Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/gMfllGfAifdTE0fIQMGmwfrxIhI.roa
File: gMfllGfAifdTE0fIQMGmwfrxIhI.roa (raw, json)
Hash identifier: CUiivcTqZynChbYOyYCQN7RtnaDF5jwzn7xnYPnVi64=
Subject key identifier: 80:C7:E5:94:67:C0:89:F7:53:13:47:C8:40:C1:A6:C1:FA:F1:22:12
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 01A0E6B8518D15E654B563CE62FF586A1003
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/gMfllGfAifdTE0fIQMGmwfrxIhI.roa
Signing time: Mon 28 Sep 2026 06:33:54 +0000
ROA not before: Mon 28 Sep 2026 06:33:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199417
IP address blocks: 2a12:4141:acca::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:b8:51:8d:15:e6:54:b5:63:ce:62:ff:58:6a:10:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Sep 28 06:33:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80c7e59467c089f7531347c840c1a6c1faf12212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:23:97:28:e7:61:9d:7e:d8:6c:9e:b0:26:
ff:ed:53:40:a2:66:93:81:e7:71:22:b6:a2:67:56:
bd:93:eb:2e:3a:31:87:88:b7:02:dc:d4:f3:75:f0:
de:9f:a8:bb:31:2b:41:2c:27:67:5c:e8:24:db:f0:
e0:56:c8:94:42:7f:d9:ea:b8:24:09:d9:ec:dc:40:
74:41:24:4f:7c:cd:26:6c:5a:04:6e:1b:a3:84:ca:
21:47:47:d5:84:f9:13:3b:32:2a:b8:d2:4b:78:ae:
b9:6d:86:08:a5:54:cc:4e:2b:49:21:b7:35:a1:f7:
e5:b6:4c:b5:a7:3d:89:c1:f5:52:c3:61:85:12:3a:
97:10:9d:09:76:8b:32:e0:6a:93:82:64:53:f2:0d:
fb:c7:6a:ef:b3:5a:cc:1a:e3:e1:66:6a:f7:bb:94:
dd:c2:c4:66:29:92:13:ce:a9:c4:a6:8c:fb:29:ca:
d7:f5:87:da:88:0e:52:59:5b:fb:75:6e:b1:5f:f1:
cf:e1:35:d8:6c:a4:8a:9a:f7:37:24:58:49:b4:d3:
4f:54:a1:1c:a6:74:19:a2:73:8a:99:21:ce:d5:28:
23:4c:83:2e:e5:40:91:68:e3:ad:23:63:80:06:0a:
52:26:6c:c6:e1:b1:73:8b:52:05:16:f7:14:c2:72:
9e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C7:E5:94:67:C0:89:F7:53:13:47:C8:40:C1:A6:C1:FA:F1:22:12
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/gMfllGfAifdTE0fIQMGmwfrxIhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4141:acca::/48
Signature Algorithm: sha256WithRSAEncryption
b5:e3:8c:4f:b7:08:09:cf:39:d4:17:75:01:32:f9:34:a2:18:
ff:56:8a:b3:a6:63:db:28:fa:a0:5a:8b:dd:c4:86:96:37:fd:
5d:6f:f6:fb:a6:53:06:48:ad:24:65:9f:1a:f4:9c:a6:97:73:
0c:a7:55:ee:ee:a1:14:2c:6f:0d:42:c9:f7:9e:e6:3c:95:53:
07:5c:47:32:44:3c:d3:1a:e4:34:2d:3f:e1:18:85:59:2c:b4:
7a:6c:10:d3:01:a2:f6:c9:b1:5e:8d:9d:22:90:32:6c:27:85:
a9:5c:cc:e0:2d:05:77:d5:f7:7d:59:cb:fa:98:cf:dd:d6:1c:
73:89:22:e8:01:fd:8a:20:9e:7b:90:0b:8e:94:9b:ac:b8:ba:
61:08:3c:19:73:87:17:bd:60:56:fd:54:41:d2:e1:84:94:7a:
74:63:db:bc:67:de:f3:b6:f7:af:c4:fc:80:b1:84:82:c9:a5:
99:04:76:3b:a5:bd:76:86:25:93:ab:91:ce:3e:89:17:d7:4f:
cb:e5:2b:0d:9c:84:be:04:65:b1:73:88:4a:fb:ca:9c:87:f9:
22:69:5f:c2:27:c9:69:df:61:91:0c:c2:0a:32:de:ff:6d:27:
da:bd:54:6e:2e:1e:95:6c:d3:35:09:04:98:7c:87:55:a0:b4:
ad:e9:05:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:53 2026 by rpki-client