Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/gDjWhW75y9WBXXvDeumWa7DTWZ8.roa
File: gDjWhW75y9WBXXvDeumWa7DTWZ8.roa (raw, json)
Hash identifier: THuvn9uWHTRPEbAvXJTYqXwFigFzVrDFgO2on01Peuc=
Subject key identifier: 80:38:D6:85:6E:F9:CB:D5:81:5D:7B:C3:7A:E9:96:6B:B0:D3:59:9F
Certificate issuer: /CN=6564cd583ca3ed5ee61d079c362d4e39ffea63a9
Certificate serial: 019CBD5AF8B5875CD5D7C7C85F092E83869D
Authority key identifier: 65:64:CD:58:3C:A3:ED:5E:E6:1D:07:9C:36:2D:4E:39:FF:EA:63:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWTNWDyj7V7mHQecNi1OOf_qY6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/gDjWhW75y9WBXXvDeumWa7DTWZ8.roa
Signing time: Thu 05 Mar 2026 09:36:21 +0000
ROA not before: Thu 05 Mar 2026 09:36:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 138.134.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/ZWTNWDyj7V7mHQecNi1OOf_qY6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/ZWTNWDyj7V7mHQecNi1OOf_qY6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWTNWDyj7V7mHQecNi1OOf_qY6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:5a:f8:b5:87:5c:d5:d7:c7:c8:5f:09:2e:83:86:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6564cd583ca3ed5ee61d079c362d4e39ffea63a9
Validity
Not Before: Mar 5 09:36:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8038d6856ef9cbd5815d7bc37ae9966bb0d3599f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8a:6a:4f:70:79:e0:15:18:20:d4:ad:1a:28:
b9:a7:4e:66:d8:d4:8d:51:98:ec:9e:29:10:79:d8:
97:94:d5:25:a3:d3:89:35:34:0e:ad:b2:3b:25:01:
6d:9d:21:00:c8:41:7a:a2:64:ee:69:14:12:90:f9:
ee:86:f8:df:79:71:97:84:24:b0:36:ce:e9:3c:77:
d3:e1:d0:99:fc:df:2a:5a:32:67:ec:95:00:5c:61:
fe:94:83:b4:7d:26:ad:08:42:58:02:06:8d:28:a2:
fa:bc:2f:22:a5:c5:e3:e3:65:ba:cc:fd:86:4b:38:
ee:3f:eb:c6:9c:c7:40:4d:42:2c:c9:8a:48:e2:06:
2e:21:5c:83:da:80:fb:20:cb:90:7a:28:cd:e8:15:
36:b4:11:84:74:73:84:6c:1c:8a:85:82:55:9a:1d:
5b:85:5f:3b:0d:79:78:58:b3:e3:5c:4a:06:db:95:
8d:46:2f:a6:b2:cb:76:c7:1c:7a:a1:bf:51:d9:3b:
3f:44:90:f3:5e:ee:79:5e:18:74:4b:76:ae:47:21:
d2:78:a2:88:44:32:22:23:40:b7:91:0e:bf:5a:ae:
5e:67:6c:e7:58:68:28:67:2c:6b:32:7a:76:50:73:
69:a1:f8:de:f2:85:76:4c:8d:57:42:dd:82:97:91:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:38:D6:85:6E:F9:CB:D5:81:5D:7B:C3:7A:E9:96:6B:B0:D3:59:9F
X509v3 Authority Key Identifier:
keyid:65:64:CD:58:3C:A3:ED:5E:E6:1D:07:9C:36:2D:4E:39:FF:EA:63:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWTNWDyj7V7mHQecNi1OOf_qY6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/gDjWhW75y9WBXXvDeumWa7DTWZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/27af3b-db56-4b29-9415-fad9bf6a6f4f/1/ZWTNWDyj7V7mHQecNi1OOf_qY6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.134.120.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c5:d6:ab:35:5f:68:2e:5f:81:ac:ee:4c:99:47:93:35:3a:
