Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/gAmFQhnqb3iPpVcDFRBYy6LTGVQ.roa
File: gAmFQhnqb3iPpVcDFRBYy6LTGVQ.roa (raw, json)
Hash identifier: q0DBQHQeo72WaD3xXDWqH5+bTdogOZU8lk6UJrMCqW8=
Subject key identifier: 80:09:85:42:19:EA:6F:78:8F:A5:57:03:15:10:58:CB:A2:D3:19:54
Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a
Certificate serial: 01A0EC81B3D32B427087403FBDA169ADFAA7
Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/gAmFQhnqb3iPpVcDFRBYy6LTGVQ.roa
Signing time: Tue 29 Sep 2026 09:31:58 +0000
ROA not before: Tue 29 Sep 2026 09:31:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203062
IP address blocks: 2a06:2c80::/36 maxlen: 48
2a06:2c80:b::/48 maxlen: 48
2a06:2c80:1000::/36 maxlen: 48
2a06:2c80:4000::/36 maxlen: 48
2a06:2c81:8000::/33 maxlen: 33
2a06:2c82:8000::/33 maxlen: 33
2a06:2c83::/33 maxlen: 33
2a06:2c84::/36 maxlen: 48
2a06:2c84:1000::/36 maxlen: 48
2a06:2c84:2000::/37 maxlen: 48
2a06:2c84:2800::/37 maxlen: 48
2a06:2c84:3000::/37 maxlen: 48
2a06:2c87:e000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:81:b3:d3:2b:42:70:87:40:3f:bd:a1:69:ad:fa:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a
Validity
Not Before: Sep 29 09:31:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8009854219ea6f788fa55703151058cba2d31954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:01:ce:3a:48:a4:77:cf:24:9f:07:5e:41:
f9:1e:7a:08:11:a5:41:99:62:14:bf:1b:0b:36:15:
fd:f3:fa:32:b5:95:f9:91:62:cb:1c:7d:11:0e:db:
95:a3:b4:51:86:e0:ad:e3:d2:b8:69:4d:9a:3d:34:
3a:c0:0b:37:69:26:4a:79:8e:81:66:a0:da:63:b9:
9d:24:6e:ab:5b:31:f9:c3:72:7a:e5:49:74:e5:62:
89:3c:a1:c4:42:a8:c7:3e:2b:60:0d:d7:73:0e:97:
13:c6:0f:d1:10:f9:21:f9:1f:9e:63:b3:2b:9f:25:
0a:8c:35:ac:90:02:40:37:f5:ef:e1:12:02:61:dd:
c3:a0:84:74:16:e3:b8:42:97:51:1b:1c:27:da:20:
12:63:71:aa:9e:d3:d3:08:69:a4:44:62:b1:54:72:
9c:a2:80:b7:ff:6e:b0:22:f6:54:fb:d0:ae:03:cd:
bf:9b:0f:44:f1:ec:77:bf:df:63:b1:2e:ae:a2:a1:
12:d7:e4:2e:d7:34:a1:20:f3:4a:ca:79:7f:f7:6f:
7a:90:52:fc:c8:2a:90:99:81:0d:60:1a:45:1f:bf:
77:f7:39:ad:ed:ee:f4:58:dd:6e:c2:1c:a7:d4:b8:
e8:04:4b:0d:26:fe:e3:fc:c7:a0:6b:41:6d:09:31:
cf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:09:85:42:19:EA:6F:78:8F:A5:57:03:15:10:58:CB:A2:D3:19:54
X509v3 Authority Key Identifier:
keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/gAmFQhnqb3iPpVcDFRBYy6LTGVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:2c80::/35
2a06:2c80:4000::/36
2a06:2c81:8000::/33
2a06:2c82:8000::-2a06:2c83:7fff:ffff:ffff:ffff:ffff:ffff
2a06:2c84::-2a06:2c84:37ff:ffff:ffff:ffff:ffff:ffff
2a06:2c87:e000::/36
Signature Algorithm: sha256WithRSAEncryption
5b:0d:02:d9:91:88:af:0d:0c:5f:d7:00:e5:13:c7:3b:bb:91:
a6:d2:be:8c:7b:fd:c1:73:4b:45:7b:87:7c:df:8e:0f:cf:f0:
17:5a:23:75:21:2c:97:d4:2f:58:32:94:2a:3e:6c:5f:4f:e2:
80:4e:14:97:43:66:02:f5:8b:cc:2c:b6:3a:bc:a8:f2:38:59:
67:6b:72:4d:d3:50:e8:4c:97:05:dc:24:d9:f9:79:51:1d:eb:
c9:59:8f:7b:8c:be:f0:d7:a9:1b:f2:b4:4a:ce:3d:83:a6:0c:
48:bb:e9:05:8c:48:ea:96:bd:dd:03:66:13:26:27:50:24:ee:
c2:44:d8:f7:f1:bc:d1:e3:33:e1:27:a8:80:92:7f:c0:84:32:
e0:e4:eb:09:9e:eb:c5:8c:e2:f8:6f:a3:4b:30:86:b9:cc:0f:
0c:a2:bf:b6:55:d5:d4:56:55:53:f9:0a:3c:be:f6:7a:f1:7c:
85:d4:d0:89:54:15:f9:68:c7:4b:95:0a:2a:dc:1e:c9:0d:d4:
c0:1c:5a:86:ec:3e:4a:cb:63:6d:9a:56:3e:d2:c5:83:e4:a3:
9e:07:c3:37:13:f4:05:18:f5:73:28:81:d0:35:52:37:af:c3:
54:43:56:ea:62:51:57:44:ce:fc:eb:42:f8:a1:69:ea:b3:cc:
80:1e:87:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:11 2026 by rpki-client