Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/gtP2-qjZ9BceWm37CevDo-CjXzY.roa
File: gtP2-qjZ9BceWm37CevDo-CjXzY.roa (raw, json)
Hash identifier: VlU69I3hb/G6/wyrp9pzGaxb3Tpi8AUBli1dWDbRaNc=
Subject key identifier: 82:D3:F6:FA:A8:D9:F4:17:1E:5A:6D:FB:09:EB:C3:A3:E0:A3:5F:36
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 019C9AF66D2A7A75E252BFB70508EEF17F10
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/gtP2-qjZ9BceWm37CevDo-CjXzY.roa
Signing time: Thu 26 Feb 2026 17:19:26 +0000
ROA not before: Thu 26 Feb 2026 17:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26119
IP address blocks: 78.41.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:f6:6d:2a:7a:75:e2:52:bf:b7:05:08:ee:f1:7f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Feb 26 17:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82d3f6faa8d9f4171e5a6dfb09ebc3a3e0a35f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:69:94:ab:6c:02:36:7e:49:a9:54:1c:20:
df:31:b4:25:58:0e:b5:14:78:ae:64:50:a9:95:b8:
70:44:2e:09:53:4d:81:61:a1:bc:69:c3:c0:61:cf:
26:cc:e6:c9:b8:e8:f2:7e:10:06:7f:03:f7:cf:6a:
cb:50:10:44:f2:bd:4e:f0:22:17:76:4a:0e:4d:ca:
92:9e:d1:89:c9:32:b0:cb:24:e6:fc:09:5a:92:fa:
63:2c:cc:94:e8:4a:28:ab:a0:20:d1:8a:26:6c:cb:
de:55:a6:dd:8e:f2:8b:3f:e3:28:e2:1c:fb:69:b2:
f1:80:4d:df:c8:25:d7:63:a8:a8:25:67:5f:ad:0f:
17:27:cb:8d:56:9d:89:47:b1:a1:84:3a:43:34:22:
19:79:50:39:15:04:95:7b:e5:7e:bd:9c:0b:d8:8a:
ba:85:cc:3a:17:c1:21:6d:58:85:ff:e9:8a:e6:5b:
4a:cf:9b:9c:4a:07:df:26:65:d2:f5:1a:f3:c4:74:
7d:91:70:6d:04:b6:2a:d4:13:8d:74:7b:6f:73:b4:
bf:c8:2b:dc:9e:8e:a1:89:8d:1a:7c:d7:c6:c2:78:
de:5e:2c:53:b2:6a:5a:a7:57:8b:32:02:02:d2:a4:
f5:28:d2:4f:98:8d:9f:24:fd:a4:62:40:c2:64:2b:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D3:F6:FA:A8:D9:F4:17:1E:5A:6D:FB:09:EB:C3:A3:E0:A3:5F:36
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/gtP2-qjZ9BceWm37CevDo-CjXzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.59.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f6:1f:02:0c:5e:b9:a6:fb:fe:a4:f4:9e:52:8d:a8:0b:7b:
cd:1e:40:21:50:1a:9b:3a:e1:e6:47:6a:02:04:39:a9:b8:df:
5b:88:df:a5:ac:64:fc:d7:86:01:3c:4e:44:ed:b3:c4:d8:d7:
7d:e7:e4:d0:15:81:8f:a7:69:28:7e:f0:24:a0:0e:f4:74:42:
7b:6c:c8:d5:6f:9c:22:2b:a9:96:32:d1:d2:7f:db:60:c3:04:
48:f8:e9:e7:cd:c0:33:90:1a:f7:fa:87:34:fb:e7:c1:e8:81:
f0:51:c0:48:e1:07:32:cf:7c:a4:9d:9e:f0:6c:78:75:87:68:
a7:6b:37:be:f5:b6:47:9e:c2:69:04:d7:59:8b:4f:24:8d:28:
6e:cf:85:34:a5:bc:25:40:12:1d:84:b8:8e:52:61:17:a3:b7:
49:f9:42:55:1f:72:49:f4:76:ea:0a:e9:a9:4b:21:be:61:c2:
73:37:4b:bc:f5:0e:7f:20:2f:da:c1:dc:5d:64:93:c3:be:bb:
f7:2b:af:61:23:9b:ab:b6:e8:df:64:0e:9a:6d:ab:2a:6c:9a:
75:7f:40:8c:db:b5:fb:d4:d3:0e:93:c6:81:e9:53:19:f6:b5:
bf:f2:e5:69:ce:a1:09:ad:48:d2:63:2b:95:c6:0a:0c:70:90:
e3:06:59:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:03 2026 by rpki-client