Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/GiXhPQ-0e2_VOSMPeT5jNBzlxCA.roa
File: GiXhPQ-0e2_VOSMPeT5jNBzlxCA.roa (raw, json)
Hash identifier: 0OdnNDd1VjIe91ip/f2oXTplzO+hZMDitnnCMaCZMcM=
Subject key identifier: 1A:25:E1:3D:0F:B4:7B:6F:D5:39:23:0F:79:3E:63:34:1C:E5:C4:20
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 019F1E9E60993D88BB8BC7810841B212196E
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/GiXhPQ-0e2_VOSMPeT5jNBzlxCA.roa
Signing time: Wed 01 Jul 2026 16:58:43 +0000
ROA not before: Wed 01 Jul 2026 16:58:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209439
IP address blocks: 149.232.189.0/24 maxlen: 24
2a00:8b80::/32 maxlen: 32
2a09:3dc0::/30 maxlen: 30
2a09:3dc4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:9e:60:99:3d:88:bb:8b:c7:81:08:41:b2:12:19:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jul 1 16:58:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a25e13d0fb47b6fd539230f793e63341ce5c420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:53:44:88:50:3e:cc:d0:e1:82:d3:a0:c2:48:
d6:58:4b:28:69:d8:d3:5f:51:c5:ba:f1:cd:16:ad:
0f:75:1a:ed:7e:44:c2:dc:9c:30:e1:79:72:e7:30:
f7:1b:a0:98:95:2e:01:da:39:4c:4c:6d:9a:a7:f8:
e8:6f:77:46:22:5e:6f:00:e0:f8:cf:d7:10:09:8f:
e5:4e:63:0a:63:4c:26:e7:ab:e1:e0:97:57:a1:63:
85:1e:12:9c:01:67:6c:d3:7e:ab:4c:1d:e8:a0:94:
a3:b8:70:3b:0a:91:51:3a:b3:75:7f:57:b2:e7:60:
00:79:62:5b:8c:12:f3:80:59:32:12:59:9d:d2:3d:
94:d9:f2:e1:c2:b4:8c:53:87:af:fb:57:bf:69:8e:
16:6c:e6:1b:3a:00:96:00:48:b1:ab:f6:3e:36:ce:
c8:8d:54:57:07:53:7d:0b:b8:c3:70:9a:01:d5:b5:
d2:47:75:fe:40:f1:6b:d9:e2:1c:c4:69:cb:67:9b:
7e:1b:1e:24:d7:95:12:3b:cc:60:f1:c2:27:62:93:
bf:9f:e8:32:b0:c8:9d:ca:09:e9:12:3e:c9:65:58:
8c:4f:ed:f2:47:4d:02:27:7c:5f:a6:b7:03:4a:83:
33:fa:d5:71:da:d0:b8:f5:a1:ef:76:f1:95:57:00:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:25:E1:3D:0F:B4:7B:6F:D5:39:23:0F:79:3E:63:34:1C:E5:C4:20
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/GiXhPQ-0e2_VOSMPeT5jNBzlxCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.232.189.0/24
IPv6:
2a00:8b80::/32
2a09:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
72:70:0e:87:ee:7e:00:9f:e8:cd:8d:d6:55:e1:78:3b:ca:ca:
fc:26:11:be:38:a5:3c:7b:54:ac:f7:f9:78:5b:7b:c9:e8:90:
26:3e:4b:6b:38:3e:1e:7d:0c:9f:3b:97:6a:e6:50:44:bf:60:
a5:51:0b:37:5a:18:e8:79:ea:8d:1e:57:1b:9a:e1:cb:0f:06:
d6:a8:bf:42:aa:66:b9:c3:f1:74:03:cf:ef:df:d5:9d:96:1c:
46:fc:10:a1:7f:a2:01:fa:ce:81:3f:f1:27:21:0f:81:14:23:
2c:34:61:6a:c3:a8:1c:45:ad:c7:53:8f:2b:82:fd:c5:1b:89:
65:0c:07:f4:93:29:4c:c8:5e:b9:f7:8a:f9:65:01:34:8e:2e:
52:ca:6c:2f:80:de:5a:d0:44:fe:bb:5b:31:07:f8:4c:e2:4d:
f4:d7:50:73:fd:ff:65:91:4b:3f:6a:77:94:9e:33:17:54:67:
50:ec:fb:03:8d:6b:b3:2e:47:41:29:ee:a3:8e:3d:48:d2:d9:
06:32:3d:2d:ea:f9:a9:c3:0a:84:bd:4b:ba:96:d9:3e:39:48:
79:6c:5b:95:48:7d:27:8d:25:58:a3:8c:9e:86:63:a8:e1:db:
3f:f5:f1:d1:de:bc:ef:d2:41:bd:d2:95:4b:70:87:e6:35:94:
05:4c:76:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:30:14 2026 by rpki-client