Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/gQrE2zfnswd9_ghJeR1BgP3XpMg.roa
File: gQrE2zfnswd9_ghJeR1BgP3XpMg.roa (raw, json)
Hash identifier: HlD1OxBwkChUrd6YwhISSwt2Z4Wg8vrNuXsTiX9sN5Y=
Subject key identifier: 81:0A:C4:DB:37:E7:B3:07:7D:FE:08:49:79:1D:41:80:FD:D7:A4:C8
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A0A3FB421A2B41B78F2016197A25461C26
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/gQrE2zfnswd9_ghJeR1BgP3XpMg.roa
Signing time: Tue 15 Sep 2026 07:32:27 +0000
ROA not before: Tue 15 Sep 2026 07:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197309
IP address blocks: 109.248.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:fb:42:1a:2b:41:b7:8f:20:16:19:7a:25:46:1c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Sep 15 07:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=810ac4db37e7b3077dfe0849791d4180fdd7a4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:da:18:47:65:dd:ee:73:26:1f:27:ee:d6:
12:4c:f5:25:df:40:79:9f:9e:5e:09:c4:1f:3d:81:
a5:10:9f:cf:43:ca:a9:85:0f:9b:ee:bd:61:28:47:
00:fa:df:04:cb:a9:98:88:88:ae:8c:50:c0:55:c6:
3f:5e:81:85:92:56:36:60:08:08:ce:97:13:4d:39:
86:62:ac:50:5d:30:fa:52:e8:52:1b:14:a7:61:f3:
1a:f9:28:3b:24:a7:94:c7:9d:c2:e2:87:d1:5f:28:
4a:5c:cd:86:f8:d8:93:3e:25:0e:a9:2a:a7:ae:f3:
4a:37:e5:ce:a7:68:b0:ff:5c:9a:8e:db:77:84:89:
86:da:7e:f3:87:13:60:07:1f:4e:12:e2:0b:45:b9:
7a:74:73:83:88:8d:90:d8:42:ae:5a:22:aa:67:70:
55:eb:04:49:ea:bf:d5:f6:46:d6:1e:93:34:c0:16:
76:1d:57:ba:55:19:b9:0a:23:f5:1f:55:d8:17:f1:
25:03:7d:7c:18:b8:26:0a:4d:00:fc:be:a5:fc:bf:
97:a3:18:ca:b6:c9:7b:e8:49:dc:3f:0d:28:10:48:
ec:d9:bb:5a:0c:77:c8:61:5c:3e:8c:92:eb:cf:fa:
29:78:10:80:15:68:ea:36:41:f5:68:eb:40:34:f6:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0A:C4:DB:37:E7:B3:07:7D:FE:08:49:79:1D:41:80:FD:D7:A4:C8
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/gQrE2zfnswd9_ghJeR1BgP3XpMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:df:0e:93:c0:cf:3e:01:a8:e0:b5:4e:88:7a:36:28:bd:35:
dd:b5:76:f7:95:ef:ef:6f:c4:44:79:10:ec:af:fa:25:5c:44:
c3:ab:90:d3:e5:0e:6b:d3:a7:6e:91:e7:2b:51:fc:e3:16:bd:
91:71:19:8f:30:48:6c:d0:74:0b:3e:d2:2f:fa:b4:64:84:a3:
de:a6:66:59:8b:5c:93:ba:6c:26:b3:6e:b5:96:7f:d2:91:6d:
0d:a5:d2:66:d8:91:08:91:a7:0a:53:e9:13:25:50:be:31:33:
dd:71:3c:45:e8:22:c4:ae:a4:c1:eb:4f:9a:1a:85:ed:ee:50:
6d:c5:3d:fc:57:99:bb:13:e6:8a:4a:13:f6:67:87:69:4e:7d:
db:72:0c:33:2b:59:53:45:0d:d2:f4:a5:44:35:df:e7:f6:19:
6f:0d:23:7f:fc:33:87:ac:d5:af:c2:fa:2b:c4:ca:28:50:69:
d6:1e:11:b0:d5:9b:75:81:87:ec:5e:81:c6:2d:cf:0b:c8:a5:
ca:40:44:03:e9:da:fc:14:13:8c:d5:da:eb:fc:8d:3d:fe:84:
e5:48:d1:14:3f:ef:ee:14:3f:c1:d6:6e:6b:46:93:6c:fe:8c:
01:25:72:b1:af:25:60:68:ab:20:7e:84:32:79:c5:5e:c7:0d:
05:c7:35:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:13:06 2026 by rpki-client