Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/gATU6Sq3KDhYPqii9ihS2BkclmU.roa
File: gATU6Sq3KDhYPqii9ihS2BkclmU.roa (raw, json)
Hash identifier: p02v2rnp7yTCrM25rSFt8vbgrnG+OhzwNrUkRhCmho8=
Subject key identifier: 80:04:D4:E9:2A:B7:28:38:58:3E:A8:A2:F6:28:52:D8:19:1C:96:65
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0D41841CB0A6B09B68625833E633DA753
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/gATU6Sq3KDhYPqii9ihS2BkclmU.roa
Signing time: Thu 24 Sep 2026 15:45:54 +0000
ROA not before: Thu 24 Sep 2026 15:45:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43495
IP address blocks: 89.44.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:18:41:cb:0a:6b:09:b6:86:25:83:3e:63:3d:a7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 24 15:45:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8004d4e92ab72838583ea8a2f62852d8191c9665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:a2:2b:e0:4b:55:5b:d1:95:dd:87:dc:4f:
1d:a5:5d:d9:28:84:27:b2:03:38:29:c4:bc:f2:46:
1c:70:2c:43:35:a3:f7:cf:11:ff:9e:d3:28:4e:0c:
27:4b:e7:28:78:cc:1e:5d:8e:1e:59:6e:38:b9:cc:
4f:e3:1f:b0:ac:b2:1f:90:7e:3f:2a:51:0a:6b:27:
bd:df:31:79:98:e5:21:ac:27:fc:d3:5e:4a:34:3c:
b3:b1:a1:e0:55:37:99:21:6e:98:23:62:d6:5b:b1:
8e:25:5a:6d:41:49:2d:16:90:30:26:26:fd:e4:5c:
7b:9f:93:48:28:59:82:e1:ce:51:03:e7:f7:be:2f:
73:cc:fb:47:7b:12:41:34:94:1a:75:df:c5:b0:05:
4a:a3:57:05:2b:50:40:50:d7:72:2b:0e:f8:1a:34:
eb:53:42:66:60:2a:e2:f7:b5:69:fc:0c:e2:c2:be:
1e:61:90:52:23:26:7b:ed:06:76:b7:ee:b1:9d:d3:
1c:3f:3b:b6:82:a6:e2:77:9c:1b:65:16:53:38:8c:
d3:1b:6c:3f:74:20:c3:c9:c5:2a:89:1f:d5:c3:18:
ea:a2:69:49:a5:dc:7d:eb:4b:e4:2f:bd:66:46:64:
66:07:45:c4:e9:d5:4e:14:8f:62:ee:a5:15:68:31:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:04:D4:E9:2A:B7:28:38:58:3E:A8:A2:F6:28:52:D8:19:1C:96:65
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/gATU6Sq3KDhYPqii9ihS2BkclmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.81.0/24
Signature Algorithm: sha256WithRSAEncryption
82:83:aa:01:93:4e:df:66:2f:be:c7:9e:27:78:05:3f:b0:99:
ee:81:fd:5d:73:d8:e2:ff:26:90:54:c3:6e:d5:c8:d6:6f:fc:
a9:82:54:33:7a:f9:ea:22:a8:3a:95:77:a2:e0:a9:28:9c:bf:
93:00:97:41:f8:b1:e4:4b:b5:5c:41:66:de:e7:92:79:9a:39:
69:35:3d:fb:d6:b3:ba:42:25:41:c4:46:2a:08:a9:45:f2:fc:
3c:13:67:6c:4e:8b:52:c4:7f:3d:e3:fc:eb:f5:53:c4:62:33:
1b:86:34:70:c9:9c:e3:5d:10:fe:67:62:0f:07:a3:a1:05:73:
03:15:e9:94:ae:65:fb:08:fd:bb:f5:7f:25:d9:38:9f:0b:a7:
ea:35:49:27:5b:f6:02:49:30:1b:0a:a8:d3:e5:8b:be:75:29:
17:25:14:92:7a:e3:fc:93:ef:7d:82:f0:0f:4e:37:99:27:36:
ee:23:3e:88:96:e4:d3:a7:32:81:da:7c:79:c0:e9:8e:4b:4b:
d8:ac:39:0e:41:86:ad:5a:55:ad:ad:01:32:41:db:a9:47:88:
25:96:5d:58:19:51:6b:16:bd:f1:6d:a3:9e:94:c6:70:a3:31:
76:a3:1d:6f:78:72:37:f7:73:8e:fe:0b:23:62:3a:ab:00:93:
f4:04:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:45:10 2026 by rpki-client