Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/GhIcthy_Bt7RZmc3Srzmgu8Z0kA.roa
File: GhIcthy_Bt7RZmc3Srzmgu8Z0kA.roa (raw, json)
Hash identifier: nWrFbHNPHUtu9F2zSIqhUDca6rtxXZo5ycbC2prOvIg=
Subject key identifier: 1A:12:1C:B6:1C:BF:06:DE:D1:66:67:37:4A:BC:E6:82:EF:19:D2:40
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A0D81B7B8C354D151F1A79AA6FA04C17F0
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/GhIcthy_Bt7RZmc3Srzmgu8Z0kA.roa
Signing time: Fri 25 Sep 2026 10:27:54 +0000
ROA not before: Fri 25 Sep 2026 10:27:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215685
IP address blocks: 2a14:6782:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 16:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:1b:7b:8c:35:4d:15:1f:1a:79:aa:6f:a0:4c:17:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Sep 25 10:27:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a121cb61cbf06ded16667374abce682ef19d240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:1f:f1:19:be:64:c4:c2:e2:a0:f7:a8:b6:
91:cb:6a:e5:32:7a:87:5b:15:b3:08:80:3a:eb:06:
8b:1a:04:b0:a1:2d:26:74:fa:85:aa:69:63:b8:7f:
d8:0f:dd:f7:2f:a9:55:88:40:c8:26:6c:9b:89:0f:
6a:92:7f:d6:0d:40:c1:e6:09:f1:eb:48:47:50:1f:
c4:8c:2c:fa:e8:88:df:32:a4:2f:ae:d1:83:81:28:
a5:84:5e:0d:69:f3:af:b4:dd:02:7e:83:f6:4c:33:
31:2d:50:4d:e6:5c:81:b9:73:96:40:ee:af:74:43:
13:79:72:dd:87:13:47:db:5e:25:7b:a3:a2:fd:26:
71:49:ff:3a:bf:f8:9e:3e:28:fd:7d:ff:9c:2b:ca:
53:85:00:38:3d:9a:c3:11:9e:e8:da:ab:82:c0:15:
d5:cf:88:f9:db:6a:d7:c8:06:85:23:e4:db:c4:7e:
6b:7b:1b:46:fd:c1:b5:e4:ee:4d:05:72:bf:5d:5b:
6a:a4:9e:fd:84:69:61:d2:9a:8b:3a:ef:b4:e8:7f:
2d:20:a6:e5:81:65:23:ef:d8:f7:e3:13:4a:fa:1f:
81:c5:56:c8:bb:a5:16:69:da:53:3e:bc:17:8f:08:
6f:11:81:70:5f:4c:9d:69:1d:3d:65:f6:62:f9:37:
25:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:12:1C:B6:1C:BF:06:DE:D1:66:67:37:4A:BC:E6:82:EF:19:D2:40
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/GhIcthy_Bt7RZmc3Srzmgu8Z0kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6782:100::/40
Signature Algorithm: sha256WithRSAEncryption
9c:23:74:c6:09:a6:19:69:23:71:08:d0:f3:da:a0:03:d4:f4:
bc:12:5c:85:98:7b:dd:d6:c5:a9:90:f7:3a:03:83:3d:60:bf:
1e:a9:70:36:eb:1c:16:8f:eb:17:52:b4:be:4d:50:f9:21:0e:
da:1d:cd:ab:b1:27:be:21:94:fc:2f:c6:90:ad:00:8a:c3:a7:
15:5d:30:3d:35:b5:ed:3b:de:13:75:e3:a6:e4:31:7d:3e:2b:
18:ed:41:de:b4:83:00:cb:fb:bd:2e:d5:f4:4e:32:33:4b:d6:
a0:df:ed:44:52:8e:b4:06:70:74:7f:11:54:2e:e9:30:1b:f7:
ed:47:1f:13:8c:b4:12:de:02:0c:7b:08:30:d0:8d:10:87:80:
f4:e0:01:95:c4:94:5f:47:74:f6:87:ea:32:5c:25:92:87:27:
0c:b6:a8:ed:dd:34:90:a2:98:3f:82:49:11:46:39:87:f0:4a:
ad:ca:6d:b5:4e:72:d2:05:39:aa:de:e5:92:97:69:9a:ee:24:
65:fc:24:fc:5c:5e:75:09:2e:d8:3a:84:a0:bd:81:8c:fc:45:
b4:86:53:76:bd:f2:17:0a:66:da:17:c0:e9:64:38:65:51:a9:
52:c0:2f:9b:ee:54:c0:a6:79:7b:9e:ba:8e:6e:80:d2:63:33:
c6:65:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:18:13 2026 by rpki-client