Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/gCjTbHHTDHmjqDX6M89UL7Dq3j8.roa
File: gCjTbHHTDHmjqDX6M89UL7Dq3j8.roa (raw, json)
Hash identifier: vPMzw8PpBWw8xTWacYUychh/qBw+PTqAXcQqiVGh4H4=
Subject key identifier: 80:28:D3:6C:71:D3:0C:79:A3:A8:35:FA:33:CF:54:2F:B0:EA:DE:3F
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A0CCB8A209B9CB011C73CA635EEDAF55CE
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/gCjTbHHTDHmjqDX6M89UL7Dq3j8.roa
Signing time: Wed 23 Sep 2026 05:24:07 +0000
ROA not before: Wed 23 Sep 2026 05:24:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
88.223.46.0/24 maxlen: 24
88.223.168.0/24 maxlen: 24
95.173.46.0/24 maxlen: 24
95.173.48.0/24 maxlen: 24
95.173.49.0/24 maxlen: 24
95.173.50.0/24 maxlen: 24
95.173.58.0/24 maxlen: 24
95.173.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:b8:a2:09:b9:cb:01:1c:73:ca:63:5e:ed:af:55:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Sep 23 05:24:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8028d36c71d30c79a3a835fa33cf542fb0eade3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:76:25:c6:46:e1:37:54:d5:44:34:9b:d5:
42:0b:8f:25:57:a4:d6:f0:63:aa:e9:fd:f0:22:81:
24:9f:d6:0a:af:40:60:3e:d5:b8:4e:20:de:ac:1a:
69:af:1f:69:ba:cf:41:45:02:0f:96:60:3e:7c:eb:
c4:24:8f:eb:51:ab:e5:d5:4d:d5:c4:cb:e6:52:b3:
13:5a:31:2d:58:f3:a5:01:68:50:7a:4c:6a:d1:c0:
8d:eb:fc:ea:97:e0:51:ea:16:31:84:c1:23:60:59:
37:5c:b5:22:7a:15:04:67:b5:2b:92:6a:1e:b7:97:
7d:8b:67:1b:7c:e8:00:4e:83:3b:ac:68:3c:cc:69:
ec:16:79:40:24:9a:05:36:5d:03:a8:9c:ca:19:c2:
fc:d9:8f:48:7b:89:64:cf:4a:6b:d2:08:76:f5:5d:
70:9c:e2:4b:66:32:7c:d7:ec:fc:f2:97:95:ae:2a:
89:be:68:64:c8:26:c8:92:e9:34:64:96:31:6a:cc:
bb:35:c5:7e:38:80:44:db:3c:bf:6f:e7:6b:00:89:
97:09:a2:68:63:89:d5:87:3c:8e:fc:6f:c4:80:e4:
bd:5f:23:9b:b4:14:c3:50:d7:eb:a4:a3:da:a9:0e:
36:01:69:25:f2:aa:d8:4e:4d:1c:80:b8:77:8e:1b:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:28:D3:6C:71:D3:0C:79:A3:A8:35:FA:33:CF:54:2F:B0:EA:DE:3F
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/gCjTbHHTDHmjqDX6M89UL7Dq3j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
88.223.46.0/24
88.223.168.0/24
95.173.46.0/24
95.173.48.0-95.173.50.255
95.173.58.0/24
95.173.60.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a6:0c:c6:f7:e9:0d:f0:22:58:2e:bc:c7:7c:5b:81:46:9e:
d3:31:14:f0:8b:b0:f0:9c:9e:ba:82:ed:f3:00:77:d4:b3:44:
81:e9:ba:4d:4c:de:1b:5a:2f:77:f7:b5:b1:b5:b3:dc:52:e4:
77:31:f0:66:f9:51:8c:ff:12:7b:07:3c:de:71:3a:cc:96:4c:
65:a9:cb:d4:92:32:d0:d9:50:7f:29:65:ce:93:bb:d3:b8:4b:
9b:81:45:7c:89:db:3d:9a:7f:a7:2d:2e:a4:7a:9b:bd:11:ce:
7e:ed:02:d4:6c:c7:6e:80:72:c8:1d:fe:02:74:e1:e3:df:c6:
15:54:af:bc:66:18:2c:fa:32:90:ab:e0:6a:09:fe:18:8e:fa:
66:56:4b:12:2e:c9:73:58:a3:55:ef:c4:1e:66:0f:63:44:f5:
78:02:52:4d:75:55:e6:84:c1:b1:e3:b2:7b:84:21:fa:a8:05:
3e:e1:67:46:6c:de:b0:c5:67:b6:41:01:a7:f7:aa:03:b7:9c:
45:39:fe:17:e2:b4:f9:11:72:4c:ce:92:ab:c1:57:17:cf:fc:
cd:66:6f:95:d1:14:13:f8:1c:e1:bb:ae:82:7a:5d:30:28:e0:
2c:1f:4b:82:b7:e2:26:bd:72:13:d0:6a:39:50:1f:88:0c:3c:
db:29:2e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:39 2026 by rpki-client