Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/gTXNwCODsu4RRPZRAnkuU5wGDeE.roa
File: gTXNwCODsu4RRPZRAnkuU5wGDeE.roa (raw, json)
Hash identifier: FYCxbhWzbLxlUDBzwgRkE/SmgYC6+VnTQKJ7+lKA7dE=
Subject key identifier: 81:35:CD:C0:23:83:B2:EE:11:44:F6:51:02:79:2E:53:9C:06:0D:E1
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A049953FD5BFA5B58D4D92213098BD47FE
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/gTXNwCODsu4RRPZRAnkuU5wGDeE.roa
Signing time: Fri 28 Aug 2026 18:15:13 +0000
ROA not before: Fri 28 Aug 2026 18:15:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206174
IP address blocks: 2a11:77c0::/32 maxlen: 32
2a11:7d07::/32 maxlen: 32
2a11:9041::/32 maxlen: 32
2a11:ab82::/32 maxlen: 32
2a12:e81::/32 maxlen: 32
2a12:6483::/32 maxlen: 32
2a12:bc81::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:95:3f:d5:bf:a5:b5:8d:4d:92:21:30:98:bd:47:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 28 18:15:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8135cdc02383b2ee1144f65102792e539c060de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b5:9b:4d:e8:8f:3c:26:ec:7f:c7:34:65:7f:
74:90:b7:f8:bb:a1:ed:15:bd:7e:0b:5f:23:21:7e:
31:b1:9d:08:69:9c:07:f7:ff:85:b4:46:15:d9:34:
49:43:d6:1f:b4:62:9c:55:57:d6:d2:4c:68:4f:a5:
34:62:4e:b2:44:61:29:3c:05:0c:db:5f:db:1f:a4:
63:1d:aa:6d:e6:62:2f:ac:09:7a:dc:ed:d3:7a:ac:
8e:92:ec:f0:d5:08:06:14:e8:31:1f:38:9d:ae:dd:
60:a5:d8:2e:46:9f:89:c2:21:5a:06:9a:60:f2:80:
5c:de:ff:b4:d1:8e:e8:31:50:5d:fd:9e:d0:ab:7f:
65:bc:09:21:dd:89:b3:59:41:da:67:b9:38:7a:7e:
dd:bd:3e:58:ce:38:d3:f9:b1:d7:b6:38:a5:af:90:
95:0e:00:c4:9f:ba:89:82:d8:17:54:12:e4:21:5d:
26:0d:8b:26:35:de:6e:61:37:c8:d5:0c:43:b0:2f:
69:6a:b1:4c:f2:cf:9b:e1:1c:f7:20:e8:27:d8:ae:
86:3d:be:ee:08:8d:68:b0:11:d1:c4:6d:a0:d3:b1:
c2:ee:b2:27:6b:2c:91:96:b5:ca:b4:ae:61:db:0f:
8a:5d:e9:d2:0f:ad:2d:1d:42:a1:25:71:5a:73:97:
a1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:35:CD:C0:23:83:B2:EE:11:44:F6:51:02:79:2E:53:9C:06:0D:E1
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/gTXNwCODsu4RRPZRAnkuU5wGDeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:77c0::/32
2a11:7d07::/32
2a11:9041::/32
2a11:ab82::/32
2a12:e81::/32
2a12:6483::/32
2a12:bc81::/32
Signature Algorithm: sha256WithRSAEncryption
6a:d8:3f:df:85:c4:94:06:7d:ba:2f:d5:85:17:16:f2:2a:7e:
79:48:af:09:a6:db:97:33:db:58:c4:69:59:09:e5:56:6f:ff:
59:ea:ba:eb:63:8b:20:34:7a:9f:e1:0e:16:91:7a:14:53:b8:
56:64:79:93:68:d6:01:6e:a8:fc:df:67:fc:ee:dc:f2:c2:bf:
e1:2c:f6:e4:cb:20:c3:c6:57:22:fb:69:9f:2f:24:d8:8f:9e:
34:bb:c4:9a:57:25:3d:11:ba:f0:b1:1d:8f:58:95:65:2c:bc:
5c:0f:c4:f7:06:7b:49:4a:3d:6e:1b:0f:08:85:cb:59:be:5f:
e6:42:42:c2:0b:ab:63:5c:84:db:fa:32:4f:f7:25:56:ef:4b:
db:da:67:54:d9:5a:da:45:d6:39:36:04:d5:01:82:f2:4a:60:
1c:07:01:61:04:6b:15:67:b4:3f:8a:9b:bb:a1:f8:ef:6d:99:
34:b9:ab:30:3b:a8:34:f9:23:ea:5f:e6:0b:32:5c:93:6e:2e:
d3:d0:36:dc:46:3f:dd:88:ea:16:01:03:72:38:78:53:b7:8f:
ec:4e:12:77:95:52:9a:f1:a0:0a:a1:9c:98:57:19:83:b4:1f:
01:b4:3e:e1:74:d8:83:41:1c:1b:ad:b0:9f:d8:1e:eb:c7:af:
99:64:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:09 2026 by rpki-client