Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/gxhNdT76LUOawd0GerJXEnAbQVU.roa
File: gxhNdT76LUOawd0GerJXEnAbQVU.roa (raw, json)
Hash identifier: ViECi6teUjpoYqtJK7rD4xR1mS6VHcPwXBdiN9l6wxg=
Subject key identifier: 83:18:4D:75:3E:FA:2D:43:9A:C1:DD:06:7A:B2:57:12:70:1B:41:55
Certificate issuer: /CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Certificate serial: 019EB694480D3B6DD9A870AF77B4CDB3D046
Authority key identifier: F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/gxhNdT76LUOawd0GerJXEnAbQVU.roa
Signing time: Thu 11 Jun 2026 12:07:11 +0000
ROA not before: Thu 11 Jun 2026 12:07:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210132
IP address blocks: 2a0b:2a07::/48 maxlen: 48
2a0b:2a07:1::/48 maxlen: 48
2a0b:2a07:2::/48 maxlen: 48
2a0b:2a07:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:94:48:0d:3b:6d:d9:a8:70:af:77:b4:cd:b3:d0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Validity
Not Before: Jun 11 12:07:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83184d753efa2d439ac1dd067ab25712701b4155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:14:0b:46:c3:37:74:1b:e9:7a:b2:97:92:
c4:c5:29:8f:1b:bb:5b:ee:2d:e0:1a:0d:a5:49:3c:
48:63:b3:d5:2c:da:f9:77:7d:0b:e3:42:66:66:b8:
86:84:a4:c5:6b:e8:d2:49:1d:42:31:ca:8b:65:65:
88:9c:b7:ef:7d:7f:2b:60:5b:7f:d7:69:87:10:90:
d7:e6:3a:46:84:e4:bb:21:8e:31:ee:87:36:83:14:
d3:5a:a7:33:56:8d:dd:06:49:a5:37:f5:14:9b:e5:
3b:62:a6:f7:9e:bf:71:ea:50:37:af:b2:af:c1:a7:
07:df:69:48:1b:74:9b:8a:39:69:9a:57:f2:70:fe:
2e:94:0a:50:c0:59:d3:f0:0c:5c:fe:69:f2:42:b6:
ad:34:b0:0f:96:d1:d4:b3:ce:1d:75:cc:80:8c:6d:
22:aa:9d:61:cb:e1:4a:f5:de:51:3f:22:a0:c6:cd:
58:48:5c:64:75:67:8e:df:51:1d:7a:c5:08:0e:e9:
95:12:69:34:2f:85:5f:fd:d2:f1:7e:8f:6d:27:af:
e8:ee:04:04:3e:20:ff:de:2b:65:c8:cf:dc:7c:78:
0b:d9:e9:59:7f:7b:b5:dc:ca:67:b5:fd:2b:0d:d5:
44:b2:3a:52:af:39:17:8f:3f:92:4d:61:7e:d3:f2:
7a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:18:4D:75:3E:FA:2D:43:9A:C1:DD:06:7A:B2:57:12:70:1B:41:55
X509v3 Authority Key Identifier:
keyid:F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/gxhNdT76LUOawd0GerJXEnAbQVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2a07::/46
Signature Algorithm: sha256WithRSAEncryption
86:37:46:50:51:06:47:c6:fc:3c:ee:5b:28:17:7c:27:41:98:
f3:fa:13:fe:cb:6a:44:9f:15:78:59:62:da:3c:20:c6:68:26:
09:f4:ff:6e:56:9c:04:5b:fc:5e:b0:5e:7e:51:ae:64:38:ec:
02:a7:d8:60:fd:46:d6:2c:28:fe:eb:9a:8c:c5:31:d6:3f:8e:
30:c8:3b:d7:12:30:be:ef:48:39:32:07:8f:8a:d7:57:40:5d:
63:33:1c:2d:a5:cf:ac:58:0c:f3:b6:9d:f2:8f:64:a9:86:23:
84:01:1d:e7:4c:92:3a:77:e5:78:8c:5e:9f:ef:f7:3a:78:96:
f7:2c:1a:8c:ed:52:3a:54:d7:9b:48:25:91:fc:55:7f:a9:85:
ea:70:e7:97:98:d7:b5:6d:d1:de:1e:35:33:a3:9d:b8:60:1c:
2f:90:12:9f:0b:9c:97:52:56:d6:5c:dc:eb:1c:68:a9:7e:44:
52:48:10:86:ee:e5:4f:0b:0b:5f:1f:00:1d:96:5f:42:4e:90:
c8:d9:8e:d8:45:d6:19:62:45:46:69:72:29:36:1e:33:be:8d:
20:bd:91:80:ab:28:e1:b6:7e:35:e0:38:6a:4e:8f:91:21:74:
d2:4b:1f:69:83:5d:36:63:d6:65:2a:8a:6e:e0:00:90:23:5c:
a4:f8:7b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:19:44 2026 by rpki-client