Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/G0Knqwy49hFx25n6Dht1uoAl47k.roa
File: G0Knqwy49hFx25n6Dht1uoAl47k.roa (raw, json)
Hash identifier: LavgAJ3HvhIGVS7c+m6GRJCdv7GbdWpuFkdIj8DBCnA=
Subject key identifier: 1B:42:A7:AB:0C:B8:F6:11:71:DB:99:FA:0E:1B:75:BA:80:25:E3:B9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E15564C76DCC8FB0DC76A74CC02203D29
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/G0Knqwy49hFx25n6Dht1uoAl47k.roa
Signing time: Mon 11 May 2026 04:40:37 +0000
ROA not before: Mon 11 May 2026 04:40:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209451
IP address blocks: 128.0.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:15:56:4c:76:dc:c8:fb:0d:c7:6a:74:cc:02:20:3d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 11 04:40:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b42a7ab0cb8f61171db99fa0e1b75ba8025e3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4e:f9:97:d0:ba:f5:47:a1:b4:12:a0:4a:58:
bd:48:a7:5a:27:cb:29:98:64:81:d7:01:94:c4:43:
3c:d8:52:cd:05:f2:63:be:dd:80:56:29:f2:99:f9:
8d:10:ee:03:a8:3b:55:93:34:dc:98:7e:33:b8:70:
53:bf:2e:f8:55:4d:cb:6d:50:8f:0a:05:d7:1e:c8:
ab:e7:63:c1:2e:92:bb:e6:4a:ea:39:a4:45:b2:c0:
06:7d:59:76:ff:1c:37:31:9c:f0:d7:0a:10:25:bd:
2c:ae:24:c6:29:87:66:66:c7:7a:73:52:5a:39:a8:
7f:d0:65:fd:23:26:3d:94:fb:64:72:9e:01:f2:4a:
ec:3f:42:cf:19:3c:b1:8f:36:96:de:49:d9:2e:63:
08:ff:fc:fa:9d:69:d3:d7:e7:e4:70:ea:fe:32:65:
ac:18:4f:78:22:00:dd:dc:47:7c:d8:3f:5f:b9:47:
f5:52:d5:e9:70:25:17:33:87:f8:09:f6:2d:1a:41:
0a:4a:20:5d:8b:9e:e6:83:2a:1c:4c:db:91:a0:df:
92:f1:2f:f0:37:08:bb:5e:f3:5f:a2:a2:7c:5c:8b:
85:cd:d1:e8:21:2f:bd:0e:c2:13:85:e5:f2:e7:e8:
7f:a8:48:2b:91:29:0c:4a:5f:38:d0:18:cf:70:9c:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:42:A7:AB:0C:B8:F6:11:71:DB:99:FA:0E:1B:75:BA:80:25:E3:B9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/G0Knqwy49hFx25n6Dht1uoAl47k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.1.0/24
Signature Algorithm: sha256WithRSAEncryption
99:44:ff:6f:57:cf:73:f8:6a:fe:0d:66:66:81:53:55:53:03:
a7:9c:e6:44:98:f6:46:de:ef:4f:4a:9b:c6:ab:3a:05:c9:da:
bd:43:67:72:96:ac:0c:c2:96:0e:b3:1a:9a:fd:7c:00:a4:c0:
bf:94:69:63:ff:b3:5e:55:7a:9b:83:2b:65:85:d3:cb:3d:6f:
ff:f7:c5:68:bb:c3:79:69:6e:9f:a6:b4:9c:69:9a:e3:4a:f6:
56:ea:3d:ba:80:cc:4f:1a:7b:a8:80:eb:3d:8a:74:ef:6a:11:
16:b4:0a:f0:67:47:53:eb:92:4b:48:b9:06:41:81:5c:35:d3:
8a:b4:ff:ce:cb:41:3f:9f:31:a9:65:96:eb:0e:28:47:6e:c0:
57:24:48:ca:97:61:23:70:6b:c8:47:d9:32:e6:21:0e:8c:f5:
f3:fd:c0:c8:99:1e:8f:9e:20:44:fa:04:55:d3:cb:9e:77:c3:
81:1f:38:1d:d9:92:28:11:86:32:40:8f:a8:c1:86:c2:57:c5:
d6:90:55:ec:c9:f0:c0:b3:98:3c:1f:54:1a:80:62:46:b3:a6:
f7:55:f3:83:53:53:c2:c7:a2:70:ad:d2:83:df:8b:65:9c:f6:
c1:d3:8b:85:35:5b:a9:09:e7:76:47:be:64:ce:9e:32:52:00:
57:4f:73:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:13 2026 by rpki-client