Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/GxykfCv7GlR6D5nrnjcTVOu0l_M.roa
File: GxykfCv7GlR6D5nrnjcTVOu0l_M.roa (raw, json)
Hash identifier: wugE4Aa7EX6Uos39BRdr0+I5XE/Xjc5lSBonv+MejFc=
Subject key identifier: 1B:1C:A4:7C:2B:FB:1A:54:7A:0F:99:EB:9E:37:13:54:EB:B4:97:F3
Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial: 01A0FBF8539EDDDBF48348B213A9FCBD2925
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/GxykfCv7GlR6D5nrnjcTVOu0l_M.roa
Signing time: Fri 02 Oct 2026 09:35:50 +0000
ROA not before: Fri 02 Oct 2026 09:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39257
IP address blocks: 45.67.28.0/22 maxlen: 22
2a09:6cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:f8:53:9e:dd:db:f4:83:48:b2:13:a9:fc:bd:29:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
Validity
Not Before: Oct 2 09:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b1ca47c2bfb1a547a0f99eb9e371354ebb497f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:5d:bf:1b:b0:52:08:46:92:b5:3d:35:0e:
49:87:b0:ff:4b:03:8f:c1:1d:e9:61:a0:de:9b:c4:
a2:75:ca:06:83:0c:6d:8a:43:23:9d:c9:f1:bc:7d:
e1:a6:a8:53:74:64:d1:54:25:9b:c6:bc:e0:23:51:
d5:4d:dd:1d:e5:44:b9:62:24:b4:95:e9:35:ae:cb:
c2:8e:d9:53:39:8f:b7:e4:c8:fb:e0:f8:6d:a5:4b:
28:cc:01:1a:0b:05:8d:00:ca:05:07:88:99:a0:28:
ec:f0:a7:40:52:b7:e4:ac:2b:3a:21:16:b0:7b:1a:
3e:7d:df:16:a2:ae:a4:88:af:69:0d:fc:78:4e:7b:
43:3e:18:f4:a8:cb:08:77:28:f5:84:4f:91:00:14:
ad:79:50:d1:12:02:38:6d:70:0f:34:14:f5:f8:b4:
55:21:00:74:5a:20:e9:c4:b7:3c:97:f2:ec:d8:d2:
e8:06:c3:f0:e5:8e:23:38:c9:6a:42:83:ce:25:2f:
58:76:a0:4c:28:80:17:70:94:f3:94:b8:27:aa:f9:
36:96:9c:b3:34:fb:ef:36:f1:d1:57:41:0f:a6:e4:
dd:e0:02:15:8c:32:0a:34:04:bc:0e:19:72:13:c2:
9b:ba:84:b4:da:19:51:c2:97:48:c0:b1:12:0e:0a:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1C:A4:7C:2B:FB:1A:54:7A:0F:99:EB:9E:37:13:54:EB:B4:97:F3
X509v3 Authority Key Identifier:
keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/GxykfCv7GlR6D5nrnjcTVOu0l_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.28.0/22
IPv6:
2a09:6cc0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:5d:d4:1f:ce:83:72:5b:80:9d:20:af:95:2b:1b:63:6d:f6:
76:36:9c:4e:72:fc:4e:08:d0:09:d3:fa:28:a8:4e:a0:68:67:
c1:16:55:0c:b3:31:46:c1:e5:cd:9d:7c:f9:57:05:63:df:5d:
46:51:14:0a:a8:70:28:a0:11:9b:f9:fd:eb:e7:de:a0:35:af:
87:b6:65:54:fa:81:be:7c:62:47:1c:d7:2d:a0:25:e7:a0:38:
b3:de:17:5e:22:a5:67:b5:27:b3:47:f9:eb:d0:9e:7e:e2:40:
0a:bd:67:c4:59:4a:87:8b:03:97:01:8b:5f:55:85:95:25:d9:
a0:1f:ba:58:e2:73:a7:60:f4:b6:6d:30:6f:ae:bc:d8:07:85:
c5:12:8e:b2:36:67:33:d1:60:58:ce:3a:b7:2a:41:70:8b:bf:
50:b1:ca:89:10:bc:4e:c3:16:eb:a8:aa:3b:b3:9a:49:29:25:
74:fa:02:04:c4:26:04:39:0f:53:44:38:f0:d7:f9:ae:7f:b0:
7b:5c:f2:b0:6f:f8:0e:91:f0:2e:e9:f0:1e:94:03:4d:ea:64:
46:e9:e2:21:ee:a5:9e:7c:4d:ca:5f:22:55:dd:ed:7a:8e:c8:
5d:3e:eb:78:f1:2b:a0:d9:6b:aa:91:3f:5b:3d:5d:f8:86:fd:
92:bc:0d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 03:35:30 2026 by rpki-client