Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/gxpra8bjT86QjvorDqlEdlvdpME.roa
File: gxpra8bjT86QjvorDqlEdlvdpME.roa (raw, json)
Hash identifier: DnaPkGQB16vLrL61uoIdPvxbl7A+RDJ1GPaU9N31TNA=
Subject key identifier: 83:1A:6B:6B:C6:E3:4F:CE:90:8E:FA:2B:0E:A9:44:76:5B:DD:A4:C1
Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial: 019DB230EE2CFC09C4F2C23994B1931E59AB
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/gxpra8bjT86QjvorDqlEdlvdpME.roa
Signing time: Tue 21 Apr 2026 22:37:24 +0000
ROA not before: Tue 21 Apr 2026 22:37:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213488
IP address blocks: 2a14:9401:6000::/36 maxlen: 36
2a14:9401:7000::/36 maxlen: 36
2a14:9401:a000::/36 maxlen: 36
2a14:9401:b000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:30:ee:2c:fc:09:c4:f2:c2:39:94:b1:93:1e:59:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Validity
Not Before: Apr 21 22:37:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=831a6b6bc6e34fce908efa2b0ea944765bdda4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:c7:53:3b:cb:86:95:36:10:a2:04:31:0d:
c1:fb:87:82:b2:5b:fa:36:93:8c:da:c6:70:e7:26:
14:89:d3:75:15:cb:68:60:11:11:f9:d6:d1:99:be:
24:42:2a:41:0d:e9:7c:c1:5b:3c:47:0c:17:a6:6e:
b7:ce:39:39:b2:e7:cb:00:61:dd:47:fc:9a:ae:1e:
a4:36:ac:ae:9f:23:02:3d:37:96:52:10:76:df:ad:
78:4d:f6:59:3e:61:b5:9f:c5:23:39:97:46:3f:ec:
97:85:12:e7:10:fb:f9:e3:2d:95:f2:0e:19:8f:4b:
3d:d3:4b:38:7f:31:95:e8:40:d0:de:d2:30:85:1b:
72:8d:47:4b:11:a9:b3:fd:ce:8a:82:84:4e:4e:28:
14:54:86:f0:17:16:fb:db:1f:19:34:ba:15:be:6d:
e0:eb:00:41:99:7c:8b:47:3e:75:f8:35:b6:26:dc:
97:75:5c:1a:1d:75:59:13:ec:dd:06:92:6e:5b:04:
5a:91:35:9c:56:76:fd:8d:0f:ce:a4:91:54:cf:4c:
23:88:74:f7:47:78:ed:b7:4f:42:7b:99:8c:5f:8f:
16:59:e4:69:07:a0:ed:fd:e1:27:1d:8f:87:81:ce:
ab:e0:d1:d5:ef:cd:c6:82:fb:43:17:98:da:8a:91:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1A:6B:6B:C6:E3:4F:CE:90:8E:FA:2B:0E:A9:44:76:5B:DD:A4:C1
X509v3 Authority Key Identifier:
keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/gxpra8bjT86QjvorDqlEdlvdpME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9401:6000::/35
2a14:9401:a000::/35
Signature Algorithm: sha256WithRSAEncryption
a0:3b:c0:10:fa:31:38:80:c7:1b:42:dd:41:89:0b:59:0a:8d:
0f:b5:7f:64:2f:8c:60:60:97:ce:21:35:ba:3c:e8:97:6d:03:
30:56:4f:98:e4:9a:c2:63:af:07:77:26:cc:ab:a5:f4:0d:11:
99:97:ce:66:79:ef:66:f5:d9:2b:79:75:a3:fa:0a:9e:75:c1:
37:d2:28:42:ae:ac:4f:c8:24:b0:e0:eb:11:05:02:b7:85:56:
a0:e4:36:fc:0f:fb:33:6d:5c:0f:62:08:4e:9f:7b:3a:e1:a9:
b8:0a:51:02:ee:36:d3:97:ef:08:ac:11:28:29:70:af:1a:63:
48:72:7f:3e:a5:4d:5f:79:45:3e:83:a0:40:ec:3c:2e:42:66:
72:4a:30:10:5a:4e:6c:8e:05:f6:64:67:ea:28:d5:bc:00:61:
64:3b:8d:39:aa:7e:c2:91:18:f5:94:04:6c:52:02:d9:60:9d:
9b:14:35:81:55:c6:a0:6b:f4:5b:0f:58:07:b3:ff:b5:e5:10:
78:76:f5:ce:13:36:07:b4:46:e8:e6:63:e1:59:b8:3e:c7:8e:
3b:d0:67:08:28:af:83:7c:6c:b3:e5:da:54:75:d2:fc:a7:1a:
29:fa:f6:3c:55:c6:71:53:a2:d6:fd:82:68:59:4b:67:ae:15:
5d:b1:d2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:25 2026 by rpki-client