Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/GH0Fui4F70gjQUNd-rGsHn4h6O4.roa
File: GH0Fui4F70gjQUNd-rGsHn4h6O4.roa (raw, json)
Hash identifier: iJEqyYag6d0MxqG3m/lrsl36ItLyDL6teoVmu1MchNQ=
Subject key identifier: 18:7D:05:BA:2E:05:EF:48:23:41:43:5D:FA:B1:AC:1E:7E:21:E8:EE
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 019D4CDC665721854E433C1EAF7010A12A7A
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/GH0Fui4F70gjQUNd-rGsHn4h6O4.roa
Signing time: Thu 02 Apr 2026 06:23:25 +0000
ROA not before: Thu 02 Apr 2026 06:23:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57844
IP address blocks: 139.28.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4c:dc:66:57:21:85:4e:43:3c:1e:af:70:10:a1:2a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Apr 2 06:23:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=187d05ba2e05ef482341435dfab1ac1e7e21e8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:2a:a7:3c:e4:48:1d:74:45:be:1c:d9:13:
45:df:51:8c:f5:b1:c4:32:34:b5:ca:3e:42:40:ec:
5b:56:12:f6:0c:1f:e5:dd:56:a9:03:6c:61:b0:c0:
93:6f:5b:9d:4f:d8:a0:cc:89:e6:28:33:16:d4:92:
4c:6c:19:de:70:da:a2:b6:33:58:21:1f:1a:14:29:
54:59:fc:1e:72:fa:9f:19:48:e0:97:75:1b:d6:90:
16:36:48:e1:79:8b:24:42:aa:bf:1f:54:58:87:7f:
28:7f:bf:26:65:55:07:35:fa:38:b9:59:af:63:68:
84:7c:53:f9:3c:55:44:a2:f8:87:3a:7c:57:ce:e0:
84:7d:2f:43:a7:3b:d6:46:4a:a8:54:88:5f:55:48:
8c:68:ff:fb:c3:83:fc:a7:e0:cf:e7:66:f0:52:c6:
83:3c:03:61:a3:e6:65:4c:20:39:1d:ff:35:ac:7f:
e2:d8:6b:18:6f:8b:47:cc:19:37:7b:19:fc:48:01:
22:44:02:57:4d:f3:0b:be:b5:c0:94:ce:60:ac:af:
ef:19:e2:91:0c:06:d7:90:d7:49:c4:af:ed:ec:14:
4b:9a:a1:e9:6c:d1:17:b5:92:48:cd:5f:53:03:45:
e9:be:8b:eb:89:f7:0e:fe:d4:56:1d:aa:22:9a:72:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7D:05:BA:2E:05:EF:48:23:41:43:5D:FA:B1:AC:1E:7E:21:E8:EE
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/GH0Fui4F70gjQUNd-rGsHn4h6O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.168.0/22
Signature Algorithm: sha256WithRSAEncryption
10:8f:9a:3f:81:fc:bc:0d:cc:c5:5c:81:58:73:40:86:ca:54:
03:df:08:bc:2e:a8:c3:11:87:4b:2c:ac:4b:3b:e5:0f:00:c5:
7c:18:cb:c8:0b:7f:9b:02:bc:4d:4a:c0:e1:66:48:2f:fe:8f:
a2:fd:22:f8:65:d7:66:c8:6b:18:56:9a:2a:55:21:26:9a:a1:
5d:8d:79:39:02:fd:27:e9:c9:bb:a5:cd:ee:63:1a:b3:21:af:
37:3b:f9:af:99:dc:47:25:2d:a6:1c:6b:7b:6e:0f:bf:cd:4d:
1f:c6:84:de:c1:91:1d:75:66:a1:7f:a5:98:6f:46:ed:99:83:
7f:d1:dc:8f:fe:4b:4f:60:a1:27:4d:1c:8d:cc:28:0e:12:3f:
82:78:a3:67:d1:83:ea:b0:a1:84:21:71:38:b5:9e:15:7c:54:
22:eb:61:49:ae:dd:b4:41:25:57:26:ac:61:9c:8c:cf:6b:d4:
85:ee:1d:b5:9b:43:19:c3:6a:e7:bd:3c:90:95:a0:4b:b3:ea:
64:1b:35:a8:28:ea:fe:61:d4:87:f3:3e:69:7a:f5:7c:aa:a8:
6c:2e:5c:c0:53:87:9d:5f:ce:db:21:94:65:dc:84:d9:e6:c1:
55:f5:9f:e0:17:3e:c1:10:84:77:5b:00:1b:d8:5a:91:6e:91:
73:c0:9d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:36:45 2026 by rpki-client