Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/gEZlw9k_VPv8GbA7WWzqaTy-BMI.roa
File: gEZlw9k_VPv8GbA7WWzqaTy-BMI.roa (raw, json)
Hash identifier: Lv/SG4mgPTraUQbE/pWdnazB2KTWa/TOwivQEs3O12Y=
Subject key identifier: 80:46:65:C3:D9:3F:54:FB:FC:19:B0:3B:59:6C:EA:69:3C:BE:04:C2
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 01A1D632C38AA5AE1F780C13704C7E10F21D
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/gEZlw9k_VPv8GbA7WWzqaTy-BMI.roa
Signing time: Fri 13 Nov 2026 18:36:53 +0000
ROA not before: Fri 13 Nov 2026 18:36:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214833
IP address blocks: 91.241.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d6:32:c3:8a:a5:ae:1f:78:0c:13:70:4c:7e:10:f2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Nov 13 18:36:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=804665c3d93f54fbfc19b03b596cea693cbe04c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ca:f5:6a:08:b6:a2:26:64:8c:14:78:d2:9d:
6a:72:47:c4:f5:bc:69:40:8e:64:a3:53:da:8d:dd:
35:02:94:a2:6c:9c:d6:03:95:d5:06:f9:d1:f2:05:
e4:06:bf:0b:d3:48:28:4c:60:1a:d9:c7:a5:db:e0:
4b:24:e5:56:8a:42:80:ff:2f:92:a1:02:b2:56:d5:
67:6a:5b:47:c0:0b:87:66:ba:85:ee:9b:28:b3:c5:
a3:9a:84:2c:94:88:61:e0:da:51:cf:53:4b:36:27:
27:7e:67:8e:83:6d:ec:3d:0a:23:20:b1:27:31:b1:
e6:1a:fe:23:69:6b:7e:28:66:94:3e:25:f4:36:4c:
cc:d8:a9:b3:b8:e9:e8:bf:57:f1:05:e7:4e:f6:f0:
ab:1c:19:f7:6e:40:f6:38:7a:b2:49:cb:eb:c4:ae:
df:e2:5c:99:61:a1:ee:d3:f3:61:7a:d5:12:cb:f6:
aa:97:03:e8:25:e1:c7:17:b8:eb:39:92:cc:5f:83:
13:2c:8b:9b:1d:21:4c:22:f1:41:37:86:b3:10:d3:
54:90:60:97:99:11:e5:78:d5:7e:e4:4f:58:19:0e:
25:94:1c:01:05:55:4c:68:5d:09:51:4b:ce:51:8c:
b6:63:8c:79:55:da:c6:5f:ea:52:b9:8c:b8:cb:80:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:46:65:C3:D9:3F:54:FB:FC:19:B0:3B:59:6C:EA:69:3C:BE:04:C2
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/gEZlw9k_VPv8GbA7WWzqaTy-BMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.181.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:3d:1d:1e:79:6f:a7:70:ba:43:94:3e:82:dd:16:dd:de:08:
0c:fb:96:88:5d:f3:ff:c5:2a:af:19:f2:d0:76:ba:57:93:01:
3d:50:3b:7b:ad:32:9c:c8:09:50:4a:c8:24:8b:bd:93:b9:38:
21:fc:26:29:ae:6f:73:07:f3:71:3c:eb:e1:46:1c:21:4d:29:
bc:0a:fd:69:d5:cc:3f:63:2f:f7:31:f6:a8:52:aa:74:39:45:
19:ed:b6:d6:bd:b0:9a:39:28:cb:bd:a8:d4:b0:14:99:01:8a:
da:21:ce:cb:c2:57:d1:54:de:36:b3:a6:e0:56:16:09:1f:f8:
f7:17:2f:07:b2:fd:1d:e6:9f:73:71:1a:9e:c4:bc:36:d8:a3:
a9:35:0e:75:8b:62:7c:8e:2c:eb:a9:3c:75:c8:71:9c:7b:23:
ae:7a:bd:24:ae:2f:13:de:e5:65:f3:5d:eb:dd:34:e9:3a:fd:
17:ae:d5:b9:d2:72:bc:59:93:3f:c5:1f:bf:bb:5d:b9:02:c9:
87:93:a6:1e:32:ed:23:41:20:81:ce:18:89:2d:67:13:fd:8c:
64:73:07:cd:60:d1:db:e5:9c:94:60:59:10:fe:0c:43:5a:81:
a1:a8:e5:28:3a:35:65:45:27:4c:ea:b9:57:7f:5c:16:e1:22:
09:5e:d5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:49 2026 by rpki-client