Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/GJZ08awpOoNB6clybSFIlWAEf8Q.roa
File: GJZ08awpOoNB6clybSFIlWAEf8Q.roa (raw, json)
Hash identifier: bct/tJ8QJyODSADTgG0qWd7+sICPVXpB5wcV0ma6y2E=
Subject key identifier: 18:96:74:F1:AC:29:3A:83:41:E9:C9:72:6D:21:48:95:60:04:7F:C4
Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial: 019B7E37AFB23FEE204908086F4112DDA386
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/GJZ08awpOoNB6clybSFIlWAEf8Q.roa
Signing time: Fri 02 Jan 2026 10:18:57 +0000
ROA not before: Fri 02 Jan 2026 10:18:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1712
IP address blocks: 2a04:8ec0::/48 maxlen: 48
2a04:8ec0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:af:b2:3f:ee:20:49:08:08:6f:41:12:dd:a3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
Validity
Not Before: Jan 2 10:18:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=189674f1ac293a8341e9c9726d21489560047fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:26:b9:b5:c9:02:b9:c9:a1:5f:46:ba:cb:
d6:e4:fd:ab:41:40:20:b6:ad:95:a4:2a:c1:76:c5:
68:a2:c3:d2:95:e7:0b:2f:52:58:b4:df:17:26:bd:
89:9e:2b:3f:48:51:ec:ae:ee:0e:6e:29:4f:08:13:
d1:52:9d:af:fd:60:90:68:d2:84:06:a7:d7:5d:f7:
e3:59:b1:77:49:6a:8d:a9:4e:72:39:45:2a:d3:9b:
be:ba:c5:7d:1a:ae:06:a5:cc:77:c9:1e:6e:39:bc:
4a:ff:fc:04:07:bc:4f:28:f8:84:de:46:b0:b8:34:
ac:59:13:60:5a:53:e6:5c:c8:72:55:08:fc:26:d0:
29:07:24:7a:f3:3c:b4:cb:4e:4c:02:bc:69:80:3c:
03:76:68:fb:fa:bc:33:1d:ba:b0:df:1a:63:dc:a9:
14:92:f4:67:04:c7:fe:ce:9b:1a:52:73:d7:44:8a:
dc:da:f8:12:0b:a8:5c:c6:e9:85:2e:35:2c:32:31:
72:af:8e:34:2a:50:00:58:68:1d:b3:41:e2:ba:3b:
b3:44:b6:98:39:55:7a:07:ad:7d:5a:34:a4:82:83:
e3:80:4d:71:a1:77:0a:0a:d0:5e:d5:6c:74:39:00:
08:ac:47:b2:28:50:e1:e5:31:f4:f4:63:42:00:bc:
fe:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:96:74:F1:AC:29:3A:83:41:E9:C9:72:6D:21:48:95:60:04:7F:C4
X509v3 Authority Key Identifier:
keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/GJZ08awpOoNB6clybSFIlWAEf8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:8ec0::/47
Signature Algorithm: sha256WithRSAEncryption
a4:f2:92:85:a4:d3:8e:fc:1b:7f:b0:bd:c2:6c:2b:b4:18:32:
d7:2c:14:29:ad:e1:59:7c:38:2c:43:dc:48:36:e2:8d:3c:1d:
78:39:4d:62:64:a9:9a:b4:4c:8f:05:99:68:fd:b6:25:b4:07:
58:93:3a:c2:cf:4e:bf:27:98:01:d0:41:bf:a6:7f:27:4e:8b:
99:31:e2:fe:58:62:1b:c9:4c:f2:1f:bc:80:ee:61:18:ce:24:
2b:f5:68:45:2f:a1:29:a1:e6:a1:13:ac:97:d4:91:ea:4f:4c:
e7:84:2f:36:3d:a6:04:b3:f2:d5:ae:91:e2:11:c7:c1:9c:e0:
28:d8:58:6e:17:4e:e9:17:d6:f7:65:6c:6f:fb:a2:4e:20:f8:
6a:92:f8:2b:a4:34:d0:27:1b:f2:5b:e6:0a:58:50:9b:31:d5:
1d:2f:24:a5:5c:08:3b:a6:54:9c:b7:1a:37:0c:98:b7:b0:53:
c8:90:16:9c:aa:d9:b9:da:90:5c:1d:96:84:c5:15:81:f9:d4:
2e:1f:77:23:82:59:0f:b2:d3:d1:07:b6:b8:d3:1a:1a:c2:8a:
e1:43:61:61:88:62:bf:07:1b:9d:34:f7:74:b4:8d:24:a5:db:
56:67:4e:e0:43:59:29:b0:c2:1c:51:60:59:8c:b1:12:6a:9d:
09:79:4a:c0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt+N6+yP+4gSQgIb0ES3aOGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMDA2OGQ1YmYxYmZmZDc5MTc0ZTM3NTAxYmZhMTdmOTE3
YjMxM2QwHhcNMjYwMTAyMTAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODk2NzRmMWFjMjkzYTgzNDFlOWM5NzI2ZDIxNDg5NTYwMDQ3ZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq78mubXJArnJoV9GusvW5P2rQUAg
tq2VpCrBdsVoosPSlecLL1JYtN8XJr2Jnis/SFHsru4ObilPCBPRUp2v/WCQaNKE
BqfXXffjWbF3SWqNqU5yOUUq05u+usV9Gq4Gpcx3yR5uObxK//wEB7xPKPiE3kaw
uDSsWRNgWlPmXMhyVQj8JtApByR68zy0y05MArxpgDwDdmj7+rwzHbqw3xpj3KkU
kvRnBMf+zpsaUnPXRIrc2vgSC6hcxumFLjUsMjFyr440KlAAWGgds0HiujuzRLaY
OVV6B619WjSkgoPjgE1xoXcKCtBe1Wx0OQAIrEeyKFDh5TH09GNCALz+SQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBiWdPGsKTqDQenJcm0hSJVgBH/EMB8GA1UdIwQY
MBaAFHEAaNW/G//XkXTjdQG/oX+RezE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FCbzFiOGJfOWVSZE9OMUFiLWhmNUY3TVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny83NGQ3Y2QtMDRlMS00OWQ4LWFhZDkt
ODIwNDNiOWU0ZjcxLzEvR0paMDhhd3BPb05CNmNseWJTRklsV0FFZjhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny83NGQ3Y2QtMDRlMS00OWQ4LWFhZDktODIwNDNiOWU0Zjcx
LzEvY1FCbzFiOGJfOWVSZE9OMUFiLWhmNUY3TVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgSOwAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCk8pKFpNOO/Bt/sL3CbCu0GDLXLBQpreFZfDgs
Q9xINuKNPB14OU1iZKmatEyPBZlo/bYltAdYkzrCz06/J5gB0EG/pn8nTouZMeL+
WGIbyUzyH7yA7mEYziQr9WhFL6EpoeahE6yX1JHqT0znhC82PaYEs/LVrpHiEcfB
nOAo2FhuF07pF9b3ZWxv+6JOIPhqkvgrpDTQJxvyW+YKWFCbMdUdLySlXAg7plSc
txo3DJi3sFPIkBacqtm52pBcHZaExRWB+dQuH3cjglkPstPRB7a40xoaworhQ2Fh
iGK/BxudNPd0tI0kpdtWZ07gQ1kpsMIcUWBZjLESap0JeUrA
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:42:27 2026 by rpki-client