Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/GujJ-FoV2NxCphoiy9ei8Zxbj94.roa
File: GujJ-FoV2NxCphoiy9ei8Zxbj94.roa (raw, json)
Hash identifier: 5qyX0xcJQK2tt6fcmxtTs5x5YBwoFGMWlBym7IBYHmk=
Subject key identifier: 1A:E8:C9:F8:5A:15:D8:DC:42:A6:1A:22:CB:D7:A2:F1:9C:5B:8F:DE
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 019CFC2E29C45CC25F1F7D40717EB7C81C63
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/GujJ-FoV2NxCphoiy9ei8Zxbj94.roa
Signing time: Tue 17 Mar 2026 14:23:29 +0000
ROA not before: Tue 17 Mar 2026 14:23:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21096
IP address blocks: 2a04:a900:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:2e:29:c4:5c:c2:5f:1f:7d:40:71:7e:b7:c8:1c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Mar 17 14:23:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ae8c9f85a15d8dc42a61a22cbd7a2f19c5b8fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:86:bd:b1:eb:04:2e:ce:24:9a:8d:85:67:
1b:0a:b8:98:59:7e:99:7d:99:62:e3:44:3c:0b:1f:
29:14:0c:26:49:88:aa:2a:fa:7c:ad:6e:11:b7:3b:
db:32:64:ab:40:95:dd:3f:f4:a2:ca:bd:7a:af:87:
f4:81:40:06:25:e0:42:49:88:df:3b:e9:17:86:4e:
58:52:8e:1b:14:4f:22:4c:0d:d3:05:1b:a3:32:72:
f8:ac:fc:42:09:60:6d:1e:c4:3b:aa:3f:22:db:fd:
a4:ff:27:b5:20:7f:6e:ca:cc:74:92:1a:ab:01:33:
43:aa:ae:fd:bf:bc:7b:ed:1b:71:0d:52:51:72:5f:
37:72:9a:ff:c5:7d:cf:26:65:d0:c8:1a:b0:e5:4d:
ef:7f:d8:29:e3:b8:f4:e1:d7:84:ea:59:b4:f6:e1:
68:29:b4:bb:5f:d8:96:5d:57:39:f0:dd:43:04:dd:
ce:a1:64:32:59:59:56:55:c5:02:78:0e:fd:0a:14:
15:90:1d:5d:ad:9e:97:8b:e9:6c:dc:58:23:4e:6f:
7f:57:eb:45:03:96:a1:b7:29:b8:dd:17:5f:ad:c8:
12:9e:1a:f2:bf:17:53:2c:6e:ec:a5:b7:74:57:fa:
43:b9:d5:89:85:0f:50:00:09:0f:ac:77:fd:eb:2b:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E8:C9:F8:5A:15:D8:DC:42:A6:1A:22:CB:D7:A2:F1:9C:5B:8F:DE
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/GujJ-FoV2NxCphoiy9ei8Zxbj94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a900:6::/48
Signature Algorithm: sha256WithRSAEncryption
93:eb:ab:77:9c:65:66:ca:05:34:03:aa:33:c6:1d:71:e5:4e:
71:61:32:b0:3c:ae:92:b4:94:9c:21:6c:2c:2f:58:cf:fd:c0:
4f:2d:b4:df:e1:aa:b3:d9:7d:a4:e3:d5:58:f3:ae:98:97:e6:
60:5d:f2:1d:a6:b0:01:45:9f:87:d8:5c:dc:6a:04:79:93:49:
6f:47:5b:ea:2c:7a:81:49:12:49:08:14:94:ba:ad:6d:8e:57:
5f:1a:14:ed:65:10:4d:0d:05:ca:f5:31:fa:a2:3a:ef:fc:cc:
52:ec:89:37:d1:e6:f0:15:a5:09:07:4c:ee:e9:06:e7:cd:75:
8a:7a:6a:15:4e:39:4c:0e:72:34:ee:4b:97:75:1f:dd:79:00:
9f:67:d6:3a:d8:39:69:80:9d:92:cc:6b:8c:be:57:c6:bb:83:
ef:aa:84:c4:f1:ce:7c:af:08:36:c6:4d:a8:a4:be:4f:4f:fb:
3e:28:d7:09:c6:cf:d3:e3:0c:0a:11:ec:4a:b0:83:dc:93:b6:
3b:5b:25:6f:86:8c:2b:0c:f7:11:68:ec:72:d1:89:5b:a8:81:
fd:a7:b1:91:a9:62:a5:76:c0:7e:37:c4:6a:95:9c:36:a1:25:
5e:68:50:89:47:70:04:5c:53:0b:b6:90:a1:cb:dc:08:db:62:
3e:b8:45:14
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZz8LinEXMJfH31AcX63yBxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky
OTMxNDAwHhcNMjYwMzE3MTQyMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWU4YzlmODVhMTVkOGRjNDJhNjFhMjJjYmQ3YTJmMTljNWI4ZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2mGvbHrBC7OJJqNhWcbCriYWX6Z
fZli40Q8Cx8pFAwmSYiqKvp8rW4RtzvbMmSrQJXdP/Siyr16r4f0gUAGJeBCSYjf
O+kXhk5YUo4bFE8iTA3TBRujMnL4rPxCCWBtHsQ7qj8i2/2k/ye1IH9uysx0khqr
ATNDqq79v7x77RtxDVJRcl83cpr/xX3PJmXQyBqw5U3vf9gp47j04deE6lm09uFo
KbS7X9iWXVc58N1DBN3OoWQyWVlWVcUCeA79ChQVkB1drZ6Xi+ls3FgjTm9/V+tF
A5ahtym43RdfrcgSnhryvxdTLG7spbd0V/pDudWJhQ9QAAkPrHf96ysz4QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBroyfhaFdjcQqYaIsvXovGcW4/eMB8GA1UdIwQY
MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt
MzA1NmFmOWEzMzVlLzEvR3VqSi1Gb1YyTnhDcGhvaXk5ZWk4Wnhiajk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl
LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgSpAAAG
MA0GCSqGSIb3DQEBCwUAA4IBAQCT66t3nGVmygU0A6ozxh1x5U5xYTKwPK6StJSc
IWwsL1jP/cBPLbTf4aqz2X2k49VY866Yl+ZgXfIdprABRZ+H2FzcagR5k0lvR1vq
LHqBSRJJCBSUuq1tjldfGhTtZRBNDQXK9TH6ojrv/MxS7Ik30ebwFaUJB0zu6Qbn
zXWKemoVTjlMDnI07kuXdR/deQCfZ9Y62DlpgJ2SzGuMvlfGu4PvqoTE8c58rwg2
xk2opL5PT/s+KNcJxs/T4wwKEexKsIPck7Y7WyVvhowrDPcRaOxy0YlbqIH9p7GR
qWKldsB+N8RqlZw2oSVeaFCJR3AEXFMLtpChy9wI22I+uEUU
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:25:19 2026 by rpki-client