Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/GfYfpyN5jeyVGMtR1H-p-7019jc.roa
File: GfYfpyN5jeyVGMtR1H-p-7019jc.roa (raw, json)
Hash identifier: hDtfxcTWErCdzm61MCC3VwTe2487YmqIRLbxpndSgYk=
Subject key identifier: 19:F6:1F:A7:23:79:8D:EC:95:18:CB:51:D4:7F:A9:FB:BD:35:F6:37
Certificate issuer: /CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Certificate serial: 019DA9A9585A86DE3CA6348CEAB0A6B783C1
Authority key identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/GfYfpyN5jeyVGMtR1H-p-7019jc.roa
Signing time: Mon 20 Apr 2026 06:52:20 +0000
ROA not before: Mon 20 Apr 2026 06:52:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16044
IP address blocks: 91.226.252.0/22 maxlen: 22
91.226.252.0/24 maxlen: 24
91.226.253.0/24 maxlen: 24
91.226.254.0/24 maxlen: 24
91.226.255.0/24 maxlen: 24
193.34.60.0/23 maxlen: 23
193.34.60.0/24 maxlen: 24
193.34.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:a9:58:5a:86:de:3c:a6:34:8c:ea:b0:a6:b7:83:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Validity
Not Before: Apr 20 06:52:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19f61fa723798dec9518cb51d47fa9fbbd35f637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:6c:d0:02:34:96:cc:e5:68:17:ad:0b:55:
9c:1d:f9:32:1f:bb:34:97:5f:ab:cb:72:23:2b:44:
69:68:c1:8a:ae:e0:9d:8f:9a:b5:b4:67:e8:f5:ca:
6f:7e:e9:64:9f:bc:e4:c8:4d:04:53:97:fa:5e:83:
f2:04:7c:bd:5a:52:b0:84:95:7c:a3:03:0b:d1:87:
60:6f:88:27:35:68:cd:21:b4:53:25:e8:86:6d:e3:
66:54:42:6b:2d:aa:4b:e8:54:1b:50:90:22:49:ed:
de:b4:0c:0c:1d:80:50:95:70:7b:93:49:15:3d:f4:
c3:fe:26:69:90:89:32:a8:d8:63:68:d0:ca:77:d7:
47:0c:7a:b3:3d:d7:26:5c:6d:4b:b8:fe:18:f7:7f:
a5:f6:09:90:6b:35:e4:34:92:81:c9:60:ad:61:e4:
4f:4a:46:d4:05:7e:07:ce:ab:6c:57:ef:bb:ef:74:
ff:28:00:08:fc:eb:53:86:11:f4:b6:cc:31:b5:ee:
8f:b9:d0:6b:fb:df:d4:ae:98:35:16:86:b1:f8:04:
90:6e:85:8d:33:25:f2:ce:7a:30:78:4d:0b:0e:29:
73:69:8b:56:c4:00:8d:42:50:cf:95:34:99:5d:b0:
d6:5d:3a:b2:7d:61:fd:7e:bb:ce:4e:ff:d5:1f:40:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F6:1F:A7:23:79:8D:EC:95:18:CB:51:D4:7F:A9:FB:BD:35:F6:37
X509v3 Authority Key Identifier:
keyid:87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/GfYfpyN5jeyVGMtR1H-p-7019jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.252.0/22
193.34.60.0/23
Signature Algorithm: sha256WithRSAEncryption
59:01:0f:58:59:a6:9a:cc:95:67:50:35:0d:59:d8:09:14:5b:
