Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/gPKYb1y3p90DD8s9LQ44ZKdg_4c.roa
File: gPKYb1y3p90DD8s9LQ44ZKdg_4c.roa (raw, json)
Hash identifier: rXUw5uswj+GLfE3zjLQScTc804q2vCvOdnuuFsFGwhU=
Subject key identifier: 80:F2:98:6F:5C:B7:A7:DD:03:0F:CB:3D:2D:0E:38:64:A7:60:FF:87
Certificate issuer: /CN=61845c7b60aa212805b9eb44eaa08c48923aa318
Certificate serial: 019FB3A669C4889C7B1223022AE4F2361DB1
Authority key identifier: 61:84:5C:7B:60:AA:21:28:05:B9:EB:44:EA:A0:8C:48:92:3A:A3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYRce2CqISgFuetE6qCMSJI6oxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/gPKYb1y3p90DD8s9LQ44ZKdg_4c.roa
Signing time: Thu 30 Jul 2026 15:30:55 +0000
ROA not before: Thu 30 Jul 2026 15:30:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:23b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYRce2CqISgFuetE6qCMSJI6oxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:a6:69:c4:88:9c:7b:12:23:02:2a:e4:f2:36:1d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61845c7b60aa212805b9eb44eaa08c48923aa318
Validity
Not Before: Jul 30 15:30:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80f2986f5cb7a7dd030fcb3d2d0e3864a760ff87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:4e:61:73:e3:f8:ab:08:63:4b:a1:07:f7:
d1:b5:11:20:ab:50:60:e3:02:4e:d9:d4:18:4e:96:
44:a5:8e:19:7d:49:5b:6f:20:4c:0f:1a:50:d2:1e:
1e:9d:3f:98:28:e0:03:db:85:9f:39:09:6d:1b:bd:
81:2f:84:cd:a4:e5:6e:5c:ab:c4:ed:41:27:31:c6:
fe:11:e4:0c:67:2a:8e:2e:34:f1:34:be:de:e0:5c:
99:44:fa:b0:34:0e:14:58:0f:62:a6:01:e3:ad:e2:
18:ae:24:a0:0b:eb:51:01:4a:3e:1c:5c:81:14:9e:
fb:9a:cc:88:58:aa:c3:fa:1b:be:04:e5:88:ad:82:
99:cb:9c:69:c8:6a:f9:ae:e9:ba:c9:bc:36:30:53:
77:63:99:f7:95:14:aa:83:6f:d0:c6:b5:0a:76:16:
d7:43:db:c4:c7:58:ac:a5:b2:dc:b5:0f:f2:35:54:
93:f1:f4:b5:c1:1c:24:ec:94:16:e3:83:20:fd:20:
d6:3d:bb:8b:2a:7f:bf:2d:06:ab:3b:d6:05:1c:bb:
b4:7f:d9:71:42:09:e3:c3:8d:13:12:08:20:a3:84:
5b:db:70:0a:fb:36:54:33:46:a4:42:7e:cd:94:f7:
2c:b5:12:42:75:8c:0e:4b:18:84:ef:83:97:ce:a5:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F2:98:6F:5C:B7:A7:DD:03:0F:CB:3D:2D:0E:38:64:A7:60:FF:87
X509v3 Authority Key Identifier:
keyid:61:84:5C:7B:60:AA:21:28:05:B9:EB:44:EA:A0:8C:48:92:3A:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYRce2CqISgFuetE6qCMSJI6oxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/gPKYb1y3p90DD8s9LQ44ZKdg_4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:23b4::/48
Signature Algorithm: sha256WithRSAEncryption
a7:9c:0a:a0:1e:d4:1e:f4:35:b7:cf:bd:9c:27:4a:1d:67:e9:
49:83:db:94:d5:32:e6:91:7f:70:18:3e:e1:14:88:d3:4a:4a:
d1:a3:6b:f0:c6:b7:36:16:8e:a4:f3:99:9e:2e:d6:c2:83:af:
a7:be:47:bd:b0:dc:fe:67:02:ac:44:8e:81:0a:0d:ec:0d:1e:
f5:19:cb:7b:24:99:1c:a6:4b:8e:e2:3b:30:ad:9f:83:5d:d9:
3c:2e:03:6d:1d:ba:83:28:b9:a8:91:ed:24:8c:56:99:04:d8:
06:cd:7a:55:1e:27:8d:a6:4e:4b:e7:e4:3c:16:ad:11:6f:35:
7e:c8:99:56:41:8a:de:b4:5a:98:d6:cc:fe:32:08:3e:29:90:
3b:a4:8f:09:a7:03:ae:af:13:a1:ff:e4:ff:2a:b7:a3:51:33:
43:52:21:4d:1d:64:fb:e3:9a:d2:bb:3d:31:36:e3:4e:4d:44:
30:14:2c:91:11:3d:37:26:fb:c7:aa:ba:43:03:44:cc:74:62:
8f:a5:b0:3c:70:ff:33:a8:d7:85:f9:8a:f2:54:12:f3:db:c4:
40:4d:07:16:90:46:e7:4b:b4:f0:7f:33:1a:4c:98:91:3c:42:
49:34:76:87:5a:c2:25:c4:07:4c:1e:8b:76:3d:41:7a:3a:4f:
d7:66:07:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:07:45 2026 by rpki-client