Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/GPENjdnBuUeAF8pjtU3on9aBSHA.roa
File: GPENjdnBuUeAF8pjtU3on9aBSHA.roa (raw, json)
Hash identifier: Mw1cMnE9/B8Zcgxh0tYVxSVZOI4fKuxx+ERKVKcAJAs=
Subject key identifier: 18:F1:0D:8D:D9:C1:B9:47:80:17:CA:63:B5:4D:E8:9F:D6:81:48:70
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01A0C8B0D5E72582F521DAEE761312644B9C
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/GPENjdnBuUeAF8pjtU3on9aBSHA.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 2a09:440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d5:e7:25:82:f5:21:da:ee:76:13:12:64:4b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18f10d8dd9c1b9478017ca63b54de89fd6814870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:1f:d2:34:c2:86:67:23:f3:32:0c:30:b1:
43:6d:f9:d2:1e:76:80:f0:7c:9f:bc:d9:ff:de:7a:
84:16:7b:9c:39:f8:84:be:29:a8:c4:9c:19:d1:ec:
a0:d1:c4:62:95:6b:91:d9:0e:bd:45:2d:e7:5f:ec:
c9:4c:d5:1e:f8:62:d2:d5:5b:46:ef:63:09:75:eb:
92:49:b9:7e:1b:e3:6f:48:35:95:c9:c6:e2:08:67:
8c:46:8f:75:a3:9c:0b:bb:21:94:41:99:35:84:42:
3a:c9:09:98:d6:6a:ca:20:36:57:b4:6b:b6:3b:31:
ac:f9:d6:b0:bf:b7:5b:6f:7e:cb:ea:88:7a:17:88:
db:69:58:40:85:e9:de:27:dc:67:d5:15:b1:06:77:
04:da:7d:dc:6e:42:ae:a5:16:af:47:2e:03:11:79:
bf:ce:76:66:11:45:05:e4:95:f1:4a:db:8d:d0:77:
d0:a2:93:fe:03:fd:8e:4b:00:15:2f:93:31:26:eb:
a3:70:51:da:89:2c:38:80:3f:c7:79:48:b7:83:3f:
86:8f:a9:89:90:0b:af:3e:08:0c:b6:a2:e8:ab:ab:
a7:f5:55:1c:21:06:01:c0:ef:88:d1:20:78:54:28:
95:08:ee:d0:92:20:ef:dc:22:0d:18:bd:a0:b3:ac:
31:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F1:0D:8D:D9:C1:B9:47:80:17:CA:63:B5:4D:E8:9F:D6:81:48:70
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/GPENjdnBuUeAF8pjtU3on9aBSHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:440::/29
Signature Algorithm: sha256WithRSAEncryption
1f:7e:84:7f:0d:67:75:fa:17:64:a6:66:8d:cf:9a:ee:a2:ac:
87:fa:08:4c:55:eb:11:b3:9a:5d:4b:2d:82:a1:1c:47:38:c7:
c0:a0:41:72:a1:7f:80:15:a3:9f:23:54:13:71:6b:2f:4e:5a:
43:d1:e4:c9:b5:ee:40:61:e9:20:e3:b5:01:d7:43:5d:07:ca:
61:02:0d:4e:c6:69:0b:aa:39:d0:42:c4:d7:96:ea:1d:4d:d3:
8a:bc:a1:4c:55:b2:78:2f:d4:6f:bc:c5:5e:d6:70:40:f2:72:
50:a7:f9:8e:5c:91:11:0b:dc:35:07:75:b6:11:72:07:e6:94:
0c:73:45:71:95:00:cd:45:e3:05:b3:49:54:61:ea:3b:92:e1:
4a:b2:f8:99:13:cf:69:3c:8f:5f:77:4d:da:4d:21:cc:21:55:
81:34:f4:72:cc:f9:4b:d1:f6:86:e4:f3:99:2c:b1:af:33:24:
f7:09:4e:a8:e7:20:14:3c:e8:2c:63:f2:2a:31:ee:60:22:b4:
16:dc:b3:50:87:c3:9a:58:62:df:24:9d:ed:36:7c:01:4b:13:
cf:98:77:75:70:36:ea:54:33:a7:3c:50:2e:46:fb:56:60:07:
e7:0c:a9:72:64:d7:6c:7d:c4:71:7a:65:4e:f9:86:b1:64:5a:
c9:15:1f:ff
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaDIsNXnJYL1IdrudhMSZEucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjYwOTIyMTAzNzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGYxMGQ4ZGQ5YzFiOTQ3ODAxN2NhNjNiNTRkZTg5ZmQ2ODE0ODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuIf0jTChmcj8zIMMLFDbfnSHnaA
8HyfvNn/3nqEFnucOfiEvimoxJwZ0eyg0cRilWuR2Q69RS3nX+zJTNUe+GLS1VtG
72MJdeuSSbl+G+NvSDWVycbiCGeMRo91o5wLuyGUQZk1hEI6yQmY1mrKIDZXtGu2
OzGs+dawv7dbb37L6oh6F4jbaVhAheneJ9xn1RWxBncE2n3cbkKupRavRy4DEXm/
znZmEUUF5JXxStuN0HfQopP+A/2OSwAVL5MxJuujcFHaiSw4gD/HeUi3gz+Gj6mJ
kAuvPggMtqLoq6un9VUcIQYBwO+I0SB4VCiVCO7QkiDv3CINGL2gs6wxKwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBjxDY3ZwblHgBfKY7VN6J/WgUhwMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvR1BFTmpkbkJ1VWVBRjhwanRVM29uOWFCU0hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgkEQDAN
BgkqhkiG9w0BAQsFAAOCAQEAH36Efw1ndfoXZKZmjc+a7qKsh/oITFXrEbOaXUst
gqEcRzjHwKBBcqF/gBWjnyNUE3FrL05aQ9HkybXuQGHpIOO1AddDXQfKYQINTsZp
C6o50ELE15bqHU3TiryhTFWyeC/Ub7zFXtZwQPJyUKf5jlyREQvcNQd1thFyB+aU
DHNFcZUAzUXjBbNJVGHqO5LhSrL4mRPPaTyPX3dN2k0hzCFVgTT0csz5S9H2huTz
mSyxrzMk9wlOqOcgFDzoLGPyKjHuYCK0FtyzUIfDmlhi3ySd7TZ8AUsTz5h3dXA2
6lQzpzxQLkb7VmAH5wypcmTXbH3EcXplTvmGsWRayRUf/w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:41:18 2026 by rpki-client