Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/GyAPdxHlXvRo5tDkDVenq5fjP4k.roa
File: GyAPdxHlXvRo5tDkDVenq5fjP4k.roa (raw, json)
Hash identifier: 0ah8uxz8w/BQqOF2DO2niuzwg5BTV6cRax+iO+7Pk7s=
Subject key identifier: 1B:20:0F:77:11:E5:5E:F4:68:E6:D0:E4:0D:57:A7:AB:97:E3:3F:89
Certificate issuer: /CN=d9d77265338d74a2ef656cd8982d3e79ee2c730b
Certificate serial: 01A0808F27F1336AFF62B0AFD0BFA75CEA06
Authority key identifier: D9:D7:72:65:33:8D:74:A2:EF:65:6C:D8:98:2D:3E:79:EE:2C:73:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ddyZTONdKLvZWzYmC0-ee4scws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/GyAPdxHlXvRo5tDkDVenq5fjP4k.roa
Signing time: Tue 08 Sep 2026 10:27:40 +0000
ROA not before: Tue 08 Sep 2026 10:27:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 185.142.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ddyZTONdKLvZWzYmC0-ee4scws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:8f:27:f1:33:6a:ff:62:b0:af:d0:bf:a7:5c:ea:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d77265338d74a2ef656cd8982d3e79ee2c730b
Validity
Not Before: Sep 8 10:27:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b200f7711e55ef468e6d0e40d57a7ab97e33f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a3:2b:ee:06:44:0b:55:81:98:fb:24:16:80:
31:f3:1a:9c:5f:c8:9a:1d:4e:d3:3a:20:2e:bd:92:
e9:88:f6:ec:cb:b9:c3:0e:95:e3:61:2f:39:ca:e6:
a1:77:34:de:5a:95:b0:6f:b7:24:ac:e4:46:3a:6a:
72:da:ad:8c:8a:4e:2d:00:d8:65:6a:87:54:c5:b8:
16:70:41:a4:fd:d0:9a:23:2b:99:cd:90:0e:03:b6:
63:48:cc:5f:46:16:3f:1a:d4:6f:bf:6b:3e:2a:e8:
d5:1a:8c:6b:b9:1e:4d:4b:c4:65:2e:99:35:97:09:
48:26:43:a5:90:80:1c:70:a4:37:ac:2d:13:bc:58:
04:3a:cb:e7:4f:40:cb:d7:0a:9e:e2:35:20:6a:f8:
8e:b5:0e:3b:f6:31:d6:41:94:33:7a:67:6e:e8:3b:
75:87:09:e9:38:b0:7e:08:14:80:59:f1:75:d4:4e:
da:05:5a:35:61:a1:ff:c1:f6:d3:d3:be:c2:93:61:
21:40:fc:83:eb:0b:1a:0b:46:81:48:d9:b9:58:28:
77:24:cb:bb:4d:48:ad:12:ac:f9:32:ab:e5:f2:7e:
dd:e6:c1:69:1d:c3:9d:e8:51:24:5a:f3:04:72:1d:
a9:c7:4c:7f:20:31:c2:2a:6c:b8:ed:25:f2:78:0b:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:20:0F:77:11:E5:5E:F4:68:E6:D0:E4:0D:57:A7:AB:97:E3:3F:89
X509v3 Authority Key Identifier:
keyid:D9:D7:72:65:33:8D:74:A2:EF:65:6C:D8:98:2D:3E:79:EE:2C:73:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ddyZTONdKLvZWzYmC0-ee4scws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/GyAPdxHlXvRo5tDkDVenq5fjP4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1ca3d0-505b-44dd-a795-fa81698c9b34/1/2ddyZTONdKLvZWzYmC0-ee4scws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.0.0/22
Signature Algorithm: sha256WithRSAEncryption
35:f8:92:cd:e6:93:48:77:29:9c:45:04:9d:cc:68:74:74:06:
12:fd:4e:50:46:36:6c:d0:c2:b5:34:80:92:ad:06:0d:02:e5:
d8:98:ba:99:7d:2e:67:be:65:40:e3:40:65:b6:e2:12:86:9d:
d4:64:a8:62:e7:c2:a4:a1:88:c0:80:84:b1:ba:a9:da:a7:c7:
a4:99:ee:d3:80:a9:33:b1:15:34:eb:ee:ae:02:0d:36:a0:9a:
41:4d:a5:e4:a7:57:f5:a1:e1:4f:19:6d:e5:41:ed:26:92:34:
de:a8:7d:c5:a9:88:52:ec:99:4e:6f:3e:6e:8f:33:ea:c3:e4:
c2:b4:b4:a9:25:f5:f5:da:c2:bb:07:27:47:1b:17:76:7c:1c:
41:8c:33:42:8e:e0:1a:e1:b1:67:a5:33:d2:24:5c:1e:30:56:
91:9f:44:0e:04:99:84:11:c7:95:f2:1e:14:a2:67:c2:0c:5f:
47:53:17:f9:ed:a0:43:cf:bc:0e:18:8d:56:52:e4:d3:04:6e:
08:c3:36:b0:6f:c9:82:b1:ca:a9:9e:96:6a:a1:76:9a:50:3c:
b9:18:45:04:3a:2b:78:bc:15:57:b6:a4:a9:62:2d:0a:95:64:
ff:fb:62:d6:11:7a:a3:29:34:d4:00:51:05:14:00:22:e5:f4:
a0:cd:df:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:39 2026 by rpki-client