Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/g-_CUB36AWobIcG-jmmWcyiDx-E.roa
File: g-_CUB36AWobIcG-jmmWcyiDx-E.roa (raw, json)
Hash identifier: WlfHF8ayshGFfQ441VT2aPbuyQS92Aj33Z++6XcJ8YE=
Subject key identifier: 83:EF:C2:50:1D:FA:01:6A:1B:21:C1:BE:8E:69:96:73:28:83:C7:E1
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01A0C2EC57F276BC3565CF1805D36943EBCE
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/g-_CUB36AWobIcG-jmmWcyiDx-E.roa
Signing time: Mon 21 Sep 2026 07:44:23 +0000
ROA not before: Mon 21 Sep 2026 07:44:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 2.59.180.0/24 maxlen: 24
45.156.144.0/24 maxlen: 24
45.156.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:ec:57:f2:76:bc:35:65:cf:18:05:d3:69:43:eb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Sep 21 07:44:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83efc2501dfa016a1b21c1be8e6996732883c7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:a5:b4:42:88:88:38:83:09:ff:41:bc:8b:
38:eb:3b:8b:93:38:df:24:9c:55:3a:2c:d4:6b:18:
6d:8b:8b:91:9d:b6:2b:38:08:3b:2a:27:f2:c1:84:
cb:01:72:a7:6a:3a:0d:ec:7c:4f:cf:67:32:d4:f8:
cc:27:4d:b4:43:38:c4:8f:40:25:11:5a:6f:37:34:
fd:54:82:4a:f1:5e:b1:72:4c:24:0f:d7:d3:23:5d:
85:60:7e:30:26:9d:a9:b2:7e:18:9e:89:81:ef:58:
89:e4:b0:54:ee:bd:ef:a6:50:24:bb:e7:6c:ac:14:
ea:af:26:a7:ea:f2:88:bc:ed:f5:fc:04:00:e0:76:
64:f1:c8:da:c4:75:a0:fe:82:b4:6e:da:73:51:bd:
45:19:cf:a2:37:3d:00:f9:ce:6b:69:43:27:92:21:
93:54:ec:df:35:85:58:72:31:0b:29:30:e9:8a:9e:
f5:c4:13:bf:f9:06:6d:52:b9:ee:28:a3:cf:74:e2:
e4:01:c2:b3:ef:5a:3a:30:d5:1a:da:34:3c:45:5c:
e8:ba:69:71:9e:ed:4b:e1:a8:80:cf:07:bc:dd:a3:
77:1c:34:c3:00:9a:e3:89:b3:ee:e2:71:60:0d:71:
5d:4e:a1:37:a2:14:23:8b:3f:96:d4:f3:b1:e0:7c:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EF:C2:50:1D:FA:01:6A:1B:21:C1:BE:8E:69:96:73:28:83:C7:E1
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/g-_CUB36AWobIcG-jmmWcyiDx-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/24
45.156.144.0/24
45.156.146.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:58:d4:39:fe:28:ed:d0:4d:a7:b1:2f:13:13:5a:4b:be:39:
48:c1:86:99:02:4a:ae:16:be:a8:77:c6:51:b2:cb:2b:6a:34:
0d:c7:92:07:66:21:bc:7e:e4:3d:55:1a:91:ac:00:d6:2e:d6:
d4:cc:53:b0:6c:b1:c0:43:fe:b8:14:a9:77:6f:88:51:68:e7:
d9:99:7e:d8:7e:58:56:e2:e7:99:b5:65:d4:f0:a9:1f:eb:ed:
4d:0f:f3:df:e9:e7:8c:cf:f2:44:1e:a9:e3:d9:53:d3:80:e0:
0b:e4:10:c0:15:e9:c8:05:36:90:62:47:72:a8:41:cf:e1:3e:
22:50:f6:08:bb:06:0f:8c:61:b6:76:b1:be:d3:c4:04:06:3d:
0b:37:6f:b2:b4:bc:5b:de:fb:ca:a6:7b:48:f8:fb:62:62:aa:
5d:72:f4:37:c0:35:64:80:a2:15:2b:e4:ab:1d:ee:6a:0b:81:
20:c7:11:6b:2a:61:8c:bc:24:12:dc:28:eb:02:c6:df:a1:75:
e9:4c:8b:97:7e:be:0f:c9:4c:02:03:ff:fe:dd:d9:12:e8:6f:
f2:09:59:89:0d:0b:ea:21:10:6e:7c:55:2d:7b:66:6d:55:62:
af:d3:25:74:58:29:e9:1d:5e:27:18:85:d4:3b:87:cf:ee:a6:
8c:8f:d8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:37:54 2026 by rpki-client