Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/gCZGddOFDvIofw6Khaf6NPsf9No.roa
File: gCZGddOFDvIofw6Khaf6NPsf9No.roa (raw, json)
Hash identifier: Cxv2xvprn3bBXB2hR8mzha98ZrK5VBbIdggBrjhBjdg=
Subject key identifier: 80:26:46:75:D3:85:0E:F2:28:7F:0E:8A:85:A7:FA:34:FB:1F:F4:DA
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A080F7861E85C52FB888F9943D5FD58022
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/gCZGddOFDvIofw6Khaf6NPsf9No.roa
Signing time: Tue 08 Sep 2026 12:21:40 +0000
ROA not before: Tue 08 Sep 2026 12:21:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216232
IP address blocks: 95.86.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:f7:86:1e:85:c5:2f:b8:88:f9:94:3d:5f:d5:80:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Sep 8 12:21:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80264675d3850ef2287f0e8a85a7fa34fb1ff4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:40:9c:d4:97:44:a4:ad:9b:62:cb:36:97:
12:54:f4:76:5e:9c:7e:07:08:3f:2b:43:d3:cc:1f:
1d:65:04:95:56:c0:44:93:8a:c5:89:8f:47:db:fe:
9a:63:5d:23:0d:e1:21:1b:df:3d:2c:fa:8a:74:86:
36:62:44:80:f2:6f:9a:c0:dc:fe:72:f6:13:07:f8:
c9:5d:da:dc:a0:1a:a8:2b:10:3e:30:8a:92:bf:15:
21:28:f3:14:05:1d:9f:59:8c:c5:87:1e:62:21:e8:
51:5b:7a:5c:b8:7f:eb:f3:c8:16:14:09:c2:65:ca:
07:81:93:1f:7f:51:66:e7:da:5f:2d:8a:06:0c:ab:
b9:e9:06:55:0a:f9:ec:73:66:0b:ec:ee:f2:d2:f5:
90:a7:7e:ab:9a:20:a1:00:c9:85:59:be:d6:8a:d2:
a4:9c:13:9d:d2:68:56:3a:44:69:9f:82:51:b6:ce:
f8:f1:99:e4:64:51:a9:68:dc:3a:94:45:d8:1a:66:
c2:ab:c6:18:c8:a4:f0:87:f5:98:d5:99:e8:03:ad:
9b:29:97:61:02:c1:86:22:62:37:87:18:00:e6:8a:
cf:76:95:6f:d5:50:1d:87:5f:8f:84:17:e5:d1:77:
57:46:e3:8e:bc:de:b4:18:79:22:7f:2d:89:74:dc:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:26:46:75:D3:85:0E:F2:28:7F:0E:8A:85:A7:FA:34:FB:1F:F4:DA
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/gCZGddOFDvIofw6Khaf6NPsf9No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.157.0/24
Signature Algorithm: sha256WithRSAEncryption
75:3d:bc:47:8a:ff:a4:bb:e0:3d:e7:84:0b:59:ab:4b:14:5f:
31:af:12:09:69:26:89:8a:b2:54:08:4b:fc:ff:64:01:3d:87:
b1:22:3f:3b:79:2f:fa:31:ca:eb:ef:62:df:a8:42:73:bb:ce:
e5:ca:1c:11:c9:93:a2:08:ef:5c:92:30:0f:78:ad:be:f5:a5:
7b:17:3f:d4:c8:99:85:07:49:f5:72:fd:a4:20:6c:7b:c6:f6:
ce:76:09:6d:33:23:2a:52:67:45:e3:c1:ed:81:23:6b:11:d9:
68:94:29:06:5a:c5:6b:5d:56:a4:68:fa:86:6d:23:65:72:39:
27:84:cc:4d:49:91:b5:d1:20:88:13:b9:1e:70:c6:03:0e:2b:
61:c8:dd:7c:7b:44:f9:ea:49:1e:65:ab:ff:88:c0:a4:5c:42:
b5:40:30:fe:a3:7a:1c:8e:05:37:d3:79:4c:47:4a:32:f4:df:
4a:d2:2f:57:c2:bc:48:ae:ad:37:58:ad:04:0b:d3:b4:45:22:
54:b4:7d:03:61:57:23:fc:8e:89:e9:75:3a:ad:d2:83:e6:81:
4d:18:e8:0a:87:19:1a:c1:3e:15:c3:22:e8:24:41:07:fb:11:
8d:7b:bf:95:11:8e:57:2e:63:1c:0b:ed:85:85:17:6b:f8:6b:
51:16:b1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:51 2026 by rpki-client