Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/gjzkvOpwo1VRhdor0ibZ6CC1RMY.roa
File: gjzkvOpwo1VRhdor0ibZ6CC1RMY.roa (raw, json)
Hash identifier: rl9pYDDMx4wTP/iHtIkLTivkQb2U2V3qvKBigsxkyqk=
Subject key identifier: 82:3C:E4:BC:EA:70:A3:55:51:85:DA:2B:D2:26:D9:E8:20:B5:44:C6
Certificate issuer: /CN=5de369977953e5bd7df3381788a425a57bc1c254
Certificate serial: 019F2368A8DF13A3DCD93EF1918596A76120
Authority key identifier: 5D:E3:69:97:79:53:E5:BD:7D:F3:38:17:88:A4:25:A5:7B:C1:C2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/gjzkvOpwo1VRhdor0ibZ6CC1RMY.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197871
IP address blocks: 2001:678:d44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a8:df:13:a3:dc:d9:3e:f1:91:85:96:a7:61:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de369977953e5bd7df3381788a425a57bc1c254
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=823ce4bcea70a3555185da2bd226d9e820b544c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:e2:92:70:aa:ad:f4:1d:3b:34:fb:02:71:
ca:3a:36:96:83:5c:7b:f0:85:8b:1e:f9:8e:83:98:
80:3d:0a:ba:3d:33:59:f8:2e:20:c0:c4:8d:3f:f6:
99:9d:4d:08:b0:db:eb:2a:ac:84:be:64:5a:6d:cc:
08:ae:57:9a:00:14:6a:9d:46:a8:96:d3:c5:ae:b6:
e7:a3:8b:8f:ef:e0:c9:61:6a:41:a0:12:49:d9:fb:
e6:c9:dd:57:14:94:9d:91:98:f2:53:d3:c7:1d:23:
ab:70:5c:e4:9c:8a:b1:52:eb:2a:2c:12:1c:7f:8d:
38:a2:f2:6f:f8:d1:c9:4f:f4:fb:f5:48:12:3d:95:
6b:a1:70:64:e2:8c:46:97:73:27:97:81:4d:cb:ad:
50:cc:0e:65:25:7f:04:da:5c:dc:23:df:c9:fc:10:
cb:63:47:2a:44:33:ff:f1:c9:9f:b2:c4:d8:eb:e1:
95:55:89:78:5e:04:01:59:60:53:f8:53:45:93:07:
bb:2d:80:cf:2b:9c:10:6e:6b:9d:77:98:55:13:3b:
99:89:d8:07:e6:e8:02:94:fe:44:6f:e4:ef:4a:10:
8a:48:c8:36:e0:1b:d0:ca:f7:6d:5f:c1:cd:7c:71:
a4:2e:06:4c:af:96:fd:cc:40:7b:26:e7:de:18:93:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3C:E4:BC:EA:70:A3:55:51:85:DA:2B:D2:26:D9:E8:20:B5:44:C6
X509v3 Authority Key Identifier:
keyid:5D:E3:69:97:79:53:E5:BD:7D:F3:38:17:88:A4:25:A5:7B:C1:C2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/gjzkvOpwo1VRhdor0ibZ6CC1RMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d44::/48
Signature Algorithm: sha256WithRSAEncryption
8a:a0:d0:4f:ca:52:b0:ce:14:5d:ea:02:8e:10:a0:36:f4:99:
3c:14:01:83:5b:1b:f4:fe:0b:1f:8d:f7:1c:d3:92:19:e3:c4:
69:18:30:ce:53:7a:84:c6:cd:cd:ab:09:d7:2d:80:ba:32:af:
b2:38:ea:84:28:62:ed:21:8b:10:3f:e8:94:7b:81:c2:f8:a1:
21:8c:c7:dc:07:d4:e4:aa:c7:df:28:fa:ac:dc:f7:d5:15:6a:
6c:0b:d4:71:8a:83:99:71:4c:44:08:73:89:d5:e0:48:e4:b1:
6a:59:f5:63:45:e2:30:67:b5:be:69:0e:d1:f9:20:21:5e:8b:
cd:a2:e6:17:e3:53:fe:c9:ba:c7:0d:be:18:d5:19:7c:3e:03:
1f:ca:d8:38:f9:a3:49:78:7a:1a:7e:d1:8b:04:24:38:d2:11:
74:59:0c:79:68:32:6e:13:e5:07:d1:91:84:bf:43:bc:e6:54:
e4:9f:e6:53:4a:ce:32:95:23:0d:85:fe:f0:f9:45:c3:ca:33:
09:20:c9:43:10:34:46:a4:5d:89:62:5d:4a:06:e6:29:d4:eb:
39:1c:ae:f8:b9:40:ff:b3:4a:be:09:c1:cc:a4:b7:0b:14:9f:
21:48:ab:c4:47:71:da:3e:40:d8:5a:de:df:93:13:47:02:46:
91:7c:6e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:50 2026 by rpki-client