Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/GftibbkVtLgLgkExK-T07Hyzn5k.roa
File: GftibbkVtLgLgkExK-T07Hyzn5k.roa (raw, json)
Hash identifier: dvzpMFXSe/LJk91Zk8LWN2IKN12H0CJFkAYGcE9s41Q=
Subject key identifier: 19:FB:62:6D:B9:15:B4:B8:0B:82:41:31:2B:E4:F4:EC:7C:B3:9F:99
Certificate issuer: /CN=3b53867284132eeccd56e6b155cf7f627d264f40
Certificate serial: 01A11FA1D2095F04030B4EBB5E44D1EAE377
Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/GftibbkVtLgLgkExK-T07Hyzn5k.roa
Signing time: Fri 09 Oct 2026 07:47:41 +0000
ROA not before: Fri 09 Oct 2026 07:47:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215295
IP address blocks: 2a0a:3e45::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:a1:d2:09:5f:04:03:0b:4e:bb:5e:44:d1:ea:e3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40
Validity
Not Before: Oct 9 07:47:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19fb626db915b4b80b8241312be4f4ec7cb39f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:6b:7f:ea:24:55:23:58:ba:4e:e2:4b:48:
b9:fc:08:54:c6:47:c2:7f:a1:87:d5:82:ee:64:04:
f3:f3:bb:d3:4d:b3:0c:77:33:8c:a8:a4:44:a3:9e:
26:58:8f:6f:d9:03:06:e2:eb:96:8f:80:15:fa:e2:
0f:e5:40:e4:b3:a8:9f:b6:dc:a8:4f:0c:62:21:ca:
b1:ba:32:91:e2:4b:56:e0:e8:57:35:4b:48:c7:e2:
3b:2c:ad:c9:66:1f:04:95:a3:c8:39:ed:36:14:dd:
7f:2d:d8:aa:58:1b:ee:de:d6:60:b0:3c:67:64:ea:
28:26:5e:f4:d6:9b:04:32:10:5d:71:d2:c3:2d:c2:
04:88:9e:ac:d3:a1:90:bc:7c:f2:cd:62:46:c9:81:
4d:fb:dd:3c:65:be:30:c4:9e:97:d7:dd:a0:29:dc:
ea:53:b4:aa:4d:3a:31:a1:9b:9c:a7:5e:00:7e:a4:
1f:de:f2:a4:a7:4d:78:3d:fb:e4:7a:b6:54:6b:3b:
24:d2:63:a8:ca:62:3c:c7:18:04:51:7f:49:18:1e:
34:0b:c4:37:75:9e:b4:a9:60:f3:c4:63:a0:b8:17:
a2:d7:f5:ae:4b:1b:a6:00:d7:fd:96:56:3c:69:76:
8d:29:39:21:d2:97:d9:ab:fa:0d:3f:5d:4c:d8:5e:
d0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FB:62:6D:B9:15:B4:B8:0B:82:41:31:2B:E4:F4:EC:7C:B3:9F:99
X509v3 Authority Key Identifier:
keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/GftibbkVtLgLgkExK-T07Hyzn5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:3e45::/40
Signature Algorithm: sha256WithRSAEncryption
a8:c4:1f:a5:7a:3c:f5:ea:18:9d:41:9b:c5:b9:60:77:8c:70:
0a:14:46:eb:ce:42:d0:00:4c:52:92:4c:25:00:5c:f3:54:20:
5e:a4:30:77:ff:8f:81:f2:50:46:4e:be:f8:73:8f:65:65:34:
1b:f0:fc:ff:47:56:1c:94:98:cc:98:51:2f:50:9f:b5:08:be:
2c:6f:89:ab:c6:40:48:ae:8d:49:22:00:43:05:77:c1:0f:58:
a3:26:18:ea:7c:82:58:6e:a5:3d:79:a3:c6:34:02:91:b2:bd:
91:b5:5b:4c:63:04:01:ad:a7:e7:84:31:3e:ac:3e:ea:2c:84:
75:f3:c9:0c:22:8a:0d:e2:7b:2b:2e:24:30:32:f8:8a:4c:20:
27:5b:76:6c:31:87:3a:eb:ff:28:3a:80:d1:ee:e6:9e:db:ab:
a9:26:5b:9d:86:25:eb:56:b0:41:ab:85:de:92:60:06:3c:36:
74:a3:7a:6f:24:c2:0a:16:85:c5:57:65:ec:f8:1e:ee:8b:fb:
3a:25:8a:9d:9a:fc:b8:d4:9e:6e:3b:f5:22:a8:55:20:d3:c8:
40:af:68:51:78:9d:0a:3e:f2:e3:e6:cc:96:c5:33:36:ec:d1:
5f:f9:08:58:f5:5a:2e:00:8a:0b:51:29:ed:fe:66:05:44:76:
4d:14:e7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:29:20 2026 by rpki-client