Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gWLGO_puC8OIvQRPQ90G0gezE34.roa
File: gWLGO_puC8OIvQRPQ90G0gezE34.roa (raw, json)
Hash identifier: pdyGP9OfsbwsoLVgx5CcUA6dVVEfTTpSLYWoOZFFYUk=
Subject key identifier: 81:62:C6:3B:FA:6E:0B:C3:88:BD:04:4F:43:DD:06:D2:07:B3:13:7E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A0C822EE32D14109CE6826F6DCC33ACFA0
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gWLGO_puC8OIvQRPQ90G0gezE34.roa
Signing time: Tue 22 Sep 2026 08:02:07 +0000
ROA not before: Tue 22 Sep 2026 08:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401486
IP address blocks: 188.255.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 19:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:22:ee:32:d1:41:09:ce:68:26:f6:dc:c3:3a:cf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 22 08:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8162c63bfa6e0bc388bd044f43dd06d207b3137e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:58:d7:01:ef:ee:64:22:4c:c7:44:de:04:
24:57:45:4c:0a:ad:4c:db:b2:52:aa:2f:42:05:1c:
87:91:25:77:65:56:a0:17:98:96:05:80:aa:fe:91:
15:4e:49:da:c8:18:4a:de:6b:73:b2:81:e7:c6:0c:
e6:48:2b:84:f8:99:a8:94:ce:8e:04:bf:b3:db:30:
88:79:f6:6c:dd:cb:34:bd:70:cd:df:65:68:1e:9c:
f7:8e:b3:a4:53:40:be:22:3e:c7:7a:ff:de:29:5b:
09:68:7a:38:36:e2:a9:87:f5:47:42:49:45:1e:79:
80:f0:b0:23:62:bc:d0:4f:30:0b:1c:b8:11:c4:61:
08:38:e3:98:c5:3a:dc:73:a9:4a:58:0a:4f:70:8b:
37:29:d8:b9:73:a9:e0:a6:97:50:55:19:f4:59:c5:
f2:02:08:3b:2e:01:2d:7a:f3:43:59:8f:af:2a:d9:
7d:81:fd:f4:24:e8:e3:60:9b:27:1e:12:35:6c:e7:
0e:45:f0:b9:c5:26:69:9c:68:e8:78:80:6a:e4:bf:
3c:3c:00:86:7f:6f:32:9d:53:60:dd:63:6f:52:0a:
7e:30:23:1d:3c:f7:90:b2:26:f8:40:7b:ce:4f:47:
da:a3:59:06:6d:b9:27:cd:16:c8:4d:65:21:7d:f4:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:62:C6:3B:FA:6E:0B:C3:88:BD:04:4F:43:DD:06:D2:07:B3:13:7E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/gWLGO_puC8OIvQRPQ90G0gezE34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.249.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ad:32:24:36:fb:69:7f:7f:7f:df:06:13:42:ff:03:21:2e:
13:eb:a2:e5:96:7b:9f:39:08:c1:1f:17:18:8c:0c:ce:ba:82:
2e:6b:cd:f4:b3:f9:55:c6:ad:7c:3e:a5:d5:ba:81:ae:d3:07:
4d:f1:91:d5:f1:e6:bd:56:ef:18:3e:17:f4:70:c6:97:4d:c0:
e8:17:a3:30:59:13:83:70:91:7a:2a:40:6a:b6:20:a2:f6:3c:
e4:e9:e7:80:66:e9:31:00:82:fa:58:87:6a:03:82:2e:14:4e:
60:d2:96:d8:90:68:70:1a:7a:bf:44:12:31:33:0d:8f:db:97:
62:58:23:7b:54:ed:57:e3:e0:c1:a0:66:ef:b2:09:1c:cb:36:
47:a1:11:19:4c:c9:ee:95:bf:a7:b5:65:7f:27:8a:80:6f:37:
0b:c5:cc:52:8d:1a:5c:15:c6:6c:e6:b6:a7:6b:02:fa:03:9e:
9d:b7:97:96:a9:7e:ff:ba:ab:4d:89:6e:6f:cb:f0:96:54:9e:
b0:00:43:4a:e9:58:04:50:2e:5d:ff:bc:a7:e3:f4:ee:f2:84:
ae:9f:c7:c1:56:98:d1:75:de:83:cd:4e:12:1c:05:97:26:74:
ec:39:f0:75:9f:09:22:f7:16:6d:0c:81:02:b8:80:90:1e:41:
42:bc:b7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:45:23 2026 by rpki-client