Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/GSyFhlRd0WEh2HwHoPQ3xfwSIPk.roa
File: GSyFhlRd0WEh2HwHoPQ3xfwSIPk.roa (raw, json)
Hash identifier: vVGVQ1N3GA4LCIRkvyUtnsRCyLcmBYjOq9Mdp31x/cA=
Subject key identifier: 19:2C:85:86:54:5D:D1:61:21:D8:7C:07:A0:F4:37:C5:FC:12:20:F9
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 019ED4F69564DD4BBE804F9507CEA946CC36
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/GSyFhlRd0WEh2HwHoPQ3xfwSIPk.roa
Signing time: Wed 17 Jun 2026 09:43:10 +0000
ROA not before: Wed 17 Jun 2026 09:43:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 2a11:7a00::/29 maxlen: 32
2a11:b040::/29 maxlen: 32
2a11:ec80::/29 maxlen: 32
2a12:2580::/29 maxlen: 32
2a12:d300::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:f6:95:64:dd:4b:be:80:4f:95:07:ce:a9:46:cc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jun 17 09:43:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=192c8586545dd16121d87c07a0f437c5fc1220f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:f9:90:3b:04:f0:ff:57:51:75:b6:02:ef:
30:ce:07:18:13:d2:e4:c1:ec:f5:34:64:43:18:61:
71:11:5f:7e:03:76:06:21:00:3f:d9:d3:fb:8f:30:
58:91:ac:7b:b7:63:b4:41:8e:fe:ea:9c:18:b7:24:
ab:b5:e1:5e:f1:db:7e:33:49:55:c0:12:54:8d:4a:
fc:70:e8:72:53:f7:0b:03:8a:41:00:e4:db:62:fc:
b2:5b:e4:95:51:78:5a:a3:53:04:cd:ef:b3:a2:34:
31:d0:28:d3:bf:9a:4b:0e:94:48:23:2d:0a:05:93:
6c:e8:ee:61:d8:36:9e:82:ae:ed:4c:07:e6:d6:6f:
48:3c:6f:10:96:52:df:f8:4d:7f:9b:fa:05:eb:b9:
3b:2b:83:49:f6:78:7c:dc:a3:97:1e:f1:90:73:ea:
79:ae:75:c7:f5:4d:66:48:a0:ca:71:b1:f3:d3:ee:
54:94:cc:43:53:74:3c:9e:18:4a:73:6d:a1:79:2e:
1b:a8:a2:48:c3:12:64:a4:fa:f4:ab:c5:3b:9a:4e:
a1:e0:31:0d:dc:be:15:46:2c:c9:8c:6c:2b:d0:78:
08:e9:57:d0:7d:90:63:6b:f0:46:67:a0:84:36:05:
2b:fe:ff:67:e8:86:48:08:c4:58:34:08:a7:5b:44:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2C:85:86:54:5D:D1:61:21:D8:7C:07:A0:F4:37:C5:FC:12:20:F9
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/GSyFhlRd0WEh2HwHoPQ3xfwSIPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7a00::/29
2a11:b040::/29
2a11:ec80::/29
2a12:2580::/29
2a12:d300::/29
Signature Algorithm: sha256WithRSAEncryption
71:30:ac:67:53:1a:96:12:d5:45:50:1f:c0:10:d1:f1:dd:fd:
84:59:45:a5:5d:0e:b4:69:7b:e7:36:04:90:9d:58:97:8c:d5:
ba:51:2c:e8:75:22:56:15:de:27:68:5d:e5:61:84:4f:46:66:
34:c8:d5:39:e0:33:da:89:54:6d:d3:05:82:f6:7e:aa:62:00:
64:98:af:d7:f9:2e:c1:b2:83:e1:ce:4a:8a:7d:3a:3c:b5:95:
58:57:8d:c3:d2:9e:8b:55:85:2f:88:ce:ad:39:07:6a:4c:67:
c6:c0:a6:61:6e:7c:c1:00:42:58:a2:ba:e1:51:cd:ef:c4:22:
e9:a0:dc:e7:e6:11:16:31:8f:a9:e6:bf:ac:59:a5:44:18:83:
c1:9e:18:5b:de:8a:ab:f9:9c:ce:55:f5:ca:ae:88:ef:de:19:
82:e8:91:32:60:10:a0:a0:a8:46:d8:21:cb:cd:75:2a:28:60:
d3:d6:a9:74:76:d1:e8:48:81:80:0d:0a:6f:82:19:24:4b:ad:
db:62:cf:96:e6:45:19:c2:33:6d:28:3e:26:e6:b7:79:96:74:
9f:2a:65:00:2b:05:1d:ce:51:27:30:68:e1:08:a1:f5:1a:47:
0d:f2:d0:20:0e:9a:18:91:a5:1e:24:42:4c:8f:7f:bd:35:af:
08:2c:97:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:10:45 2026 by rpki-client