Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/gg90cm-1iia4u6U7IJtxCwq7iEk.roa
File: gg90cm-1iia4u6U7IJtxCwq7iEk.roa (raw, json)
Hash identifier: nGrC3gnRBsxXISqp2Wa/KuyLPmssTj38ImT/h1sm0as=
Subject key identifier: 82:0F:74:72:6F:B5:8A:26:B8:BB:A5:3B:20:9B:71:0B:0A:BB:88:49
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 019F47F5E3B5E1553C89844737D391D0B006
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/gg90cm-1iia4u6U7IJtxCwq7iEk.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402642
IP address blocks: 2a11:b300::/29 maxlen: 29
2a12:2900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e3:b5:e1:55:3c:89:84:47:37:d3:91:d0:b0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=820f74726fb58a26b8bba53b209b710b0abb8849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:25:2f:a4:84:14:80:0e:96:a2:6d:3b:6c:
9d:69:02:3e:04:22:ec:3c:d2:ba:6e:be:69:a7:4f:
3b:c3:6f:92:d3:33:3b:b7:e3:a5:26:9c:e1:55:a3:
f2:f3:9f:ea:ac:da:6e:49:77:7a:df:51:70:66:aa:
f2:58:70:57:35:e0:54:d2:92:74:9e:88:98:e0:09:
90:97:51:2a:82:91:37:c8:4a:d7:6b:12:8a:37:64:
68:d0:5b:24:09:a1:92:04:82:21:1e:e5:68:e8:76:
ae:db:a0:3c:af:9f:63:84:65:91:43:19:b4:2e:1f:
a4:3e:c5:16:31:21:33:d7:83:45:de:6b:14:ff:f9:
96:b3:c4:8b:c5:65:4e:1c:47:eb:15:4c:e9:15:2b:
fe:48:72:af:8a:c4:8e:83:63:8c:1e:a6:a0:3b:19:
13:ce:5d:56:4c:eb:ef:4c:cb:32:20:e7:a5:8c:e0:
a7:00:b5:b8:8e:4e:0a:da:9e:a2:25:fd:8c:a1:4f:
77:3a:f1:b7:f8:b0:18:31:9f:bd:8b:45:60:4a:5c:
92:fd:2a:7f:8a:99:5e:71:03:e4:ae:eb:f8:03:f6:
07:ef:5d:45:e1:65:68:31:9a:d6:15:2f:b5:9a:8e:
b5:65:db:0d:33:36:5c:58:59:70:99:e1:bc:b7:8a:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0F:74:72:6F:B5:8A:26:B8:BB:A5:3B:20:9B:71:0B:0A:BB:88:49
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/gg90cm-1iia4u6U7IJtxCwq7iEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:b300::/29
2a12:2900::/29
Signature Algorithm: sha256WithRSAEncryption
54:a0:d9:b5:ec:7f:4b:a8:14:fe:43:c7:da:d9:93:ff:fa:d2:
1d:30:e5:cf:55:1f:ba:d5:78:16:3e:36:f5:23:a2:b2:aa:74:
8f:4c:42:1c:b6:5d:9f:e0:e8:51:ef:bd:4e:85:b1:99:95:a2:
41:4e:57:31:dc:2d:fb:5f:5a:bd:48:c9:12:52:43:7a:78:4b:
8a:8d:54:69:86:6c:1d:59:0a:ce:cb:2f:a3:44:63:23:52:4a:
72:af:88:7a:3f:07:70:15:f2:a2:ec:55:5c:1d:14:c0:be:99:
ae:34:f0:7e:7e:17:88:e1:2e:c0:86:3d:15:b1:01:d3:fb:41:
82:85:f9:3d:f8:56:7b:cf:d8:0a:9a:ab:cb:ad:7d:33:d6:cd:
00:57:4f:80:3b:fe:d0:8d:b7:a4:d7:db:e3:61:ce:a4:3e:89:
3e:91:db:d2:07:de:e9:d5:ac:5e:9e:d9:c0:96:45:1f:5f:cd:
cd:11:82:e7:16:4d:a4:06:d9:53:98:71:39:64:fb:9c:ca:94:
91:97:be:23:15:75:23:c5:bc:9c:68:7c:3e:d2:34:19:85:0b:
4d:c1:dc:12:20:49:27:72:dd:d4:79:33:ee:16:1e:73:eb:fa:
fd:e4:e7:bb:7f:de:74:69:53:a7:26:5b:88:12:0f:9b:b2:a0:
82:34:7e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 20:54:29 2026 by rpki-client