Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/gHVOtIUlfqN9G-25nat8LNgWMC0.roa
File: gHVOtIUlfqN9G-25nat8LNgWMC0.roa (raw, json)
Hash identifier: ZCyCPqJleAxlPygSUagqhGWeE2V/DZgzKMbA0GGYnGw=
Subject key identifier: 80:75:4E:B4:85:25:7E:A3:7D:1B:ED:B9:9D:AB:7C:2C:D8:16:30:2D
Certificate issuer: /CN=9d07806b89a4ce593fe47cbb5f9460c8dee7381e
Certificate serial: 019F2368D8E82553BB9C43602A7F7370C37B
Authority key identifier: 9D:07:80:6B:89:A4:CE:59:3F:E4:7C:BB:5F:94:60:C8:DE:E7:38:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/gHVOtIUlfqN9G-25nat8LNgWMC0.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137
IP address blocks: 150.217.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d8:e8:25:53:bb:9c:43:60:2a:7f:73:70:c3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07806b89a4ce593fe47cbb5f9460c8dee7381e
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80754eb485257ea37d1bedb99dab7c2cd816302d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:9d:6b:f8:a9:46:75:33:16:42:31:98:83:
3e:ad:95:ec:58:20:d6:33:44:dd:87:52:de:a1:85:
b1:d8:7e:a5:e3:da:03:84:e0:b6:fe:e0:02:6d:d5:
23:03:9b:ec:04:51:14:cd:2f:cd:1c:3d:b0:91:9c:
23:fe:66:7e:8f:3f:70:95:bf:a4:17:13:78:a3:c6:
26:62:c1:d9:3e:e5:63:fc:7a:f6:fb:aa:ed:48:bf:
2f:48:88:c2:99:e3:13:00:a9:e1:85:e2:9b:ae:9a:
f1:c1:86:3d:9d:a0:7f:98:22:b7:5a:56:7c:a6:99:
90:2e:36:3c:32:37:51:87:9f:6d:34:0b:13:55:c9:
f7:23:11:37:57:47:d9:30:02:b3:d6:04:af:5b:dc:
49:b2:92:90:57:6d:10:4f:26:c4:1f:c4:cf:8a:b1:
8c:b5:47:18:41:32:f9:28:97:73:b4:92:bb:44:bb:
44:14:ad:96:65:70:29:a4:55:24:23:74:e9:27:93:
f0:f4:e2:29:dd:84:88:d5:68:16:fe:e6:4a:27:45:
32:87:1b:65:dd:98:9c:95:e3:a1:dc:ea:4b:7d:1f:
91:d3:cf:e1:52:c4:ee:9d:0d:b8:b5:ad:55:3b:c6:
7e:3b:ee:d0:f1:12:22:aa:c7:ea:73:e6:4c:18:45:
40:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:75:4E:B4:85:25:7E:A3:7D:1B:ED:B9:9D:AB:7C:2C:D8:16:30:2D
X509v3 Authority Key Identifier:
keyid:9D:07:80:6B:89:A4:CE:59:3F:E4:7C:BB:5F:94:60:C8:DE:E7:38:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/gHVOtIUlfqN9G-25nat8LNgWMC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.217.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:cc:56:e7:9a:1e:20:f7:e8:0c:4c:bf:24:51:9c:ed:af:4e:
ad:2b:f6:af:48:46:ec:0a:09:03:2a:47:02:67:ec:4c:eb:3b:
19:5b:5b:5f:1c:d0:02:ca:9f:e8:7c:04:df:8e:7e:70:62:92:
a1:51:3b:ab:d4:f4:38:94:b3:f0:09:4a:82:82:5b:62:2e:c6:
e5:39:56:e6:9d:03:c0:07:b0:af:0e:c8:8b:70:07:d9:a9:42:
3c:98:30:c6:2a:d3:d5:e3:48:80:99:8b:98:28:a4:8c:6e:c8:
03:00:57:7b:db:6e:03:77:54:a4:41:67:4a:e0:48:d4:92:d3:
f7:c6:d5:ca:6c:b4:d5:d8:68:3b:d8:00:fd:32:39:2e:53:4c:
15:51:8b:4e:31:95:18:17:56:d8:9f:8c:9f:bc:54:e9:14:ce:
f3:9c:cd:98:43:f8:92:f5:56:9d:a7:be:0b:f1:2c:d6:9b:36:
9d:18:dd:d0:d5:4b:13:90:62:ca:e9:2e:4c:5b:a8:dc:6e:9c:
95:d4:8c:63:e3:c3:ee:d2:7d:0a:a8:43:74:b4:2d:ab:72:e0:
b1:87:ac:bd:2a:14:63:ce:97:3d:4f:c0:6c:c6:df:8a:7b:75:
1c:ad:c2:4d:93:5b:31:79:a6:dc:77:89:4a:4e:be:06:a0:63:
4e:bc:e0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:03 2026 by rpki-client