Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/gy24Ea8BsuXB1XC8engI4KEXF4A.roa
File: gy24Ea8BsuXB1XC8engI4KEXF4A.roa (raw, json)
Hash identifier: 2h0DlQ9bxyg8udmh82iK9dYgkvfs9qOrlDFcUWd8VWE=
Subject key identifier: 83:2D:B8:11:AF:01:B2:E5:C1:D5:70:BC:7A:78:08:E0:A1:17:17:80
Certificate issuer: /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial: 019F8A2F28DA87C965A288E3DC281BEB90CE
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/gy24Ea8BsuXB1XC8engI4KEXF4A.roa
Signing time: Wed 22 Jul 2026 14:16:14 +0000
ROA not before: Wed 22 Jul 2026 14:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 91.231.8.0/24 maxlen: 24
91.241.46.0/24 maxlen: 24
194.242.124.0/24 maxlen: 24
194.242.125.0/24 maxlen: 24
194.242.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:2f:28:da:87:c9:65:a2:88:e3:dc:28:1b:eb:90:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Validity
Not Before: Jul 22 14:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=832db811af01b2e5c1d570bc7a7808e0a1171780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:26:0e:d6:45:3d:55:4d:cd:79:06:be:eb:b4:
af:36:b6:6e:e6:b7:6a:60:6f:33:53:5d:86:64:0d:
75:7c:24:3f:a3:3e:0e:60:72:56:08:03:15:ce:e0:
57:25:f9:aa:99:c3:3a:12:a7:5d:a3:13:4f:46:c2:
c7:bd:ca:3e:3b:23:05:c3:fa:4b:05:9c:9f:4b:b0:
9a:e7:8a:2b:9a:c4:53:23:83:70:49:7f:6d:94:6d:
9f:cc:1b:08:1c:76:65:25:74:22:08:3a:08:a0:88:
45:a5:d4:1a:d7:fc:f0:3e:9b:40:a2:87:75:93:db:
a0:54:39:ef:77:ed:42:2e:67:47:4c:c7:1b:d5:5f:
e3:ac:28:9b:1c:c3:2c:b6:59:3f:0a:3f:81:61:20:
0a:2b:9d:99:2d:3d:6e:00:3e:ee:64:1e:e2:ed:e9:
db:b8:a3:ee:6a:b1:de:ed:8a:94:de:8e:80:89:23:
8b:64:3d:05:b4:9b:63:1c:5f:fe:5f:9f:9d:ab:f1:
7b:69:40:0b:39:95:ea:bc:6e:dc:a4:93:a0:f3:dd:
ef:34:d0:1a:14:5b:cf:5e:48:fc:88:1a:24:66:ae:
59:ae:38:d6:5b:9f:f1:85:58:2c:30:98:85:89:87:
9c:a2:50:86:62:17:7e:7e:b5:8f:af:48:cb:91:1c:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2D:B8:11:AF:01:B2:E5:C1:D5:70:BC:7A:78:08:E0:A1:17:17:80
X509v3 Authority Key Identifier:
keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/gy24Ea8BsuXB1XC8engI4KEXF4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.8.0/24
91.241.46.0/24
194.242.124.0-194.242.126.255
Signature Algorithm: sha256WithRSAEncryption
49:0a:25:87:de:8e:da:c0:fe:de:f9:d7:fb:08:98:03:c5:13:
51:e5:ef:4f:f2:91:b0:84:83:1d:c3:2e:a7:ff:e3:9f:f8:be:
03:7e:b5:de:5a:3e:4e:9b:cc:10:b2:e2:9f:ef:63:3b:0a:3d:
69:f8:77:79:0e:c8:dd:2f:09:2c:d7:61:bb:98:7b:3d:0d:e7:
f0:ce:6d:d5:fe:54:b6:17:9b:be:10:a2:a0:26:d3:35:92:81:
7c:60:7e:7b:56:e5:8a:5e:98:cb:34:79:54:a1:a2:d0:70:e4:
3b:75:da:de:be:4e:57:18:1d:08:95:27:50:1b:04:95:e1:fd:
40:13:f4:5c:d1:af:35:a1:31:8e:78:d9:eb:86:ea:41:73:dd:
dd:04:4d:6f:49:57:f0:b0:d1:4d:32:20:a5:d4:e2:18:80:9d:
b0:dd:82:c5:6e:10:c2:ee:21:df:58:ab:09:72:7e:82:39:c3:
75:27:49:ad:57:2a:85:9e:23:28:36:03:53:fa:35:1f:26:e3:
9d:7e:4e:ff:81:12:2a:a3:23:94:29:ed:41:41:6b:24:a4:1a:
ad:f0:58:1d:b9:bf:ac:29:21:81:23:68:62:7f:99:e5:1c:30:
b9:fb:6b:54:dd:44:9f:7c:1b:aa:67:f1:48:4a:0a:0e:f5:8c:
10:5c:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:43 2026 by rpki-client