Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/gcT7NBcC75N_1Sb4O2Bmdsty9sc.roa
File: gcT7NBcC75N_1Sb4O2Bmdsty9sc.roa (raw, json)
Hash identifier: FA0DOjvRw0cQzeRF4oLE7TS3HGc5UDkGYOyH5mPvlQs=
Subject key identifier: 81:C4:FB:34:17:02:EF:93:7F:D5:26:F8:3B:60:66:76:CB:72:F6:C7
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A181E96817A1DA3444A24317FCCA76E766
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/gcT7NBcC75N_1Sb4O2Bmdsty9sc.roa
Signing time: Wed 28 Oct 2026 09:48:39 +0000
ROA not before: Wed 28 Oct 2026 09:48:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219157
IP address blocks: 2a0e:4007:200::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:e9:68:17:a1:da:34:44:a2:43:17:fc:ca:76:e7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 28 09:48:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81c4fb341702ef937fd526f83b606676cb72f6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:0c:a8:41:7e:71:ca:21:50:21:ca:eb:6e:
ac:aa:87:33:38:5f:cb:90:f7:ac:fe:f2:12:71:3e:
76:88:3c:5e:0c:2d:14:da:fe:ff:20:42:cd:d8:b3:
49:f0:50:23:75:d7:98:94:9e:b4:92:aa:fb:b9:6e:
d5:c9:3f:e2:9a:5d:da:74:5f:8a:60:22:f2:99:c5:
e1:40:f4:e9:62:79:c5:ef:01:bb:b1:98:7f:e3:f7:
6f:db:0a:81:66:6e:df:68:7d:1d:a1:e6:61:b7:bb:
ef:b4:a7:69:c7:0b:4b:ba:ab:ff:f8:51:f7:4f:03:
7d:c7:34:91:8c:80:59:7c:5f:b6:45:90:5f:4d:83:
e9:e9:12:e8:3e:6a:7e:e0:ce:30:d4:c1:b8:44:9d:
16:92:d6:65:c3:4a:84:0a:7f:dd:d3:48:50:09:be:
bd:71:db:52:7b:0f:51:2e:17:4a:b7:ab:78:d4:80:
ee:f3:52:f2:01:bf:c5:65:12:81:10:f2:17:34:30:
44:f0:48:e0:22:bc:c5:bf:1f:59:57:c6:09:78:6e:
aa:dc:2c:02:9b:ee:0d:f0:10:6a:17:a2:0a:5a:36:
3c:00:4c:f8:db:97:d0:3a:e3:2c:e7:be:c2:d3:4d:
1c:14:d2:0d:d1:7e:b7:82:6a:e8:72:89:ea:09:4e:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C4:FB:34:17:02:EF:93:7F:D5:26:F8:3B:60:66:76:CB:72:F6:C7
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/gcT7NBcC75N_1Sb4O2Bmdsty9sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4007:200::/44
Signature Algorithm: sha256WithRSAEncryption
e2:82:dd:eb:5c:38:16:ff:11:0a:58:88:33:b1:63:5b:fc:59:
62:66:ca:cd:7f:69:81:bd:ae:25:b9:a2:c4:40:6e:08:29:33:
7a:a3:40:19:26:d4:6f:1e:32:be:a7:f5:07:76:ed:5c:b0:18:
2e:0e:83:89:19:95:ba:06:e4:46:3b:c2:3c:22:ea:69:08:5b:
60:4a:f8:96:31:d7:54:84:e5:4f:5c:5a:48:e9:8d:c0:d1:c3:
c7:bc:d2:c7:0a:0e:7d:0e:7f:2b:97:a1:2c:91:a3:fa:8d:ed:
e2:17:eb:cd:ca:26:b6:c9:c0:1f:9b:43:12:e2:7e:c7:12:46:
a7:37:57:0b:54:7f:7b:17:06:66:02:3f:71:fc:a6:6e:bf:a0:
0c:9a:8d:ff:29:3a:5b:d5:d2:5e:89:24:5b:b1:be:9d:e1:0c:
b6:b2:2f:95:bf:26:19:5f:3e:85:83:3c:df:a3:f2:96:cc:4d:
29:8d:a6:0f:ae:5c:6b:77:c3:ed:3f:8a:e7:a7:0e:d2:b0:f8:
97:8c:10:e2:2b:26:8b:38:67:bb:48:76:0f:04:a2:9a:23:90:
73:ff:8a:db:a4:51:cf:41:99:99:8d:68:35:35:eb:fd:6e:4a:
fc:31:41:67:16:bb:1a:a2:58:f6:25:a2:e4:cc:16:40:95:a3:
55:4e:69:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:20:46 2026 by rpki-client