Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/CA-gwLnHG5Ksy2hubCwHMC9X69s.roa
File: CA-gwLnHG5Ksy2hubCwHMC9X69s.roa (raw, json)
Hash identifier: pUNHbdLGfKXi5m6+MYTI/fY0lKx+Y3f1RcJ7U9RkRys=
Subject key identifier: 08:0F:A0:C0:B9:C7:1B:92:AC:CB:68:6E:6C:2C:07:30:2F:57:EB:DB
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019FA843ABE79E36469663371353797EFF49
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/CA-gwLnHG5Ksy2hubCwHMC9X69s.roa
Signing time: Tue 28 Jul 2026 10:27:14 +0000
ROA not before: Tue 28 Jul 2026 10:27:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219133
IP address blocks: 2a0c:9a40:8bf0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:43:ab:e7:9e:36:46:96:63:37:13:53:79:7e:ff:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jul 28 10:27:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=080fa0c0b9c71b92accb686e6c2c07302f57ebdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:58:b5:bb:d8:0c:f8:7a:30:c7:b5:fe:2b:
c2:74:c1:03:92:fe:cf:56:7d:59:72:97:9f:20:52:
bf:d0:79:20:05:e5:e7:38:57:9f:db:c9:b1:f4:2c:
b4:36:e4:da:b3:26:db:9d:d4:c3:20:f4:dd:0b:da:
f4:97:f8:23:20:52:56:ce:67:79:e9:c8:b4:ee:ce:
b7:36:5f:6c:85:74:d6:d8:a0:21:9f:8f:6e:b3:03:
66:b4:3d:1d:24:b8:64:8c:dd:97:c6:d6:5b:98:bc:
79:ff:ca:a0:f3:bb:cc:4a:b0:df:8e:0f:a1:40:46:
c7:6c:c4:4f:1e:14:05:6d:c2:57:a9:52:49:78:58:
b3:12:7c:29:12:3d:56:44:29:aa:7a:98:1c:ce:4c:
1f:1f:34:c3:19:e1:a3:88:fb:9e:09:e1:df:05:2a:
55:a8:ad:77:06:3d:6b:18:5c:0a:d8:aa:bc:6a:84:
bf:a1:de:f1:15:5c:54:2c:61:2c:7a:4f:4c:11:fe:
98:45:53:51:6b:62:bb:d8:ba:db:bd:35:d7:f7:3b:
f6:98:39:d1:e1:b3:3d:f1:70:bc:64:b5:0f:d1:d1:
cc:35:bd:40:ac:cf:da:00:59:3a:f7:b3:4d:5e:cd:
2d:02:f9:12:8b:d5:45:b2:91:bf:00:96:86:c2:71:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0F:A0:C0:B9:C7:1B:92:AC:CB:68:6E:6C:2C:07:30:2F:57:EB:DB
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/CA-gwLnHG5Ksy2hubCwHMC9X69s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8bf0::/48
Signature Algorithm: sha256WithRSAEncryption
89:23:8f:3d:8e:76:d9:05:46:d8:cb:ab:8c:75:7e:a8:20:71:
d8:31:57:8e:f7:c7:ec:fa:16:9d:26:87:5d:66:1c:12:4e:49:
b6:ce:74:61:3d:82:b5:96:21:4f:33:17:c2:68:98:ad:46:f2:
a6:c3:fb:6b:0b:67:f7:6f:dc:8f:15:df:4e:2d:08:c5:4a:a8:
98:47:31:88:4a:eb:ec:71:1a:63:2a:e0:e7:83:70:4a:f5:ab:
22:07:d6:00:bb:eb:3e:fe:b2:db:a8:89:16:d7:de:bb:e6:18:
40:64:43:be:4c:12:35:7d:f7:85:de:c3:00:0b:ee:55:d6:40:
e3:77:1b:a5:22:c3:20:44:fa:28:80:08:ae:99:13:e9:c9:5f:
d4:65:56:37:12:38:ca:50:8f:45:d0:41:bb:a6:85:6f:57:f4:
89:13:2c:06:61:df:6f:be:76:07:70:21:94:cd:72:3d:01:79:
ea:27:c9:cf:e6:53:0b:51:28:be:a8:66:cc:c2:c2:91:81:eb:
27:12:c2:cc:59:7d:c8:f0:19:ee:c3:41:a5:6d:6b:f5:3f:52:
ab:71:f5:df:d5:c8:87:f2:4c:94:7d:b2:9d:4c:70:55:55:99:
6f:3b:7e:0c:de:26:5a:f8:d3:17:0c:4e:df:44:2e:52:a9:0a:
81:c1:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:17:42 2026 by rpki-client