Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GqFXfnEpeIukMYU4pfTl7QmE3lk.roa
File: GqFXfnEpeIukMYU4pfTl7QmE3lk.roa (raw, json)
Hash identifier: y2GK1QdgH7TnEb9bstibFHotUk0s7PQPU/al3erUZSM=
Subject key identifier: 1A:A1:57:7E:71:29:78:8B:A4:31:85:38:A5:F4:E5:ED:09:84:DE:59
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019CB8CB27308050CC0C423E26D464383AF2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GqFXfnEpeIukMYU4pfTl7QmE3lk.roa
Signing time: Wed 04 Mar 2026 12:20:47 +0000
ROA not before: Wed 04 Mar 2026 12:20:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20860
IP address blocks: 81.168.83.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:cb:27:30:80:50:cc:0c:42:3e:26:d4:64:38:3a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 4 12:20:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aa1577e7129788ba4318538a5f4e5ed0984de59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2b:31:5b:83:bc:50:12:07:d7:d9:f6:b9:e3:
73:aa:be:d9:47:0d:a5:8c:67:19:68:6e:9a:25:d3:
6d:68:d5:83:4b:1c:c0:83:d7:cd:67:fe:e4:75:65:
3f:f8:01:f2:77:87:ca:85:da:b6:78:e4:90:af:ef:
e0:99:f1:15:64:74:0a:43:8e:93:af:a1:9f:2c:0e:
bd:65:29:6d:7a:8d:77:0c:92:e6:ba:09:43:3c:9b:
b7:01:43:08:54:64:93:0f:8d:3a:99:e9:38:96:21:
5d:3d:6f:9d:4f:7c:15:14:d0:fc:75:3e:72:d3:1a:
47:a6:7d:9e:20:1c:d6:be:9a:0b:7e:b2:8a:56:c6:
8b:f3:22:a9:78:1b:fd:2f:7c:9f:c4:1c:67:78:2f:
27:1c:94:48:85:a1:2d:01:8d:8c:81:bb:8d:77:a0:
bc:32:b3:a1:e3:fd:e5:92:e2:b9:93:a4:90:10:88:
74:01:bb:88:14:4b:cd:6d:05:23:c5:6e:b0:09:ad:
91:3f:fe:2e:82:70:cd:1c:9c:0d:15:04:19:6c:b5:
5b:a3:21:60:c7:1a:97:04:dd:93:08:d9:55:ff:a5:
b6:59:c5:89:a6:9f:4d:b2:96:83:0d:16:7e:8d:c0:
5f:ac:9e:47:96:a4:6b:1d:79:eb:8f:b0:31:9c:38:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A1:57:7E:71:29:78:8B:A4:31:85:38:A5:F4:E5:ED:09:84:DE:59
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GqFXfnEpeIukMYU4pfTl7QmE3lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.83.0/24
81.168.119.0/24
Signature Algorithm: sha256WithRSAEncryption
49:43:b5:e7:4e:5b:c0:3e:68:ad:f2:cf:e1:50:59:12:88:47:
99:20:25:5b:1e:98:fd:c4:ad:76:9d:1f:86:7f:e8:dd:79:31:
72:8d:b5:44:0c:94:c5:da:f5:e2:86:a8:ff:55:25:6e:4c:f2:
e5:18:ef:08:80:00:1d:3b:5e:95:7b:1d:10:cd:d6:b9:1e:ea:
06:96:17:f9:1b:dc:28:d6:d6:b1:66:e1:ae:f9:c1:19:81:52:
bf:74:6d:0d:73:6d:c8:e9:27:aa:99:ff:96:61:31:bd:fa:f6:
e5:2c:75:06:4a:68:95:88:15:ae:cb:3e:6f:d0:9b:05:86:7b:
54:3a:53:45:6d:f5:da:2b:07:8d:1c:62:f0:41:e0:b4:70:e1:
c3:59:fe:d3:b7:64:69:c4:a5:50:d3:6c:e5:9b:ab:50:a8:1d:
db:b0:23:0a:db:ba:63:e8:9b:88:4a:2b:f1:5a:fd:1b:1a:3a:
51:4f:e8:32:75:50:9d:09:7d:b2:47:b6:73:86:08:7e:ba:f3:
cb:29:fb:c1:8d:22:0d:7e:06:43:4a:af:0d:34:40:38:79:e7:
49:7f:23:e9:9b:4d:55:0c:e2:07:d3:63:2b:c0:01:24:f1:bb:
c5:76:a5:28:90:3f:1b:0d:e4:9e:82:b9:16:27:4a:2f:33:11:
7c:6e:91:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 20:34:04 2026 by rpki-client