Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/gkkrU6u2FLiNXzmE2cj241QAyHk.roa
File: gkkrU6u2FLiNXzmE2cj241QAyHk.roa (raw, json)
Hash identifier: sh1hqghShdd7sfm9cO88cftEvtI584nTjKd5z62swCM=
Subject key identifier: 82:49:2B:53:AB:B6:14:B8:8D:5F:39:84:D9:C8:F6:E3:54:00:C8:79
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019F47F5E48688745846F9CA9700640D25DD
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/gkkrU6u2FLiNXzmE2cj241QAyHk.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402642
IP address blocks: 2a0e:a280::/29 maxlen: 29
2a0e:a3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e4:86:88:74:58:46:f9:ca:97:00:64:0d:25:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82492b53abb614b88d5f3984d9c8f6e35400c879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:80:81:cb:c2:7a:80:7d:03:b4:c7:1a:cf:
d2:54:b0:b2:50:ac:c7:a0:a9:fe:07:30:e1:89:1a:
ee:31:ec:cd:d7:54:f2:11:b9:ae:db:82:e3:cf:49:
af:11:94:56:4d:f4:90:9f:f6:3e:92:94:86:8a:0e:
60:d2:fd:99:d1:c4:67:8f:f0:ac:2f:46:b9:27:c8:
80:3b:6d:42:a2:1d:81:1e:a2:b0:45:a3:7b:ff:6b:
68:8f:15:dc:66:7f:02:6c:c6:44:85:78:ed:73:23:
06:d5:d5:0c:a4:a7:32:63:fd:bf:77:cb:2f:42:0f:
e8:b7:fb:cd:59:06:29:03:37:56:1e:ee:21:5b:7a:
51:ef:02:01:ad:ed:58:15:fb:82:67:c6:f4:65:e7:
03:29:09:27:29:7d:c5:30:7c:bf:59:9d:f2:ef:32:
9b:f6:e9:c7:9f:fa:e7:39:50:cc:d8:47:32:96:a1:
d7:6d:25:dc:94:09:88:0e:a0:60:7e:6a:4e:d5:2b:
59:9d:6b:63:4d:8e:9b:e8:f2:88:d4:a8:66:a6:96:
51:25:27:18:5b:de:fe:39:4a:1e:e5:64:92:11:8a:
25:be:d4:32:0c:2c:b9:8b:a3:36:31:90:a6:72:a0:
37:11:03:19:03:e8:de:fc:d0:a7:52:5e:8e:a6:a5:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:49:2B:53:AB:B6:14:B8:8D:5F:39:84:D9:C8:F6:E3:54:00:C8:79
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/gkkrU6u2FLiNXzmE2cj241QAyHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:a280::/29
2a0e:a3c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:b3:44:d9:dc:76:b9:49:c8:cf:47:56:69:59:9b:12:91:b2:
a7:a5:ab:8a:f1:87:bd:3b:cb:c9:6e:21:74:c4:e8:55:9a:ca:
2d:55:ab:39:a8:44:2f:ad:d0:97:8d:e3:6f:00:61:c3:94:40:
ad:1f:1d:47:27:14:66:1a:5b:44:54:a6:cf:66:d7:28:6d:27:
1f:1b:08:3a:d8:96:a3:98:31:75:b4:c4:cb:d9:3f:ac:c5:fa:
f8:0a:c5:ba:1d:94:14:10:80:57:de:1b:3f:c6:47:75:dd:3c:
6f:1b:1e:1e:c6:2b:aa:ea:83:0c:c1:48:f6:a5:44:cc:cf:64:
90:3c:d5:5e:3e:8c:fe:9e:58:2e:e6:b2:59:00:4b:ac:ca:2c:
28:13:9d:eb:18:fe:0d:ba:34:37:f4:d1:52:f9:1c:bf:b6:79:
9f:54:e9:96:78:b7:ae:64:7b:a9:47:9f:a6:6f:29:f0:91:3a:
33:08:d2:c1:ef:55:c7:be:bc:ec:41:09:2f:55:86:8d:d5:9a:
96:0e:b9:84:ee:ed:7e:58:37:52:40:d6:6c:3c:f3:b0:1b:b0:
7c:f0:a0:63:ad:fe:df:39:97:a5:cc:60:97:1b:e6:b4:d7:d0:
f8:b9:d8:c1:f5:66:10:d4:ea:08:01:52:9d:88:40:45:09:fc:
9b:3f:77:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 20:54:52 2026 by rpki-client