Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/gQc_Jr2mC9IFhdByVUINcQAR45c.roa
File: gQc_Jr2mC9IFhdByVUINcQAR45c.roa (raw, json)
Hash identifier: htYakuw8JTIu6V7ktOpNOESYVw0hvP719d9K+XTocK0=
Subject key identifier: 81:07:3F:26:BD:A6:0B:D2:05:85:D0:72:55:42:0D:71:00:11:E3:97
Certificate issuer: /CN=a08259a41d9c90c871a4a4081eeac98e921c9c96
Certificate serial: 019F2369159D4C624DD5238EFE2957CB8A33
Authority key identifier: A0:82:59:A4:1D:9C:90:C8:71:A4:A4:08:1E:EA:C9:8E:92:1C:9C:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/gQc_Jr2mC9IFhdByVUINcQAR45c.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57817
IP address blocks: 89.184.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:15:9d:4c:62:4d:d5:23:8e:fe:29:57:cb:8a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08259a41d9c90c871a4a4081eeac98e921c9c96
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81073f26bda60bd20585d07255420d710011e397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:0f:6f:ec:37:c9:6e:20:f0:a0:24:d0:1d:
c4:90:7c:2d:57:54:4b:f3:a9:3a:98:e7:d4:c0:bf:
0a:c8:3e:99:d8:57:c1:3e:93:c7:12:c7:92:83:d6:
cc:3a:e7:c6:43:a1:0e:0b:19:ba:41:67:38:da:7a:
90:ab:5f:8e:3d:c9:88:ad:0e:cc:cd:5f:49:1c:fc:
76:16:b5:80:e8:d8:f8:09:a1:74:01:71:d6:a6:c2:
db:69:a7:db:32:4d:f3:55:2d:41:89:d6:0b:ae:0e:
ae:63:1f:b5:f3:d4:d0:19:40:8f:10:94:47:58:25:
c8:37:50:f0:b2:ae:08:1e:2a:f4:fc:b3:23:1d:e1:
9e:34:cd:b7:e0:9d:19:6d:3f:fc:e3:33:91:59:27:
a0:51:a4:98:82:a9:8e:71:33:0e:15:82:d8:cf:f1:
81:c3:06:8d:dc:49:2d:d0:63:a9:72:74:33:f9:cd:
1a:23:cd:8a:b2:cb:6d:b0:04:fb:ea:bb:1f:c4:29:
3a:e6:9a:cb:8d:6f:9a:21:b9:ea:f7:47:33:8c:73:
78:b3:d2:13:4f:b9:14:02:4b:39:99:24:4d:fd:6a:
dc:e1:e7:6e:df:5d:a4:67:65:4c:0a:c0:82:cc:db:
bd:ea:2b:e5:76:60:9c:42:46:c9:c2:30:d9:72:31:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:07:3F:26:BD:A6:0B:D2:05:85:D0:72:55:42:0D:71:00:11:E3:97
X509v3 Authority Key Identifier:
keyid:A0:82:59:A4:1D:9C:90:C8:71:A4:A4:08:1E:EA:C9:8E:92:1C:9C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/gQc_Jr2mC9IFhdByVUINcQAR45c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.184.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:2f:fb:5d:d1:58:aa:bc:1e:93:e6:9e:f7:3e:da:f7:33:38:
fe:39:12:90:8a:ca:5e:65:4c:76:07:92:cb:46:c6:4e:45:7c:
51:9d:64:4c:69:65:dc:00:db:8f:8d:1c:50:47:b1:9f:89:7e:
11:ae:a4:c5:75:66:0e:0d:cc:6f:66:a7:d1:fe:2f:90:d3:71:
c4:61:ce:19:c2:fd:1f:d2:e9:dd:50:ba:97:19:02:d7:af:5d:
44:92:50:b4:46:34:c8:5a:83:2d:f1:19:16:63:72:e6:cf:6b:
22:7f:44:a2:27:6b:35:e6:fd:ca:1c:ac:a2:2d:1f:aa:f2:2c:
bf:ce:1a:af:59:29:6a:c5:66:6c:a7:8d:1a:13:05:1a:fa:5b:
b9:a1:8b:ee:4a:eb:64:4c:fc:5b:42:80:2f:7d:d9:02:f8:ee:
12:6a:a7:f8:ab:a8:a2:0e:90:ad:68:13:39:24:a0:d2:ba:fc:
e3:eb:b4:67:66:82:55:66:78:00:49:2e:d7:e6:1e:c4:0b:7e:
b7:e0:8c:ad:c5:a1:8e:61:73:91:b8:fc:1d:28:00:f8:24:4b:
8f:1e:91:24:59:b7:a1:3c:54:e8:d6:59:27:27:c7:6b:9c:66:
0a:d9:f0:6c:d9:d6:dd:9b:b8:00:ff:b6:f8:84:35:78:12:f7:
73:a3:e4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:53 2026 by rpki-client