Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/gMFcOPQteOhqPx2LNjSrGk_i0pc.roa
File: gMFcOPQteOhqPx2LNjSrGk_i0pc.roa (raw, json)
Hash identifier: 4bBSvIov832SMHkWTbm2twdnK2LmhaFY34aJt67Zyz4=
Subject key identifier: 80:C1:5C:38:F4:2D:78:E8:6A:3F:1D:8B:36:34:AB:1A:4F:E2:D2:97
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 01A0C87AD0C222DCD885813A377801E0949B
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/gMFcOPQteOhqPx2LNjSrGk_i0pc.roa
Signing time: Tue 22 Sep 2026 09:38:07 +0000
ROA not before: Tue 22 Sep 2026 09:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1759
IP address blocks: 94.101.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:7a:d0:c2:22:dc:d8:85:81:3a:37:78:01:e0:94:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Sep 22 09:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80c15c38f42d78e86a3f1d8b3634ab1a4fe2d297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:f7:dc:5f:d6:2c:a1:3c:3c:55:ec:35:37:
e9:98:01:9a:b1:df:6b:4c:bb:11:8a:dc:b8:8d:f5:
ee:1e:b8:5d:17:0f:ee:95:32:fa:93:25:eb:bc:17:
f1:13:a3:f9:c9:2a:95:bc:cd:97:2f:ea:c7:b4:88:
94:9b:e2:31:35:79:34:71:33:58:d7:cf:18:b0:21:
e9:5b:a8:66:cd:d3:ce:e1:f7:cb:25:1a:6f:f6:ac:
b1:83:85:48:00:4e:0d:53:4b:31:80:13:f9:f6:ff:
96:13:88:f6:a5:c6:f1:3c:9c:4c:6f:46:20:aa:0a:
39:62:c9:67:81:d2:9e:df:62:d4:20:70:bf:cc:d2:
18:bc:06:d0:36:97:23:08:e6:72:3d:e5:61:69:ec:
82:7e:d1:b2:70:55:c2:fc:11:41:0b:b1:ed:c4:77:
e9:37:62:bb:a9:54:ba:bd:d1:ca:56:cf:3c:4b:ff:
ed:87:60:08:c4:e7:ad:5a:f7:fb:72:6f:3c:ad:3c:
1c:f9:6d:64:45:a1:d2:81:29:6d:18:97:d9:fd:f6:
81:07:0a:c2:55:4c:33:bb:83:83:10:3a:0d:2e:d0:
cf:9c:47:17:04:02:82:0e:b4:04:f8:66:49:2b:27:
85:50:b1:fc:a6:f4:dc:e4:7f:fb:86:1c:6d:b9:39:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C1:5C:38:F4:2D:78:E8:6A:3F:1D:8B:36:34:AB:1A:4F:E2:D2:97
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/gMFcOPQteOhqPx2LNjSrGk_i0pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.8.0/23
Signature Algorithm: sha256WithRSAEncryption
20:8e:22:87:f5:49:98:3e:04:87:3e:67:6d:a0:83:98:9d:50:
b2:d5:73:fb:68:92:33:df:40:dc:a6:f7:00:ca:b4:b7:cf:93:
55:63:ff:7b:4a:dd:22:a3:73:f2:72:ed:48:74:35:45:0f:3e:
8c:c1:20:9f:78:f3:4e:1b:77:27:74:43:82:4d:18:68:13:74:
d3:21:82:57:51:d5:6a:4e:9d:49:95:d1:8f:86:3d:e0:03:c7:
f0:38:6c:90:a4:e2:88:60:d2:d1:66:b9:9f:cf:d9:79:d5:cc:
e8:b2:26:ff:e9:ad:9a:ee:a9:a7:d3:54:e6:e5:22:20:ff:b6:
65:2f:10:39:fb:bf:6c:0d:06:cb:da:93:42:bf:55:fb:45:68:
47:de:60:c2:7a:34:b8:a8:ba:9e:4b:07:e3:dd:7b:73:e8:bc:
36:98:52:e2:ae:66:1b:27:07:83:8f:c6:ad:ef:80:04:95:df:
2f:0b:c2:ae:e8:51:d8:9e:07:6c:9f:02:6f:59:d4:26:da:4b:
ec:42:7c:2d:e4:40:8e:d6:4d:3d:d5:df:96:dc:a9:fb:a6:e8:
79:ea:b8:e6:19:cc:12:16:14:dc:8e:13:67:fc:ae:11:2d:31:
04:99:28:d1:4c:74:4b:83:b7:0a:dc:75:98:8a:80:d4:7a:66:
1d:ee:60:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:34:52 2026 by rpki-client