Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ggJi5jTsNGOakywKWUmdTlA1MSg.roa
File: ggJi5jTsNGOakywKWUmdTlA1MSg.roa (raw, json)
Hash identifier: Qfnt7GCPdHZRKS+ljzBvl5rC07ZsWJ+sQ5vd9vreWJg=
Subject key identifier: 82:02:62:E6:34:EC:34:63:9A:93:2C:0A:59:49:9D:4E:50:35:31:28
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0566C00F31DD1BB4E3CF24E34BB994F78
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ggJi5jTsNGOakywKWUmdTlA1MSg.roa
Signing time: Mon 31 Aug 2026 06:05:13 +0000
ROA not before: Mon 31 Aug 2026 06:05:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402288
IP address blocks: 212.135.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:6c:00:f3:1d:d1:bb:4e:3c:f2:4e:34:bb:99:4f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 31 06:05:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=820262e634ec34639a932c0a59499d4e50353128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:ef:4f:bf:ee:8c:a7:6f:96:3a:92:8e:1b:
c7:68:8d:08:2f:18:3b:94:06:06:e3:9e:b4:d6:74:
ad:71:a1:d3:a8:be:1b:23:28:0f:cb:af:c2:de:9d:
f3:49:3c:59:fe:f1:05:02:d7:ad:8b:da:d9:19:c2:
be:6b:75:2a:0b:3b:0a:af:c8:75:56:81:a2:34:73:
96:9e:65:43:bc:fc:f5:04:e2:62:6f:b0:ad:bc:c3:
f2:48:1e:71:67:14:e0:0d:0b:6f:9c:70:82:cb:68:
ef:a1:f6:f0:af:2e:c6:73:70:dc:74:69:ca:62:91:
57:82:18:b4:42:32:8e:4f:4a:e3:66:01:eb:13:d6:
43:47:fb:a2:46:3d:07:93:9b:f9:8d:05:ff:ef:c2:
2a:14:c7:7f:44:53:e9:3e:66:df:35:6c:56:65:29:
1d:ff:75:17:fd:d0:27:8a:a1:3b:50:c1:ef:39:22:
db:03:d6:c5:c1:fd:bf:66:0a:c2:81:e1:3b:19:6b:
85:e8:13:c5:7c:70:b7:d7:e9:e9:24:f1:c2:af:4c:
34:39:ac:42:91:e6:90:07:cb:72:e5:5c:f6:8d:e7:
e8:f2:8c:25:6f:65:b1:fa:da:80:01:f2:42:e0:95:
10:ff:12:7b:cf:a9:aa:e4:62:b8:ce:7f:02:2e:8b:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:02:62:E6:34:EC:34:63:9A:93:2C:0A:59:49:9D:4E:50:35:31:28
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ggJi5jTsNGOakywKWUmdTlA1MSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.18.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f5:ec:e4:8d:41:e7:0d:4e:88:6e:67:58:84:e0:dd:ef:d2:
0f:cc:e1:76:a1:e1:92:40:75:5a:e4:59:c7:56:94:43:5a:54:
a3:49:36:61:a8:da:d5:76:6e:86:0e:d0:49:c5:a3:66:e4:0e:
df:9f:67:ff:32:fc:61:60:ae:be:6b:8c:38:6c:8c:db:52:5d:
ff:2a:b2:bf:3b:c5:78:83:d6:cf:69:ff:88:7b:5c:61:02:64:
c7:50:e2:9e:e8:02:9f:74:36:4b:0e:73:a1:73:da:ed:f9:42:
25:52:c7:74:10:8e:5a:5c:d9:9f:f1:2f:23:b5:3b:e8:45:27:
3e:53:3b:77:36:52:16:d5:0c:f7:7d:95:00:75:cd:24:a4:e8:
92:57:46:2f:5b:83:9c:39:15:44:f1:7c:ae:ad:22:fa:8e:b5:
f0:13:95:20:d8:37:c7:9f:93:bd:cf:32:ff:66:32:dd:cb:fd:
24:d0:c3:4d:5e:3c:79:e9:05:1e:a0:c6:8a:5c:fa:3b:91:f3:
44:be:0f:45:53:1d:e0:d3:4c:fe:cf:62:0c:62:fe:f7:eb:5e:
50:40:fc:a1:7d:86:ba:ce:47:d1:fb:f9:9b:77:ba:ad:56:27:
fa:7e:5d:0c:e2:70:61:88:b0:8d:71:0f:63:c7:d4:d4:5c:e5:
1a:57:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 15:54:11 2026 by rpki-client