Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GKI2gjoh2Vgy1T-A8gY_JMowyBg.roa
File: GKI2gjoh2Vgy1T-A8gY_JMowyBg.roa (raw, json)
Hash identifier: SvAcnf9yxtUbuq1Ti+d0L3JWBmFL3ETWU8ZVWTJYANA=
Subject key identifier: 18:A2:36:82:3A:21:D9:58:32:D5:3F:80:F2:06:3F:24:CA:30:C8:18
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A08AA0705F8A184FC21D9C5544BD1B0419
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GKI2gjoh2Vgy1T-A8gY_JMowyBg.roa
Signing time: Thu 10 Sep 2026 09:22:45 +0000
ROA not before: Thu 10 Sep 2026 09:22:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 264628
IP address blocks: 141.136.63.0/24 maxlen: 24
153.51.224.0/20 maxlen: 20
153.51.224.0/21 maxlen: 21
153.51.224.0/22 maxlen: 22
153.51.224.0/23 maxlen: 23
153.51.224.0/24 maxlen: 24
153.51.225.0/24 maxlen: 24
153.51.226.0/23 maxlen: 23
153.51.226.0/24 maxlen: 24
153.51.227.0/24 maxlen: 24
153.51.228.0/22 maxlen: 22
153.51.228.0/23 maxlen: 23
153.51.228.0/24 maxlen: 24
153.51.229.0/24 maxlen: 24
153.51.230.0/23 maxlen: 23
153.51.230.0/24 maxlen: 24
153.51.231.0/24 maxlen: 24
153.51.232.0/21 maxlen: 21
153.51.232.0/22 maxlen: 22
153.51.232.0/23 maxlen: 23
153.51.232.0/24 maxlen: 24
153.51.233.0/24 maxlen: 24
153.51.234.0/23 maxlen: 23
153.51.234.0/24 maxlen: 24
153.51.235.0/24 maxlen: 24
153.51.236.0/22 maxlen: 22
153.51.236.0/23 maxlen: 23
153.51.236.0/24 maxlen: 24
153.51.237.0/24 maxlen: 24
153.51.238.0/23 maxlen: 23
153.51.238.0/24 maxlen: 24
153.51.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:a0:70:5f:8a:18:4f:c2:1d:9c:55:44:bd:1b:04:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 10 09:22:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18a236823a21d95832d53f80f2063f24ca30c818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:97:3b:2e:97:dc:3e:47:76:65:57:23:5d:
11:28:d6:cf:ed:d7:b6:9d:6d:7d:d4:94:be:2b:fc:
ea:14:fb:7a:20:90:d3:bf:aa:b6:9c:2d:22:84:8e:
01:f1:cc:3e:91:d8:88:b7:72:4d:14:4a:fd:69:7b:
05:ac:e0:4c:b2:90:ea:76:d2:c0:0f:19:33:d2:e7:
1e:f8:de:dd:67:93:7c:a9:0c:b8:3e:dd:70:a5:f8:
14:80:71:15:96:06:e7:58:40:8c:35:87:ac:66:b8:
0b:47:9d:20:54:04:b0:23:05:5c:f3:ba:75:92:de:
6d:76:65:1e:d8:04:d0:cc:ab:f1:2a:23:a7:96:bc:
9c:35:05:84:17:48:81:43:26:a7:46:99:d0:2a:53:
4a:06:c2:8b:ea:10:9f:ec:70:58:10:31:88:52:68:
6a:1e:70:80:90:ff:4b:5c:01:00:b2:27:08:d0:54:
9c:11:72:13:7e:63:ca:82:f4:56:09:da:1d:dd:69:
fe:7a:ff:35:05:36:af:47:88:94:be:cc:6c:62:0e:
0b:a7:e1:6d:1b:c2:15:30:72:fe:5b:c9:03:45:72:
9e:8c:67:8c:7a:1f:04:b0:9a:b9:8a:68:c5:17:07:
90:f8:2e:4d:de:cd:c7:c9:40:42:36:02:fe:fd:6e:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A2:36:82:3A:21:D9:58:32:D5:3F:80:F2:06:3F:24:CA:30:C8:18
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GKI2gjoh2Vgy1T-A8gY_JMowyBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.63.0/24
153.51.224.0/20
Signature Algorithm: sha256WithRSAEncryption
96:54:30:ee:16:e9:d7:e7:de:80:7e:12:8c:df:e7:30:0e:cc:
3c:c9:de:b4:0b:b9:f6:7c:1c:4b:5f:f2:45:98:0d:16:2a:5a:
97:ce:96:49:05:7b:cc:4a:2e:16:9f:62:5b:11:10:8e:ed:70:
dc:98:0e:98:af:f3:95:61:a1:de:cf:26:13:2f:46:e9:96:75:
85:fa:53:6c:68:6b:ea:2e:a9:f8:78:74:0a:3c:cb:2f:40:54:
46:6c:23:92:c3:87:8f:8e:f6:30:7f:6c:0c:65:80:1c:4d:9a:
28:d9:30:57:3a:f7:d3:ed:f1:bb:45:cc:01:55:ce:04:ca:3d:
0b:7d:0b:2d:57:e7:00:16:4c:0a:8d:34:0c:5f:09:47:57:6d:
aa:de:4e:b3:76:3c:2b:22:fb:a9:ac:2a:2d:e6:fe:4d:ec:5a:
f8:d4:91:94:40:1f:d9:56:0b:07:e3:cc:23:7d:77:ce:da:b5:
25:f3:c9:b1:cf:6d:04:88:a3:f1:d8:18:08:34:9c:50:4b:08:
e2:59:21:d6:2d:25:0b:f9:0f:b8:8a:83:45:74:0d:99:47:43:
cf:2e:46:13:10:a9:9d:0d:0a:5e:75:ed:b7:59:d3:8c:3a:de:
90:32:30:17:03:c5:f1:e0:80:bf:be:7d:74:12:15:c1:71:fc:
91:55:9f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:25:49 2026 by rpki-client