Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/gC2yEttgaK9WM_wgYpr4JpIjBjE.roa
File: gC2yEttgaK9WM_wgYpr4JpIjBjE.roa (raw, json)
Hash identifier: c/9wsmhHYjQ00su38QvaK+8ZaBUh5jW6/FSPnfU/AXU=
Subject key identifier: 80:2D:B2:12:DB:60:68:AF:56:33:FC:20:62:9A:F8:26:92:23:06:31
Certificate issuer: /CN=e8f94675359e140babd3a5abeea0c6780dfbdfa8
Certificate serial: 01A0C9FEFF31335659C2D0599F1638DDEE1C
Authority key identifier: E8:F9:46:75:35:9E:14:0B:AB:D3:A5:AB:EE:A0:C6:78:0D:FB:DF:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PlGdTWeFAur06Wr7qDGeA3736g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/gC2yEttgaK9WM_wgYpr4JpIjBjE.roa
Signing time: Tue 22 Sep 2026 16:42:07 +0000
ROA not before: Tue 22 Sep 2026 16:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36776
IP address blocks: 185.49.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/6PlGdTWeFAur06Wr7qDGeA3736g.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/6PlGdTWeFAur06Wr7qDGeA3736g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6PlGdTWeFAur06Wr7qDGeA3736g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:fe:ff:31:33:56:59:c2:d0:59:9f:16:38:dd:ee:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f94675359e140babd3a5abeea0c6780dfbdfa8
Validity
Not Before: Sep 22 16:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=802db212db6068af5633fc20629af82692230631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:17:0e:72:7c:ce:f3:d9:71:dc:4f:41:cf:
70:70:83:a3:95:9b:af:e0:20:ca:a9:c7:c3:d5:85:
90:9b:80:9b:62:93:70:06:be:ec:89:39:0e:fe:df:
af:20:61:de:a8:88:51:46:bb:35:fc:e4:ed:71:e6:
ee:28:ad:bf:cb:8d:95:79:52:c4:7f:84:16:b1:02:
97:04:89:56:d8:1f:3c:33:9c:b0:81:39:1a:73:ab:
eb:8e:a2:90:e8:72:01:a3:db:96:a2:ce:fe:93:11:
0b:77:7c:88:57:67:b3:13:40:f1:69:e2:df:01:f9:
43:80:b9:ea:a7:b6:5f:1b:dd:fb:d2:39:92:a9:9c:
3b:bb:4e:56:96:06:3f:c7:b1:8a:47:96:e2:d2:76:
bb:47:10:b1:35:e3:30:e6:05:15:92:99:68:3d:27:
40:f5:ba:27:99:b9:1b:13:b3:be:31:e2:0c:72:3a:
39:8c:03:94:ee:15:4f:2e:c8:44:5f:58:5b:59:26:
b1:32:e8:94:3b:b0:47:8b:a8:2a:ce:93:9e:92:19:
b8:95:f3:5c:5e:39:81:c0:d6:f3:75:dd:4a:59:d1:
b3:e0:c4:2c:46:1e:39:bb:7b:1b:39:22:81:2f:ae:
04:5b:94:91:2c:dd:14:0b:89:d3:d0:b5:22:dd:c5:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2D:B2:12:DB:60:68:AF:56:33:FC:20:62:9A:F8:26:92:23:06:31
X509v3 Authority Key Identifier:
keyid:E8:F9:46:75:35:9E:14:0B:AB:D3:A5:AB:EE:A0:C6:78:0D:FB:DF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PlGdTWeFAur06Wr7qDGeA3736g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/gC2yEttgaK9WM_wgYpr4JpIjBjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/6PlGdTWeFAur06Wr7qDGeA3736g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.234.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:79:26:86:bc:f6:7d:31:d5:ee:2a:52:a6:3a:88:dc:a1:80:
9d:52:f7:f1:7b:80:3e:28:43:f2:c6:47:2a:27:4f:10:c3:3a:
57:01:1f:0b:75:db:43:df:fe:a5:2c:12:23:4d:93:db:13:46:
4a:0d:53:f7:2c:99:23:54:93:bb:c1:f0:95:b3:ba:06:4d:24:
49:fe:04:93:4e:7a:52:47:f1:ad:3e:92:46:48:97:c9:d1:99:
fc:79:46:7a:08:30:57:fb:8e:5a:80:b3:9c:e7:86:ff:99:bf:
7b:50:32:b2:eb:16:92:c1:e4:65:1f:a7:0b:75:e6:5a:93:03:
35:7e:b9:c0:6e:63:a2:58:02:40:76:b9:c6:96:91:6e:ed:39:
07:84:de:e3:0d:ac:de:26:95:f3:77:97:4e:55:f4:52:b8:55:
98:81:bf:e8:ef:e6:d8:7d:38:18:b6:39:75:3a:d0:51:c8:c4:
80:b5:1c:42:13:2f:07:f8:7e:8a:a6:fa:c4:63:0f:1d:e0:d7:
54:71:2c:d5:06:07:3b:f6:cd:76:7b:42:5e:45:53:c4:f4:9a:
83:7f:97:59:ec:ea:18:74:56:32:bf:66:2c:54:cc:e7:e1:67:
88:55:f5:34:a2:65:ed:18:ec:59:c3:b5:e7:44:36:ad:0d:aa:
36:b4:28:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:03:58 2026 by rpki-client