Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/G-_Sqy3lQmPxRPqItphx0crOfIk.roa
File: G-_Sqy3lQmPxRPqItphx0crOfIk.roa (raw, json)
Hash identifier: 2upf05uV6e8ge5OYIGT5DhgfAMj4o3LUXR0Q4EoSv5g=
Subject key identifier: 1B:EF:D2:AB:2D:E5:42:63:F1:44:FA:88:B6:98:71:D1:CA:CE:7C:89
Certificate issuer: /CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Certificate serial: 01A088DBE509D9E2A3B8CC1CD5360A51C386
Authority key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/G-_Sqy3lQmPxRPqItphx0crOfIk.roa
Signing time: Thu 10 Sep 2026 01:08:27 +0000
ROA not before: Thu 10 Sep 2026 01:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 87.192.56.0/23 maxlen: 24
87.192.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:db:e5:09:d9:e2:a3:b8:cc:1c:d5:36:0a:51:c3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Validity
Not Before: Sep 10 01:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1befd2ab2de54263f144fa88b69871d1cace7c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:ef:27:ef:a5:85:9e:df:95:c8:bd:a6:ba:
42:b4:5e:14:2b:8e:95:26:6c:7b:3e:df:74:1d:dd:
c1:38:01:17:53:30:76:51:4f:a2:86:9d:9c:4a:63:
e2:db:1e:f9:27:6d:21:6b:59:19:ae:59:9e:d6:17:
7f:87:ae:89:0e:79:d6:52:bc:6b:7f:b5:e7:d0:30:
7e:ba:c1:f5:dc:e8:b0:40:c4:82:ad:0a:01:36:e1:
11:ca:28:4e:f9:49:80:08:06:33:a7:88:30:7a:20:
77:28:00:e6:ee:e2:f1:51:eb:5d:6d:a0:fc:76:96:
1b:89:8d:01:a8:92:1c:e5:14:e4:28:f1:60:97:51:
91:1d:b5:ff:d6:a1:cd:7c:18:26:c0:63:2d:70:6b:
55:a2:13:a1:ec:92:aa:54:78:dc:54:6e:35:84:de:
48:b6:36:50:d9:96:92:50:04:38:89:19:67:87:cc:
8b:2d:79:2a:7f:f7:ea:73:d5:04:53:00:03:33:de:
82:1b:61:de:bb:50:06:34:ed:01:bb:4f:56:70:f5:
3f:86:44:18:fd:e9:1a:05:1c:99:10:f7:7c:bf:f3:
de:dd:16:ca:5b:56:0b:ff:c0:b6:e1:09:a1:e5:74:
c8:70:fb:21:53:f9:60:0a:98:79:e5:c9:82:57:22:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EF:D2:AB:2D:E5:42:63:F1:44:FA:88:B6:98:71:D1:CA:CE:7C:89
X509v3 Authority Key Identifier:
keyid:E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/G-_Sqy3lQmPxRPqItphx0crOfIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.56.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:8e:5f:07:c8:c3:90:82:66:d4:7a:26:0e:6b:eb:cc:44:30:
05:c5:59:b1:6d:91:5f:e4:8c:52:e4:1a:da:ca:db:a0:0b:49:
49:62:e1:58:48:34:12:41:0d:43:c3:51:8a:71:06:34:1a:5b:
f9:65:d2:b3:06:00:d9:06:4e:d9:43:7a:2a:43:29:11:cd:4c:
c9:2f:bd:21:07:59:38:18:1c:87:81:d5:97:2d:ca:43:c8:ab:
80:33:4e:d0:62:d5:dd:86:38:cf:dd:83:f1:1b:7d:21:16:62:
63:39:d2:50:6b:48:1c:b1:92:41:88:e7:7d:ad:49:f7:83:fd:
4f:77:40:26:2d:57:b7:54:7e:8c:f3:03:06:47:18:4b:ba:b5:
10:66:c9:dc:e6:8e:22:ea:74:d8:ac:0d:3b:d3:ba:8f:75:e3:
05:dc:95:6a:5f:53:a6:2b:17:31:8f:fe:9b:d3:93:7b:60:dc:
2a:8e:36:b8:25:6e:5b:cb:a7:5d:60:d9:f9:0e:65:7a:fc:50:
c6:2c:c3:9c:1b:46:40:6d:82:67:c4:4c:d9:88:2c:ff:90:61:
51:bf:49:17:f9:5b:3e:26:8a:9d:1e:15:4c:8c:ae:3e:a5:fa:
5a:7a:73:6d:4f:9a:df:13:f4:fd:b7:56:29:36:8c:0d:0f:10:
72:39:3d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:58:23 2026 by rpki-client