Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/g4ccENpjDDFMcTMqabTHvRMj89g.roa
File: g4ccENpjDDFMcTMqabTHvRMj89g.roa (raw, json)
Hash identifier: sXW3T2BkbAqgXtL812Wn6JCJrHTI/IVO6miHUNiiBdA=
Subject key identifier: 83:87:1C:10:DA:63:0C:31:4C:71:33:2A:69:B4:C7:BD:13:23:F3:D8
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019EE132439ADAA7CB7FC12B1F33FAFA46D9
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/g4ccENpjDDFMcTMqabTHvRMj89g.roa
Signing time: Fri 19 Jun 2026 18:43:48 +0000
ROA not before: Fri 19 Jun 2026 18:43:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200819
IP address blocks: 195.123.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:32:43:9a:da:a7:cb:7f:c1:2b:1f:33:fa:fa:46:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jun 19 18:43:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83871c10da630c314c71332a69b4c7bd1323f3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:ce:d0:03:ed:9e:8a:61:cf:06:64:9c:38:
3f:00:bf:58:c0:cd:75:25:11:7e:be:b8:ae:df:43:
ca:9f:41:77:3e:f5:61:30:13:d4:04:b7:cb:bf:84:
d8:f0:1a:2b:67:3c:4e:60:9b:bc:38:19:b9:20:98:
81:08:49:25:33:ed:71:c1:0c:15:98:4f:5b:a0:b0:
5c:29:9a:90:bd:6f:b0:b6:d4:18:85:2b:d2:aa:8e:
22:dd:b2:40:62:ce:ff:7d:53:c6:8f:a7:8d:f7:1e:
ce:02:7b:76:a5:e3:3f:8a:04:72:b1:a4:9e:1f:89:
d6:3c:a5:2e:a8:eb:d3:e8:c1:f8:ab:45:7d:67:6b:
bd:10:82:d3:81:01:b8:08:9a:3d:45:cb:e7:6d:fd:
bc:08:7f:91:9d:41:ee:4c:05:68:63:79:8b:f9:c5:
73:7c:2c:79:b3:9e:c4:ae:44:20:a9:36:10:84:88:
e5:35:8b:cf:8c:6f:56:48:8f:f6:07:04:3c:c3:9a:
16:6b:ce:2a:41:d5:60:29:32:6d:e8:c0:7b:6e:49:
42:64:59:9c:67:29:52:8c:39:94:3b:15:40:f5:5b:
1a:f3:21:28:05:58:6a:18:6b:71:cd:9d:d7:49:13:
01:ee:02:4f:f5:25:04:ff:d6:3a:1b:a7:43:1c:4e:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:87:1C:10:DA:63:0C:31:4C:71:33:2A:69:B4:C7:BD:13:23:F3:D8
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/g4ccENpjDDFMcTMqabTHvRMj89g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.5.0/24
Signature Algorithm: sha256WithRSAEncryption
95:9d:7b:fe:26:50:19:bd:6e:6b:94:56:df:41:e7:b1:84:73:
e5:b5:58:37:a5:07:33:b5:4a:34:45:08:c4:c9:b1:ed:09:d9:
32:50:6d:e6:61:db:45:de:b3:df:d1:b7:08:ba:97:67:54:31:
ac:e8:39:89:4f:fa:43:6b:c6:dd:fb:0b:cd:b6:21:81:26:be:
b7:e0:d5:e9:b3:6c:5b:c0:46:7d:db:66:1d:ca:5c:a3:55:2b:
4c:fa:d6:09:61:d4:64:60:d9:89:3e:16:09:1f:87:6a:c8:18:
18:89:43:33:07:5b:41:a0:15:84:52:00:28:cd:19:c4:6c:67:
7f:a6:67:c4:53:f5:83:22:b0:84:ea:61:c2:83:2c:e5:8a:d2:
83:04:b8:b9:48:93:27:14:3f:4c:70:96:47:67:7a:cc:ad:fd:
a4:c6:c5:ad:c9:c8:cf:6c:71:68:b7:84:53:24:b8:47:d4:80:
42:5b:31:cc:d6:4b:82:d6:0e:b3:48:85:59:ba:a1:1d:29:7e:
5d:4f:2e:73:c0:73:e1:66:82:3d:3c:38:eb:37:b8:90:58:a7:
ac:5f:2e:83:98:4e:f3:b0:cf:a5:1b:5f:4d:65:7d:95:56:8d:
8d:8a:1d:51:d1:a2:15:68:0d:b1:cf:07:40:23:52:ad:32:ce:
99:f6:5b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 11:49:27 2026 by rpki-client