Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/gjJIOJFd5IfQ5NJp4APp1vRHdgk.roa
File: gjJIOJFd5IfQ5NJp4APp1vRHdgk.roa (raw, json)
Hash identifier: 9gSK2v7b4QpK7l7MrKag/rbhrtwBV2pBvh31m2/Cb74=
Subject key identifier: 82:32:48:38:91:5D:E4:87:D0:E4:D2:69:E0:03:E9:D6:F4:47:76:09
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A13A376D7049723789757A48CE4CC2F9C0
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/gjJIOJFd5IfQ5NJp4APp1vRHdgk.roa
Signing time: Wed 14 Oct 2026 11:41:13 +0000
ROA not before: Wed 14 Oct 2026 11:41:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197200
IP address blocks: 2a0b:9800::/29 maxlen: 48
2a0b:a280::/29 maxlen: 48
2a0f:1180::/29 maxlen: 48
2a0f:2380::/29 maxlen: 48
2a0f:4680::/29 maxlen: 48
2a0f:9fc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:37:6d:70:49:72:37:89:75:7a:48:ce:4c:c2:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Oct 14 11:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82324838915de487d0e4d269e003e9d6f4477609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:d3:68:80:f7:06:b6:30:2e:88:c6:a2:87:
ae:2c:1f:4b:83:64:c5:85:5c:b2:37:25:b3:22:6f:
96:8c:f0:95:8d:77:7e:84:00:1c:3f:89:33:bf:42:
6a:61:6c:d8:2a:cd:66:06:dd:0e:fa:cc:f3:b6:62:
b3:bb:3a:e8:d1:04:36:82:6b:91:2a:5c:93:e7:eb:
c7:3a:d2:e8:a1:79:0d:c9:47:a9:8c:23:cb:d9:84:
e4:fa:0a:cb:6c:5d:4d:b7:8b:c6:21:32:31:30:11:
41:1f:11:f7:d8:21:47:5e:f0:d1:69:8f:b3:dd:5a:
11:77:33:b6:07:3b:7e:5c:d7:ca:44:51:8f:ae:7c:
ce:b9:8c:91:12:79:b6:3e:28:ab:5d:c7:40:2b:16:
34:43:cc:8e:2d:32:3a:6c:0c:dd:a4:4b:71:be:e7:
8a:f1:ea:02:d3:48:57:45:a2:9b:72:d5:4d:04:c8:
72:2b:76:1b:fa:bd:96:91:19:22:a5:7b:0d:74:0d:
a2:a0:51:48:99:80:96:3e:e4:d5:1c:a9:5a:bd:36:
24:91:c9:60:3e:1e:4c:ef:9a:0e:bf:41:9b:60:36:
04:df:1c:9d:e2:61:b1:d7:58:f8:63:1b:b1:6c:8c:
75:cf:cc:b8:e9:6b:8c:c3:de:b4:51:bb:88:e9:84:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:32:48:38:91:5D:E4:87:D0:E4:D2:69:E0:03:E9:D6:F4:47:76:09
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/gjJIOJFd5IfQ5NJp4APp1vRHdgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9800::/29
2a0b:a280::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:4680::/29
2a0f:9fc0::/29
Signature Algorithm: sha256WithRSAEncryption
25:eb:9a:fa:04:5c:13:d7:b0:1a:76:1d:b5:a8:fb:00:20:84:
14:b9:e6:91:4e:9f:1a:1e:8f:89:f7:a4:72:e9:39:b4:ef:c9:
81:2a:85:8a:a9:bf:5b:b4:ef:5f:41:e2:6d:75:3c:a2:f4:be:
ff:09:0b:90:04:77:f7:52:1b:25:4f:66:c7:08:a6:22:a0:7c:
82:19:14:13:23:01:81:a6:e5:f1:e9:bf:2d:13:1d:fd:d8:83:
7d:a9:30:01:9d:d5:83:f0:45:14:aa:12:6d:c7:80:a1:6c:eb:
7e:f4:0d:62:a1:3a:56:6d:97:47:b3:07:30:c9:1a:5d:05:27:
c7:bc:a3:19:36:69:ae:f3:b2:46:bb:9f:f1:b3:b1:27:9b:21:
57:af:c9:77:6a:78:50:fe:ed:f1:8d:8b:49:0b:de:5a:2d:0c:
70:57:24:ab:28:70:ac:47:44:b5:ca:be:0b:b6:f8:2b:02:ef:
5a:68:c2:45:43:b2:51:c0:2b:c3:74:dc:df:90:d0:67:13:85:
a6:8e:02:78:88:89:85:ea:5b:9a:4c:96:d3:4d:32:d8:20:23:
5b:db:e6:95:7a:8f:0d:23:51:b2:3d:57:d1:69:76:98:1e:bd:
b8:4a:19:14:70:7e:9a:42:6c:2a:f9:dc:c7:2e:0b:b1:79:33:
3f:45:81:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:17 2026 by rpki-client