Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/gP48O_sjBy8crhBkXhJMvckOd40.roa
File: gP48O_sjBy8crhBkXhJMvckOd40.roa (raw, json)
Hash identifier: YjRHc0wBKAbt12RWFSPrs766F+2rkzk6tBEBo+GPgkI=
Subject key identifier: 80:FE:3C:3B:FB:23:07:2F:1C:AE:10:64:5E:12:4C:BD:C9:0E:77:8D
Certificate issuer: /CN=877aad307ad330ebb8cf44ec21389a170436fd53
Certificate serial: 019DCFE9EA2087AE5C8BD3B7B044D1AD2713
Authority key identifier: 87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/gP48O_sjBy8crhBkXhJMvckOd40.roa
Signing time: Mon 27 Apr 2026 17:08:26 +0000
ROA not before: Mon 27 Apr 2026 17:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.14.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e9:ea:20:87:ae:5c:8b:d3:b7:b0:44:d1:ad:27:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877aad307ad330ebb8cf44ec21389a170436fd53
Validity
Not Before: Apr 27 17:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80fe3c3bfb23072f1cae10645e124cbdc90e778d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:2a:c7:07:05:e6:7f:46:04:fb:f3:6e:26:
7f:3d:f4:bf:c6:f2:70:8a:fa:9e:25:80:1d:b4:4d:
4c:3c:55:f5:d9:53:cb:98:3c:ea:f0:d5:b9:fa:c8:
78:ea:08:aa:ab:cd:a4:fe:3a:5a:dd:78:b9:08:a2:
e4:9a:dc:08:01:5b:68:e7:c2:91:e0:1e:d1:3a:c2:
cb:8d:74:0c:7b:de:5d:3c:85:6e:1c:cb:28:e8:4b:
ff:a8:69:c5:59:28:11:fd:64:ff:f2:26:0c:a0:6c:
5e:35:c1:2a:0f:68:1e:19:d2:e9:ac:ba:a3:58:da:
ad:cb:72:e0:ca:08:f0:b3:f8:80:05:15:f3:cb:06:
ef:33:25:c8:9b:be:c6:64:66:07:a5:41:85:3e:4d:
5b:a6:5b:1e:a8:1e:7b:2c:d3:b9:8b:e6:3f:d7:34:
03:0e:a7:7b:dc:4d:bd:63:c6:c8:35:80:89:11:f3:
17:37:9d:77:5a:98:b7:67:b4:bf:be:85:31:d3:c7:
c0:07:95:07:03:5c:8c:a2:14:94:81:b7:3e:99:ad:
a9:74:d9:c9:38:4f:76:2e:00:d6:30:7e:06:b5:0e:
a7:42:88:a0:23:e8:d0:c1:19:ab:fc:84:cf:ed:6e:
43:df:84:1c:6d:18:c6:2a:cd:28:24:ab:06:46:5e:
28:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FE:3C:3B:FB:23:07:2F:1C:AE:10:64:5E:12:4C:BD:C9:0E:77:8D
X509v3 Authority Key Identifier:
keyid:87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/gP48O_sjBy8crhBkXhJMvckOd40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.27.0/24
Signature Algorithm: sha256WithRSAEncryption
91:7e:f2:48:91:8b:11:36:f3:8a:89:50:46:29:e4:7c:53:eb:
cc:b1:5f:09:a0:76:e2:2d:c5:76:16:78:dd:f2:9b:f0:e4:99:
ef:87:3e:74:3f:68:99:04:84:e9:5e:38:06:5f:e7:07:b2:6c:
2a:db:4d:d0:a0:08:b0:f2:8d:62:e7:61:73:ad:37:93:b2:d2:
1b:fe:b6:cd:24:fb:0b:e1:ab:15:71:88:8c:b0:d4:5f:da:50:
4e:54:f8:05:93:45:f3:f1:24:dc:b6:15:29:f0:f2:3d:5b:7b:
15:b0:ac:eb:74:0d:96:51:21:17:76:63:c2:84:1f:31:2a:0f:
4e:a8:e2:65:04:28:13:ce:c1:09:96:8a:24:0a:2c:75:5d:4b:
e0:41:30:80:78:d2:98:b1:65:f8:39:ee:87:81:14:b6:b8:99:
67:57:b9:e4:e5:a3:cb:30:5f:c7:0e:fe:de:97:bf:69:f7:8a:
cd:91:58:de:40:9a:7a:d2:ed:06:73:29:c5:95:84:9c:a5:e0:
46:b5:1c:0a:cc:bd:a2:d0:46:49:62:49:07:7b:2e:c5:6a:9e:
23:f7:dc:9e:1b:b6:4c:fb:79:8e:ce:9f:1a:75:a1:21:3a:49:
58:bc:f1:16:00:2e:02:89:17:95:1f:97:22:63:4a:83:43:bc:
10:38:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:47:50 2026 by rpki-client