Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ghqGXV9jPiUhtjyXqrqV0bWR1FA.roa
File: ghqGXV9jPiUhtjyXqrqV0bWR1FA.roa (raw, json)
Hash identifier: JhqWV5YE42ZkEuBGzNHEweX5ScPkIholme9X8e62de0=
Subject key identifier: 82:1A:86:5D:5F:63:3E:25:21:B6:3C:97:AA:BA:95:D1:B5:91:D4:50
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01A0C89CF46B4EC5CD0737E534B5EF0C6806
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ghqGXV9jPiUhtjyXqrqV0bWR1FA.roa
Signing time: Tue 22 Sep 2026 10:15:24 +0000
ROA not before: Tue 22 Sep 2026 10:15:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402511
IP address blocks: 2a11:4300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:9c:f4:6b:4e:c5:cd:07:37:e5:34:b5:ef:0c:68:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 22 10:15:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=821a865d5f633e2521b63c97aaba95d1b591d450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:af:01:39:e4:8e:61:c2:61:8a:e8:13:05:
61:d0:49:f0:27:ed:9f:a6:6a:29:1c:66:17:25:e4:
ff:87:8d:5b:7a:c9:b4:72:d3:f8:14:f6:63:33:9e:
e3:ce:7e:87:13:e9:c0:b5:ce:c9:01:29:f6:60:c7:
7a:ca:bb:2a:44:a5:ce:98:ad:89:e8:f9:a9:b5:2e:
8a:9c:55:9b:c3:4b:7e:9d:cf:2f:64:97:45:5a:1a:
de:33:26:85:84:d1:6f:12:b9:91:86:cc:b0:d3:e6:
93:07:56:7d:db:f8:92:db:21:5f:d1:c1:d7:8f:27:
5d:78:48:c0:d3:05:39:d1:58:6f:7f:2a:60:50:bb:
b0:a4:89:16:ab:e5:45:50:7b:e2:45:38:f5:89:ff:
b1:a9:a9:70:7d:64:82:0f:4c:17:ef:dd:ec:81:fe:
45:cc:6c:92:c7:ae:34:41:52:f6:d1:22:21:2b:11:
0f:3b:5b:61:91:31:56:59:8a:12:a6:40:c7:78:27:
1e:dc:69:25:75:2f:be:b8:b8:39:59:d1:4e:c5:db:
4c:14:d6:da:6b:d0:cb:71:29:d4:88:76:14:3f:88:
a7:48:da:4c:c3:a6:25:64:f7:bd:4e:cf:0a:44:ed:
c4:65:c7:fc:47:ac:86:5d:9c:d2:61:b9:94:ba:f8:
ea:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1A:86:5D:5F:63:3E:25:21:B6:3C:97:AA:BA:95:D1:B5:91:D4:50
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ghqGXV9jPiUhtjyXqrqV0bWR1FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4300::/29
Signature Algorithm: sha256WithRSAEncryption
b0:67:c1:19:5d:44:4a:01:6e:9e:85:fd:d1:72:e6:36:7b:73:
bc:69:92:a0:2a:8b:a4:24:76:f3:c8:98:c9:c9:14:33:6b:89:
94:2e:d2:62:36:f3:3c:5a:e9:28:b7:b8:bc:b4:4c:e2:4a:b2:
25:ee:6e:d2:30:9b:56:42:22:46:12:6b:d9:53:d5:fe:9c:e8:
4f:b5:5f:5c:19:6f:e8:29:97:ef:ce:78:49:09:03:31:79:67:
a6:30:81:5b:95:40:e6:d7:c5:45:26:71:36:e5:b8:17:0b:f6:
42:2a:b9:2b:98:7a:45:1d:33:03:a7:4b:ca:d0:28:65:f8:cc:
35:af:55:22:b5:be:88:45:0a:c0:9f:58:c2:74:b3:c6:84:81:
8f:f3:d0:1c:83:11:cd:f4:cc:b3:55:1a:86:07:1a:13:9e:f9:
a7:b7:e3:8f:e1:d9:bc:47:7c:56:95:b5:22:81:50:a2:b5:79:
6b:93:95:c7:0d:4e:97:a3:40:21:da:c5:4d:b5:6b:11:cf:24:
fb:15:d3:39:a6:b8:49:0e:9c:2d:c3:6d:a5:bd:84:b5:bf:14:
3d:7c:ea:f6:80:f8:60:05:fb:a5:b4:a7:b9:aa:7c:b0:95:c4:
d2:e6:52:c4:ac:41:ae:40:89:4f:22:d7:9d:88:65:01:20:4d:
81:4e:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:46:44 2026 by rpki-client