Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Gu0bMHSDqGjFDauNQ_LHJkfjDwc.roa
File: Gu0bMHSDqGjFDauNQ_LHJkfjDwc.roa (raw, json)
Hash identifier: F3APMRIF7/q5LGwu23WMnn3XGRIla4I6taCWVoMsA+o=
Subject key identifier: 1A:ED:1B:30:74:83:A8:68:C5:0D:AB:8D:43:F2:C7:26:47:E3:0F:07
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019ECFF7F54B272E548B387A525CC46BD609
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Gu0bMHSDqGjFDauNQ_LHJkfjDwc.roa
Signing time: Tue 16 Jun 2026 10:26:34 +0000
ROA not before: Tue 16 Jun 2026 10:26:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 2a11:c940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f7:f5:4b:27:2e:54:8b:38:7a:52:5c:c4:6b:d6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 16 10:26:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aed1b307483a868c50dab8d43f2c72647e30f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:00:88:ca:60:9e:21:bc:ee:3a:5e:92:05:
d4:c6:75:31:ae:6f:31:fc:89:26:65:e2:c4:f1:6a:
56:3f:97:cd:e7:43:0a:04:f4:04:ed:7c:94:88:50:
41:eb:ab:2f:8f:7b:68:86:73:4b:98:b7:e2:eb:8e:
bc:45:38:3c:6e:23:89:a0:6b:ea:e0:89:4a:26:75:
99:47:fd:79:da:7a:aa:83:46:3c:c8:7f:0d:7f:fa:
14:a2:7f:ba:77:1c:34:4a:a5:08:29:8d:d4:ab:bd:
30:f9:fa:de:5c:50:47:a1:a0:47:6b:07:3e:99:15:
0f:1a:43:0a:ad:81:60:c1:67:73:fa:46:85:12:57:
29:8a:62:d2:54:18:c6:55:b3:50:c9:32:b3:1c:f3:
37:e3:5b:69:db:48:bf:e6:d2:57:0f:9b:d3:12:0b:
00:ce:22:da:a3:0a:b4:95:ff:cb:aa:d6:ea:88:f4:
f8:43:11:eb:81:ce:ff:b7:77:99:a2:bf:f9:af:8e:
24:a9:d0:28:48:93:c0:3d:39:bb:ad:e8:36:bc:13:
79:b7:77:83:8c:98:7f:e9:84:06:0c:c3:fc:b7:29:
49:72:54:45:f1:e1:61:a9:79:56:07:67:02:a1:7a:
fa:3e:39:7f:e2:53:5e:0d:66:fb:70:7b:a1:d6:56:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:ED:1B:30:74:83:A8:68:C5:0D:AB:8D:43:F2:C7:26:47:E3:0F:07
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Gu0bMHSDqGjFDauNQ_LHJkfjDwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c940::/29
Signature Algorithm: sha256WithRSAEncryption
1c:d9:35:5b:4b:93:13:ba:75:5d:8b:a8:d4:d9:03:d2:3c:e7:
32:03:bf:d9:0c:61:70:7b:cf:7b:01:44:96:7a:4f:e2:cd:52:
aa:ec:d8:60:71:bb:9b:1c:86:4c:7d:5a:0d:61:b8:b7:2b:e4:
43:c0:27:cb:d9:ab:a8:f8:bd:b6:91:36:71:e9:07:a1:08:28:
9f:cf:53:cb:d0:c1:d4:48:6e:b6:26:20:f4:0a:25:35:8a:97:
33:85:2c:0a:cb:06:0f:57:8a:2b:96:8e:d8:99:93:29:dc:33:
54:22:65:e0:96:0e:38:79:ed:59:dd:35:21:f3:f4:5b:fc:50:
e8:d0:6c:3f:16:92:03:f4:46:60:a0:82:5c:ac:69:f0:0f:71:
1a:8e:36:00:29:57:94:0e:3f:96:08:44:37:3f:e5:5a:51:ad:
f0:aa:4c:aa:f3:01:76:8e:b7:82:65:b2:4e:7b:c4:68:00:92:
64:7f:64:ec:91:d2:b4:2f:dd:e4:de:0c:ac:92:62:d2:27:59:
8e:46:c0:c4:ed:b0:ab:74:51:b7:35:5d:e2:29:fc:c2:12:8b:
34:e6:c4:c6:96:87:fd:78:6e:c9:eb:ee:68:6e:ab:f4:bb:ec:
8d:98:87:22:48:11:15:13:5c:0d:18:96:44:02:c5:29:c3:c3:
4a:63:c3:c5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ7P9/VLJy5Uizh6UlzEa9YJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjYwNjE2MTAyNjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWVkMWIzMDc0ODNhODY4YzUwZGFiOGQ0M2YyYzcyNjQ3ZTMwZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTgAiMpgniG87jpekgXUxnUxrm8x
/IkmZeLE8WpWP5fN50MKBPQE7XyUiFBB66svj3tohnNLmLfi6468RTg8biOJoGvq
4IlKJnWZR/152nqqg0Y8yH8Nf/oUon+6dxw0SqUIKY3Uq70w+freXFBHoaBHawc+
mRUPGkMKrYFgwWdz+kaFElcpimLSVBjGVbNQyTKzHPM341tp20i/5tJXD5vTEgsA
ziLaowq0lf/LqtbqiPT4QxHrgc7/t3eZor/5r44kqdAoSJPAPTm7reg2vBN5t3eD
jJh/6YQGDMP8tylJclRF8eFhqXlWB2cCoXr6Pjl/4lNeDWb7cHuh1lYiUwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBrtGzB0g6hoxQ2rjUPyxyZH4w8HMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvR3UwYk1IU0RxR2pGRGF1TlFfTEhKa2ZqRHdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhHJQDAN
BgkqhkiG9w0BAQsFAAOCAQEAHNk1W0uTE7p1XYuo1NkD0jznMgO/2QxhcHvPewFE
lnpP4s1SquzYYHG7mxyGTH1aDWG4tyvkQ8Any9mrqPi9tpE2cekHoQgon89Ty9DB
1EhutiYg9AolNYqXM4UsCssGD1eKK5aO2JmTKdwzVCJl4JYOOHntWd01IfP0W/xQ
6NBsPxaSA/RGYKCCXKxp8A9xGo42AClXlA4/lghENz/lWlGt8KpMqvMBdo63gmWy
TnvEaACSZH9k7JHStC/d5N4MrJJi0idZjkbAxO2wq3RRtzVd4in8whKLNObExpaH
/XhuyevuaG6r9LvsjZiHIkgRFRNcDRiWRALFKcPDSmPDxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 20 02:52:19 2026 by rpki-client