Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GXBNloO30kGCKz3m6QrNxj5BT90.roa
File: GXBNloO30kGCKz3m6QrNxj5BT90.roa (raw, json)
Hash identifier: tcbA/rFA3B312z+pwsQZTJ7V49nutc1CTJvPtMAqJgY=
Subject key identifier: 19:70:4D:96:83:B7:D2:41:82:2B:3D:E6:E9:0A:CD:C6:3E:41:4F:DD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E17CD1B8FBA9852E0B81C77B4F9C6E78A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GXBNloO30kGCKz3m6QrNxj5BT90.roa
Signing time: Mon 11 May 2026 16:09:38 +0000
ROA not before: Mon 11 May 2026 16:09:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 151.242.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:cd:1b:8f:ba:98:52:e0:b8:1c:77:b4:f9:c6:e7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 11 16:09:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19704d9683b7d241822b3de6e90acdc63e414fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:c6:f6:75:71:fb:a3:06:c4:7d:07:88:88:
c8:4b:fb:a9:6f:91:d4:8b:f2:30:45:78:ad:41:0a:
b4:7d:96:e3:f3:79:99:06:eb:8c:7f:ec:96:b9:9b:
0e:62:2d:9a:a5:60:ca:9b:80:c6:28:36:ae:34:9e:
70:6c:07:61:5f:63:97:bb:2d:4e:f5:4f:40:87:64:
fd:08:d7:75:4e:fb:e7:60:9b:34:d9:37:a8:59:bf:
3d:4d:4d:be:47:c0:b2:35:0d:e2:17:24:12:51:cd:
cb:7c:49:60:5d:64:12:ac:ab:d9:ed:7e:e8:72:ef:
a3:bb:e8:32:00:27:0c:85:9d:5f:46:18:40:ea:a4:
f9:d8:9a:8b:83:2b:e0:18:59:c1:34:d7:bc:b1:ab:
52:7d:81:46:3f:a3:40:ea:dd:8d:29:f3:e6:b0:a2:
83:29:a7:ef:23:9a:39:0a:f7:ae:00:fd:fa:ae:24:
be:c9:01:62:42:5c:db:0f:86:68:51:b9:e6:38:bf:
57:b9:f9:52:dc:c7:1e:a4:27:ca:0b:d5:a3:4f:31:
4b:0c:d6:72:e5:21:32:35:bf:51:de:c1:72:3a:a9:
76:ed:41:28:f4:32:90:ed:36:d4:7b:79:b4:1e:2e:
87:5f:fa:10:15:2e:98:63:e5:8a:6c:2f:78:53:a4:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:70:4D:96:83:B7:D2:41:82:2B:3D:E6:E9:0A:CD:C6:3E:41:4F:DD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GXBNloO30kGCKz3m6QrNxj5BT90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.178.0/24
Signature Algorithm: sha256WithRSAEncryption
53:c9:74:f4:7d:b7:ec:27:94:1b:b6:4f:8c:97:99:37:e5:46:
e9:43:75:ba:65:f8:4f:36:7d:a0:3b:73:8a:f1:20:bd:fa:5b:
72:79:90:16:4d:7b:d0:02:85:26:e8:7a:33:3b:0d:d1:aa:16:
6c:5e:90:1b:bf:fa:7f:31:91:98:96:3c:6e:bd:6e:b3:d7:40:
19:1a:5f:e8:a3:d3:7f:70:2b:26:8f:16:81:73:f4:c0:b1:70:
ca:4c:57:95:8c:e2:46:cd:6c:9e:0e:b6:9c:61:25:19:e5:65:
1d:30:3f:a5:7b:d2:9b:11:e4:48:bf:2f:9c:fa:b9:2c:10:54:
b1:cb:ea:4c:55:ac:c1:57:7c:44:ef:82:42:36:31:59:52:df:
7f:be:44:b9:cf:4d:c6:36:b1:fd:af:82:08:76:ed:98:8e:5e:
fc:52:10:fe:c4:2f:22:90:18:fd:9e:a4:b7:ca:22:48:1b:da:
40:da:85:fc:e5:0b:fc:41:a4:44:4d:0a:67:b2:8d:2f:02:d3:
6e:38:ca:e0:97:1e:d1:1a:87:a5:19:16:4c:79:05:9a:96:af:
1c:69:6e:1c:e1:36:b9:4f:e0:ae:15:6f:e9:e3:3c:61:a7:5d:
bb:90:51:d6:be:e0:ea:09:40:2e:ab:02:20:59:0c:f4:04:ae:
15:f3:0e:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4XzRuPuphS4Lgcd7T5xueKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNTExMTYwOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTcwNGQ5NjgzYjdkMjQxODIyYjNkZTZlOTBhY2RjNjNlNDE0ZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls7G9nVx+6MGxH0HiIjIS/upb5HU
i/IwRXitQQq0fZbj83mZBuuMf+yWuZsOYi2apWDKm4DGKDauNJ5wbAdhX2OXuy1O
9U9Ah2T9CNd1TvvnYJs02TeoWb89TU2+R8CyNQ3iFyQSUc3LfElgXWQSrKvZ7X7o
cu+ju+gyACcMhZ1fRhhA6qT52JqLgyvgGFnBNNe8satSfYFGP6NA6t2NKfPmsKKD
KafvI5o5CveuAP36riS+yQFiQlzbD4ZoUbnmOL9XuflS3McepCfKC9WjTzFLDNZy
5SEyNb9R3sFyOql27UEo9DKQ7TbUe3m0Hi6HX/oQFS6YY+WKbC94U6Sb7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBlwTZaDt9JBgis95ukKzcY+QU/dMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvR1hCTmxvTzMwa0dDS3ozbTZRck54ajVCVDkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/KyMA0G
CSqGSIb3DQEBCwUAA4IBAQBTyXT0fbfsJ5Qbtk+Ml5k35UbpQ3W6ZfhPNn2gO3OK
8SC9+ltyeZAWTXvQAoUm6HozOw3RqhZsXpAbv/p/MZGYljxuvW6z10AZGl/oo9N/
cCsmjxaBc/TAsXDKTFeVjOJGzWyeDracYSUZ5WUdMD+le9KbEeRIvy+c+rksEFSx
y+pMVazBV3xE74JCNjFZUt9/vkS5z03GNrH9r4IIdu2Yjl78UhD+xC8ikBj9nqS3
yiJIG9pA2oX85Qv8QaRETQpnso0vAtNuOMrglx7RGoelGRZMeQWalq8caW4c4Ta5
T+CuFW/p4zxhp127kFHWvuDqCUAuqwIgWQz0BK4V8w6F
-----END CERTIFICATE-----
Generated at Wed May 13 11:56:31 2026 by rpki-client