Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/GGelaebdyv7wKj2s1MaS_yeYfsg.roa
File: GGelaebdyv7wKj2s1MaS_yeYfsg.roa (raw, json)
Hash identifier: t1/+9CRFTy7pepvLSNI7FD84YDz6M4/rIVe2xaAkI2w=
Subject key identifier: 18:67:A5:69:E6:DD:CA:FE:F0:2A:3D:AC:D4:C6:92:FF:27:98:7E:C8
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 019CC90BEAB3A8C8587B469574DE4F868F2D
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/GGelaebdyv7wKj2s1MaS_yeYfsg.roa
Signing time: Sat 07 Mar 2026 16:05:26 +0000
ROA not before: Sat 07 Mar 2026 16:05:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40662
IP address blocks: 2001:3580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:0b:ea:b3:a8:c8:58:7b:46:95:74:de:4f:86:8f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Mar 7 16:05:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1867a569e6ddcafef02a3dacd4c692ff27987ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:b5:48:d7:ec:78:0c:b1:02:fa:27:84:68:
aa:92:4f:75:c2:11:6c:ac:07:60:41:7b:39:d4:a3:
27:54:19:e4:32:85:bb:2e:f7:0b:44:61:2a:6a:07:
71:23:4a:32:7f:06:62:84:98:0f:ad:f0:06:1e:be:
9b:8f:69:35:24:44:49:ce:05:13:9c:38:00:a5:18:
77:da:6f:98:e0:29:b8:9d:0e:0e:fe:2c:fb:2d:3b:
cf:99:f0:7c:f8:7b:61:61:22:9e:f0:fd:ff:eb:63:
49:60:82:7e:a0:45:06:f0:03:a1:32:20:a8:80:ce:
85:f3:42:a2:66:3a:ce:be:c0:ad:2e:e5:33:51:b7:
52:5f:86:9c:f1:b3:8f:25:d5:26:b4:3f:2e:32:23:
26:8c:90:71:c1:be:2f:87:eb:b6:f0:2f:40:df:e5:
0e:1a:44:fa:3a:fe:03:bc:21:78:53:d7:10:99:ec:
a6:4e:e0:0a:86:6b:ba:a5:76:67:8a:5e:3d:45:3c:
cf:cf:d7:ba:ed:9f:f1:03:74:0b:93:ef:d7:33:63:
29:dd:af:42:76:f0:1e:09:de:53:d7:5d:08:0b:63:
5b:0f:3d:d3:12:82:e3:52:0e:63:fe:51:9a:e6:c4:
bb:ff:91:a0:dd:a7:95:79:a6:51:b5:5d:da:cc:ee:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:67:A5:69:E6:DD:CA:FE:F0:2A:3D:AC:D4:C6:92:FF:27:98:7E:C8
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/GGelaebdyv7wKj2s1MaS_yeYfsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3580::/29
Signature Algorithm: sha256WithRSAEncryption
0d:df:0a:43:0f:6c:bd:7a:43:eb:78:fa:2c:56:75:99:3b:9a:
f1:2f:eb:aa:2e:bc:c3:16:79:e3:66:85:f4:79:5e:e6:ec:e8:
aa:f2:07:86:e7:93:c9:85:fb:5e:3c:05:b5:05:78:6d:8e:a6:
f5:f3:ec:70:ca:dc:54:dd:17:0c:e9:ac:f1:fe:ed:ac:1f:a6:
8a:36:48:8b:84:b4:a7:f1:d0:e1:ec:ca:c6:ec:53:65:40:b3:
a7:7b:dd:ca:bc:7e:db:9b:e6:f8:2f:9f:82:35:b1:40:85:dc:
17:e0:79:e6:11:4a:0a:ac:1c:95:ac:45:d3:61:02:73:93:0f:
f9:9c:f2:63:1a:d5:2e:20:49:12:8b:41:4f:40:e0:c7:98:90:
fa:0d:4b:4c:bc:99:80:47:ac:9f:fb:7c:5e:53:49:01:49:d7:
b8:7f:6f:d6:ac:75:74:1f:c8:d8:e1:62:07:b6:31:d0:10:9d:
df:49:e5:81:e5:2f:74:08:38:15:0c:57:9c:02:0e:81:fb:29:
75:c2:56:c5:cd:6b:c2:99:d3:e2:82:33:48:4c:e9:f1:0c:58:
8c:01:84:36:2e:f5:8a:c4:02:43:00:c1:34:49:f7:a8:48:ce:
95:68:05:28:37:e8:4a:d7:ba:8a:87:8e:49:b1:c5:3d:19:0a:
65:f1:db:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:16 2026 by rpki-client