Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/gOBQpvrlYgY9AqdqsoXxVt2Vh4Y.roa
File: gOBQpvrlYgY9AqdqsoXxVt2Vh4Y.roa (raw, json)
Hash identifier: pGxEaEmHpvGHsKUuszqEC/Za5pRpgcBQna2c2eXbqWM=
Subject key identifier: 80:E0:50:A6:FA:E5:62:06:3D:02:A7:6A:B2:85:F1:56:DD:95:87:86
Certificate issuer: /CN=fa588702dffa461be913e898e7ea350b00a53f60
Certificate serial: 01A167BF03CA675D9CF1CA36D13F854811BD
Authority key identifier: FA:58:87:02:DF:FA:46:1B:E9:13:E8:98:E7:EA:35:0B:00:A5:3F:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-liHAt_6RhvpE-iY5-o1CwClP2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/gOBQpvrlYgY9AqdqsoXxVt2Vh4Y.roa
Signing time: Fri 23 Oct 2026 07:52:13 +0000
ROA not before: Fri 23 Oct 2026 07:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2590
IP address blocks: 185.125.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/1-liHAt_6RhvpE-iY5-o1CwClP2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/1-liHAt_6RhvpE-iY5-o1CwClP2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-liHAt_6RhvpE-iY5-o1CwClP2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:bf:03:ca:67:5d:9c:f1:ca:36:d1:3f:85:48:11:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa588702dffa461be913e898e7ea350b00a53f60
Validity
Not Before: Oct 23 07:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80e050a6fae562063d02a76ab285f156dd958786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:1d:96:64:12:1d:7b:71:74:73:5a:e8:25:
5d:2d:55:a5:ba:e0:e9:af:93:7c:00:90:22:ab:76:
5a:cb:a8:c3:12:82:e5:b8:69:81:d0:45:2e:a4:a4:
bc:75:68:a6:a6:ad:9b:d1:9d:85:65:8b:35:ba:83:
f9:8b:e5:7d:7d:27:9f:71:d0:fa:9e:21:12:53:91:
97:ef:e3:ee:b1:49:f5:84:a2:c8:ca:d5:59:bf:88:
0f:f7:68:f7:07:36:d1:1e:a9:fa:3a:9e:81:25:75:
34:6f:aa:e5:e2:cd:58:47:c1:83:c8:7c:bd:f0:e5:
5c:ad:30:b8:ce:02:bb:da:8c:39:ab:2a:e3:6b:6b:
14:cf:e2:f5:33:52:ef:fd:9c:03:6b:84:d8:1d:69:
f7:ff:43:95:14:08:76:fb:28:37:b9:fa:41:12:c5:
03:1f:7c:1f:2b:30:46:ee:7d:f1:01:4f:3e:3c:c0:
d4:7b:ed:3f:6a:2a:bb:45:30:cd:52:1f:80:0a:6c:
a1:8f:ec:47:ea:ba:91:a7:5d:f0:9a:f9:9f:ed:0c:
bc:e9:b8:dd:45:26:ce:19:bc:a0:00:ff:2d:1b:8b:
c3:e7:ea:ca:7e:50:a7:37:a4:c6:16:2a:02:b9:61:
db:b3:8b:b0:86:91:09:c2:38:c0:48:ea:d3:08:f7:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E0:50:A6:FA:E5:62:06:3D:02:A7:6A:B2:85:F1:56:DD:95:87:86
X509v3 Authority Key Identifier:
keyid:FA:58:87:02:DF:FA:46:1B:E9:13:E8:98:E7:EA:35:0B:00:A5:3F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-liHAt_6RhvpE-iY5-o1CwClP2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/gOBQpvrlYgY9AqdqsoXxVt2Vh4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7af355-9929-4eea-9814-d42ee6a8b8a5/1/1-liHAt_6RhvpE-iY5-o1CwClP2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.124.0/22
Signature Algorithm: sha256WithRSAEncryption
09:03:42:08:6b:f7:d6:79:12:93:56:5e:13:62:3b:66:69:9f:
a9:22:36:50:b9:0f:e5:d6:3f:78:0d:4e:bd:7e:bc:49:fb:fa:
6a:63:43:f3:6e:af:82:4b:19:55:95:2d:e7:4e:61:ee:4f:ba:
9e:d3:fa:2d:4d:03:29:fb:00:97:b0:ef:a1:2f:45:a6:c9:b8:
a3:4d:31:05:6c:e1:5c:c8:a3:01:1b:2d:85:56:69:d9:08:4a:
88:fe:87:fe:5e:cc:ef:88:25:77:cb:03:f0:f7:83:e0:d4:37:
8f:f4:55:e8:9d:50:95:e7:17:2b:37:cc:6c:df:fc:90:de:49:
92:aa:72:b5:65:dd:9e:1f:d8:d2:5a:bd:63:a8:4b:09:9d:4b:
65:df:41:eb:70:4b:22:10:fa:3c:e9:53:5a:c0:5c:f8:1d:c0:
f5:ee:71:79:95:ef:88:70:75:3d:66:b8:8c:ab:01:dd:43:5b:
1e:71:5d:db:a2:c7:8a:1e:dd:87:af:ca:8f:9e:eb:81:f1:b1:
f5:6e:ed:35:65:f6:d7:8b:bb:12:4b:01:da:07:8c:d5:7a:25:
1c:e5:27:05:64:bc:6b:b0:a4:b4:64:02:d0:11:2b:38:27:c4:
3c:f8:48:1f:5c:07:29:ed:07:f7:35:e4:18:c9:3b:b9:cc:8a:
3a:3d:a4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:59 2026 by rpki-client