Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/GIxEbcE4snVftAhCgt1cTYRBjz8.roa
File: GIxEbcE4snVftAhCgt1cTYRBjz8.roa (raw, json)
Hash identifier: iaySxkTBLxjauIEjaDIAJVCjjvkkVkcWxP728iqyNoc=
Subject key identifier: 18:8C:44:6D:C1:38:B2:75:5F:B4:08:42:82:DD:5C:4D:84:41:8F:3F
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368F4606746444ED49B54DCC68EE136
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/GIxEbcE4snVftAhCgt1cTYRBjz8.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208157
IP address blocks: 2a00:7180:8000::/46 maxlen: 46
2a04:800:7000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f4:60:67:46:44:4e:d4:9b:54:dc:c6:8e:e1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=188c446dc138b2755fb4084282dd5c4d84418f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:85:f8:21:df:b9:49:1b:fd:ba:19:16:39:
97:c1:4d:6a:35:40:1d:ad:44:15:91:8e:6f:8a:35:
4d:35:ef:20:dc:44:f2:0a:32:9f:7b:7f:7f:1f:42:
a4:6a:a6:3b:e4:f7:7a:25:06:cd:da:c9:63:60:df:
8a:50:a5:c8:66:ee:bd:94:55:9f:a8:56:01:fa:91:
8f:c2:6b:59:e3:e9:f2:86:e5:4e:34:7d:40:b5:ea:
e6:ac:f2:f4:81:a8:a6:a5:5f:ab:23:9a:fa:6e:ae:
7e:33:04:b3:53:30:47:cd:e6:66:b0:48:d4:83:1c:
17:db:51:38:12:6b:63:44:fe:e3:64:ec:b7:4d:1d:
80:1b:10:20:f3:9d:0f:14:0a:37:ee:9c:cb:29:0f:
72:b7:12:2d:a6:f0:b3:03:f0:3f:66:18:67:c2:80:
bf:7e:43:92:ca:ed:6d:5f:f2:60:ea:7a:d8:a9:be:
29:40:cb:a0:9e:fd:e2:f9:84:85:a5:36:ad:b3:dc:
cd:c2:ff:f6:f8:4c:87:af:63:90:fb:d9:86:24:cb:
d4:0e:22:06:ab:1f:c3:8e:58:4d:c7:55:a5:36:80:
28:d2:20:52:88:4d:4b:6c:74:80:3d:ea:d4:09:d9:
15:e8:49:97:6e:3b:c6:33:fe:4f:57:75:88:17:57:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8C:44:6D:C1:38:B2:75:5F:B4:08:42:82:DD:5C:4D:84:41:8F:3F
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/GIxEbcE4snVftAhCgt1cTYRBjz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8000::/46
2a04:800:7000::/36
Signature Algorithm: sha256WithRSAEncryption
3e:3c:35:dc:07:7a:b9:20:03:51:52:7b:76:f5:f7:e3:07:90:
ef:38:7e:cd:33:3f:70:e8:7d:e9:a7:1f:08:18:e0:d0:14:7e:
cb:99:ab:af:9a:26:ca:73:cf:52:80:d3:cb:c0:6d:88:aa:30:
7a:56:99:cd:3f:4b:a5:d5:6d:42:d2:a7:14:dd:a9:74:01:22:
74:dc:56:26:4f:6e:ee:6f:36:0d:c3:89:d2:ab:04:e0:1b:f8:
24:31:53:0f:dc:92:48:05:c4:67:f6:38:79:99:b2:81:fc:99:
6f:dd:95:20:8a:d8:d7:5d:c1:71:e5:e1:e6:40:17:1b:4d:a7:
39:4c:4c:59:ee:71:c9:2f:b5:0b:dc:48:7f:11:44:18:bd:b9:
df:25:a2:fa:a4:af:20:69:7d:3f:68:d3:f8:a9:15:79:90:4f:
35:5d:50:f7:cb:89:28:97:39:b5:7c:c3:c0:94:4e:87:c1:13:
98:b5:86:e8:7d:72:70:39:b2:57:55:dd:34:5d:28:e7:81:e7:
34:ab:30:28:50:42:8a:37:74:15:d9:4b:3c:be:59:46:86:11:
29:f3:59:26:4a:c6:69:e2:c5:5c:93:21:c2:58:d8:3a:59:05:
f2:9f:a0:38:eb:33:d9:d9:0f:0a:50:3b:cd:35:d0:0a:6b:22:
60:de:70:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:33 2026 by rpki-client