Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/gOtTk7UmMp1v-_yqWbRjY45OpWU.roa
File: gOtTk7UmMp1v-_yqWbRjY45OpWU.roa (raw, json)
Hash identifier: /fotZTJTtrvQiuHJIWOl4utSJBgailrFndgkQGOPqi8=
Subject key identifier: 80:EB:53:93:B5:26:32:9D:6F:FB:FC:AA:59:B4:63:63:8E:4E:A5:65
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 01A0114769A01B31D3EBE8BADE8D99680855
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/gOtTk7UmMp1v-_yqWbRjY45OpWU.roa
Signing time: Mon 17 Aug 2026 19:51:27 +0000
ROA not before: Mon 17 Aug 2026 19:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50582
IP address blocks: 2a07:e140::/29 maxlen: 29
2a0b:1040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:47:69:a0:1b:31:d3:eb:e8:ba:de:8d:99:68:08:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Aug 17 19:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80eb5393b526329d6ffbfcaa59b463638e4ea565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:0c:6a:01:82:4e:03:bf:7d:be:f0:f2:e3:
7b:f9:c2:5a:62:f5:54:5d:2f:b1:34:2b:7d:19:0a:
69:24:8f:e9:73:05:f2:34:dd:db:64:7f:42:e4:69:
6b:be:c4:6e:b8:80:50:ea:ac:a2:dd:c2:3c:81:47:
0f:d4:e4:b0:e1:f1:2b:d3:26:17:55:33:dd:c8:c3:
22:70:cb:74:59:cb:19:63:70:6c:d3:29:7e:ca:f5:
30:ff:46:e1:c6:d6:16:84:26:a0:e2:85:6b:75:fc:
72:1f:c5:4a:3b:2f:27:6d:de:9f:db:d4:e3:fd:ce:
bd:e4:9a:0e:16:c4:4e:b9:56:54:ae:b5:6b:57:c6:
e4:b7:55:54:83:25:89:d6:10:05:93:25:18:0c:5b:
21:51:d2:f4:f8:9e:c1:65:ed:d8:62:7d:08:01:a7:
18:af:65:03:a1:53:c3:00:b5:82:2b:fe:e5:2e:43:
a9:f5:7f:38:b2:f3:ec:25:bc:4f:20:9f:9d:5b:a3:
cb:d3:7a:8d:e6:1d:58:16:e4:03:07:b0:a0:31:ef:
9b:5e:da:e6:a0:b9:e5:f2:b1:b9:e3:7e:73:81:cb:
1f:18:6b:60:31:3c:89:0d:e2:0e:35:0f:4e:c6:a1:
a8:a3:3e:01:ce:4b:b5:81:ef:ad:74:df:b2:dc:4c:
1c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EB:53:93:B5:26:32:9D:6F:FB:FC:AA:59:B4:63:63:8E:4E:A5:65
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/gOtTk7UmMp1v-_yqWbRjY45OpWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e140::/29
2a0b:1040::/29
Signature Algorithm: sha256WithRSAEncryption
15:e9:14:c8:39:fb:03:c7:fe:dd:10:9d:5e:67:2c:6d:ee:0d:
23:28:7f:ad:75:97:45:3b:61:9e:8d:e5:37:83:b7:48:e7:61:
4a:04:ca:3a:00:2c:08:c5:c5:7f:a4:94:10:ae:8c:e9:32:4d:
9b:e8:b3:5b:17:38:f5:2a:72:a6:75:c3:20:1e:bb:c4:39:ba:
11:bf:6f:d7:05:49:f8:1d:c4:92:68:36:27:24:1f:52:27:a8:
c5:a1:cf:4f:ad:21:95:0c:7d:e3:d1:fe:22:f6:63:5e:dc:e7:
4a:1a:5f:81:56:ef:7f:1f:e1:77:63:6a:57:9e:f3:87:af:e9:
43:dc:ac:7a:e5:83:69:f2:d3:10:25:26:3b:83:cd:6a:e5:f4:
bf:57:b1:41:3f:91:f8:f9:51:f9:5e:d2:2c:50:b9:a7:0d:31:
6d:39:77:fd:f0:08:3e:82:9d:c4:9a:6e:20:3c:91:50:e9:49:
43:4f:0e:b1:ed:23:ba:09:31:ff:6a:a5:8f:64:1f:44:57:82:
d8:1a:fd:07:88:d9:01:57:fa:ba:e2:1f:08:6f:38:7f:a0:ac:
7d:ff:61:dc:e6:c7:82:c5:84:ba:ef:4c:f6:8c:48:f1:cd:8f:
70:0c:24:6e:45:bf:4e:a7:5a:23:d9:23:32:b5:7f:84:9c:d6:
e4:04:40:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:24:57 2026 by rpki-client