Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/gcBNVcYgOgoq_XeEPtbEZjKQPv4.roa
File: gcBNVcYgOgoq_XeEPtbEZjKQPv4.roa (raw, json)
Hash identifier: I05foFhPwtjC41vNTBYky0OTidLIWUCpRGSlsMhk3a4=
Subject key identifier: 81:C0:4D:55:C6:20:3A:0A:2A:FD:77:84:3E:D6:C4:66:32:90:3E:FE
Certificate issuer: /CN=44911666c236d68cd31bcd852e1c1b89fccef300
Certificate serial: 019FF4ABC6F1F61E94C9331F795BD57CCE67
Authority key identifier: 44:91:16:66:C2:36:D6:8C:D3:1B:CD:85:2E:1C:1B:89:FC:CE:F3:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJEWZsI21ozTG82FLhwbifzO8wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/gcBNVcYgOgoq_XeEPtbEZjKQPv4.roa
Signing time: Wed 12 Aug 2026 06:32:06 +0000
ROA not before: Wed 12 Aug 2026 06:32:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 766
IP address blocks: 161.72.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJEWZsI21ozTG82FLhwbifzO8wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:ab:c6:f1:f6:1e:94:c9:33:1f:79:5b:d5:7c:ce:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44911666c236d68cd31bcd852e1c1b89fccef300
Validity
Not Before: Aug 12 06:32:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81c04d55c6203a0a2afd77843ed6c46632903efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:35:4a:31:d9:5c:a1:8e:91:bf:35:cc:16:
f6:83:03:26:85:5d:25:6b:7a:00:9b:92:b9:30:c5:
a3:4a:30:ec:f8:c4:aa:f4:a0:3f:f4:b6:96:5d:f1:
0b:2c:1c:05:62:58:ad:67:75:bf:1f:8e:92:20:73:
5f:ef:b3:33:87:25:d3:1b:6b:a8:b4:70:07:e1:c5:
d0:e8:b5:e7:ea:03:74:14:3a:d1:40:db:25:55:56:
6f:14:e8:39:21:22:e9:2f:ee:5c:b5:58:15:9e:d3:
84:0f:dd:f7:42:30:f1:11:3c:89:33:17:11:60:a0:
e5:5c:44:a7:51:a4:45:8a:ac:fe:b9:f5:88:ee:80:
67:62:32:0a:1c:f5:84:5d:13:54:bd:49:c3:c3:f4:
4a:66:1c:3c:98:ef:5d:0e:47:6b:8b:10:5e:15:41:
83:41:97:20:5b:b7:88:65:9d:ab:ac:4f:b0:e4:02:
23:c2:f0:97:a4:41:56:07:0f:66:56:6e:fe:ea:94:
86:0c:98:d0:f5:53:2b:ee:f7:1a:58:02:1e:e1:d7:
65:d9:0f:04:ce:74:55:fa:2a:c4:6a:85:ec:d7:9b:
90:c1:9d:e9:58:2c:29:c2:a4:29:ec:23:d4:2c:98:
3b:ae:db:c3:f1:d1:df:07:c9:70:34:87:cb:6f:6b:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C0:4D:55:C6:20:3A:0A:2A:FD:77:84:3E:D6:C4:66:32:90:3E:FE
X509v3 Authority Key Identifier:
keyid:44:91:16:66:C2:36:D6:8C:D3:1B:CD:85:2E:1C:1B:89:FC:CE:F3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJEWZsI21ozTG82FLhwbifzO8wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/gcBNVcYgOgoq_XeEPtbEZjKQPv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.72.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:33:47:6c:7d:6d:d6:77:a1:e7:77:12:63:42:4c:c2:b0:50:
58:dd:50:e8:bc:ff:82:08:f7:14:96:ae:83:99:3b:db:bf:60:
7c:a2:dc:c2:b7:d0:90:49:44:91:2b:36:e7:95:03:0d:1f:17:
9f:df:fe:4f:14:56:30:7f:36:1b:de:f4:d0:b4:26:d4:48:77:
ac:1b:62:8e:e8:f3:58:05:cc:3b:37:82:04:6e:fe:6d:15:fa:
22:fd:69:96:f6:7f:73:1e:c5:f9:a7:47:a4:e1:26:1b:8c:44:
be:4e:8d:ac:8b:2a:0c:72:5f:d7:a9:3d:96:d1:29:17:e3:64:
d2:fc:3e:03:13:d5:5b:bf:07:df:57:41:d5:c3:43:75:cd:dd:
65:77:38:3e:43:66:36:f7:cd:18:b8:bb:a8:51:3d:f3:a2:19:
0a:fa:62:91:3f:63:b4:7b:a2:d9:0c:49:5b:ec:0a:5c:77:3e:
8d:6f:07:9f:9c:25:df:cf:ec:55:f3:0f:48:c2:98:af:05:1e:
c7:b2:06:4d:9d:65:83:39:e1:e6:39:37:ea:c8:9c:68:1b:5e:
34:5c:86:35:41:76:3c:ff:0f:40:db:a2:62:e0:d0:c3:27:37:
32:e6:a7:b4:8e:9c:99:05:a1:30:33:d1:08:55:7b:86:30:40:
be:80:13:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:42:06 2026 by rpki-client