Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/gm6jLV3IlTLgtamw2RHRA4BkZuc.roa
File: gm6jLV3IlTLgtamw2RHRA4BkZuc.roa (raw, json)
Hash identifier: 6uA9Wzk6HXKBm964Qr081WL2SzCFVRp9bj3MkmKfdKo=
Subject key identifier: 82:6E:A3:2D:5D:C8:95:32:E0:B5:A9:B0:D9:11:D1:03:80:64:66:E7
Certificate issuer: /CN=e49dafa95adc19a6e454996818db566bcae408aa
Certificate serial: 01A13BEDF641EC42D7AE93CA2C0E063F1BEA
Authority key identifier: E4:9D:AF:A9:5A:DC:19:A6:E4:54:99:68:18:DB:56:6B:CA:E4:08:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2vqVrcGabkVJloGNtWa8rkCKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/gm6jLV3IlTLgtamw2RHRA4BkZuc.roa
Signing time: Wed 14 Oct 2026 19:40:13 +0000
ROA not before: Wed 14 Oct 2026 19:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218402
IP address blocks: 2001:678:1384::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/5J2vqVrcGabkVJloGNtWa8rkCKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/5J2vqVrcGabkVJloGNtWa8rkCKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J2vqVrcGabkVJloGNtWa8rkCKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:ed:f6:41:ec:42:d7:ae:93:ca:2c:0e:06:3f:1b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dafa95adc19a6e454996818db566bcae408aa
Validity
Not Before: Oct 14 19:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=826ea32d5dc89532e0b5a9b0d911d103806466e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:bd:ab:5e:4e:6c:4c:84:66:25:0a:08:c7:
f2:9c:49:da:f2:4b:ee:c0:eb:0a:a8:67:6b:d4:1b:
8e:9d:94:7a:b2:ff:f1:80:ac:7e:b0:33:47:03:53:
1b:e7:a4:f9:28:b6:2f:ac:18:99:93:c2:8b:6e:2b:
34:45:ce:f0:89:d7:a1:c5:33:68:76:6b:42:5c:f7:
22:93:66:7b:62:c7:b1:fd:d8:18:84:78:4f:75:d3:
45:7e:a1:b3:03:3c:81:8e:04:38:0b:ce:d9:0d:0e:
c8:a1:92:c3:55:63:4f:a4:f1:23:90:d7:15:ea:dd:
85:18:2b:20:9b:43:25:f1:52:30:a1:d1:97:e6:8b:
b3:f7:c6:4e:69:86:39:bc:82:be:6f:ef:c8:8e:e4:
a5:b0:f4:b4:79:16:d0:a7:50:46:4a:ff:a8:5c:e0:
fc:95:92:63:9c:7e:3e:71:aa:0d:0d:66:20:67:7c:
85:31:da:34:4b:b0:72:e1:bb:fb:10:57:23:ee:a8:
df:64:c3:79:04:94:be:84:28:6f:b6:10:ce:6a:cf:
55:aa:77:94:38:2a:b7:f2:4a:fa:75:c8:a7:bc:e0:
39:47:80:4f:84:6f:14:b9:0e:41:db:b4:a6:54:a4:
69:68:73:a8:f4:75:65:08:70:e5:93:ef:39:bd:a7:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6E:A3:2D:5D:C8:95:32:E0:B5:A9:B0:D9:11:D1:03:80:64:66:E7
X509v3 Authority Key Identifier:
keyid:E4:9D:AF:A9:5A:DC:19:A6:E4:54:99:68:18:DB:56:6B:CA:E4:08:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2vqVrcGabkVJloGNtWa8rkCKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/gm6jLV3IlTLgtamw2RHRA4BkZuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ea77fb-2aa9-4c96-924f-b0da5ddeec59/1/5J2vqVrcGabkVJloGNtWa8rkCKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1384::/48
Signature Algorithm: sha256WithRSAEncryption
39:5d:40:00:c0:b5:d3:0f:1c:cf:a8:2b:ec:ff:20:70:ee:49:
25:8b:64:e7:93:68:64:cb:6e:ef:65:e0:62:aa:6d:f7:cd:34:
94:26:de:1e:42:4e:12:15:6a:6d:1c:72:42:15:35:a2:1e:a8:
1a:f2:a7:02:a7:79:a5:f4:e3:fa:4e:f5:f6:fb:30:f9:5d:de:
47:15:7b:53:1d:e0:45:81:8c:1d:25:a6:94:4d:c7:02:52:48:
49:40:2f:93:84:89:4c:60:03:87:09:84:95:f9:67:9a:df:b8:
48:08:2c:76:35:2e:98:7f:9d:9e:70:a0:bf:60:ab:37:3c:ce:
95:82:3c:a2:37:60:cb:78:f8:bb:b5:77:0c:ee:bd:68:cb:c9:
ce:3c:b9:ce:06:f2:7e:c1:e7:d7:93:c1:14:09:67:9c:80:33:
55:5a:3f:9f:fa:c5:d1:0f:b5:3e:a0:f2:45:c4:20:76:83:31:
e8:70:13:18:df:ad:5e:a2:97:da:fb:fc:26:10:90:c0:38:5b:
ac:9d:a6:35:d9:ba:c4:3f:4c:06:b8:73:d8:41:92:05:cc:96:
cd:02:6e:47:bf:67:41:65:6a:e5:3a:1e:72:49:27:4b:bb:6b:
5f:b7:af:4c:c0:ba:ff:4e:08:e0:31:aa:3e:40:b7:83:d4:e1:
4a:8e:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:43 2026 by rpki-client