Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gzb97U8m-12HE94xk12JEHMOXds.roa
File: gzb97U8m-12HE94xk12JEHMOXds.roa (raw, json)
Hash identifier: X5P8SiSiY5VjRL2izDLnZ/BM0BrOMMTftLEPxJR/w58=
Subject key identifier: 83:36:FD:ED:4F:26:FB:5D:87:13:DE:31:93:5D:89:10:73:0E:5D:DB
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FC95803E4834994501749184A7EA8F317
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gzb97U8m-12HE94xk12JEHMOXds.roa
Signing time: Mon 03 Aug 2026 20:36:56 +0000
ROA not before: Mon 03 Aug 2026 20:36:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213896
IP address blocks: 82.108.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:58:03:e4:83:49:94:50:17:49:18:4a:7e:a8:f3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 3 20:36:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8336fded4f26fb5d8713de31935d8910730e5ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:a9:fe:a6:80:1d:34:2f:8b:2c:22:b6:5e:
45:2d:21:f9:2e:72:42:9a:68:65:df:63:db:bb:57:
eb:ce:61:95:e8:d2:8c:e2:5c:4d:fa:c4:07:4d:4b:
9c:18:af:bf:f6:cb:bc:86:ef:5b:ba:bf:1a:d5:85:
c4:a0:f5:02:f7:05:19:a4:eb:77:0c:d3:ad:06:0b:
bc:ea:c4:74:fc:ea:8a:bd:08:a1:34:89:7f:f9:d8:
c5:a6:40:c2:c8:34:b4:a6:90:1c:7e:6a:6e:5d:54:
c4:11:68:01:09:9d:99:cc:38:75:93:25:9b:00:c3:
4e:77:6e:c2:a4:58:2b:9e:d0:86:46:d1:c8:e8:33:
66:af:a2:2a:5d:45:3e:ea:7c:4f:38:61:f1:b8:4e:
24:89:b8:ff:cd:ad:33:de:84:d1:38:05:83:c0:f3:
16:7e:d6:4e:3f:c4:65:c8:4a:0d:a6:a2:d0:e7:01:
92:56:a4:f7:5a:a0:af:a5:f3:0b:a1:e6:30:9f:05:
9c:0e:70:5d:bf:86:72:89:b9:04:c3:32:af:76:73:
2a:08:27:53:ef:28:57:1a:b6:33:b5:d6:71:12:eb:
49:0f:dd:ed:6f:76:0f:bd:fe:5d:8d:8c:47:e2:c0:
8f:4f:e0:ef:5b:1b:6b:02:56:51:a6:36:e7:54:8d:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:36:FD:ED:4F:26:FB:5D:87:13:DE:31:93:5D:89:10:73:0E:5D:DB
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gzb97U8m-12HE94xk12JEHMOXds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.131.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c0:58:72:94:97:51:d3:ca:e8:84:99:e1:db:06:4f:71:bc:
0b:09:28:d4:e9:61:d9:7e:18:a8:59:b9:4f:e5:e9:63:3f:be:
21:4c:6f:d0:ff:0d:b9:f3:ac:b4:d5:b6:9c:30:c1:0b:c3:ec:
c5:7c:2a:c2:97:5e:8c:f3:10:8b:33:e4:f4:7e:5c:5d:ea:f7:
c6:17:dc:da:1a:0a:51:e1:5c:00:19:18:61:73:c8:07:83:7d:
ed:61:c7:e8:e3:a2:6e:4d:31:9a:95:46:86:d0:64:40:c2:59:
02:2a:0a:24:02:97:03:ce:22:2a:4c:e7:00:b3:2b:a8:5a:2f:
3d:25:3b:84:41:2f:c7:ff:32:7a:be:22:7e:6f:c1:ce:76:fa:
a7:f7:e5:63:21:8e:c7:43:9b:53:83:42:75:28:ba:09:fa:38:
2c:77:57:95:29:a1:0e:ac:6d:24:3f:1b:d1:55:e4:e4:c9:84:
17:3e:4d:24:cb:86:2c:5e:b9:9c:b2:3e:47:cb:58:21:00:a2:
22:f3:c4:2c:fa:f6:fa:66:ab:e9:eb:44:26:bf:8c:a0:52:0d:
5f:cc:3b:79:3f:af:60:21:36:f8:6d:da:49:e1:e5:43:56:e0:
9f:ae:2b:71:e9:00:b0:06:a8:35:86:95:f2:35:0a:f8:c1:03:
52:44:5c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:20:28 2026 by rpki-client