Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/gbwaZTGbUT4MgYyVWqH_Yxbm6BE.roa
File: gbwaZTGbUT4MgYyVWqH_Yxbm6BE.roa (raw, json)
Hash identifier: TQ/zGTlQz3NQCKlqwWoKe+TRZQciv2gVg4AFLomor+E=
Subject key identifier: 81:BC:1A:65:31:9B:51:3E:0C:81:8C:95:5A:A1:FF:63:16:E6:E8:11
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0C68D592B50DD8ED65648D093DAC23257
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/gbwaZTGbUT4MgYyVWqH_Yxbm6BE.roa
Signing time: Tue 22 Sep 2026 00:39:07 +0000
ROA not before: Tue 22 Sep 2026 00:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a10:fa80:5::/48 maxlen: 48
2a10:fa80:6::/48 maxlen: 48
2a10:fa80:f::/48 maxlen: 48
2a10:fa80:110::/48 maxlen: 48
2a10:fa80:2000::/36 maxlen: 36
2a10:fa81:f00::/40 maxlen: 40
2a10:fa81:1500::/40 maxlen: 48
2a10:fa81:2100::/40 maxlen: 48
2a10:fa81:2943::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:8d:59:2b:50:dd:8e:d6:56:48:d0:93:da:c2:32:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 22 00:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81bc1a65319b513e0c818c955aa1ff6316e6e811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:ce:95:39:55:1f:a2:09:10:33:32:42:e6:
39:3a:60:67:9b:6b:73:a5:63:e7:b4:40:38:f2:bf:
01:8b:a4:91:20:2c:76:d7:a8:1c:6f:1b:71:5c:9c:
75:df:f0:35:f7:0f:74:22:b4:5c:22:ca:50:62:67:
75:44:a8:1d:f0:a1:f5:33:07:18:85:f6:70:65:0b:
d1:e2:46:4f:6a:ac:58:ff:ba:d5:ad:8c:7b:91:dc:
14:77:92:50:29:fb:ef:c7:d9:02:b2:11:47:2d:71:
f2:a6:9c:72:e7:44:7d:dc:f5:b6:a2:f2:c9:a5:bf:
3b:e3:3d:77:2b:ec:9a:fa:d4:04:ba:eb:32:d5:91:
13:28:07:62:7a:f5:0c:bb:bd:3e:2b:43:47:72:52:
21:56:5b:1d:b9:98:01:8b:b6:ab:1b:04:86:ac:7f:
a5:b6:0e:26:f0:61:69:d8:6f:0a:15:6f:4d:09:b4:
17:43:6f:b2:2a:b3:53:e4:53:40:a7:9f:ba:f9:67:
a7:ec:0a:6b:ce:12:7d:88:4a:6a:08:dc:d3:e6:ae:
0b:5f:e4:19:f4:8f:91:62:68:69:0f:2b:5e:47:ff:
85:05:56:80:8f:2b:8c:6c:11:0b:a8:8c:63:39:53:
7e:97:d3:d8:51:e9:97:fa:a0:25:e0:ee:ef:0e:54:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BC:1A:65:31:9B:51:3E:0C:81:8C:95:5A:A1:FF:63:16:E6:E8:11
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/gbwaZTGbUT4MgYyVWqH_Yxbm6BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:5::-2a10:fa80:6:ffff:ffff:ffff:ffff:ffff
2a10:fa80:f::/48
2a10:fa80:110::/48
2a10:fa80:2000::/36
2a10:fa81:f00::/40
2a10:fa81:1500::/40
2a10:fa81:2100::/40
2a10:fa81:2943::/48
Signature Algorithm: sha256WithRSAEncryption
39:45:66:dc:66:49:81:8c:95:b6:30:f5:12:eb:9f:87:eb:47:
44:99:f7:5d:aa:bd:9d:c0:0c:33:74:5f:c1:51:d5:51:6e:49:
e0:17:60:67:f8:75:44:36:e0:86:87:61:ca:a3:aa:3f:31:b3:
68:ea:c8:ac:42:c0:27:59:c0:26:48:45:b6:9b:00:c7:6b:8c:
79:f0:23:2d:c0:8a:51:30:61:a6:1d:dd:1d:2b:7b:35:1b:1d:
70:18:d3:f9:bd:1e:67:1e:3f:f7:3c:49:e2:30:7b:8c:6e:25:
d8:78:8c:67:e4:ef:46:37:37:0b:e5:70:23:52:60:16:2e:44:
b8:91:21:48:7b:ed:43:89:91:96:0c:3e:7c:fa:d6:fc:16:20:
16:df:a7:08:00:77:2a:36:9b:10:09:f8:b4:8a:3d:56:22:48:
3e:dd:80:f8:2c:2d:c1:4f:14:79:bc:96:4c:5f:b7:dc:0e:1b:
a3:96:23:dc:fd:88:3d:74:6d:7c:54:72:c7:10:e5:14:37:0a:
eb:77:a5:2d:2d:21:23:e6:43:a7:47:de:e3:64:7c:b2:02:7f:
71:6c:ee:44:aa:17:4c:73:88:3b:17:fc:5a:31:5d:3b:23:22:
b5:bf:73:b8:13:ff:7a:be:ec:f3:60:6a:8d:16:36:16:ba:f3:
c5:7b:3a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:57:25 2026 by rpki-client