Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/g4mf4EjibzfqZkPBn4IaYZbz_AE.roa
File: g4mf4EjibzfqZkPBn4IaYZbz_AE.roa (raw, json)
Hash identifier: JXw83+KcpepdPe64IX93so27k9IE50W/8cG5OQI0qLU=
Subject key identifier: 83:89:9F:E0:48:E2:6F:37:EA:66:43:C1:9F:82:1A:61:96:F3:FC:01
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019F276E3D534F956B92F8F8FFBE35C7DAC8
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/g4mf4EjibzfqZkPBn4IaYZbz_AE.roa
Signing time: Fri 03 Jul 2026 10:02:43 +0000
ROA not before: Fri 03 Jul 2026 10:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32167
IP address blocks: 2a05:1084::/32 maxlen: 48
2a0d:2582::/32 maxlen: 48
2a0d:2683::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:6e:3d:53:4f:95:6b:92:f8:f8:ff:be:35:c7:da:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jul 3 10:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83899fe048e26f37ea6643c19f821a6196f3fc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:f8:45:b2:a2:b7:d4:ad:b5:f7:5c:ec:9f:
f4:cd:3f:b1:01:d7:53:ff:4a:16:2f:1a:7f:07:2d:
26:e1:1b:20:42:b8:c0:d6:1f:09:af:13:af:d7:30:
9e:11:4b:2a:12:20:16:6e:45:7b:56:61:df:10:67:
27:50:c5:18:a6:1e:9d:a3:7a:ad:d0:3b:d0:f7:fb:
8d:54:39:cb:3c:fb:c9:a1:a5:a1:21:b9:35:64:37:
4d:99:c4:5e:c4:8e:89:55:a3:0e:60:23:ec:94:1c:
37:ba:14:35:34:8b:40:d9:06:45:42:04:d7:1f:e4:
6d:0f:ad:b0:20:df:07:91:4d:aa:47:03:8b:30:55:
76:f9:6b:13:9a:ef:ad:29:c9:e6:ef:64:21:53:d8:
64:25:c9:ae:7f:ab:ec:f6:83:d9:48:b6:e4:a3:87:
c8:35:d9:2e:0a:e3:55:b1:4b:07:16:44:91:7d:8e:
28:65:5d:12:a7:8e:86:81:62:b2:38:40:bf:d9:5f:
20:33:c3:8b:e8:42:33:3b:76:9d:b7:7d:19:99:3a:
8c:b7:6f:80:97:e5:aa:40:39:6a:5a:ab:a0:d0:29:
ac:cb:17:ba:1d:3c:50:48:b1:35:9f:70:ad:37:9b:
d3:56:56:9b:7b:5f:58:34:98:ed:39:80:ed:e6:87:
de:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:89:9F:E0:48:E2:6F:37:EA:66:43:C1:9F:82:1A:61:96:F3:FC:01
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/g4mf4EjibzfqZkPBn4IaYZbz_AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1084::/32
2a0d:2582::/32
2a0d:2683::/32
Signature Algorithm: sha256WithRSAEncryption
99:df:db:63:82:d6:0a:a3:bb:1f:51:13:ab:fa:7f:06:ca:08:
26:2c:c1:84:64:b3:46:82:b8:39:21:c5:30:7b:87:73:d6:8a:
83:a1:bf:78:e2:be:e9:49:dc:f7:10:b2:f4:5b:ed:88:af:58:
88:75:c5:ed:1e:1c:b3:d5:32:b0:c8:84:5d:8b:dc:99:c9:07:
dc:af:fc:dc:36:ab:1f:ba:58:68:42:32:0e:3d:65:e9:85:bc:
06:b2:3b:21:60:c1:0a:36:37:fb:c4:66:3b:08:0a:3e:52:bd:
ec:79:dc:b5:be:6e:83:be:0c:df:f5:09:26:38:46:64:20:cd:
0c:b3:b0:13:0d:f8:0d:4c:1d:8b:20:88:88:c9:a6:89:b7:49:
41:de:25:4c:4b:73:50:38:79:99:ca:52:4b:4a:b2:cd:f1:ff:
88:7c:c7:54:d6:e0:d2:80:85:41:1b:da:ec:4c:a3:ad:23:05:
64:6a:49:83:49:fa:ba:6b:09:ae:4d:4e:04:72:9d:85:de:26:
79:a9:06:e5:d3:65:7b:16:d3:e5:17:33:5d:98:e3:b3:c5:2b:
3c:eb:b3:10:49:6d:53:0e:94:ee:93:cc:c3:45:9d:0f:b9:19:
78:9b:dc:21:1c:2b:eb:54:84:7b:60:34:83:c0:2c:4e:1a:c1:
6d:c9:37:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:43:30 2026 by rpki-client