Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ggB9JlnK82LD3EBisYc4zHQeBOM.roa
File: ggB9JlnK82LD3EBisYc4zHQeBOM.roa (raw, json)
Hash identifier: Mc6mNIb+pFAdwuPZD4RzEmSUYW/ktDzbHqSkowrMYXc=
Subject key identifier: 82:00:7D:26:59:CA:F3:62:C3:DC:40:62:B1:87:38:CC:74:1E:04:E3
Certificate issuer: /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial: 01A114E83A7F25DD2CD11912DAAF4FEC0365
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ggB9JlnK82LD3EBisYc4zHQeBOM.roa
Signing time: Wed 07 Oct 2026 05:48:46 +0000
ROA not before: Wed 07 Oct 2026 05:48:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218861
IP address blocks: 64.17.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:e8:3a:7f:25:dd:2c:d1:19:12:da:af:4f:ec:03:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Validity
Not Before: Oct 7 05:48:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82007d2659caf362c3dc4062b18738cc741e04e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:a8:34:08:3b:54:e4:48:51:c5:da:1a:c2:
8e:3b:f8:61:86:cf:c1:93:3e:39:39:08:5c:19:57:
be:0a:ea:8f:4e:7e:50:63:e4:80:bc:af:ec:9f:32:
96:07:32:dd:77:28:86:68:2e:7e:ea:c8:a6:90:82:
a1:49:f8:78:e8:ca:7a:49:e1:e9:3b:68:bc:c4:0a:
f8:2f:f4:cc:e0:8e:ec:6f:57:65:f1:9b:df:a9:dc:
de:c6:01:4b:4e:ec:55:82:9d:a8:68:c6:7e:8d:8d:
4f:4e:d5:aa:8f:5a:dd:44:99:08:56:1a:61:67:a4:
04:e1:a0:42:96:65:4f:a2:85:43:4b:92:13:f3:96:
c3:e6:96:de:d4:1d:75:f6:99:a3:7a:c1:71:6a:86:
ce:c8:74:71:81:bc:65:2c:51:42:e2:9c:20:cb:4c:
e9:69:35:b0:9b:40:06:09:c4:2a:cd:bd:fd:da:27:
83:9f:5d:c9:f0:1e:bb:f9:af:a6:ec:a0:2a:6d:ce:
c0:c4:1d:5a:f9:f5:fa:00:fb:31:15:ef:ab:1c:31:
5b:f1:bd:01:e1:43:8d:b7:ba:17:d6:ea:79:38:7b:
cc:f9:47:27:02:98:22:cf:05:6e:42:df:78:3f:e2:
35:86:3d:b3:f7:e4:ba:77:b9:67:8f:18:92:13:26:
56:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:00:7D:26:59:CA:F3:62:C3:DC:40:62:B1:87:38:CC:74:1E:04:E3
X509v3 Authority Key Identifier:
keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ggB9JlnK82LD3EBisYc4zHQeBOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.17.244.0/24
Signature Algorithm: sha256WithRSAEncryption
79:70:c4:27:36:10:0e:13:28:80:ef:63:30:f2:3b:f6:94:21:
71:de:4e:a2:59:20:0a:a4:53:a7:68:28:0f:cc:23:0a:55:d0:
d5:1f:7f:35:68:af:65:6a:41:f4:59:70:d5:15:3d:43:3c:f5:
68:d2:9d:26:a3:f1:c7:df:67:06:f9:f6:ae:c8:b4:8a:45:52:
55:50:ff:e7:14:e7:f2:52:7d:24:11:17:48:8a:8a:e8:25:99:
73:67:34:ad:8e:7c:00:0d:68:15:8b:61:98:b6:5b:fa:2f:fb:
02:fd:68:fd:cb:4e:69:32:40:28:47:be:d7:66:64:79:96:72:
e6:91:53:63:8b:0f:18:54:46:3d:92:eb:d2:d6:b4:d8:84:53:
b0:5c:20:ce:be:6b:9b:2e:a4:33:50:15:1f:d2:b1:04:57:e2:
58:d3:62:d3:f9:b1:fa:a8:8f:c3:1b:14:15:c2:6c:f7:73:e7:
6d:1c:f9:ef:33:fb:cf:76:5f:63:fe:04:e9:35:31:77:4e:4b:
3c:37:dc:24:2f:9c:a4:31:e4:2f:24:bf:4b:7f:dc:21:2a:b4:
1f:99:67:b9:52:82:ca:fc:11:5f:00:80:e0:4b:e7:be:08:70:
34:d0:c1:b5:cd:40:af:cf:4f:21:b3:3d:5c:8d:ec:48:34:46:
22:e5:a2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:08:05 2026 by rpki-client