Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/gvzfKPjwNxS-AsBIh7ZgA5tTa0Q.roa
File: gvzfKPjwNxS-AsBIh7ZgA5tTa0Q.roa (raw, json)
Hash identifier: j8wlfHeXoBqn/3pP04ScQRvLSMC6Ag5BftKcYosNfBM=
Subject key identifier: 82:FC:DF:28:F8:F0:37:14:BE:02:C0:48:87:B6:60:03:9B:53:6B:44
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01A0C93DD2E21CEF7DA0FA5A783FDA6E9ED7
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/gvzfKPjwNxS-AsBIh7ZgA5tTa0Q.roa
Signing time: Tue 22 Sep 2026 13:11:07 +0000
ROA not before: Tue 22 Sep 2026 13:11:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48529
IP address blocks: 195.35.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:3d:d2:e2:1c:ef:7d:a0:fa:5a:78:3f:da:6e:9e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Sep 22 13:11:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82fcdf28f8f03714be02c04887b660039b536b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:0a:64:7b:98:e7:6a:bb:05:bd:c8:24:aa:
e3:5d:a7:8d:f6:30:99:73:20:50:dd:8e:f8:9e:a9:
16:12:9d:9c:96:4b:48:58:a8:4f:7c:25:68:a8:f5:
8d:6c:f3:47:63:a0:be:e5:cc:4a:f9:e9:86:65:f1:
49:4b:d7:c5:c7:2c:04:38:e9:8c:5c:fc:5d:d2:dc:
c0:a6:73:2c:23:0a:ff:9e:ff:d5:e2:6c:80:fb:9c:
4b:b3:4e:ca:25:46:d5:d9:6d:d5:4b:f4:59:76:46:
29:90:67:64:7e:eb:09:88:b5:cd:03:b5:6a:1f:c6:
ae:9f:8b:c5:84:1a:70:24:42:ae:74:93:d8:28:80:
24:1f:69:49:2e:94:fa:a2:2d:f9:e7:76:52:ef:89:
8b:35:ba:8b:1b:36:80:d1:a3:7e:b8:d8:35:ca:fa:
f4:0b:bb:a8:4d:12:f5:07:35:7c:15:6c:50:fe:9b:
4e:a1:72:11:bf:a0:f3:9e:c8:07:b8:ec:00:66:cd:
a9:1c:47:80:f5:ae:1d:38:69:05:3c:55:7a:02:70:
7c:3c:8a:1a:81:f7:70:67:82:8c:12:de:b6:69:43:
4e:d4:f7:f0:9d:ed:88:53:0b:96:63:5f:d0:ac:f6:
0b:5a:49:22:c6:22:a9:f2:42:f6:03:3e:6e:86:d3:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FC:DF:28:F8:F0:37:14:BE:02:C0:48:87:B6:60:03:9B:53:6B:44
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/gvzfKPjwNxS-AsBIh7ZgA5tTa0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:19:f1:79:ed:49:19:6f:0c:23:13:37:64:ff:ed:c0:56:48:
2f:b1:ce:0c:e2:a4:e6:c0:cb:d1:59:d3:c8:33:4d:32:e2:9a:
37:88:ae:d8:02:4e:b6:dc:42:77:84:67:ea:d6:9f:e9:9e:cc:
02:1d:d2:2a:a8:ae:42:b0:ae:c5:97:c3:40:1b:b3:db:db:bd:
15:45:d7:50:16:aa:01:f0:bd:48:38:32:ab:4b:89:14:c1:c8:
2c:2e:eb:82:86:2f:1f:04:4d:f9:e4:46:91:4b:96:a6:fd:58:
7e:01:b2:94:e5:44:58:e6:03:55:30:76:46:03:40:91:ec:79:
62:24:b1:4a:bb:89:d0:a6:54:39:c5:9b:66:7b:84:2c:06:4d:
67:f8:f3:2f:ab:b2:2a:ee:c7:82:c0:93:32:ff:9a:8e:5a:61:
75:33:ce:6c:03:0e:05:1f:3a:bc:68:57:bb:da:3a:eb:0c:d1:
1e:71:48:8c:09:f9:2f:7d:de:de:1b:38:5e:8c:d6:3e:f0:e0:
47:d7:3c:99:25:c8:81:10:fe:e5:b3:3c:15:5b:e7:e5:d0:c3:
57:28:00:4b:0d:a7:47:f7:1a:cf:e8:be:39:4d:63:51:c7:30:
f6:bf:b5:15:ae:c9:b6:de:e5:31:d5:67:be:8d:cd:54:2e:e6:
95:d6:1c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:45:09 2026 by rpki-client