Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/G5fLPZRjKKRoLCpIV-waURZrJ8s.roa
File: G5fLPZRjKKRoLCpIV-waURZrJ8s.roa (raw, json)
Hash identifier: qxOKRKBggo1ovV2+66rUkuFpWW7sO54wsqlV/Nc9GfI=
Subject key identifier: 1B:97:CB:3D:94:63:28:A4:68:2C:2A:48:57:EC:1A:51:16:6B:27:CB
Certificate issuer: /CN=a6d2ed7165cb51bcd28068b2970235cdbd01280b
Certificate serial: 019EFDB1E468FF74D3A57D58CB4DCBBF5959
Authority key identifier: A6:D2:ED:71:65:CB:51:BC:D2:80:68:B2:97:02:35:CD:BD:01:28:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/G5fLPZRjKKRoLCpIV-waURZrJ8s.roa
Signing time: Thu 25 Jun 2026 07:32:34 +0000
ROA not before: Thu 25 Jun 2026 07:32:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219354
IP address blocks: 2001:67c:da8::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:b1:e4:68:ff:74:d3:a5:7d:58:cb:4d:cb:bf:59:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6d2ed7165cb51bcd28068b2970235cdbd01280b
Validity
Not Before: Jun 25 07:32:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b97cb3d946328a4682c2a4857ec1a51166b27cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:fe:16:48:74:34:b7:97:67:aa:75:88:0a:
6c:bc:bb:bc:c5:13:fe:d8:fc:8a:4b:d2:37:e8:3d:
2b:54:5c:42:60:cb:24:0d:f8:cf:9a:29:b5:0d:9f:
95:3f:7d:52:37:84:ef:2d:42:34:b1:90:90:1c:53:
74:d8:1c:87:77:a6:af:52:43:84:27:fb:b2:0e:b9:
53:43:c1:ef:99:f2:42:7d:7a:f8:84:fa:36:11:a1:
a2:a8:b3:44:2e:c8:88:62:f8:b2:fc:67:07:92:d3:
ce:cb:31:bb:14:36:97:57:9f:11:2a:45:dd:ca:be:
6f:b0:11:27:21:c9:80:81:b5:26:22:8a:74:ed:cc:
1e:93:31:58:e5:3d:a0:30:81:32:5c:01:d4:41:3b:
c5:cb:3e:85:3e:a0:16:f6:e9:2d:d9:5a:2d:6d:c9:
8e:e4:0b:c1:c5:92:3f:01:d1:b5:db:1d:07:06:61:
6a:14:ab:2e:57:ab:82:cf:01:01:0b:20:49:14:5f:
45:a4:1b:10:c9:e7:98:0e:c9:fa:58:29:a3:4e:9a:
5a:11:98:e1:20:d9:c5:e8:28:a1:79:36:c0:0a:ee:
c0:d6:a6:e9:3f:0e:ba:c9:00:a5:c2:b7:b5:51:e9:
6b:94:2f:5c:b9:0f:a7:80:41:68:2e:a7:46:88:8f:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:97:CB:3D:94:63:28:A4:68:2C:2A:48:57:EC:1A:51:16:6B:27:CB
X509v3 Authority Key Identifier:
keyid:A6:D2:ED:71:65:CB:51:BC:D2:80:68:B2:97:02:35:CD:BD:01:28:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/G5fLPZRjKKRoLCpIV-waURZrJ8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:da8::/48
Signature Algorithm: sha256WithRSAEncryption
88:7a:b9:c7:9f:73:3d:b1:5b:c4:c2:a8:4d:23:96:05:27:52:
6d:8e:b9:8e:dc:e4:47:85:7e:c6:2e:83:6a:67:f5:a5:71:89:
e4:ab:81:09:83:a3:5a:fa:72:7c:ba:28:68:ac:1a:54:0c:dd:
a1:50:6e:de:dc:27:90:41:63:86:b3:41:f0:32:b4:d3:fa:dc:
28:33:b9:9d:b3:7a:c3:9b:02:8c:ef:68:eb:be:71:30:10:4b:
b7:67:69:59:f4:6c:b0:4d:f2:7d:d6:62:72:e5:4a:dc:b9:13:
67:65:ab:8c:78:1a:a2:22:d5:8c:ae:1b:b1:f3:4f:ff:56:62:
47:3e:bb:9a:25:59:45:dd:bd:57:71:06:12:d8:d6:7a:c3:e8:
e5:e3:e1:3e:b9:5c:28:44:6b:76:dd:04:33:bd:a6:20:2d:b5:
73:5e:cd:2f:4d:cb:01:14:fe:a7:62:9d:a9:e3:21:f5:02:96:
ee:70:71:11:13:5f:3b:f5:a2:3e:e5:76:e2:82:e6:1a:8b:d7:
81:bc:a2:31:2e:cd:4e:70:49:04:50:7d:cc:d3:a4:c6:ba:c1:
fa:a0:38:57:2c:f9:21:c5:65:f5:f0:b5:03:4e:73:ac:3f:1e:
55:75:6b:48:9a:f2:68:77:de:a4:6c:1b:e9:99:58:a1:18:e8:
6c:c1:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:33 2026 by rpki-client