Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/G1elTTC32wwAg5gF4kdImLaXK4Q.roa
File: G1elTTC32wwAg5gF4kdImLaXK4Q.roa (raw, json)
Hash identifier: 2FCCi3HTyhp/YR0uyPmGT8XITlVrPDZU88zNJM8iqL8=
Subject key identifier: 1B:57:A5:4D:30:B7:DB:0C:00:83:98:05:E2:47:48:98:B6:97:2B:84
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A019DAFAD45E78DF8A5744150691899C57
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/G1elTTC32wwAg5gF4kdImLaXK4Q.roa
Signing time: Wed 19 Aug 2026 11:49:36 +0000
ROA not before: Wed 19 Aug 2026 11:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218945
IP address blocks: 2a03:5840:370::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:da:fa:d4:5e:78:df:8a:57:44:15:06:91:89:9c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Aug 19 11:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b57a54d30b7db0c00839805e2474898b6972b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:f0:53:94:ca:94:12:0f:5d:b7:46:a5:7c:
d1:dc:1e:e0:c7:14:ed:75:ab:42:ba:1a:6d:38:01:
fb:4c:5b:4b:09:17:aa:81:1c:ac:39:43:50:6f:80:
da:44:87:89:94:de:45:b5:57:dc:8c:c7:28:5d:c9:
9e:dc:74:39:a6:fa:16:91:33:3e:5f:de:17:ed:5a:
9f:aa:e5:0e:63:b5:c7:20:bd:44:36:16:3c:e4:f2:
cd:0c:a6:28:84:ba:7e:3b:3f:a4:c1:6a:cc:89:91:
21:f4:9a:62:e5:6c:a9:01:07:cc:f6:37:67:0d:73:
ab:cd:13:05:4e:fe:49:4f:e5:fc:e6:45:7a:ee:c2:
3b:4b:c0:ce:03:da:ed:79:40:e9:68:38:ba:3d:20:
c5:4f:96:43:f1:b6:8a:b2:fa:9c:c3:2c:72:09:32:
90:18:e4:d4:5b:05:a6:b1:26:d2:ac:df:05:c2:80:
fb:56:b2:40:eb:1f:df:4b:e2:f7:3d:df:c8:26:fc:
4c:be:bb:cb:b9:a4:5f:3b:3c:57:3e:bc:e1:c1:a9:
66:f0:98:66:75:72:00:d6:ef:54:79:fd:23:8e:37:
09:33:81:4f:cf:c7:04:06:55:2f:c2:3d:ce:66:63:
27:78:a4:87:6e:8a:8a:6f:95:37:f3:c0:e0:6a:c4:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:57:A5:4D:30:B7:DB:0C:00:83:98:05:E2:47:48:98:B6:97:2B:84
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/G1elTTC32wwAg5gF4kdImLaXK4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:370::/44
Signature Algorithm: sha256WithRSAEncryption
35:f2:e0:df:f5:17:f9:dc:4d:1d:3b:1c:a2:fb:e0:e7:17:a5:
eb:6a:ce:3b:cd:07:f4:c2:5a:4d:19:ee:4a:c6:c6:25:9c:f2:
de:ff:28:eb:5a:ad:c1:76:f4:28:d1:d3:e3:25:69:d2:e7:78:
12:dc:fa:b4:c4:e8:20:7f:f7:d7:fc:2a:25:6b:a3:c5:29:76:
0b:33:2f:23:f8:0a:15:48:a7:f8:33:b5:f8:ea:8b:c8:6c:57:
38:37:50:7a:94:be:10:24:df:20:13:ee:e4:b4:9e:03:61:ca:
93:b7:39:80:db:3d:9c:e8:f0:9d:06:00:65:66:81:dc:d6:87:
cb:b9:66:75:04:85:e2:d3:26:46:78:01:41:27:2f:bd:c1:ae:
7a:6d:57:fa:53:73:39:7c:f7:01:2a:4e:52:82:3b:fc:84:5a:
2e:2b:44:79:38:0d:64:e6:9d:b2:f3:ee:e4:d4:2b:83:52:35:
61:bf:a8:3e:14:d0:83:38:dc:15:a2:d1:44:5f:76:a8:9b:12:
5f:9d:af:b2:a9:1f:01:ce:9f:bc:59:33:b9:01:6f:1c:6d:0a:
bf:5a:38:4d:96:af:26:69:ca:de:4b:30:77:67:bc:09:7a:49:
59:16:ce:8f:8e:28:d3:d0:45:d0:37:1c:36:60:f9:41:76:07:
4d:cb:dd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:34 2026 by rpki-client