Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/gD1shI7_ncKmAHHzuQDRToVphgs.roa
File: gD1shI7_ncKmAHHzuQDRToVphgs.roa (raw, json)
Hash identifier: b21XJdYw0N5m8mPRwkbYiHzi3HRna1r0I2/FnRhaR68=
Subject key identifier: 80:3D:6C:84:8E:FF:9D:C2:A6:00:71:F3:B9:00:D1:4E:85:69:86:0B
Certificate issuer: /CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Certificate serial: 019C9E9147972E067265B670CF6B1D243E61
Authority key identifier: A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/gD1shI7_ncKmAHHzuQDRToVphgs.roa
Signing time: Fri 27 Feb 2026 10:07:27 +0000
ROA not before: Fri 27 Feb 2026 10:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63150
IP address blocks: 2a0a:c7c7::/32 maxlen: 48
2a0a:c7c7:200::/40 maxlen: 48
2a0a:c7c7:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:91:47:97:2e:06:72:65:b6:70:cf:6b:1d:24:3e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2292781df4d2c47373c3fdf63fbbc99274bd9db
Validity
Not Before: Feb 27 10:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=803d6c848eff9dc2a60071f3b900d14e8569860b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c5:1d:7f:ca:a4:0d:e9:9a:fa:33:73:92:eb:
33:86:a4:55:7e:48:c8:f8:0e:4e:25:88:e2:40:3d:
f6:51:17:a2:ab:0b:92:18:6c:ea:c2:a6:e7:9b:b0:
ad:b9:6a:e4:59:e6:65:55:e7:2d:3d:37:a6:83:1f:
12:5a:de:13:16:8e:7a:9d:c5:ff:48:fb:a6:b8:9e:
d1:f1:a4:cc:dd:35:84:86:8f:ca:b1:43:13:cf:03:
10:8d:45:62:2b:2a:2c:47:4f:8f:4a:02:83:3b:31:
c3:e6:53:70:54:21:b2:65:7e:10:d6:67:13:a7:cf:
a7:f9:7a:26:b3:8f:ab:13:bd:67:98:87:ae:68:ba:
15:73:09:b0:17:13:8f:ff:57:90:d6:41:15:44:06:
12:aa:06:bd:bb:6d:8b:d1:8a:61:95:e8:f1:34:b2:
6a:02:a5:6f:39:6e:b3:03:07:97:65:e6:9b:dd:c8:
4b:b8:b1:e9:f9:7c:2c:ce:6d:2e:14:0b:e6:cb:66:
09:a7:2d:b7:a6:b6:5a:f2:e3:fc:a2:46:63:12:1a:
53:a0:5a:4a:1f:ca:5b:aa:d6:1a:f0:d0:4e:35:b8:
28:c6:dd:1f:8d:ee:62:5c:65:2b:73:7e:5f:9a:35:
86:d7:aa:ca:d0:d6:2d:79:99:17:c8:cd:41:b7:13:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3D:6C:84:8E:FF:9D:C2:A6:00:71:F3:B9:00:D1:4E:85:69:86:0B
X509v3 Authority Key Identifier:
keyid:A2:29:27:81:DF:4D:2C:47:37:3C:3F:DF:63:FB:BC:99:27:4B:D9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oikngd9NLEc3PD_fY_u8mSdL2ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/gD1shI7_ncKmAHHzuQDRToVphgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/76657f-0d15-4211-a328-69ea8145958b/1/oikngd9NLEc3PD_fY_u8mSdL2ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:c7c7::/32
Signature Algorithm: sha256WithRSAEncryption
9f:55:bc:16:84:3d:c0:d0:17:cf:d3:0e:39:78:71:72:cb:10:
30:92:57:ee:7e:38:b7:2e:5f:b6:8b:0f:c3:16:4b:ad:b4:2b:
ba:24:eb:cb:44:7f:80:f7:50:f7:a4:d7:aa:8b:76:e2:6b:28:
c5:e7:39:b5:be:d9:ef:ad:9b:50:6d:ab:a0:ea:80:94:91:a6:
89:9a:b6:f7:95:f1:b9:da:57:9d:2a:de:fc:6f:e9:d7:66:76:
d0:c4:25:24:9c:3a:c3:32:47:08:88:9e:13:71:b1:02:55:00:
bf:81:6d:b8:87:b2:1a:93:81:c1:78:d1:09:7a:df:e4:ae:24:
97:fc:4e:dc:62:c8:83:3e:fd:1e:18:52:d9:96:57:b5:f0:26:
c7:41:04:97:f2:af:f7:29:fc:a8:49:81:87:5d:5c:0f:5f:1c:
22:af:cf:6e:d1:26:57:ff:7c:7b:1d:82:01:07:8a:8a:34:7e:
45:a0:1f:d3:06:f2:fd:e1:93:ea:7b:87:b3:ab:69:f2:87:3b:
67:3e:15:94:90:bb:49:5c:c0:84:df:3a:68:d3:ec:eb:a5:60:
84:95:14:b8:53:a3:a4:54:2e:3c:b0:ba:4b:c7:fa:8f:44:b1:
29:8f:19:e3:70:06:9f:d9:81:a8:6f:d3:f2:f3:20:b9:40:94:
2a:05:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:08:34 2026 by rpki-client