Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/gJAa08VrnpofEEWJoK5tL8wzBfQ.roa
File: gJAa08VrnpofEEWJoK5tL8wzBfQ.roa (raw, json)
Hash identifier: 3vY67BHEWad+YSotZVfPPZJ0D03eBMkXpQDQiNnzKPg=
Subject key identifier: 80:90:1A:D3:C5:6B:9E:9A:1F:10:45:89:A0:AE:6D:2F:CC:33:05:F4
Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial: 019F5D08291380227E2DA4754D390E09BFB4
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/gJAa08VrnpofEEWJoK5tL8wzBfQ.roa
Signing time: Mon 13 Jul 2026 19:50:43 +0000
ROA not before: Mon 13 Jul 2026 19:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209801
IP address blocks: 194.92.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5d:08:29:13:80:22:7e:2d:a4:75:4d:39:0e:09:bf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Validity
Not Before: Jul 13 19:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80901ad3c56b9e9a1f104589a0ae6d2fcc3305f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:21:64:fd:bf:74:e3:7f:4c:2b:cf:b6:9a:
79:5f:74:5b:53:62:7a:fb:d2:f9:2a:c3:a8:e4:09:
b8:d6:fa:23:22:a4:4d:87:0a:a0:c2:5d:fa:0e:71:
d6:e0:8b:19:da:e9:c2:88:b3:a4:64:5f:1f:48:69:
54:0f:0b:2f:26:fe:1f:98:73:a2:c3:08:73:e0:03:
29:f0:30:70:e9:60:ca:3f:9d:6e:db:88:66:a1:2c:
0f:6b:71:72:f6:4f:fc:28:ba:ef:ae:6e:72:90:1d:
97:9e:b3:64:d9:7a:d3:c9:f8:e7:39:dc:61:b9:7e:
bd:ad:68:f6:c8:da:19:67:5b:e5:cf:6f:1e:06:ad:
0b:a2:9e:8d:17:0d:a8:98:4e:60:41:df:c5:58:46:
a6:b0:ec:da:35:8c:d8:ea:51:68:fa:f8:f3:cc:16:
48:78:75:b4:30:77:ee:ea:60:fb:31:9c:e7:67:ce:
85:0a:32:4a:49:bd:3b:6b:b7:d0:e3:7b:2e:7c:7c:
7a:85:35:0b:5e:a5:dc:fd:07:23:67:f8:e4:74:9c:
ea:fd:6d:31:05:b9:51:6d:84:87:57:1e:d6:22:ee:
10:3e:c2:bf:e9:09:45:93:d4:13:f1:f0:55:02:97:
5d:e2:bf:41:de:ec:dc:c1:6f:2b:82:16:4f:09:e5:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:90:1A:D3:C5:6B:9E:9A:1F:10:45:89:A0:AE:6D:2F:CC:33:05:F4
X509v3 Authority Key Identifier:
keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/gJAa08VrnpofEEWJoK5tL8wzBfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.92.84.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:36:b3:99:8c:3b:b2:a3:22:49:43:a1:2a:65:ab:b1:d3:de:
25:58:26:5e:13:4a:c6:51:28:44:58:6e:e6:9a:06:4d:d2:e2:
99:a5:5c:4f:76:ee:df:52:db:b5:30:ae:68:a5:29:f4:4a:45:
b1:55:45:af:e1:e1:8a:da:6d:19:4a:a7:6a:c8:92:cb:b2:02:
1e:d2:44:7c:5c:de:2f:51:37:e2:5d:e1:51:4a:2d:e1:3e:62:
62:c3:60:ec:ca:32:2b:1e:ac:ae:b8:f0:42:df:05:20:c4:fe:
55:35:a3:98:88:b6:1e:af:29:2a:8b:b5:cb:36:b8:0e:4e:70:
b9:09:36:38:4b:67:d0:56:88:09:ce:1f:1a:70:da:65:00:62:
8e:53:50:21:76:ab:02:05:e1:f7:06:fb:28:30:af:b0:88:66:
7a:68:00:48:3f:52:6f:0b:35:33:74:ef:3b:b0:30:7e:68:79:
3d:17:f9:79:4a:a4:13:4e:21:fc:9c:9b:8a:ac:0d:50:66:9b:
8b:f4:07:29:ab:ae:5a:be:d0:74:92:b8:8b:b5:88:fa:c8:44:
9a:f1:5d:65:c0:5b:e6:ed:cc:0c:56:2f:b9:a1:5e:7c:81:dc:
0f:47:f2:79:48:58:8e:59:33:01:6b:04:c6:5b:77:37:c0:02:
3a:d5:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:50 2026 by rpki-client