Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/gg8Xtlv4L7H3CokJGin70-EIGj8.roa
File: gg8Xtlv4L7H3CokJGin70-EIGj8.roa (raw, json)
Hash identifier: 2O/ARUbsmee0HWq9SgX4TGv3AGFNbcO5zWhK68Qv1Os=
Subject key identifier: 82:0F:17:B6:5B:F8:2F:B1:F7:0A:89:09:1A:29:FB:D3:E1:08:1A:3F
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A03D69EF5CFCEDF89ADD8306207B23576F
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/gg8Xtlv4L7H3CokJGin70-EIGj8.roa
Signing time: Wed 26 Aug 2026 09:32:27 +0000
ROA not before: Wed 26 Aug 2026 09:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 89.167.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:69:ef:5c:fc:ed:f8:9a:dd:83:06:20:7b:23:57:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Aug 26 09:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=820f17b65bf82fb1f70a89091a29fbd3e1081a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ef:cb:c3:48:9e:fb:ac:aa:a4:57:a3:05:b9:
eb:77:33:9e:93:69:ae:67:d3:68:7c:88:f6:c5:e8:
ca:cc:fc:d5:ac:5b:08:6c:44:d7:d0:5d:b3:15:63:
7a:59:de:33:9e:71:f9:21:77:53:6b:75:f8:bf:32:
0d:02:26:cf:52:c7:c4:e8:07:16:cb:72:6c:a5:90:
97:c4:4d:70:8d:56:26:e0:12:cf:1e:5d:3d:dd:e3:
b7:24:7c:91:18:d8:92:c6:53:fb:d8:0a:ef:e8:ae:
ed:53:a2:f4:44:78:2c:ce:17:49:f3:fd:3e:93:a2:
b5:db:fa:84:48:1a:55:ff:ac:4f:91:76:25:d2:cf:
bc:cd:d4:bb:3a:37:5f:fa:38:be:af:47:1c:c3:3f:
67:c6:57:5a:52:f0:da:5a:25:c9:e2:7c:92:de:6b:
96:da:b9:1a:f1:43:c0:87:c8:69:10:23:7e:c7:87:
a4:ee:50:50:c5:fc:fb:39:95:30:de:68:f3:c6:2b:
b5:6d:78:9b:4b:d1:c7:d9:e0:5a:06:ac:0e:d6:0f:
e9:8b:b2:6c:19:06:09:d3:bc:10:2b:04:02:32:8c:
f2:ae:7e:9f:32:47:b6:06:73:62:13:b9:a3:59:cb:
88:e6:61:42:00:67:e1:7c:8a:ac:8f:df:05:9a:52:
66:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0F:17:B6:5B:F8:2F:B1:F7:0A:89:09:1A:29:FB:D3:E1:08:1A:3F
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/gg8Xtlv4L7H3CokJGin70-EIGj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.130.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c7:61:4e:1a:82:44:bf:25:6e:0b:47:12:c5:89:49:60:53:
c2:09:0b:03:a3:76:49:7b:22:c1:56:f2:21:6b:4c:c4:69:a9:
a4:ef:6c:df:83:43:17:05:f6:55:46:a8:8c:a6:29:4a:e7:30:
51:e1:90:23:db:8e:3f:67:6f:31:99:f6:dc:1d:82:02:23:1b:
61:88:d2:1d:ae:45:98:fb:71:03:28:c5:c8:17:6c:f3:1d:dd:
fb:50:50:6a:e2:4a:13:41:6f:f1:78:8b:8b:ba:63:3a:e7:f8:
df:62:5a:46:56:6b:c9:a5:85:60:45:68:e4:a9:c7:d5:95:5d:
e3:43:1e:75:15:87:24:02:50:df:48:8c:a8:31:c6:9a:70:70:
dc:f0:77:86:14:99:e0:84:e9:dd:12:0a:14:63:a6:81:ca:c6:
8b:72:e7:f0:86:ac:d4:13:63:21:97:5a:80:1f:9b:fb:af:28:
a4:d1:c1:f7:7b:0c:4d:8b:6d:cb:f3:3f:96:be:eb:30:c3:95:
1a:c1:57:9b:7e:24:32:06:b0:b0:88:04:6d:aa:4c:6b:cf:ad:
5b:2b:8b:5a:9c:59:f8:43:02:ac:3e:6f:c7:40:7b:89:cf:a0:
ca:dc:99:10:32:14:86:11:b5:72:fe:c2:ec:81:7f:54:27:9a:
ee:e3:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:13:01 2026 by rpki-client