Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/gbM-UbBZWkMRGkLdPGQVEJs1naU.roa
File: gbM-UbBZWkMRGkLdPGQVEJs1naU.roa (raw, json)
Hash identifier: p03VM0f+VevUfE6cnjE4SzBYbGSuBGTgFWKt7JmD7D0=
Subject key identifier: 81:B3:3E:51:B0:59:5A:43:11:1A:42:DD:3C:64:15:10:9B:35:9D:A5
Certificate issuer: /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Certificate serial: 01997659FC339FEA999E5E230ADE480A380C
Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/gbM-UbBZWkMRGkLdPGQVEJs1naU.roa
Signing time: Tue 23 Sep 2025 11:33:52 +0000
ROA not before: Tue 23 Sep 2025 11:33:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15738
IP address blocks: 80.84.176.0/20 maxlen: 20
80.254.0.0/20 maxlen: 20
2a06:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:76:59:fc:33:9f:ea:99:9e:5e:23:0a:de:48:0a:38:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Validity
Not Before: Sep 23 11:33:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81b33e51b0595a43111a42dd3c6415109b359da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:00:66:72:2d:52:07:26:8d:7a:71:90:78:
f8:a3:f6:5c:9d:02:cb:71:18:dc:33:18:ca:ed:b0:
a5:bf:c8:54:cb:14:3c:73:10:a7:9c:a2:09:01:97:
3a:48:79:04:aa:49:a1:33:84:e9:5d:f8:00:72:da:
76:a8:ee:f7:91:3c:98:43:a6:9a:67:8a:9d:a0:ba:
9d:bb:f2:51:ab:06:97:68:8d:52:69:c3:85:cb:89:
00:c0:98:48:f8:e5:4a:3b:89:8d:e2:ed:19:84:01:
9d:09:26:6d:ae:4d:a3:1d:c7:0c:97:ab:70:84:5a:
99:83:c6:b4:80:34:5f:59:20:82:46:1d:ac:64:5d:
73:b7:51:23:c5:d0:1d:55:0c:f4:f4:73:77:0a:e8:
54:d3:19:08:b2:78:20:15:c1:ba:30:fe:04:4c:61:
4a:c4:3f:7d:3a:6f:64:d1:7c:26:f9:bb:73:07:69:
c7:f2:dc:1e:30:65:a4:67:ac:da:d7:ba:76:c6:2f:
91:0c:81:d4:bc:4a:11:24:91:34:69:43:a3:98:55:
fd:8a:74:9a:16:77:e7:bf:d0:6d:78:8e:41:8e:13:
c5:c5:91:b2:3f:19:e8:d9:09:c8:95:74:f7:c6:83:
9a:e2:ec:0a:e4:c4:1e:97:9d:2e:61:9c:04:8a:10:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B3:3E:51:B0:59:5A:43:11:1A:42:DD:3C:64:15:10:9B:35:9D:A5
X509v3 Authority Key Identifier:
keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/gbM-UbBZWkMRGkLdPGQVEJs1naU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.176.0/20
80.254.0.0/20
IPv6:
2a06:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
64:79:ec:a9:4f:21:4a:17:c0:9a:ec:4c:14:33:ee:04:12:f5:
ef:15:75:0d:13:ac:4c:e6:cb:c3:df:2f:cd:c5:ea:fd:75:26:
4e:01:17:69:af:b4:9b:5b:ee:99:cf:51:28:90:c7:da:ac:eb:
5e:fc:c0:42:ac:f5:c7:7d:07:23:6e:f1:45:ef:01:2f:ea:95:
f9:8a:e9:5f:e3:3e:be:26:b3:57:4e:7f:67:a1:45:c1:c4:8d:
b0:7c:ac:0d:36:7c:99:ef:5c:de:4b:da:bf:fb:67:33:67:c7:
e8:a4:3e:ec:31:62:fc:30:cd:d8:28:3f:4f:b6:1f:c2:4b:e8:
f1:98:19:4e:10:e6:2b:8d:2c:bb:81:ac:96:d3:61:17:43:97:
6c:e0:7c:00:fa:1e:7a:46:8a:32:7d:90:43:f3:98:37:f1:a9:
bd:a7:a2:94:af:9d:ba:69:2f:f2:43:a1:90:f0:6e:39:43:ad:
fc:ad:60:64:d6:7a:07:2e:dc:a8:21:46:61:4f:65:52:4b:4d:
45:ad:a3:5b:de:e9:ec:fe:1c:97:e6:6d:56:18:da:66:5e:6d:
51:f6:30:98:02:1a:fb:20:65:98:ad:28:39:67:62:75:c4:6f:
d8:29:3d:d5:6f:df:d3:c4:ec:54:1b:01:e1:c6:7a:3e:06:9a:
b0:90:7a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:09 2025 by rpki-client