Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/GbnXnbDjDeY9Xr9vtqb8U64ktUg.roa
File: GbnXnbDjDeY9Xr9vtqb8U64ktUg.roa (raw, json)
Hash identifier: 0Fsg5sZ43flaXIXsIykv2FLzC79XVTKgEJeu3CoPW4Q=
Subject key identifier: 19:B9:D7:9D:B0:E3:0D:E6:3D:5E:BF:6F:B6:A6:FC:53:AE:24:B5:48
Certificate issuer: /CN=921e3c927e3962fe5726edb3f246b2dbd9257716
Certificate serial: 01A0B3E71FBB79931B6D2036D806BA206E3C
Authority key identifier: 92:1E:3C:92:7E:39:62:FE:57:26:ED:B3:F2:46:B2:DB:D9:25:77:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kh48kn45Yv5XJu2z8kay29kldxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/GbnXnbDjDeY9Xr9vtqb8U64ktUg.roa
Signing time: Fri 18 Sep 2026 09:44:23 +0000
ROA not before: Fri 18 Sep 2026 09:44:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218653
IP address blocks: 188.241.38.0/24 maxlen: 24
2a0e:6240::/44 maxlen: 44
2a0e:6240:10::/44 maxlen: 44
2a0e:6240:20::/44 maxlen: 44
2a0e:6240:30::/44 maxlen: 44
2a0e:6240:e000::/44 maxlen: 44
2a0e:6240:fffe::/48 maxlen: 48
2a0e:6240:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kh48kn45Yv5XJu2z8kay29kldxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:e7:1f:bb:79:93:1b:6d:20:36:d8:06:ba:20:6e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921e3c927e3962fe5726edb3f246b2dbd9257716
Validity
Not Before: Sep 18 09:44:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19b9d79db0e30de63d5ebf6fb6a6fc53ae24b548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:a1:bf:2d:f3:9c:2a:1e:4b:2a:9c:62:61:
23:be:f9:c1:b2:58:c6:9b:d7:77:7d:d2:e6:36:31:
2f:8a:a3:e0:9b:2b:a9:2a:d9:71:43:ec:c7:a2:5c:
72:15:57:a0:b0:94:4f:3b:bd:73:80:17:77:b8:dc:
79:de:e0:0f:03:ac:b4:98:fc:0f:32:57:07:67:e6:
3d:d1:ff:9c:2e:ca:87:3b:ef:5c:18:bb:63:a8:46:
63:40:21:09:18:32:24:32:e8:fb:bc:bb:bc:39:69:
2f:00:f5:c9:8f:fc:88:3f:58:d2:25:0f:f6:a2:84:
06:ec:dd:28:8d:e5:af:14:ce:50:55:17:ff:9a:50:
a8:96:41:ac:60:4b:4c:4f:07:c9:49:02:02:86:f2:
ec:95:3f:b7:8d:b3:67:16:fc:5f:dd:ea:a8:65:10:
45:9c:b2:13:ba:5a:0d:0d:8e:16:12:cd:98:66:11:
dd:35:ca:2f:d4:27:e1:8c:96:9d:e1:f7:00:65:b2:
ce:d7:a6:7e:54:c2:27:5f:d1:08:e7:a5:9e:28:17:
ad:4e:c6:86:7d:d2:1d:9b:b0:48:30:33:da:b2:f6:
1b:ee:60:5b:5f:e8:a0:61:9b:83:18:f4:bc:3c:bd:
a1:65:00:df:46:a2:bd:b5:3b:29:0d:2e:c2:b0:c9:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B9:D7:9D:B0:E3:0D:E6:3D:5E:BF:6F:B6:A6:FC:53:AE:24:B5:48
X509v3 Authority Key Identifier:
keyid:92:1E:3C:92:7E:39:62:FE:57:26:ED:B3:F2:46:B2:DB:D9:25:77:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kh48kn45Yv5XJu2z8kay29kldxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/GbnXnbDjDeY9Xr9vtqb8U64ktUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.38.0/24
IPv6:
2a0e:6240::/42
2a0e:6240:e000::/44
2a0e:6240:fffe::/47
Signature Algorithm: sha256WithRSAEncryption
28:e6:ca:3a:97:24:33:22:a6:69:d9:09:35:ad:70:22:34:ea:
28:b7:d0:39:fa:88:ab:68:a8:c3:66:24:90:ab:75:b8:c9:16:
4e:ae:23:6b:da:83:80:39:53:b9:34:17:69:3f:15:34:56:d5:
aa:03:d0:c1:47:98:8b:7e:89:f6:d0:75:64:91:93:1f:51:84:
3a:6a:6c:0a:62:fe:c1:85:91:d4:58:d9:20:15:51:36:41:5a:
0f:cf:7c:85:54:2c:8d:6d:2c:b6:95:c9:5f:c5:8e:f3:cb:4c:
48:19:d0:19:1f:8f:e3:3b:e9:cb:e3:50:25:11:c7:ee:90:b4:
6d:a5:4b:53:35:2f:cf:86:45:93:ca:ad:b1:71:b6:29:a9:ba:
55:d2:7e:21:fe:72:41:3e:8d:48:b8:06:b6:63:e3:d7:17:bf:
bd:51:86:94:05:da:e2:f5:a4:aa:12:40:55:c4:7a:ad:a3:6b:
0b:37:3c:75:19:dd:59:5f:6e:31:6d:bf:45:50:37:d0:30:ff:
c8:e5:13:05:a8:a2:81:9f:d7:7f:f2:ac:f7:db:5a:df:b9:b2:
19:6f:b1:d7:72:e9:b0:e2:b3:90:36:ff:b7:64:72:3c:b0:ca:
33:3c:ba:3c:d4:03:80:d3:b0:e5:80:8c:d1:26:38:df:5d:78:
02:94:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:27:34 2026 by rpki-client