Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ggp9GiMqVutA7vIpFqMmKR9UYss.roa
File: ggp9GiMqVutA7vIpFqMmKR9UYss.roa (raw, json)
Hash identifier: 9eXnr9L9PGp29W2FeBlHekJCWieDVhGXfn92xBxPRq0=
Subject key identifier: 82:0A:7D:1A:23:2A:56:EB:40:EE:F2:29:16:A3:26:29:1F:54:62:CB
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019C912723701DB7597EA56DFA8360FC1347
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ggp9GiMqVutA7vIpFqMmKR9UYss.roa
Signing time: Tue 24 Feb 2026 19:36:27 +0000
ROA not before: Tue 24 Feb 2026 19:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a09:96c0::/29 maxlen: 48
2a09:ae80::/29 maxlen: 48
2a09:b440::/48 maxlen: 48
2a13:4bc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:91:27:23:70:1d:b7:59:7e:a5:6d:fa:83:60:fc:13:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 24 19:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=820a7d1a232a56eb40eef22916a326291f5462cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:50:1d:8f:07:d9:9d:0d:55:17:45:e5:ab:95:
15:8b:33:08:ef:71:a5:f9:0d:7b:da:86:62:38:8f:
da:47:de:27:41:80:75:e8:f7:ba:d1:18:96:60:66:
80:68:8c:4e:7c:df:ca:f0:1f:b5:30:c2:b7:15:d6:
dc:52:2b:0d:c0:eb:d3:8f:4b:d7:76:8b:3d:b3:38:
20:7d:2f:3f:21:4b:74:68:68:37:62:83:e4:75:fa:
6d:f4:01:70:c4:a2:bf:ae:80:a4:4a:db:6e:c7:56:
a5:98:a3:1f:7d:be:38:34:c1:82:a4:6d:9a:31:48:
0a:d1:4f:27:72:da:97:dc:bf:50:96:3e:f9:8f:f5:
33:38:0d:a2:9b:9b:bb:d6:6f:2e:31:34:e2:d8:09:
6f:00:9d:92:ab:1b:68:11:63:c0:ad:a8:bf:24:a0:
36:30:c7:74:61:58:10:c3:63:b2:d1:ea:38:83:49:
d7:fd:df:95:8c:5b:59:06:d1:80:ca:36:df:8b:64:
ac:30:90:48:69:08:e0:57:39:87:88:cc:6d:cb:ba:
c1:25:f6:a4:b7:07:af:68:09:da:01:7d:8e:c4:ba:
4f:8b:06:fd:a4:00:9d:9d:6d:b6:14:21:b8:da:76:
0d:f5:24:82:ce:12:33:8e:32:b1:54:a6:22:da:77:
f7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0A:7D:1A:23:2A:56:EB:40:EE:F2:29:16:A3:26:29:1F:54:62:CB
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ggp9GiMqVutA7vIpFqMmKR9UYss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:96c0::/29
2a09:ae80::/29
2a09:b440::/48
2a13:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
03:bc:30:f8:94:a5:cb:c6:90:40:a0:ef:56:2a:ff:6e:c5:f9:
e3:5f:f0:05:d6:e7:78:0a:7b:af:ba:90:30:e5:54:5e:e4:9f:
21:91:c8:18:78:de:97:4b:af:70:6c:77:25:ea:3b:73:10:3b:
cf:ca:51:1b:7f:ad:77:8e:bf:89:c8:a3:ca:33:ba:55:ec:e2:
55:15:c5:2b:45:06:a7:ed:8a:c4:4a:b6:98:d7:e1:cb:b7:20:
2c:b6:2a:88:bf:7f:d6:36:30:7b:6f:ca:4d:e6:49:13:01:48:
0e:7d:14:1e:2a:a7:31:40:44:83:9b:14:a3:7b:80:ae:3f:34:
2f:18:58:71:ec:78:a5:5c:86:ad:ce:c5:45:21:f1:52:50:05:
1e:8c:a2:a0:30:94:12:4d:f3:31:07:62:fd:5b:c0:0f:cd:7a:
d2:a2:84:e8:50:71:1f:d9:48:8e:ad:72:e5:ff:c6:2f:1d:22:
1c:4d:4c:0c:6e:ea:bb:ed:a5:77:78:10:0e:28:aa:37:71:ca:
e7:63:45:50:15:51:08:82:e7:86:59:09:1f:bf:0a:6f:09:bf:
97:29:9e:19:83:e4:2f:f5:df:10:f5:fe:30:16:09:07:90:b7:
4d:df:60:93:6b:9a:f3:3e:cb:b2:70:75:80:a2:64:53:f0:19:
d7:11:f9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:11:56 2026 by rpki-client