Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/c-gfBOVrZyn6lP4jJKNaWdm6LjE.roa
File: c-gfBOVrZyn6lP4jJKNaWdm6LjE.roa (raw, json)
Hash identifier: 6byHWOTIIxT+xORgQVzfhtsCknwQL+MpV2rZ+6Zcr1U=
Subject key identifier: 73:E8:1F:04:E5:6B:67:29:FA:94:FE:23:24:A3:5A:59:D9:BA:2E:31
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 01A1202EB8C8DEB33358AE31E2D2ABF82B32
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/c-gfBOVrZyn6lP4jJKNaWdm6LjE.roa
Signing time: Fri 09 Oct 2026 10:21:35 +0000
ROA not before: Fri 09 Oct 2026 10:21:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218446
IP address blocks: 2a11:1fc0:14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:2e:b8:c8:de:b3:33:58:ae:31:e2:d2:ab:f8:2b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Oct 9 10:21:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73e81f04e56b6729fa94fe2324a35a59d9ba2e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:b3:7e:bb:d3:9f:4d:83:21:1d:3b:90:67:
ea:83:89:13:c6:7a:89:7f:43:44:3f:e3:a5:b3:86:
a6:58:2b:c5:c8:32:9e:ba:de:e8:95:41:5e:cf:06:
20:f6:c7:3a:bb:f2:22:35:38:76:2d:4c:67:66:60:
4f:55:84:44:c6:06:ee:3e:e1:e8:d5:0a:14:32:36:
b8:31:5e:5a:9c:8e:68:b3:a6:5c:28:1d:7a:0b:ab:
e9:14:2a:cf:28:31:36:d5:f0:34:e5:8b:30:fb:16:
c5:1a:c1:a1:c7:d6:90:8b:ea:43:4c:78:4b:4c:81:
e9:10:b2:ac:b4:1d:19:67:f1:0a:7b:3e:03:e2:d9:
70:a9:6b:00:d1:1f:43:f7:36:f3:cd:d1:3a:69:da:
81:df:e1:c4:68:7e:22:14:95:9a:ad:f9:f6:6f:80:
08:62:12:1a:f2:5d:b4:e3:01:de:bd:66:10:0f:9d:
97:7d:6e:79:fb:68:f7:22:67:10:8c:96:e0:81:f4:
89:ed:81:20:6e:e1:c6:68:21:2d:75:ad:42:f7:a9:
40:85:81:ef:90:07:45:25:fc:ce:4e:45:a6:c5:92:
35:2d:7c:0c:8b:f5:20:8a:26:a0:54:80:69:56:3b:
d6:db:ea:35:d4:ea:0a:70:39:87:d0:d4:82:89:29:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E8:1F:04:E5:6B:67:29:FA:94:FE:23:24:A3:5A:59:D9:BA:2E:31
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/c-gfBOVrZyn6lP4jJKNaWdm6LjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1fc0:14::/48
Signature Algorithm: sha256WithRSAEncryption
72:c9:40:e2:f1:86:0c:fa:81:4f:b1:00:89:49:c2:a7:8b:64:
97:42:b7:eb:f1:db:61:b9:68:37:98:51:7c:42:86:86:4b:f4:
88:a2:fc:24:41:7f:be:cb:79:ec:6b:ee:af:85:7e:ba:09:3f:
5b:66:17:fa:8b:e1:47:c6:41:3a:48:9c:b7:64:de:cd:8d:07:
52:08:fa:06:f0:a8:bf:5e:48:72:05:05:07:4d:32:4a:45:52:
8e:ee:7c:91:33:59:fd:45:98:84:dd:2d:2e:d2:17:4a:91:26:
f1:0a:71:30:35:ca:c2:61:30:d1:a7:0b:25:65:94:14:79:e4:
46:49:8c:69:ff:6f:97:f3:7b:e0:65:6f:01:6a:72:ce:e6:d7:
fa:bf:e1:ad:af:68:b9:6a:e8:1d:83:65:00:42:4a:29:f4:25:
49:ec:3f:7f:ae:50:9e:1c:bb:16:38:f9:d5:b4:96:a0:12:38:
b3:7c:08:ac:ce:a8:8c:98:99:13:ed:0f:eb:fd:6d:83:2b:55:
40:67:b4:c4:a8:0a:d2:41:68:09:98:81:55:1d:c5:ab:0b:6e:
bf:96:cd:65:6d:58:fd:e5:93:91:a5:9c:08:f2:dd:dd:96:24:
dd:03:0d:46:06:f6:03:37:87:26:28:69:24:46:45:2a:9f:54:
7d:7e:a6:d7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaEgLrjI3rMzWK4x4tKr+CsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWMxNmY3ZWE3MTBhZjQ1ZTJiM2ExMWU2MjhhMzhjZTY3
YmM3YTUwHhcNMjYxMDA5MTAyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2U4MWYwNGU1NmI2NzI5ZmE5NGZlMjMyNGEzNWE1OWQ5YmEyZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxizfrvTn02DIR07kGfqg4kTxnqJ
f0NEP+Ols4amWCvFyDKeut7olUFezwYg9sc6u/IiNTh2LUxnZmBPVYRExgbuPuHo
1QoUMja4MV5anI5os6ZcKB16C6vpFCrPKDE21fA05Ysw+xbFGsGhx9aQi+pDTHhL
TIHpELKstB0ZZ/EKez4D4tlwqWsA0R9D9zbzzdE6adqB3+HEaH4iFJWarfn2b4AI
YhIa8l204wHevWYQD52XfW55+2j3ImcQjJbggfSJ7YEgbuHGaCEtda1C96lAhYHv
kAdFJfzOTkWmxZI1LXwMi/UgiiagVIBpVjvW2+o11OoKcDmH0NSCiSkozwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHPoHwTla2cp+pT+IySjWlnZui4xMB8GA1UdIwQY
MBaAFC0cFvfqcQr0Xis6EeYoo4zme8elMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ3VzktcHhDdlJlS3pvUjVpaWpqT1o3eDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81ZWIyMTItNDZmNS00MzhjLTg2NzIt
MWZhNzgwMThhNmU5LzEvYy1nZkJPVnJaeW42bFA0akpLTmFXZG02TGpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy81ZWIyMTItNDZmNS00MzhjLTg2NzItMWZhNzgwMThhNmU5
LzEvTFJ3VzktcHhDdlJlS3pvUjVpaWpqT1o3eDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEfwAAU
MA0GCSqGSIb3DQEBCwUAA4IBAQByyUDi8YYM+oFPsQCJScKni2SXQrfr8dthuWg3
mFF8QoaGS/SIovwkQX++y3nsa+6vhX66CT9bZhf6i+FHxkE6SJy3ZN7NjQdSCPoG
8Ki/XkhyBQUHTTJKRVKO7nyRM1n9RZiE3S0u0hdKkSbxCnEwNcrCYTDRpwslZZQU
eeRGSYxp/2+X83vgZW8BanLO5tf6v+Gtr2i5augdg2UAQkop9CVJ7D9/rlCeHLsW
OPnVtJagEjizfAiszqiMmJkT7Q/r/W2DK1VAZ7TEqArSQWgJmIFVHcWrC26/ls1l
bVj95ZORpZwI8t3dliTdAw1GBvYDN4cmKGkkRkUqn1R9fqbX
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:20:03 2026 by rpki-client