Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/g4JOPbPnzY8D4FyoAJuRTe2LnV4.roa
File: g4JOPbPnzY8D4FyoAJuRTe2LnV4.roa (raw, json)
Hash identifier: v5BqL2+L+5TXfK4zZjA7PktTVuE/5Qo2zMv6MSl7VZ4=
Subject key identifier: 83:82:4E:3D:B3:E7:CD:8F:03:E0:5C:A8:00:9B:91:4D:ED:8B:9D:5E
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 01A1BB0FF938D29F1ACD1C934206FC5DFE4C
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/g4JOPbPnzY8D4FyoAJuRTe2LnV4.roa
Signing time: Sun 08 Nov 2026 12:09:08 +0000
ROA not before: Sun 08 Nov 2026 12:09:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212165
IP address blocks: 2a02:eb00:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bb:0f:f9:38:d2:9f:1a:cd:1c:93:42:06:fc:5d:fe:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Nov 8 12:09:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83824e3db3e7cd8f03e05ca8009b914ded8b9d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:30:44:3a:08:23:54:f2:c0:1c:26:fd:94:
2d:1f:b4:24:e8:92:e2:a5:fb:14:54:73:c9:e6:cd:
5a:d6:13:b2:dc:b1:25:83:ba:b5:f3:8c:15:39:0c:
40:ce:51:1b:6a:a6:21:d5:f0:08:85:4f:56:14:42:
9e:80:2a:9d:37:c1:57:fc:d2:e2:43:fa:5c:a5:47:
ce:02:09:d8:2e:77:31:66:bb:88:52:08:cd:0a:bf:
bd:ea:14:db:1a:14:46:3c:f5:b2:4d:01:06:10:2c:
39:ea:91:fc:19:6f:12:2d:18:f9:93:9d:ba:49:20:
b2:3a:05:02:55:f5:96:b3:58:86:08:78:0a:5f:b7:
2f:9b:49:ec:50:79:17:d6:fc:9d:98:74:e8:d2:3d:
24:ee:ee:0f:87:4a:48:13:0a:e1:d2:d8:53:15:54:
9c:14:f6:0b:8d:3f:7c:45:82:e9:08:ef:41:7e:06:
ea:da:82:f7:5a:29:95:5b:9f:3d:36:1a:30:64:40:
5e:f1:4d:b0:88:3c:84:e4:ec:5d:6f:fb:37:c9:d5:
bd:63:04:ad:a8:3e:19:7c:b6:3d:a3:75:26:e5:c4:
a9:5f:a5:92:61:b0:3e:c3:0c:eb:04:6d:af:bd:e3:
9b:36:7f:c9:5e:e8:14:ad:0c:ca:32:01:03:b3:96:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:82:4E:3D:B3:E7:CD:8F:03:E0:5C:A8:00:9B:91:4D:ED:8B:9D:5E
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/g4JOPbPnzY8D4FyoAJuRTe2LnV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:eb00:2::/48
Signature Algorithm: sha256WithRSAEncryption
2d:cf:7c:c2:23:99:34:2c:d2:17:4c:b1:45:62:4e:a3:b6:a7:
63:f6:74:7b:51:59:80:04:f5:d2:ab:63:a9:2c:5d:15:e9:2c:
65:eb:49:1e:a2:db:1a:b6:19:fb:d8:ce:53:c9:03:e7:ae:a3:
2f:6a:87:7a:5d:07:c4:19:bc:e3:e9:3a:62:5d:74:e5:3b:1d:
8a:96:8d:69:db:b0:66:ae:a0:06:d4:3e:ad:d7:2d:78:3e:bc:
86:46:78:b8:2f:95:f8:e9:23:b5:4b:ef:54:1a:35:a6:ad:f2:
f9:10:8e:67:99:6c:f5:65:b7:99:1b:a3:10:f8:f4:68:69:95:
a6:f4:ca:7d:9d:2c:6e:0b:1b:8b:fb:12:e4:85:87:be:8c:6d:
9a:82:b8:d1:07:c3:88:dd:a7:db:d1:0b:e4:6b:b0:43:42:94:
0a:64:53:bc:60:3b:b3:e9:1a:38:a1:ee:a9:7c:d2:90:f9:63:
f2:c6:3d:ab:09:bc:8d:d4:f7:1d:bc:73:28:e1:38:bb:23:4e:
49:b7:94:f4:07:9a:84:06:49:b0:92:9c:c8:43:6b:1c:d3:b2:
e6:c5:34:4d:3d:8d:0e:c8:9b:20:90:4f:42:fd:d6:a7:bb:78:
d0:63:ae:a2:a1:cd:39:f7:6d:4c:81:a5:93:6c:bd:e4:67:f7:
1a:7f:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:24:41 2026 by rpki-client