Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/gJeLtFmgE3d1v3yCAL7TcwoLzPM.roa
File: gJeLtFmgE3d1v3yCAL7TcwoLzPM.roa (raw, json)
Hash identifier: 6LX6LpEoCHsUbFXvp4i9hm/CKgBcR2pWyTCDwzESf5k=
Subject key identifier: 80:97:8B:B4:59:A0:13:77:75:BF:7C:82:00:BE:D3:73:0A:0B:CC:F3
Certificate issuer: /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial: 019FFA663928B5F023F76F8905AE6635D698
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/gJeLtFmgE3d1v3yCAL7TcwoLzPM.roa
Signing time: Thu 13 Aug 2026 09:13:51 +0000
ROA not before: Thu 13 Aug 2026 09:13:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42160
IP address blocks: 195.225.220.0/24 maxlen: 24
195.225.221.0/24 maxlen: 24
195.225.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:66:39:28:b5:f0:23:f7:6f:89:05:ae:66:35:d6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Validity
Not Before: Aug 13 09:13:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80978bb459a0137775bf7c8200bed3730a0bccf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:bb:0a:e2:76:e9:ab:05:b0:bf:00:18:a2:
f1:3d:d4:8e:3e:ac:2c:e8:51:af:59:c7:0f:c7:a1:
48:73:68:b6:c4:b5:16:a9:47:6c:a4:73:9b:6b:6e:
1f:d1:8b:75:65:1a:11:d4:37:c2:94:4b:d0:08:43:
19:2d:dd:b0:a1:72:b8:a2:67:d8:62:4a:c4:ea:a9:
67:66:b0:a0:22:cf:c2:5c:de:0b:b6:4d:06:44:53:
25:e8:a0:c6:1c:fd:a0:2c:80:50:ef:af:53:42:b4:
1b:41:58:60:29:5b:01:aa:2f:43:4b:e5:ac:23:9c:
f9:28:a2:18:3d:4a:4b:52:b2:fa:77:6e:af:cd:33:
d8:25:2a:8e:67:f7:8c:9e:90:b6:be:50:f8:5a:dd:
dd:ee:49:ba:c1:93:45:0b:40:fc:98:42:9b:b9:15:
4d:ca:7c:59:88:13:5a:e3:79:fb:77:aa:09:f5:da:
af:97:b2:d6:e3:ab:d3:75:67:a3:d6:99:5d:bf:37:
4c:00:79:79:27:f7:8f:1d:fa:72:80:fa:1a:f6:9b:
bb:63:94:c0:ed:89:2b:0c:8c:4f:93:ee:90:45:15:
1c:0b:f3:d4:77:e8:b7:40:a3:ce:d3:87:24:49:d2:
b6:75:ff:49:f5:c3:36:ac:5a:b8:d3:be:e8:f4:fd:
39:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:97:8B:B4:59:A0:13:77:75:BF:7C:82:00:BE:D3:73:0A:0B:CC:F3
X509v3 Authority Key Identifier:
keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/gJeLtFmgE3d1v3yCAL7TcwoLzPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.220.0/22
Signature Algorithm: sha256WithRSAEncryption
64:ed:23:0e:43:4f:d0:b2:de:30:f5:65:5f:43:ae:cf:e6:a7:
98:08:07:5b:61:f0:8f:bd:f9:71:9d:ab:91:44:0e:3b:70:b1:
f8:87:40:a0:a9:3d:8c:f9:fc:29:b2:1a:f7:01:6f:f8:7c:be:
61:41:3c:2f:74:cf:5c:49:ec:68:c2:d9:9b:3d:ef:2f:14:96:
93:d6:72:c5:dd:95:b2:2d:d7:3b:a4:6b:f8:0f:4b:c6:ad:fe:
0b:30:be:e3:b9:4b:a5:b5:8c:0b:38:6e:73:ef:a9:c8:d8:fe:
2c:dd:e6:be:ef:23:b3:dc:a5:ad:05:16:94:8e:db:a8:d7:5a:
4a:40:4c:f4:69:86:73:ac:7a:92:dd:b4:c5:1b:cb:08:63:9e:
32:34:31:6a:7f:e0:67:b2:e8:80:a5:65:19:10:2a:82:61:14:
81:df:3b:a8:4e:7f:cd:54:cf:eb:b0:b0:60:fd:a5:25:fe:41:
6e:00:7a:d0:33:9d:77:fd:a0:35:c6:b7:40:8c:35:ef:58:f4:
8c:5a:1a:b6:75:72:8d:c6:12:ca:42:40:d2:d9:61:2b:97:ad:
0d:ef:cd:b4:b2:3a:8e:f0:d4:58:18:d9:a9:a2:69:f6:4e:91:
79:47:0e:fa:8b:26:2e:49:8f:19:48:4e:fe:5e:12:e1:d0:ed:
c2:25:64:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 19:46:52 2026 by rpki-client