Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/gxePdXWHsul0oNwQhQ3aS2MQ6ME.roa
File: gxePdXWHsul0oNwQhQ3aS2MQ6ME.roa (raw, json)
Hash identifier: iRowxiL68qvO5oDgW7hTqSRfTbL0D0sk6Kkkv12eMRw=
Subject key identifier: 83:17:8F:75:75:87:B2:E9:74:A0:DC:10:85:0D:DA:4B:63:10:E8:C1
Certificate issuer: /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial: 019D2F88F40F82A8B34BC5CEE45F48365B85
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/gxePdXWHsul0oNwQhQ3aS2MQ6ME.roa
Signing time: Fri 27 Mar 2026 13:43:17 +0000
ROA not before: Fri 27 Mar 2026 13:43:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203988
IP address blocks: 2a14:d107:660::/43 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:88:f4:0f:82:a8:b3:4b:c5:ce:e4:5f:48:36:5b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Validity
Not Before: Mar 27 13:43:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83178f757587b2e974a0dc10850dda4b6310e8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:b1:93:29:57:b2:b7:62:1d:34:2b:51:b7:
5a:c8:eb:20:37:55:1e:de:4a:76:5d:c8:ea:b3:c5:
df:1f:cd:b8:a6:fd:5d:0d:01:72:26:10:9f:d1:fb:
9e:12:ee:a3:8f:37:1e:14:2a:50:c7:6a:a9:b9:d8:
ec:9c:49:82:58:0a:0f:c3:ac:1d:f6:e7:f3:e1:76:
6b:8a:1c:04:07:eb:8d:4f:2a:95:af:16:1e:69:d5:
83:b0:32:6a:79:33:54:ac:dc:c9:ad:05:74:e9:d7:
8e:94:b3:39:8e:84:1f:39:1d:3e:7b:32:a8:f6:27:
e5:75:69:65:5c:03:7a:e9:f6:07:05:3d:19:5a:8a:
1d:a3:1e:6f:01:a5:fa:37:af:8a:0c:b0:f8:b3:1c:
d0:41:25:34:3b:61:3c:ed:1f:d1:17:35:67:5f:04:
58:e4:d8:28:42:a7:6c:2b:52:84:09:c6:f1:f1:1e:
47:44:9e:6e:c5:28:40:a6:39:3f:6c:e8:97:3e:e4:
61:9e:5c:5f:99:e9:06:e2:ef:8b:f9:e7:e9:52:8e:
07:67:5f:cc:5a:9c:89:44:a5:db:74:1f:7d:d5:4b:
bd:86:fe:56:23:b7:b0:14:a0:28:f8:4d:f7:7e:89:
02:48:88:4b:a4:a7:e9:89:43:a8:c1:a7:47:11:eb:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:17:8F:75:75:87:B2:E9:74:A0:DC:10:85:0D:DA:4B:63:10:E8:C1
X509v3 Authority Key Identifier:
keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/gxePdXWHsul0oNwQhQ3aS2MQ6ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:d107:660::/43
Signature Algorithm: sha256WithRSAEncryption
90:8b:63:6e:90:79:3f:b7:94:37:18:4b:7b:46:ad:b8:d7:c1:
a1:3d:fc:2b:6f:c7:cb:b9:79:fb:68:29:5c:cb:3d:de:7b:53:
57:d5:3b:ef:90:21:4e:d4:9c:50:ae:25:4f:8f:0f:b9:fd:d8:
62:1f:69:59:30:11:22:6d:68:d5:a0:8c:45:f2:5d:bf:0c:23:
c7:42:9c:49:bd:8e:a4:23:0c:2d:7b:86:ec:e2:3e:ce:c5:e3:
1f:47:8e:80:25:dd:7f:27:41:72:b8:f1:10:27:15:8b:68:73:
ae:0c:23:ab:30:2d:1d:44:2f:3f:d7:f7:d5:f1:16:a2:fd:6f:
22:b0:de:70:be:fc:41:16:2a:64:03:da:4b:0c:49:b3:a4:e7:
32:1e:48:94:47:51:a6:19:b7:bf:5f:f7:4a:a2:c7:08:e5:2d:
b3:0b:ac:73:8d:c5:de:7b:c3:8e:4a:9b:dc:7f:3d:43:fb:b7:
4c:c9:9c:f6:82:84:bd:c9:84:15:46:fe:e9:c9:72:b3:f9:08:
11:14:97:c9:c9:49:92:93:28:21:df:a9:0a:2b:23:a9:19:79:
33:54:89:e6:ec:45:f2:95:ce:f7:ff:77:7e:38:6f:35:0b:d5:
8e:12:a5:8d:d8:3b:e5:1d:3d:c4:14:5e:62:70:a2:27:a7:04:
7c:19:19:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:35 2026 by rpki-client