34:56:87:cc:9d:a8:c6:77:0b:75:bb:68:77:03:35:59:5e:f6:
34:f3:4f:69:e2:89:f6:c7:d1:ae:f6:92:77:3f:b8:74:2e:56:
d9:7d:a9:8c:04:c1:03:9b:9e:ef:f6:d9:fc:67:54:07:7f:a0:
ee:7d:4b:7f:8c:07:43:56:ac:07:a0:f7:b1:88:b3:ff:0e:78:
93:7b:36:2a:dd:f4:cf:19:ad:2c:ac:07:7d:a7:e3:29:a7:72:
b9:69:5c:fb:69:da:90:61:ac:87:ed:cd:95:4e:1b:7d:cf:01:
ba:1d:f8:3e:4d:1e:74:70:e1:7e:75:99:f3:c7:d2:10:ca:7a:
85:d2:d3:8c:a3:dc:ad:35:23:cb:6f:a1:2a:4f:ef:b7:a9:f6:
75:f7:f8:1f:13:25:83:11:93:da:73:3d:64:13:87:26:91:e8:
1e:3e:23:8f:5c:a1:1d:ec:e7:b3:d5:2c:fa:5d:20:da:fd:d5:
e8:3d:73:fa:80:52:33:5b:8e:91:91:56:87:8f:34:ad:03:e3:
e8:8f:49:d4:ed:85:34:14:e6:30:99:04:0b:ac:50:3b:15:51:
be:01:12:a7:4d:f0:35:53:f4:8b:16:4d:a6:ce:b6:86:f9:c0:
68:01:9d:40
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ2pqVhaht48pjSM6rCmt4PBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZGE5NjU3YWQxZmRmOThkZTczOGJiMTlhNzNlZmQwZGIw
YjNhMmEwHhcNMjYwNDIwMDY1MjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWY2MWZhNzIzNzk4ZGVjOTUxOGNiNTFkNDdmYTlmYmJkMzVmNjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgls0AI0lszlaBetC1WcHfkyH7s0
l1+ry3IjK0RpaMGKruCdj5q1tGfo9cpvfulkn7zkyE0EU5f6XoPyBHy9WlKwhJV8
owML0Ydgb4gnNWjNIbRTJeiGbeNmVEJrLapL6FQbUJAiSe3etAwMHYBQlXB7k0kV
PfTD/iZpkIkyqNhjaNDKd9dHDHqzPdcmXG1LuP4Y93+l9gmQazXkNJKByWCtYeRP
SkbUBX4HzqtsV++773T/KAAI/OtThhH0tswxte6PudBr+9/Urpg1Foax+ASQboWN
MyXyznoweE0LDilzaYtWxACNQlDPlTSZXbDWXTqyfWH9frvOTv/VH0D2rwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBn2H6cjeY3slRjLUdR/qfu9NfY3MB8GA1UdIwQY
MBaAFIfalletH9+Y3nOLsZpz79DbCzoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDlxV1Y2MGYzNWplYzR1eG1uUHYwTnNMT2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iYmVlNWUtZGRiZC00Yjg1LWI0Y2Et
MmFlNDQwYTVjY2IwLzEvR2ZZZnB5TjVqZXlWR010UjFILXAtNzAxOWpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iYmVlNWUtZGRiZC00Yjg1LWI0Y2EtMmFlNDQwYTVjY2Iw
LzEvaDlxV1Y2MGYzNWplYzR1eG1uUHYwTnNMT2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+L8AwQB
wSI8MA0GCSqGSIb3DQEBCwUAA4IBAQBZAQ9YWaaazJVnUDUNWdgJFFs0VofMnajG
dwt1u2h3AzVZXvY0809p4on2x9Gu9pJ3P7h0LlbZfamMBMEDm57v9tn8Z1QHf6Du
fUt/jAdDVqwHoPexiLP/DniTezYq3fTPGa0srAd9p+Mpp3K5aVz7adqQYayH7c2V
Tht9zwG6Hfg+TR50cOF+dZnzx9IQynqF0tOMo9ytNSPLb6EqT++3qfZ19/gfEyWD
EZPacz1kE4cmkegePiOPXKEd7Oez1Sz6XSDa/dXoPXP6gFIzW46RkVaHjzStA+Po
j0nU7YU0FOYwmQQLrFA7FVG+ARKnTfA1U/SLFk2mzraG+cBoAZ1A
-----END CERTIFICATE-----
Generated at Wed May 13 18:42:51 2026 by rpki-client