Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/gcOeRtdhASpOXftyQUUQHnlSzHY.roa
File: gcOeRtdhASpOXftyQUUQHnlSzHY.roa (raw, json)
Hash identifier: mRt09ink6QbROuNCA4WL011qJeqnMp6lFsCyZXUphZ8=
Subject key identifier: 81:C3:9E:46:D7:61:01:2A:4E:5D:FB:72:41:45:10:1E:79:52:CC:76
Certificate issuer: /CN=ef5d9253bd0d258c95b2b346e48533c942cc23b4
Certificate serial: 019E0480E69118FDE357A8F02F5DD6B4817B
Authority key identifier: EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/gcOeRtdhASpOXftyQUUQHnlSzHY.roa
Signing time: Thu 07 May 2026 22:13:37 +0000
ROA not before: Thu 07 May 2026 22:13:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215968
IP address blocks: 2a13:ac00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:04:80:e6:91:18:fd:e3:57:a8:f0:2f:5d:d6:b4:81:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5d9253bd0d258c95b2b346e48533c942cc23b4
Validity
Not Before: May 7 22:13:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81c39e46d761012a4e5dfb724145101e7952cc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:e0:73:ff:09:56:fe:e1:1d:0f:96:ca:e9:
25:bf:04:3d:17:4f:b6:05:62:5d:ae:58:46:6a:df:
77:71:b2:88:3a:68:1e:6d:aa:d6:df:b9:8a:0a:b3:
ba:87:d1:b1:79:6b:64:fe:ad:f4:d1:44:5f:99:a8:
68:76:37:5d:67:12:03:a8:5a:8b:5b:8a:6b:10:f2:
43:60:63:d0:d1:ec:c9:86:04:19:3c:4c:37:df:7d:
cd:13:3e:7f:b7:c4:5e:fb:09:4b:66:a9:cb:e9:21:
d0:b5:54:78:f7:3d:a5:ea:f3:b7:88:a5:81:d4:41:
05:9d:9f:2b:da:82:73:06:44:f0:28:4d:65:a1:21:
53:d9:50:71:aa:02:27:ae:7b:d6:a3:7b:53:02:78:
42:d0:43:de:92:82:77:69:df:2e:41:b0:e4:5b:c2:
83:12:b1:5a:73:1d:0b:ba:5a:a8:5d:44:6e:34:e4:
fd:e9:b8:9b:e8:bd:fa:eb:55:db:86:9a:98:f2:5f:
fa:f3:b3:07:d7:16:12:7c:5f:d1:51:4d:c3:47:04:
e6:46:6e:54:aa:a4:f8:eb:17:87:b6:13:e3:3c:7b:
c4:e7:1a:f0:d0:8c:81:4a:05:cf:39:d7:04:40:c0:
4f:13:e1:ce:f8:e2:ec:e9:39:3b:9b:be:01:21:a8:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C3:9E:46:D7:61:01:2A:4E:5D:FB:72:41:45:10:1E:79:52:CC:76
X509v3 Authority Key Identifier:
keyid:EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/gcOeRtdhASpOXftyQUUQHnlSzHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ac00::/29
Signature Algorithm: sha256WithRSAEncryption
97:14:20:10:98:55:05:68:70:03:4c:b1:fc:19:59:8c:45:09:
d4:1a:ac:2c:4a:d5:6b:a9:6e:19:90:4d:a8:f2:c7:a5:08:d5:
2f:14:2f:f9:a7:0b:a3:ec:e9:ae:53:ef:06:85:2e:bb:47:1e:
8c:0c:81:30:75:1a:3c:5f:bf:da:ec:56:8f:db:1d:25:32:8b:
53:41:e2:f0:b5:93:51:30:81:1f:30:1f:ac:72:79:f1:03:f5:
04:c7:79:fd:12:4e:f3:f1:7f:c2:66:e6:1b:d9:45:a5:8a:15:
6c:20:6d:3c:6d:78:88:8f:e3:86:6b:23:53:50:df:9b:c1:97:
9d:a1:73:69:cd:e1:01:da:2e:e7:75:0e:f1:9a:e9:12:8a:54:
a8:d8:a9:bc:71:ed:a7:31:cc:7f:20:48:06:18:3a:45:f3:95:
6f:76:72:4b:c2:ab:9e:48:78:f1:53:89:45:ab:3e:ac:a7:7e:
2a:af:13:2d:d5:96:6e:1a:25:f6:d8:e7:e8:65:84:a2:e0:89:
e1:de:40:b0:8e:10:27:1b:87:22:87:b0:f2:2a:69:70:04:7c:
92:f7:85:4c:60:13:fc:2e:ba:c9:6e:cc:bb:e9:40:70:7a:d0:
bd:c8:1d:38:22:8a:c6:cd:9d:b2:41:9d:a6:e1:0c:ac:68:a7:
7a:dc:67:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:23 2026 by rpki-client