Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/gKLAibmeyTSp0b81TE3SOvnf55s.roa
File: gKLAibmeyTSp0b81TE3SOvnf55s.roa (raw, json)
Hash identifier: m7hkN2gXNToHsdJ6LUtn1bIpxlleCfQZ6vbkrSxeCIo=
Subject key identifier: 80:A2:C0:89:B9:9E:C9:34:A9:D1:BF:35:4C:4D:D2:3A:F9:DF:E7:9B
Certificate issuer: /CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
Certificate serial: 01A0545BB8F6A73D1AFF430A0A8D163586C5
Authority key identifier: DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/gKLAibmeyTSp0b81TE3SOvnf55s.roa
Signing time: Sun 30 Aug 2026 20:28:12 +0000
ROA not before: Sun 30 Aug 2026 20:28:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a05:6340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:54:5b:b8:f6:a7:3d:1a:ff:43:0a:0a:8d:16:35:86:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
Validity
Not Before: Aug 30 20:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80a2c089b99ec934a9d1bf354c4dd23af9dfe79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:22:4e:36:ee:45:f3:74:d0:de:c4:76:24:df:
3a:18:b8:03:9d:6f:32:eb:b3:e4:3e:94:46:d9:bb:
08:8b:ad:0d:e7:50:ef:a9:15:a7:9e:ae:3f:b7:a5:
d1:23:b1:43:d2:b0:cb:75:f5:1c:51:6c:fa:d7:17:
9e:09:65:de:3b:5a:aa:04:bf:6f:9a:3d:ad:2e:80:
03:02:02:7b:50:21:bd:29:a7:0d:cd:30:26:72:67:
a4:63:85:b4:38:79:2b:d1:62:29:8c:86:1e:6e:7c:
de:e1:43:00:32:9e:45:4a:07:a7:a0:c9:a5:f3:c8:
94:05:0f:04:ea:85:24:0f:17:b8:c8:e4:6d:a0:43:
2f:88:f4:23:0a:3b:97:63:71:ff:4b:30:ad:f5:7a:
6b:fd:ac:e5:c9:6d:a0:bf:4d:78:0c:10:55:3d:d7:
64:fa:4a:e3:66:39:a7:23:9c:6d:2b:c5:9b:e2:37:
30:98:a3:3a:de:87:06:50:80:81:af:44:8f:b5:03:
10:c8:38:f5:d2:9b:95:62:ff:67:de:5b:45:3a:d7:
94:f3:ae:1b:d9:2b:69:4a:1f:a2:80:b7:1e:3d:95:
0a:0f:f0:f5:28:4c:31:0e:6e:90:b4:6d:f2:1d:5c:
ec:51:35:59:18:a5:f6:6e:02:cf:3e:b4:6f:19:a9:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A2:C0:89:B9:9E:C9:34:A9:D1:BF:35:4C:4D:D2:3A:F9:DF:E7:9B
X509v3 Authority Key Identifier:
keyid:DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/gKLAibmeyTSp0b81TE3SOvnf55s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:6340::/48
Signature Algorithm: sha256WithRSAEncryption
88:38:b5:a3:b5:fb:3d:a2:b1:40:68:ec:f0:c1:59:bf:01:a4:
d5:58:d8:d5:52:83:5e:a7:29:ad:f9:2d:27:a5:d3:74:bf:3b:
15:7f:8c:a3:fb:71:6e:c1:1f:48:b8:dd:b5:af:43:57:2a:b6:
3e:67:45:ea:c7:04:58:ef:d4:e3:76:ee:b2:24:b7:77:f3:78:
f3:6d:6e:02:e7:2f:68:90:55:ea:80:a1:8b:ae:84:2d:cc:0a:
1d:d1:ee:3e:bf:66:a1:99:d0:8c:02:da:4c:11:1a:15:a9:04:
f4:1c:33:42:1b:db:8c:3f:5e:4e:0f:32:0a:22:2a:99:01:62:
6e:fe:dc:c8:74:24:62:c8:af:a0:0d:4b:51:68:39:c0:63:0a:
af:9e:18:31:55:87:2a:6e:e5:28:99:ca:37:7e:da:e4:4b:77:
5b:27:08:02:5f:c6:ff:b8:e7:ae:66:4d:ce:b3:36:2a:32:d3:
f6:b2:29:ad:51:59:81:1a:a9:49:ad:25:d7:e0:e9:e1:bc:99:
fc:b8:af:b8:dc:5f:a2:20:4f:c2:63:d7:07:8f:1f:f2:8c:d3:
8c:9c:1b:60:f6:a8:9b:3f:6c:cf:33:2e:52:47:1a:d5:9e:90:
b0:15:8a:94:c6:e1:d0:91:17:fc:9c:38:47:c1:fe:36:35:43:
7b:3e:52:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:48 2026 by rpki-client