f3:01:c4:b0:af:d5:
f9:34:f3:c9:82:72:62:8d:e0:42:e7:68:41:f7:ae:13:65:1b:
1d:e5:e5:ff:e8:c8:37:b6:22:ed:e3:d3:99:57:4e:a8:7f:93:
9a:89:9e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 21:45:59 2026 by rpki-client