Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/gbXInfzdH2IY80mhqSI30Jnlars.roa
File: gbXInfzdH2IY80mhqSI30Jnlars.roa (raw, json)
Hash identifier: 9Eit04hHQZCBOCzgtLSUWiMJAQOGXpRjgZEMJ23x56M=
Subject key identifier: 81:B5:C8:9D:FC:DD:1F:62:18:F3:49:A1:A9:22:37:D0:99:E5:6A:BB
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01A0675D42A956599E2C2DECB4874564A168
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/gbXInfzdH2IY80mhqSI30Jnlars.roa
Signing time: Thu 03 Sep 2026 13:02:40 +0000
ROA not before: Thu 03 Sep 2026 13:02:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399486
IP address blocks: 185.118.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:5d:42:a9:56:59:9e:2c:2d:ec:b4:87:45:64:a1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Sep 3 13:02:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81b5c89dfcdd1f6218f349a1a92237d099e56abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:64:56:67:0c:d5:42:f8:95:ea:f2:e2:ff:
ea:dc:4b:e2:44:b4:87:c7:10:2e:09:14:89:97:86:
e5:24:2a:7c:c5:1f:b6:40:27:71:a6:3c:4d:47:bf:
bf:20:83:ae:75:d0:eb:6b:09:67:55:ec:29:80:03:
ff:4d:0e:02:fd:70:07:ff:e3:04:92:4a:ff:49:4e:
12:08:99:53:de:67:58:85:9a:96:7a:ef:8c:a8:15:
02:6c:ae:63:90:a1:ff:b0:cb:98:88:b3:0a:8f:5f:
d0:0f:7c:75:d9:ee:0f:82:10:1b:de:68:73:3a:af:
c4:75:85:00:29:a4:d1:13:0f:15:7f:c3:ba:9c:b0:
eb:f4:df:9f:6b:58:98:0a:71:10:7a:07:82:4a:20:
95:c8:e3:81:c5:7c:d0:11:4f:08:15:9b:bc:02:93:
da:82:86:90:35:ca:f8:47:14:c3:b2:ec:b2:93:75:
fe:87:ea:ab:e3:88:99:2e:f9:76:da:64:bb:d1:4f:
b5:7e:6f:3e:2b:c2:82:b0:ea:1a:0e:a3:28:05:36:
8e:bb:1f:18:66:0a:8e:c3:3d:6a:c4:ec:c7:51:81:
f8:15:b9:a5:97:0a:df:85:97:e4:09:0c:d2:d1:c7:
84:9c:93:b3:17:c7:1e:56:6d:e9:5c:80:bf:fc:b8:
ba:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B5:C8:9D:FC:DD:1F:62:18:F3:49:A1:A9:22:37:D0:99:E5:6A:BB
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/gbXInfzdH2IY80mhqSI30Jnlars.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.79.0/24
Signature Algorithm: sha256WithRSAEncryption
40:fb:f7:11:56:8d:5a:e7:84:68:a1:f7:95:eb:1a:d0:11:67:
44:f7:b6:7c:5b:0a:e0:29:27:67:a2:32:24:d9:6c:2d:00:cd:
ae:aa:2c:c6:4b:ca:56:f2:db:8c:49:cc:e3:04:38:ba:31:c4:
4c:60:62:f4:75:29:00:21:07:f0:d8:11:15:4d:3a:eb:ae:27:
6e:39:7a:56:9c:6a:e7:e4:01:ce:a4:3d:9c:c3:29:5a:a7:db:
3b:98:ec:9b:3e:77:7c:e2:5e:2f:ad:fd:8e:5d:86:fe:5f:dc:
e2:dc:7b:ce:a4:68:c9:19:e7:ce:9e:65:ce:54:f9:03:38:69:
99:c0:c7:7a:58:4e:f5:30:a8:94:15:46:2a:8b:a4:6b:57:7c:
31:4b:7b:7f:4a:47:a4:d9:8f:4d:57:0e:43:03:4d:70:94:9d:
c1:98:5a:19:2a:40:53:91:5a:92:d2:f2:69:44:3a:ce:67:0a:
4d:26:19:cd:01:12:0f:95:c3:5e:87:5a:6c:a2:46:f2:c9:f7:
62:7f:60:23:e6:5e:78:36:c6:67:ce:3d:a3:66:23:a4:58:39:
f1:2c:2a:e4:bc:c2:cc:3f:02:15:af:23:92:2a:8f:d2:4a:1e:
6d:b6:b2:e3:eb:27:60:cf:90:e5:10:c0:d2:3d:5c:79:a8:e0:
f8:e4:f1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:30 2026 by rpki-client