Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/Gjz0mygWmIZxLbOtZYh8gSNFZzY.roa
File: Gjz0mygWmIZxLbOtZYh8gSNFZzY.roa (raw, json)
Hash identifier: h0qTYnLbIysZ9bLj3Ec2bVq0IWOpYfY2WhPaY9ABSWU=
Subject key identifier: 1A:3C:F4:9B:28:16:98:86:71:2D:B3:AD:65:88:7C:81:23:45:67:36
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 01A08FE02980B65CFB0AD69AD735EC5515EE
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/Gjz0mygWmIZxLbOtZYh8gSNFZzY.roa
Signing time: Fri 11 Sep 2026 09:50:27 +0000
ROA not before: Fri 11 Sep 2026 09:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.223.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:e0:29:80:b6:5c:fb:0a:d6:9a:d7:35:ec:55:15:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Sep 11 09:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a3cf49b28169886712db3ad65887c8123456736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:d7:56:94:2a:d1:0c:77:7a:39:86:4c:3f:
35:39:a0:ea:b4:62:0e:02:f6:76:54:e0:d1:5d:8c:
bf:26:06:5b:31:1a:4d:f2:28:fb:72:77:e6:51:cc:
c6:34:9e:ba:2e:27:1d:24:3e:a9:fa:9f:99:09:86:
05:d4:b5:60:ad:ac:f8:74:05:93:d7:cc:4e:e2:02:
98:80:bd:2b:64:f2:4b:07:3b:c8:33:a3:fd:8c:98:
10:0c:d7:de:38:32:90:1e:24:42:72:16:2d:8c:dd:
7d:d2:53:10:6e:ea:48:9d:e1:42:b5:c4:67:ce:64:
19:37:09:6d:8e:b0:7c:fb:9f:95:78:40:ce:87:04:
21:99:e1:97:31:9d:57:3a:7d:02:3c:8d:41:14:75:
85:e0:7f:34:54:36:dc:01:87:12:ae:9e:cf:03:1b:
73:01:3b:3a:dd:d5:8b:52:9f:a6:a6:e3:e1:3a:0a:
9a:1e:eb:17:99:0e:0a:68:40:19:2c:20:30:20:d2:
0d:62:b2:e8:94:8b:69:6b:cd:c7:64:96:95:3a:90:
48:32:a0:f3:e5:3f:91:c8:8a:80:a4:c2:23:0e:87:
30:7d:db:2e:8c:7a:9e:e8:4c:15:a9:7b:35:1f:50:
13:74:f9:a0:71:91:be:95:55:78:e7:e6:39:dc:c2:
bd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3C:F4:9B:28:16:98:86:71:2D:B3:AD:65:88:7C:81:23:45:67:36
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/Gjz0mygWmIZxLbOtZYh8gSNFZzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:56:23:3d:97:f0:b9:86:5a:aa:cf:79:a6:d8:de:e7:69:21:
34:7e:97:63:5e:9f:e1:8c:2b:33:99:39:ed:8f:78:18:64:0a:
ee:90:a0:46:12:9b:d7:e7:e5:32:40:27:43:2e:a5:8f:f7:e2:
08:72:52:5a:6d:0a:a1:55:f8:f8:c8:a4:fa:a8:df:eb:32:54:
25:41:e0:d7:b5:08:54:3e:4c:36:f1:78:b0:b9:92:9f:2e:0f:
2a:be:eb:5d:e0:e4:d5:16:c7:4d:b2:c2:c1:71:87:29:7e:e4:
30:83:fa:ee:af:24:04:51:9c:e0:ad:29:1b:51:0a:e4:00:08:
1d:b5:9f:1b:c5:f4:ed:26:3b:1b:37:2c:18:b1:93:20:7b:06:
00:c4:51:8c:7d:f6:e2:1c:0c:07:9f:aa:cb:4d:b0:4e:40:68:
53:37:7b:f4:3a:b4:69:e8:f9:cf:6c:2d:95:28:70:26:35:0d:
24:6c:4f:55:6b:8e:ae:67:58:eb:c1:30:db:48:b7:24:3d:46:
af:a5:4b:86:cb:21:1d:9b:63:0a:fb:a6:b8:28:f1:be:4c:12:
44:1a:82:55:f0:f5:8a:dd:87:f7:59:f2:ab:53:40:81:02:64:
21:d0:91:d3:09:f3:f3:8a:de:29:97:a3:ed:3e:9b:f6:df:93:
78:20:15:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:37:42 2026 by rpki-client