Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/g2qonlFSaTFnlLgNQc6hp2NNvNQ.roa
File: g2qonlFSaTFnlLgNQc6hp2NNvNQ.roa (raw, json)
Hash identifier: p9VO6IlkdKLB8UZin5VIX7axFJ8RMhBVLWx58aqiXPg=
Subject key identifier: 83:6A:A8:9E:51:52:69:31:67:94:B8:0D:41:CE:A1:A7:63:4D:BC:D4
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01A0B5CED9B95A01E3E034AAD40C3D48DD8F
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/g2qonlFSaTFnlLgNQc6hp2NNvNQ.roa
Signing time: Fri 18 Sep 2026 18:37:07 +0000
ROA not before: Fri 18 Sep 2026 18:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218932
IP address blocks: 31.42.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:ce:d9:b9:5a:01:e3:e0:34:aa:d4:0c:3d:48:dd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Sep 18 18:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=836aa89e515269316794b80d41cea1a7634dbcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:e8:e8:e6:86:e6:dc:d9:f6:e0:1d:6f:31:
7c:9e:eb:65:83:e5:64:86:a3:15:94:f5:27:53:70:
be:31:e3:cf:f8:60:d5:85:16:f7:2a:7c:57:24:2f:
b0:21:c0:d8:83:8e:4d:80:5b:75:3a:c2:eb:72:e9:
c8:3b:0e:8e:97:c5:a9:8b:d1:57:3a:39:27:2d:d0:
62:ce:6a:c2:9e:d3:dc:59:4a:c2:9b:04:dc:be:5d:
93:3c:1c:b4:86:3e:9b:e1:3b:a3:bd:e3:f7:a3:12:
4a:a5:ad:8b:ac:f5:05:fa:0b:30:89:01:f7:98:eb:
04:91:67:45:63:74:1a:bd:54:8f:e6:74:38:83:4f:
13:00:f6:fc:c4:d1:21:ca:1d:0d:16:7a:80:1c:c7:
21:ad:01:5f:9a:1f:bb:e5:9f:69:3f:22:d3:2b:3d:
90:c7:c4:81:02:8b:92:3d:68:62:99:54:62:64:eb:
f0:58:3b:a3:3a:57:e1:53:63:20:34:8d:e1:e0:d5:
f0:af:e7:14:bb:19:6d:f5:ec:09:19:3c:67:a1:6b:
4c:25:4e:1c:12:86:da:c6:fc:b1:99:29:07:f7:44:
07:dc:59:2b:f5:3a:e9:82:d5:73:30:b0:43:b6:1d:
50:81:d5:df:60:c0:e5:df:8d:60:35:3d:6c:3d:e2:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6A:A8:9E:51:52:69:31:67:94:B8:0D:41:CE:A1:A7:63:4D:BC:D4
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/g2qonlFSaTFnlLgNQc6hp2NNvNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.121.0/24
Signature Algorithm: sha256WithRSAEncryption
10:fd:50:0b:fe:20:96:d6:18:c8:d9:b1:7e:8f:54:79:a6:a9:
c1:22:ed:18:3f:aa:92:8c:49:96:c7:2b:1d:71:cd:e5:0d:f2:
e1:b2:a0:32:dc:d3:41:2c:dd:0e:40:33:3f:f5:e9:4c:bb:56:
5f:e3:38:7b:53:50:b1:56:a6:5b:0c:02:8f:76:ab:b1:5f:8b:
2e:ee:ee:25:d6:2c:aa:d2:a8:d5:28:d4:b9:ab:aa:43:37:58:
f9:35:c6:43:92:76:71:51:31:87:7d:e9:9e:9a:88:2c:5f:b5:
03:20:c1:73:25:16:76:2f:9f:92:ff:19:41:7d:66:53:23:0c:
15:01:53:78:6c:5f:01:b4:39:01:f5:2e:5f:9c:8a:4f:3c:fe:
5f:32:ff:fb:67:7e:1f:ec:2c:45:4c:91:8d:99:cd:32:fd:91:
dd:1c:15:0c:4b:f3:c3:b2:5b:e1:5e:de:bd:4c:96:4f:c0:5e:
92:46:04:ca:36:23:2c:b0:30:2e:54:73:52:83:55:19:34:24:
f1:f8:4d:e8:0f:10:d5:4b:04:92:7f:53:14:d3:3d:62:ae:dd:
fa:60:28:15:f3:c8:e7:e4:0f:cb:4e:32:d4:40:8c:c1:78:eb:
d1:c4:63:12:5e:15:71:92:e4:a6:33:27:68:26:10:52:05:f3:
b9:96:0d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:50:43 2026 by rpki-client