Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GnXFka2siT0uFDUlwP223FcHJwQ.roa
File: GnXFka2siT0uFDUlwP223FcHJwQ.roa (raw, json)
Hash identifier: NPe4HAEw5+g3J+/OWBn2gK379lFRuV2ODMhhsKeFzRI=
Subject key identifier: 1A:75:C5:91:AD:AC:89:3D:2E:14:35:25:C0:FD:B6:DC:57:07:27:04
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0C928C730BCCBE997D792FD709295C4A9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GnXFka2siT0uFDUlwP223FcHJwQ.roa
Signing time: Tue 22 Sep 2026 12:48:07 +0000
ROA not before: Tue 22 Sep 2026 12:48:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402546
IP address blocks: 2a0f:2705::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:28:c7:30:bc:cb:e9:97:d7:92:fd:70:92:95:c4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 22 12:48:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a75c591adac893d2e143525c0fdb6dc57072704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:d8:66:be:31:20:ff:c8:eb:9a:e2:3e:7a:
22:4c:77:c1:23:94:be:7a:0d:09:cb:2b:3a:2b:97:
7c:a5:db:2f:ca:59:b6:f9:25:b8:55:9e:33:d6:47:
34:44:69:1c:23:03:c8:9f:8c:4f:a7:83:c7:14:34:
65:43:87:5f:bd:23:20:24:83:39:c8:5e:54:c0:ab:
66:46:0b:87:09:13:aa:52:37:bd:c1:0b:b5:aa:fa:
8f:82:c0:b8:aa:38:1d:10:5f:3f:df:e7:55:32:84:
bf:29:42:b2:50:9a:5c:b7:db:77:c3:cd:48:f3:e7:
8e:17:94:1f:02:26:26:05:1f:03:35:32:c4:55:a7:
48:34:46:17:32:62:da:f7:be:1b:a2:93:e2:f1:99:
10:9b:ac:84:8f:fa:a4:77:dd:e1:14:73:85:40:27:
76:16:f1:6b:99:59:a5:aa:68:00:77:33:21:4b:e6:
97:a6:c4:35:59:68:ab:87:41:0b:0c:f6:0e:8c:99:
7e:07:b4:b0:6b:8e:db:40:53:0f:66:91:10:fc:d1:
ac:ae:82:ed:e9:3e:27:15:9a:b8:21:93:e9:c9:38:
ea:d8:25:2e:d7:93:6d:8d:e6:dc:4a:db:3f:f4:f4:
eb:a2:67:90:9a:b6:3e:87:44:1d:86:69:a1:7c:46:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:75:C5:91:AD:AC:89:3D:2E:14:35:25:C0:FD:B6:DC:57:07:27:04
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GnXFka2siT0uFDUlwP223FcHJwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2705::/32
Signature Algorithm: sha256WithRSAEncryption
8c:cd:80:f3:5e:35:f0:3a:ed:9f:95:53:a2:d9:22:a9:2f:24:
20:6b:08:6c:fd:70:69:17:0d:a7:cc:5b:b4:14:17:a1:0f:f0:
ae:cb:35:ea:4d:0e:60:2c:26:6b:83:a8:06:a2:aa:5b:72:88:
0c:43:ef:c0:dc:14:21:40:dc:f5:56:f9:7a:ae:6c:3c:62:c4:
8b:bd:a7:04:3c:9d:fc:dc:17:37:08:c9:13:93:2e:15:cc:4e:
47:b6:40:fe:2e:b6:84:04:92:d7:36:ef:10:1d:a4:8b:c8:c3:
14:5a:78:f5:33:81:97:d8:05:38:4e:ff:52:57:9b:7a:07:8a:
94:16:de:3e:49:96:d0:2b:f9:47:86:b9:b8:9b:0e:37:a9:bc:
07:f1:5b:43:f5:e8:1a:51:7d:36:a3:2b:b9:64:f1:b7:58:9d:
c6:bb:dc:d4:97:ad:d5:46:d9:ec:fe:97:39:2c:a0:20:b0:1f:
fa:8c:d3:64:6f:61:4a:44:15:4e:90:32:2f:5b:05:55:c6:13:
a2:4c:d9:04:32:a4:e2:98:7e:4e:a1:4e:ad:ad:86:a9:c0:31:
a9:26:94:51:a4:3e:aa:37:65:2c:f4:2c:d8:01:18:7f:1a:81:
42:49:20:cf:6e:34:be:31:f7:01:43:2e:0f:68:bc:0c:56:76:
f3:5d:57:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:04:05 2026 by rpki-client