Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/gDGMFnBJLD30qto-o_gnRyl9xIo.roa
File: gDGMFnBJLD30qto-o_gnRyl9xIo.roa (raw, json)
Hash identifier: IYpXszgMmGmDCIE7wSyYNrq3lEstGhkc0XA0OwHmr9A=
Subject key identifier: 80:31:8C:16:70:49:2C:3D:F4:AA:DA:3E:A3:F8:27:47:29:7D:C4:8A
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 019E0798D4C51AABF1253802D9FE9222A607
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/gDGMFnBJLD30qto-o_gnRyl9xIo.roa
Signing time: Fri 08 May 2026 12:38:36 +0000
ROA not before: Fri 08 May 2026 12:38:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201813
IP address blocks: 94.26.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:98:d4:c5:1a:ab:f1:25:38:02:d9:fe:92:22:a6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: May 8 12:38:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80318c1670492c3df4aada3ea3f82747297dc48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8c:62:a8:4f:4a:8b:c9:c3:27:a2:d1:67:0c:
97:2c:a9:f0:a5:5d:74:7a:bf:f7:72:66:01:da:7e:
5a:bf:0d:0f:0f:5b:da:30:06:cf:cf:e3:17:2c:7f:
b0:62:e5:24:4b:66:58:ba:36:36:a3:15:6e:b4:bc:
3c:38:e4:ed:28:85:aa:b8:a8:f2:fe:a8:d6:5a:09:
c7:48:f6:3f:3b:9d:78:75:2b:15:ce:07:f0:c8:bd:
88:b5:10:88:58:93:0e:e7:09:c2:7f:bf:71:69:55:
b5:a7:95:5e:d7:71:dc:ee:3a:b1:26:34:cb:c0:b9:
04:4f:59:46:88:fb:26:49:a4:94:e6:e6:49:1a:61:
16:60:77:00:2e:7b:93:35:cc:0a:c5:70:c0:ad:8a:
ba:a8:51:46:26:22:0d:67:3f:45:10:54:c3:45:30:
7a:dc:8d:db:a3:0c:d0:b9:d4:bf:a5:ad:41:c0:6e:
2c:7d:f9:6c:81:8c:53:22:3b:9c:7b:2a:a1:43:d7:
c6:f7:e6:eb:ca:36:c4:03:82:2a:d4:d3:2d:a0:32:
f0:03:2b:1f:bc:58:cf:dd:45:52:9f:d9:13:48:cd:
0e:92:d6:84:f1:ba:30:44:c0:30:66:cb:56:a1:0f:
53:6c:30:f4:cc:78:db:4b:bb:a0:dd:55:ca:c7:1a:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:31:8C:16:70:49:2C:3D:F4:AA:DA:3E:A3:F8:27:47:29:7D:C4:8A
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/gDGMFnBJLD30qto-o_gnRyl9xIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.69.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f0:cd:a2:34:4e:84:98:90:04:9e:9a:01:6e:c6:66:d8:5a:
68:74:fc:6f:e6:e5:0b:49:cc:54:ef:47:ea:48:50:db:c3:03:
35:b1:27:2b:c5:d0:c9:1a:c6:c5:6e:32:de:37:41:a5:9f:c7:
94:2c:39:77:51:38:fe:26:0a:74:f9:d7:7d:dc:a3:5f:fb:01:
76:a7:d6:68:91:55:6e:ad:00:b6:b4:c3:3d:e6:9c:37:1d:9e:
1b:04:42:b5:fe:59:08:d3:e6:05:cb:3a:e4:24:05:18:5c:f7:
29:d5:96:e2:ca:0a:46:d4:33:80:69:c6:62:d8:68:f7:36:5d:
7b:bc:85:78:b0:ba:63:ae:3c:42:02:35:2a:4a:57:ba:07:fb:
e4:76:83:ac:67:d3:2e:c1:62:cf:82:a9:50:79:58:9d:4f:1e:
99:21:5a:ec:65:15:4c:93:89:5e:2e:de:09:4a:8d:21:b6:96:
dc:75:27:6e:f5:eb:de:69:6d:57:a8:27:7b:3c:c0:1a:4d:72:
8f:1a:e7:40:13:9c:2c:7e:6a:87:f0:0e:9e:0c:35:b3:53:01:
33:56:34:0a:88:33:f8:12:63:86:13:04:20:a5:ac:f9:af:28:
c5:67:3f:e6:28:a4:02:21:76:90:9f:27:8b:5a:f4:97:e5:82:
05:fe:4b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:40:24 2026 by rpki-client