Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/GOY9-g4eYZKr3CUc2VmgYHD648g.roa
File: GOY9-g4eYZKr3CUc2VmgYHD648g.roa (raw, json)
Hash identifier: rHoaqUeCplV2dnhZowplHvJXPbD1HPyMQLvKsO9NHOU=
Subject key identifier: 18:E6:3D:FA:0E:1E:61:92:AB:DC:25:1C:D9:59:A0:60:70:FA:E3:C8
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019F8FA52B60380CC5ED9F3BFE4DE904EDCD
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/GOY9-g4eYZKr3CUc2VmgYHD648g.roa
Signing time: Thu 23 Jul 2026 15:43:14 +0000
ROA not before: Thu 23 Jul 2026 15:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a0e:d300::/29 maxlen: 29
2a0f:89c0::/29 maxlen: 29
2a0f:e3c0::/29 maxlen: 29
2a10:7ac0::/29 maxlen: 29
2a13:b740::/29 maxlen: 29
2a13:bd40::/29 maxlen: 29
2a13:bec0::/29 maxlen: 29
2a13:d0c0::/32 maxlen: 32
2a13:d1c0::/29 maxlen: 29
2a13:dfc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:a5:2b:60:38:0c:c5:ed:9f:3b:fe:4d:e9:04:ed:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jul 23 15:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18e63dfa0e1e6192abdc251cd959a06070fae3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c5:a6:05:79:c5:f9:7b:d5:97:4d:34:c0:88:
28:65:30:88:73:b4:c7:99:89:3d:51:b6:11:9b:09:
c9:27:f1:76:68:dd:df:60:0e:c4:9f:94:7d:f7:cd:
ae:7b:db:6d:80:58:a7:67:b8:a7:22:61:a8:0e:6c:
2f:77:18:2b:6c:e9:d1:e0:14:c1:cf:df:17:e3:0a:
ad:b1:c9:6e:02:03:e0:f1:47:06:22:92:99:84:8c:
5f:1f:7b:01:d5:73:cb:25:62:69:c9:81:53:a6:e1:
f7:dd:83:a8:69:ec:54:38:b4:60:cb:7d:65:53:7a:
fb:96:e9:b3:a9:d7:ce:cb:10:dc:d1:1e:6b:34:19:
2a:db:b0:9b:c2:65:f5:d3:0b:3e:bb:6b:da:fa:37:
c2:b2:ae:4d:c8:e2:92:ed:e1:ff:75:3b:28:a4:62:
d2:cf:cf:7a:73:ba:1f:87:cd:21:f0:d0:92:de:46:
5b:e8:7d:2d:14:64:db:8e:d0:8b:2e:64:75:6e:c3:
dd:f6:00:49:ab:1e:07:56:c3:70:75:0a:39:34:f3:
19:5a:d7:72:dc:88:51:5a:28:df:32:6c:dc:cf:3b:
e1:23:47:c1:13:b2:1c:19:50:23:3b:34:b2:01:69:
65:3c:e1:be:72:cb:42:6a:01:5b:46:fd:2a:a9:50:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E6:3D:FA:0E:1E:61:92:AB:DC:25:1C:D9:59:A0:60:70:FA:E3:C8
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/GOY9-g4eYZKr3CUc2VmgYHD648g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d300::/29
2a0f:89c0::/29
2a0f:e3c0::/29
2a10:7ac0::/29
2a13:b740::/29
2a13:bd40::/29
2a13:bec0::/29
2a13:d0c0::/32
2a13:d1c0::/29
2a13:dfc0::/29
Signature Algorithm: sha256WithRSAEncryption
69:fe:0f:13:b2:f0:02:49:ec:ed:e5:f5:5b:c6:bc:92:d4:3c:
cd:10:89:c7:f5:97:53:c1:a7:6b:cc:cb:18:9d:f3:87:e3:45:
a7:67:a7:c3:c6:cd:2d:d5:19:9d:7b:b9:fd:80:11:54:6c:14:
48:78:1d:9e:30:78:09:4d:eb:09:70:f5:29:ee:9c:ce:33:fd:
00:2b:bb:a5:4a:72:78:a7:28:ff:25:5b:4d:33:c3:46:53:9e:
8b:8f:bc:8a:d8:52:a7:b8:dd:50:84:31:8c:0e:df:4b:50:59:
da:fc:92:86:e1:33:18:19:ce:26:3b:9c:1c:af:e9:7b:c2:a9:
b6:b5:37:0e:92:6f:24:d1:5b:74:74:b8:36:b9:82:15:8b:ff:
e8:73:7b:ef:b5:72:4a:3b:25:20:0c:6c:6b:ca:e2:cd:00:91:
0f:1c:4e:2f:57:f1:da:6b:70:8e:12:c1:8a:6b:44:fc:1b:71:
e7:d9:93:b0:8f:6a:39:06:da:de:38:fb:9b:15:d8:98:46:43:
7d:99:4d:7b:44:b8:95:0d:32:6b:da:fa:ea:50:ef:21:b4:7f:
63:eb:66:82:77:19:42:d3:ee:0e:ed:74:16:16:9a:c9:71:3b:
9d:bf:3f:92:a5:97:d3:c7:ff:9e:09:ba:1b:79:02:62:87:b6:
05:1c:2d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:06 2026 by rpki-client