30:94:7f:07:82:d1:3f:44:52:48:69:ed:63:0c:56:ab:b1:0b:
73:8e:fc:46:b6:31:a8:48:56:4e:ad:6a:23:47:1f:aa:ab:c7:
5a:27:68:0e:46:69:78:e0:ac:a9:3e:cc:9c:22:9c:e3:8f:64:
28:1e:e7:12:a6:e0:45:81:32:36:c3:8a:3a:6b:b4:4f:6f:45:
da:d4:39:50:e5:8a:9f:7c:8f:a5:1a:67:e9:11:fe:17:7c:2c:
c9:12:d8:ee:3b:03:b6:cf:85:c7:c4:25:80:05:bc:8c:61:c8:
7d:57:5b:f9:99:6d:94:87:93:18:d8:8f:93:db:df:f0:44:d1:
ae:70:f3:6e:b5:97:50:00:5e:4c:ca:7f:b4:57:88:19:a5:48:
ac:a7:99:fd:7b:4b:f9:d3:7b:19:2d:55:bd:4e:2e:3e:a8:dd:
ca:9c:c0:29:ce:fd:cb:57:a9:d2:de:50:58:19:ac:f2:e2:33:
f6:a9:ae:9c:47:f1:23:15:b6:7d:ee:f2:e4:67:04:e7:29:64:
6f:c8:51:b5:03:0d:bc:4a:d6:f2:73:8a:a3:24:20:77:97:0d:
03:94:dd:e1:e8:2b:da:d2:70:ce:6f:e0:66:14:33:67:25:39:
6f:4c:b1:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZy9Wvi1h1zV18fIXwkug4adMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NjRjZDU4M2NhM2VkNWVlNjFkMDc5YzM2MmQ0ZTM5ZmZl
YTYzYTkwHhcNMjYwMzA1MDkzNjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDM4ZDY4NTZlZjljYmQ1ODE1ZDdiYzM3YWU5OTY2YmIwZDM1OTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24pqT3B54BUYINStGii5p05m2NSN
UZjsnikQediXlNUlo9OJNTQOrbI7JQFtnSEAyEF6omTuaRQSkPnuhvjfeXGXhCSw
Ns7pPHfT4dCZ/N8qWjJn7JUAXGH+lIO0fSatCEJYAgaNKKL6vC8ipcXj42W6zP2G
SzjuP+vGnMdATUIsyYpI4gYuIVyD2oD7IMuQeijN6BU2tBGEdHOEbByKhYJVmh1b
hV87DXl4WLPjXEoG25WNRi+msst2xxx6ob9R2Ts/RJDzXu55Xhh0S3auRyHSeKKI
RDIiI0C3kQ6/Wq5eZ2znWGgoZyxrMnp2UHNpofje8oV2TI1XQt2Cl5ETcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIA41oVu+cvVgV17w3rplmuw01mfMB8GA1UdIwQY
MBaAFGVkzVg8o+1e5h0HnDYtTjn/6mOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWldUTldEeWo3VjdtSFFlY05pMU9PZl9xWTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8yN2FmM2ItZGI1Ni00YjI5LTk0MTUt
ZmFkOWJmNmE2ZjRmLzEvZ0RqV2hXNzV5OVdCWFh2RGV1bVdhN0RUV1o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8yN2FmM2ItZGI1Ni00YjI5LTk0MTUtZmFkOWJmNmE2ZjRm
LzEvWldUTldEeWo3VjdtSFFlY05pMU9PZl9xWTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioZ4MA0G
CSqGSIb3DQEBCwUAA4IBAQCIxdarNV9oLl+BrO5MmUeTNTowlH8HgtE/RFJIae1j
DFarsQtzjvxGtjGoSFZOrWojRx+qq8daJ2gORml44KypPsycIpzjj2QoHucSpuBF
gTI2w4o6a7RPb0Xa1DlQ5YqffI+lGmfpEf4XfCzJEtjuOwO2z4XHxCWABbyMYch9
V1v5mW2Uh5MY2I+T29/wRNGucPNutZdQAF5Myn+0V4gZpUisp5n9e0v503sZLVW9
Ti4+qN3KnMApzv3LV6nS3lBYGazy4jP2qa6cR/EjFbZ97vLkZwTnKWRvyFG1Aw28
Stbyc4qjJCB3lw0DlN3h6Cva0nDOb+BmFDNnJTlvTLEI
-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:09 2026 by rpki-client