Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/g1hZM_gA4VG6GdoQudkyKC9Iy5o.roa
File: g1hZM_gA4VG6GdoQudkyKC9Iy5o.roa (raw, json)
Hash identifier: jJPVFAYeWIaOyslOEJqm1eIOt5Tzn5vmJYRqVTS9b6g=
Subject key identifier: 83:58:59:33:F8:00:E1:51:BA:19:DA:10:B9:D9:32:28:2F:48:CB:9A
Certificate issuer: /CN=f2794e37392be2ffe81795d7d161f033056a06cf
Certificate serial: 019F489D69C9D46FA99390033A886189AC4A
Authority key identifier: F2:79:4E:37:39:2B:E2:FF:E8:17:95:D7:D1:61:F0:33:05:6A:06:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/g1hZM_gA4VG6GdoQudkyKC9Iy5o.roa
Signing time: Thu 09 Jul 2026 20:41:43 +0000
ROA not before: Thu 09 Jul 2026 20:41:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215230
IP address blocks: 2a07:a180::/29 maxlen: 48
2a07:a180::/32 maxlen: 48
2a07:a181::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:9d:69:c9:d4:6f:a9:93:90:03:3a:88:61:89:ac:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2794e37392be2ffe81795d7d161f033056a06cf
Validity
Not Before: Jul 9 20:41:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83585933f800e151ba19da10b9d932282f48cb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:60:08:3c:37:d1:c4:3b:20:17:cc:2d:a3:
75:ae:79:18:aa:50:f9:46:95:6c:84:9e:38:f8:a0:
a5:e8:56:68:9e:99:3e:10:49:16:73:f4:d9:d3:15:
bd:12:eb:01:68:97:01:15:34:fe:49:db:9c:c6:1e:
74:c3:68:69:5f:b8:38:01:de:46:64:fb:47:01:1a:
ef:fc:91:6f:4a:65:33:cf:ed:2a:2a:83:82:27:be:
ec:c7:4f:de:9f:b9:2b:e2:45:ef:7a:e4:72:aa:8f:
62:0e:32:77:72:62:40:bf:2a:8b:3e:d6:d1:27:ac:
c7:e1:6a:e2:cc:67:f5:7c:55:04:e6:b7:35:7d:0f:
10:7c:a7:68:1a:88:3a:ac:a4:97:95:58:4e:1b:05:
cd:95:36:51:44:69:da:23:7c:16:6c:6c:c8:27:1f:
fb:3b:35:21:52:b9:fd:2b:46:94:e1:7c:43:25:49:
fe:1d:4d:2c:1e:b6:b7:aa:46:68:b2:77:e0:8d:4f:
e3:30:fe:0a:06:00:f7:f2:a5:e9:39:3a:91:d3:28:
02:30:b5:ed:79:d4:b0:bc:33:71:43:8c:b9:d2:21:
1a:14:5c:11:38:13:6b:b4:94:bc:62:1e:78:be:db:
f8:1b:fd:91:78:4e:a2:b9:fa:3e:75:a4:55:bb:63:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:58:59:33:F8:00:E1:51:BA:19:DA:10:B9:D9:32:28:2F:48:CB:9A
X509v3 Authority Key Identifier:
keyid:F2:79:4E:37:39:2B:E2:FF:E8:17:95:D7:D1:61:F0:33:05:6A:06:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/g1hZM_gA4VG6GdoQudkyKC9Iy5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:a180::/29
Signature Algorithm: sha256WithRSAEncryption
9a:ef:23:88:23:a9:25:6a:26:de:97:04:8f:d9:9f:11:4a:c4:
3d:de:e9:93:fa:22:58:34:59:40:77:a9:b0:c5:75:d4:04:32:
4f:12:32:df:9f:75:e6:a8:35:83:85:e6:c5:d6:f2:49:b7:ed:
88:8e:c1:00:5f:25:aa:84:cb:43:e1:a2:db:c9:a4:59:9c:66:
b2:50:06:8a:c4:e8:94:e1:40:32:7c:e0:8b:3a:63:56:fd:75:
0e:88:70:be:91:36:f0:c9:f8:73:03:fe:10:67:75:0e:99:9c:
d4:02:53:a0:c5:37:a5:2b:39:dc:99:0c:9b:ae:7f:60:f8:99:
78:63:cf:7c:c8:2d:fa:18:23:d9:e9:63:3d:41:ec:e7:0a:60:
db:e1:be:d5:7f:e1:8a:10:c9:ea:6c:7b:45:da:a9:16:2b:bb:
6e:ff:74:5d:47:06:9d:be:72:ea:9b:33:26:19:51:34:ea:55:
92:f1:2c:d1:a7:74:1e:8e:37:5a:89:05:cd:ad:9f:dc:8b:a7:
c8:c6:e2:14:b5:3f:16:b4:39:51:d4:1c:76:c6:68:8e:49:8a:
15:66:3d:a2:71:f6:d4:31:2e:68:12:de:5a:7b:df:30:3e:31:
9f:30:94:f0:0e:55:51:a9:8e:d1:4e:c0:f3:77:b9:1c:45:79:
da:5f:dc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:33:45 2026 by rpki-client