Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/G8ZEon35I2P6pkU0FDsIG6Y7Zjs.roa
File: G8ZEon35I2P6pkU0FDsIG6Y7Zjs.roa (raw, json)
Hash identifier: k4U+/r7fOuXOjIPX9gqi4ZfE2+LkpWSG4fQh9chwbp4=
Subject key identifier: 1B:C6:44:A2:7D:F9:23:63:FA:A6:45:34:14:3B:08:1B:A6:3B:66:3B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A10BB0776C21860C5F650694196D63213E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/G8ZEon35I2P6pkU0FDsIG6Y7Zjs.roa
Signing time: Mon 05 Oct 2026 10:51:16 +0000
ROA not before: Mon 05 Oct 2026 10:51:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201002
IP address blocks: 212.189.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:b0:77:6c:21:86:0c:5f:65:06:94:19:6d:63:21:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 5 10:51:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bc644a27df92363faa64534143b081ba63b663b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:ba:02:a1:29:17:52:37:d5:1a:82:9b:05:
dc:a1:5f:2e:9b:c3:48:a7:4a:c9:33:df:30:ac:ba:
9e:a7:17:29:9b:a4:86:42:7f:4b:f8:37:0a:1a:fe:
ac:81:d4:c7:c4:5b:c0:c7:5c:6b:11:b9:8e:63:1c:
1b:b2:74:68:7a:f7:9f:ee:ee:a1:a5:c9:e9:d8:a3:
d7:6d:c4:8d:54:f8:65:06:b1:09:2b:88:38:22:1e:
26:48:f2:25:6d:51:da:a5:30:52:86:44:f1:84:ce:
76:16:5b:03:89:3e:53:27:7c:70:35:4c:4f:45:b8:
3b:65:70:6d:84:92:9a:d1:d2:ea:c4:9d:ee:ea:5b:
e5:47:fc:e5:0e:6e:c9:14:79:0c:05:b7:d2:50:85:
e0:a6:6b:02:4a:6c:6a:01:48:55:4e:16:24:6f:e0:
78:5c:9d:05:e3:c6:fb:2d:49:dd:a1:bd:10:13:79:
ff:b2:fc:de:a4:1a:68:93:15:03:0b:5b:cb:d1:95:
d0:a3:c2:84:15:ab:6f:79:78:bf:d9:0b:79:79:61:
01:0e:8d:b3:c0:dc:cc:ce:fb:f3:bb:b4:39:37:07:
b7:a9:8e:69:e6:11:e8:35:43:35:3b:72:f0:7c:92:
db:c0:20:f2:ca:2a:82:32:7d:ee:fc:1b:6e:78:e2:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C6:44:A2:7D:F9:23:63:FA:A6:45:34:14:3B:08:1B:A6:3B:66:3B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/G8ZEon35I2P6pkU0FDsIG6Y7Zjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.96.0/24
Signature Algorithm: sha256WithRSAEncryption
18:48:f1:2d:48:c4:04:9d:5f:7c:4a:fd:1b:02:45:b1:68:2d:
62:37:08:49:5b:1b:f9:ab:17:ab:59:3e:d9:01:cd:8c:61:2e:
c6:8e:50:b0:9d:61:50:72:c6:ce:8e:bf:87:3e:fa:7c:f8:15:
01:35:2a:2a:cc:8a:f2:a5:d7:9c:74:37:4f:dc:01:d1:34:7b:
1a:ea:42:23:d9:f5:5c:d6:9a:e7:d1:40:22:28:ea:9c:a3:b3:
a8:31:bd:9a:48:a1:cd:6f:60:0e:a5:d2:3a:f5:4a:86:f8:93:
90:69:a0:18:92:59:b4:1e:21:7f:b0:39:5e:8b:24:0d:dd:8e:
b1:69:fc:41:ea:46:db:d3:99:86:65:5c:22:c7:f4:2e:f6:af:
52:e1:e5:25:e2:92:81:8e:47:49:94:c2:86:0c:3c:e0:32:ee:
de:6b:da:ee:fa:a2:0a:fb:b1:2a:f9:6f:41:b0:3b:0f:0a:bc:
2d:79:b0:c4:ed:87:83:bf:fd:0b:48:b4:d6:de:98:05:ee:d5:
1c:81:dc:41:7e:50:23:e4:06:b4:e6:f9:9d:58:f6:9f:4c:71:
20:23:09:57:ba:e6:29:85:14:d4:a8:dc:01:99:24:54:94:2f:
18:b6:48:bd:57:15:d8:22:bf:9a:36:77:63:cb:78:d1:aa:fc:
74:6c:73:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:46:33 2026 by rpki-client