Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/gxhdAMe7wEMvCZhxFngyxSzcIhs.roa
File: gxhdAMe7wEMvCZhxFngyxSzcIhs.roa (raw, json)
Hash identifier: 3BbQpbqM65473F44TzazMsme7vz4RghxlrpvUNHoXkU=
Subject key identifier: 83:18:5D:00:C7:BB:C0:43:2F:09:98:71:16:78:32:C5:2C:DC:22:1B
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 019F47F5E15EC66C60DF0B72112AB1145E92
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/gxhdAMe7wEMvCZhxFngyxSzcIhs.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 2a11:cf80::/29 maxlen: 29
2a12:f700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e1:5e:c6:6c:60:df:0b:72:11:2a:b1:14:5e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83185d00c7bbc0432f099871167832c52cdc221b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:07:64:25:5f:5b:e0:6b:00:ea:fb:48:92:
4e:40:3e:26:3d:3f:7d:d8:3d:d4:51:f9:a0:3c:4f:
a9:21:81:58:3e:4c:7e:17:db:23:df:e5:ed:cf:6d:
f6:46:b2:a8:f3:4d:74:8e:2a:2c:a6:6c:dc:cd:2e:
ab:fb:00:13:57:2a:e0:0e:4a:29:d2:b5:a9:87:81:
ed:d3:4d:85:c9:aa:99:be:61:ef:77:58:39:2c:83:
4a:07:a1:90:db:00:57:c2:17:08:cd:89:cc:62:b4:
34:20:67:46:80:d7:94:18:87:06:2b:cc:16:84:a1:
ed:60:c0:e2:eb:78:24:f8:39:1f:82:85:3e:8c:a2:
44:f8:20:aa:21:1f:0c:ba:54:03:ce:24:4b:1e:bc:
30:1b:94:70:99:4d:43:ee:45:be:e5:a3:eb:99:9b:
c8:5a:62:97:f7:fe:b4:2d:07:a6:82:d9:77:d9:84:
41:41:39:eb:2a:72:d2:e2:e4:ab:c5:35:6a:92:10:
ef:b5:ae:cf:74:47:22:63:0b:e6:41:0d:d4:9e:f8:
75:2c:dd:5c:54:10:7e:fc:ab:bb:61:ef:b6:8b:2c:
bf:33:53:a7:9a:d3:d0:29:3f:98:71:44:a4:19:29:
57:90:2f:a2:0e:36:3e:e7:74:eb:df:e7:2a:a1:b5:
04:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:18:5D:00:C7:BB:C0:43:2F:09:98:71:16:78:32:C5:2C:DC:22:1B
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/gxhdAMe7wEMvCZhxFngyxSzcIhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:cf80::/29
2a12:f700::/29
Signature Algorithm: sha256WithRSAEncryption
81:02:4b:ae:27:35:43:03:36:81:27:4c:e6:15:e8:f8:eb:c6:
95:8f:c1:ce:f6:54:66:b8:3e:f8:89:37:5f:e8:4a:6d:96:c6:
fb:9d:1e:5b:ec:d8:e0:8a:4e:2a:a4:34:50:df:ef:36:23:d5:
39:57:bc:9f:61:04:f8:86:51:fa:5e:47:12:e1:cb:ec:81:13:
62:a6:06:05:e1:a5:25:66:d9:08:b8:19:52:cb:5d:b8:3b:a6:
99:cf:11:e1:a2:9e:de:cf:57:5f:65:ba:12:31:95:df:95:83:
70:58:42:f2:f9:ec:7b:d5:9f:fd:2a:bb:a4:d4:80:42:b2:85:
c0:00:06:b8:2b:b8:2d:3d:a4:07:f2:78:b9:3e:41:90:ed:35:
cd:22:92:36:c2:58:8f:40:a5:de:66:4a:4c:6e:dc:f0:25:a0:
e9:38:8a:fc:8a:74:3f:a4:15:6a:21:e5:ca:fd:96:1a:70:ae:
fb:c4:92:dd:0b:5b:22:42:12:57:cf:96:f2:77:76:18:f2:c2:
46:91:96:31:60:2d:56:aa:a7:38:d5:9f:d0:48:22:65:54:e0:
f7:ec:04:0d:18:ee:f1:b1:fe:1b:f1:75:87:64:66:99:32:a8:
44:e7:11:ae:6a:d0:bb:3d:34:ef:d6:64:54:73:ce:3d:90:20:
f3:9b:2b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:14 2026 by rpki-client