Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/4bGr-yXBWayGcjl1qM4F7v2Bc2M.roa
File: 4bGr-yXBWayGcjl1qM4F7v2Bc2M.roa (raw, json)
Hash identifier: eCKqYMCveD4+cT5IE20UBn+5fdkZH3p4iIVGa8fR06o=
Subject key identifier: E1:B1:AB:FB:25:C1:59:AC:86:72:39:75:A8:CE:05:EE:FD:81:73:63
Certificate issuer: /CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
Certificate serial: 019F2369091AAE139DC0645DE6325064CA31
Authority key identifier: 80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/4bGr-yXBWayGcjl1qM4F7v2Bc2M.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215938
IP address blocks: 2a14:52c0:4042::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:09:1a:ae:13:9d:c0:64:5d:e6:32:50:64:ca:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1b1abfb25c159ac86723975a8ce05eefd817363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:3c:58:fe:ce:47:12:57:57:9e:df:30:94:
48:dc:80:7e:8d:40:76:98:55:9c:4e:7c:c4:b0:87:
e3:87:4f:4e:24:03:49:f9:e4:72:a9:84:67:94:af:
04:f7:6d:05:81:28:80:4b:eb:3a:b1:12:9b:d4:74:
5e:16:27:99:9c:cc:25:aa:88:4f:9f:f1:75:c8:2e:
8d:8e:f5:d4:fd:77:84:fe:29:a3:5a:5e:57:be:af:
c8:83:99:c7:ce:6d:94:56:3c:d0:75:ef:b3:be:77:
65:22:57:57:05:ce:62:84:48:37:02:e5:bb:17:f7:
0c:e0:f7:35:41:b9:a2:f0:c1:90:2e:e6:5f:20:a0:
9a:0b:cc:33:67:3b:e7:8b:ac:c5:bf:47:2f:ab:ed:
f3:4f:87:67:1a:5f:80:ec:fb:f0:fb:0a:b0:4b:60:
7b:ad:28:f8:ad:69:4f:0d:b3:2f:4b:a9:c9:b8:c7:
77:de:68:74:a1:bc:2a:73:07:3b:08:e3:98:2f:7d:
ad:ff:5a:68:29:a0:9c:f7:cd:66:2e:dc:40:03:5e:
8d:f3:fa:36:28:78:f1:fd:81:e6:b2:5f:1e:57:5d:
dc:94:80:dd:10:71:3e:e3:74:b4:1d:14:95:fe:de:
29:4c:5d:b5:72:9b:bc:7a:0e:6c:5a:a9:b9:27:6d:
cd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B1:AB:FB:25:C1:59:AC:86:72:39:75:A8:CE:05:EE:FD:81:73:63
X509v3 Authority Key Identifier:
keyid:80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/4bGr-yXBWayGcjl1qM4F7v2Bc2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:52c0:4042::/48
Signature Algorithm: sha256WithRSAEncryption
68:cf:59:d7:c6:4c:9c:b3:cb:9b:29:a5:22:85:65:3a:8e:56:
38:8c:5a:d2:9f:47:8c:4d:73:2f:0a:dd:78:68:a1:32:1c:e4:
1f:e3:cd:23:ae:ce:46:fd:4a:59:25:10:f4:f7:0c:fc:c7:03:
87:c9:9d:db:9c:1b:b3:2a:90:9b:19:cf:8f:60:be:21:f1:e2:
fd:b4:45:3f:e7:b7:80:ca:25:40:49:d9:0e:d6:04:a3:9e:77:
c2:c0:7e:02:1f:82:a6:c6:46:1d:6e:8a:38:e2:73:b8:d0:66:
fe:26:62:79:ca:d8:47:a8:d4:72:b2:b6:78:e6:81:a4:b1:66:
fa:c1:19:30:d6:17:32:9f:2b:ca:43:f6:3f:3d:e0:d4:ef:c1:
ac:68:91:60:5a:fe:78:7a:ef:4e:51:f4:eb:fe:38:13:b9:7f:
46:fa:f5:0a:a0:fd:4f:c0:51:d7:8c:4f:16:97:45:3a:75:d2:
10:e4:5d:5a:df:50:4b:6e:28:26:21:ed:e4:dc:36:0e:6c:7c:
dd:86:14:2e:cd:45:d2:db:6b:8b:46:ed:9e:78:fa:38:67:3f:
df:d6:8e:d6:2e:06:98:bd:9b:10:4d:5d:51:23:b4:e5:ac:13:
39:7b:b3:42:24:fb:1f:29:05:24:20:85:35:b8:52:59:2e:3a:
55:6a:a5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:04:03 2026 by rpki-client