Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/_GMjCgOppj-cDNqGf9sL7bV12vk.roa
File: _GMjCgOppj-cDNqGf9sL7bV12vk.roa (raw, json)
Hash identifier: TsdjcA8kBAsvuIEMhSHqHIIP+sdYNNN8QiJUeKvHVXo=
Subject key identifier: FC:63:23:0A:03:A9:A6:3F:9C:0C:DA:86:7F:DB:0B:ED:B5:75:DA:F9
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 01A080830998DC2B808D4997783410F1FBE4
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/_GMjCgOppj-cDNqGf9sL7bV12vk.roa
Signing time: Tue 08 Sep 2026 10:14:26 +0000
ROA not before: Tue 08 Sep 2026 10:14:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51809
IP address blocks: 87.192.96.0/21 maxlen: 21
89.127.224.0/22 maxlen: 22
185.138.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:83:09:98:dc:2b:80:8d:49:97:78:34:10:f1:fb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Sep 8 10:14:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc63230a03a9a63f9c0cda867fdb0bedb575daf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:fc:dd:54:a6:32:8a:86:c6:3c:55:64:09:
03:be:7e:c7:50:45:14:cf:4b:6f:cb:a5:9f:69:c0:
10:10:e9:14:fd:b5:5b:cf:3c:76:8b:f6:92:4d:d0:
02:74:ad:32:3d:0c:c7:e5:b2:51:bf:36:9d:82:76:
7d:2e:68:44:df:28:e6:45:13:24:bd:16:20:69:e4:
b1:af:b2:98:35:1c:74:fb:0e:e3:a8:20:71:f4:5f:
9d:69:d1:44:d5:fe:7f:4f:ae:25:de:09:4f:5f:c5:
6d:07:3f:48:c6:ca:8e:62:1f:e7:22:0e:e6:aa:26:
29:77:9c:04:6b:38:74:b2:dc:ab:57:9d:66:b8:46:
12:15:3e:df:b2:e9:16:b5:50:f5:5d:0c:a3:43:b5:
d3:ad:08:df:05:59:0c:4c:b4:a2:59:d1:37:8d:16:
67:e7:6b:b5:f4:02:68:38:14:02:c4:4c:8a:ff:3f:
2f:af:42:d4:a2:34:8d:0d:e5:49:f7:0b:50:e1:ec:
75:1e:c7:41:ac:3f:4e:a4:93:8a:56:18:d2:3b:77:
aa:d4:c0:a3:23:cd:9b:e0:f0:79:59:f2:09:bf:20:
9d:3a:1a:20:4d:bc:2e:19:3c:5f:66:67:2c:f9:74:
79:a2:9d:d9:35:09:01:24:eb:8b:00:37:15:8e:e9:
13:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:63:23:0A:03:A9:A6:3F:9C:0C:DA:86:7F:DB:0B:ED:B5:75:DA:F9
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/_GMjCgOppj-cDNqGf9sL7bV12vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.96.0/21
89.127.224.0/22
185.138.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:7b:6b:db:cb:f8:95:32:b9:d1:0e:49:41:9c:fb:8b:d0:3f:
01:92:32:5b:ff:38:2d:1c:c9:11:24:e6:b3:39:b7:11:5e:54:
94:39:8f:5e:ef:e6:25:61:fd:ab:22:34:6b:7a:73:9a:84:ee:
08:51:ab:b0:4f:72:2b:1b:4b:11:0d:2f:bb:60:77:b6:f3:d7:
91:b0:cb:1b:4b:7a:d4:b3:cf:61:3f:ea:16:42:25:ed:6f:36:
99:e3:50:bd:61:08:19:b0:02:e7:f8:54:78:a4:5c:7a:fd:5c:
9f:98:82:44:6d:98:13:8b:77:40:0a:14:62:cf:92:48:49:3d:
ee:ba:1c:40:61:ac:2b:c5:65:ce:a1:f9:ab:45:8d:05:1e:b2:
e6:dc:e4:ad:2c:ba:25:8d:92:c7:15:19:f8:fc:68:6e:d3:7b:
17:4f:34:59:aa:92:8f:76:5f:23:9d:de:20:9b:61:34:2e:09:
6e:9a:04:30:29:68:5e:5a:96:de:23:35:84:45:fe:0d:b7:08:
5f:22:df:aa:df:d8:f9:65:4b:d3:81:4c:e3:1c:56:ec:8b:c6:
c9:9f:36:64:4e:61:c3:1a:89:2b:6f:68:92:d7:1e:3b:f0:ce:
5a:54:a4:ec:37:52:37:c7:44:e9:c1:3a:0b:a8:ac:d1:e0:15:
eb:fa:76:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:06:58 2026 by rpki-client