Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/RgCJAWuDIXQYJVvsP_U18nK8KFw.roa
File: RgCJAWuDIXQYJVvsP_U18nK8KFw.roa (raw, json)
Hash identifier: GmGWQR9N7Jh5zTJJFcgEYZ0TXkMlpQARksYHHrtwKmY=
Subject key identifier: 46:00:89:01:6B:83:21:74:18:25:5B:EC:3F:F5:35:F2:72:BC:28:5C
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 01A084B9F77FA20A08DCB08914A6D2E9D059
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/RgCJAWuDIXQYJVvsP_U18nK8KFw.roa
Signing time: Wed 09 Sep 2026 05:52:54 +0000
ROA not before: Wed 09 Sep 2026 05:52:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 192.88.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:b9:f7:7f:a2:0a:08:dc:b0:89:14:a6:d2:e9:d0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: Sep 9 05:52:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=460089016b83217418255bec3ff535f272bc285c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:d0:85:68:6b:29:a1:c6:88:61:27:e1:74:
30:a2:a2:e2:a2:fd:37:e1:35:95:ac:15:1c:4f:d8:
2c:a2:83:db:a0:79:60:fe:d7:41:06:81:ef:6a:9a:
c5:62:b7:31:e0:1f:2f:46:00:15:24:5f:1d:a9:d8:
58:9a:2d:dd:cc:ea:f6:4f:03:0d:e1:10:b0:06:3a:
3a:d0:52:f1:41:be:86:4e:c0:77:96:94:38:69:69:
b2:1a:0f:79:4a:fd:80:20:79:93:6f:3d:61:b1:5b:
cf:a6:e3:09:fc:33:a2:92:74:d7:4e:7e:f1:8e:98:
20:d1:9b:ac:63:6b:65:8f:42:15:27:c1:05:b8:7c:
97:ae:24:f0:12:e0:5c:97:02:02:3d:ce:f8:bc:ec:
7b:a4:fe:35:c1:c9:db:32:2a:a0:44:e2:15:43:04:
c2:a7:24:06:2c:bc:48:02:c6:6b:d7:84:d3:4b:25:
11:4d:6b:8a:0f:66:56:6b:a0:1e:9a:45:63:e7:ac:
e8:ff:f9:10:0d:99:74:80:d5:7d:69:b2:28:43:46:
ca:33:e8:c2:1c:e1:d6:7e:0c:41:48:84:0f:6c:fc:
73:b9:ad:cf:d3:75:d9:f2:89:c5:c1:50:0c:97:2a:
98:2b:f1:0f:9f:c7:b6:c8:07:62:20:3d:5d:23:de:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:00:89:01:6B:83:21:74:18:25:5B:EC:3F:F5:35:F2:72:BC:28:5C
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/RgCJAWuDIXQYJVvsP_U18nK8KFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.88.10.0/24
Signature Algorithm: sha256WithRSAEncryption
40:7b:99:7c:f0:d3:0c:60:18:13:e7:f7:7d:9e:68:85:e0:31:
d0:a7:d3:64:bc:89:80:7e:ad:45:3d:26:cf:cc:98:0a:6e:56:
9e:fa:36:bc:62:a3:1f:32:0e:29:2e:d5:d5:f4:ed:d7:08:04:
82:d0:c8:62:fa:3e:4f:21:bf:96:a1:c6:16:64:6e:8f:db:c5:
9e:a5:c7:79:0c:79:2e:4e:27:70:9a:86:4d:2e:47:ad:4f:18:
10:e7:12:8b:1c:07:81:32:a3:e2:d6:ca:43:72:0d:b0:d5:4b:
25:4e:ed:27:17:7f:23:8e:ab:2d:cd:00:73:12:0c:64:d4:92:
66:3d:d2:c1:e5:8b:e8:7d:ff:a5:f4:91:e1:44:4a:23:00:f2:
de:3b:8a:a6:6f:51:30:38:37:a6:3a:e8:2a:06:be:6e:d7:b3:
6f:40:a4:84:b4:11:ff:fa:38:ac:8e:b3:0d:24:23:62:eb:b0:
75:4d:b6:19:b4:34:68:a0:ef:c2:d0:0b:70:5c:91:be:1f:01:
94:c0:1c:1d:11:63:c1:1b:01:31:ec:6b:94:61:19:79:75:d0:
56:09:5b:f3:ac:29:a6:9f:02:12:c7:16:21:eb:a2:35:c4:e1:
9d:43:44:b2:a3:5a:48:37:f7:fc:24:38:d7:85:e9:60:03:2e:
9a:57:75:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:45:46 2026 by rpki-client