Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/Gr9DH2WwJbgZo0WIG9eWTKHCcFo.roa
File: Gr9DH2WwJbgZo0WIG9eWTKHCcFo.roa (raw, json)
Hash identifier: FB5htKHBt6Y7JRV/Z29yqmijt+k8tYh3TDPpzFpqMJI=
Subject key identifier: 1A:BF:43:1F:65:B0:25:B8:19:A3:45:88:1B:D7:96:4C:A1:C2:70:5A
Certificate issuer: /CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Certificate serial: 019E69AC1B8CD9A1D16506B8D1A6E08792A0
Authority key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/Gr9DH2WwJbgZo0WIG9eWTKHCcFo.roa
Signing time: Wed 27 May 2026 13:42:27 +0000
ROA not before: Wed 27 May 2026 13:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202053
IP address blocks: 77.81.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:ac:1b:8c:d9:a1:d1:65:06:b8:d1:a6:e0:87:92:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Validity
Not Before: May 27 13:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1abf431f65b025b819a345881bd7964ca1c2705a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:cf:c6:77:0b:04:8c:f2:30:8a:5d:6d:11:
cb:b0:24:69:08:71:ab:c4:e8:99:cd:79:9f:10:9b:
be:c5:79:f9:61:b0:cb:fa:67:92:5d:b3:66:87:55:
f8:7c:4c:50:f5:99:a5:ec:3c:08:2d:c6:86:f2:b5:
63:b8:d3:ee:77:15:52:36:7c:76:d3:44:5f:e3:a7:
1b:2e:cd:b9:c5:a2:c6:7f:ce:c1:d9:30:ef:03:8c:
bf:44:f1:02:68:2d:c9:c3:fa:65:19:f7:34:15:d3:
af:7c:9b:01:cf:99:81:ec:28:f6:88:78:47:80:94:
bd:ae:f5:04:1d:1b:71:69:25:90:c0:96:9f:a9:58:
9b:13:4a:10:9c:99:8b:f1:75:ef:33:5a:ed:24:66:
c2:dd:a5:77:b0:9c:0e:a1:d1:6e:75:f6:73:17:14:
51:56:35:da:23:41:7b:5a:29:7f:1f:4b:22:32:fa:
5a:6c:99:21:29:63:d4:10:4b:16:bc:06:59:c5:76:
f8:96:2e:34:61:5b:7d:29:ab:9b:4b:a7:8c:39:a9:
6b:b5:0a:6f:a0:29:27:89:30:2e:e0:c7:5c:9b:9f:
b7:c8:e0:ae:ad:c2:0c:c8:49:01:6d:5b:d9:4f:f0:
b7:ab:d2:66:f7:68:a0:a8:74:cb:a8:55:1a:f7:e1:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BF:43:1F:65:B0:25:B8:19:A3:45:88:1B:D7:96:4C:A1:C2:70:5A
X509v3 Authority Key Identifier:
keyid:E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/Gr9DH2WwJbgZo0WIG9eWTKHCcFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.0.0/24
Signature Algorithm: sha256WithRSAEncryption
83:49:e9:c3:fc:1a:65:90:85:3b:5a:80:a4:7b:97:56:b4:51:
70:86:cb:e2:0b:8c:1b:3b:e8:7b:47:26:df:ab:82:31:41:64:
0e:3b:9b:85:13:34:be:e0:5f:7d:21:45:56:3a:15:76:73:02:
90:65:92:b5:e8:31:4d:f1:c4:6b:54:f1:46:a9:be:55:cc:fd:
06:28:78:26:3c:0b:d8:0d:7e:de:be:ce:80:db:95:a1:4a:77:
22:aa:b3:8b:41:45:56:9f:9c:ed:d7:52:30:92:3c:9f:d8:79:
25:98:db:0a:92:36:b4:f9:0e:c6:24:68:1b:ff:dd:4f:ae:a0:
ce:34:53:bb:1f:00:bf:c4:d1:76:42:5b:65:08:a6:56:16:dd:
8f:8e:86:bc:e0:dc:27:a2:d7:81:b9:8a:bf:b3:7d:dd:b8:90:
cb:56:2e:fc:45:e9:89:06:72:ff:d7:26:60:85:af:93:ea:3c:
f5:dc:ab:e0:b8:70:ae:2e:cc:e4:a2:60:c3:80:dd:a7:3a:30:
13:1c:a7:51:d5:b9:40:a9:48:04:ec:04:d0:6a:e1:4b:c4:47:
72:91:2d:d7:60:8a:09:9b:40:b1:ef:9f:40:d5:33:6a:4e:bc:
b1:d7:c5:12:30:62:a0:5d:2b:db:26:2e:a1:2e:26:dc:8f:a2:
f0:58:c9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:22:00 2026 by rpki-client