Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/gyJT59mv6KBVG_Zo9tx_hnZpJKY.roa
File: gyJT59mv6KBVG_Zo9tx_hnZpJKY.roa (raw, json)
Hash identifier: EGF+yWuAT2mFnT93FBKX6jU9cu5gZF1RyLSjHRTOPb4=
Subject key identifier: 83:22:53:E7:D9:AF:E8:A0:55:1B:F6:68:F6:DC:7F:86:76:69:24:A6
Certificate issuer: /CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Certificate serial: 019F2368CDC00F071ED50C54C7E95E432FC8
Authority key identifier: 59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/gyJT59mv6KBVG_Zo9tx_hnZpJKY.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211882
IP address blocks: 46.231.240.0/23 maxlen: 24
2a0c:e300:12::/48 maxlen: 48
2a0c:e303::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cd:c0:0f:07:1e:d5:0c:54:c7:e9:5e:43:2f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=832253e7d9afe8a0551bf668f6dc7f86766924a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:eb:95:36:4d:3e:89:b1:ca:4d:48:e1:95:
f6:8c:1c:6a:1a:86:2c:ea:ef:3b:97:c2:a4:4d:85:
12:fc:39:dc:00:b7:51:08:bd:fa:af:a5:54:44:03:
f5:58:c9:fe:70:2b:77:32:52:29:d3:6b:df:4e:ae:
11:b6:74:b5:73:3b:c3:a1:94:79:60:0e:e3:8f:79:
95:5f:79:56:77:32:8c:3a:d2:94:25:16:e3:b2:39:
3a:c3:7c:c4:cd:a4:22:23:5c:f4:16:07:f6:88:4b:
ce:8d:41:d3:3d:41:14:d9:10:95:75:91:2c:97:81:
7c:18:e6:ab:11:e2:ee:29:b8:52:7b:c2:fc:53:c2:
b2:98:9c:14:52:dd:e8:b4:7d:73:3c:0e:e1:0b:f0:
28:8a:7e:e4:3f:67:0b:d5:9f:da:89:da:dd:81:9e:
65:72:4d:53:dd:24:48:68:ea:06:0c:cd:4b:7a:f3:
7e:b6:c8:79:2a:0b:ca:6c:db:c4:21:24:20:e9:32:
e4:df:ab:77:ad:65:15:8b:6e:b6:f9:57:8f:aa:a5:
d1:33:70:ab:93:5d:f7:07:64:e2:3c:d9:88:8e:f4:
6f:ab:c8:11:67:29:49:b2:47:44:e9:97:42:94:bc:
30:ac:ed:67:35:23:54:96:cb:f8:2a:a4:3f:1b:e4:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:22:53:E7:D9:AF:E8:A0:55:1B:F6:68:F6:DC:7F:86:76:69:24:A6
X509v3 Authority Key Identifier:
keyid:59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/gyJT59mv6KBVG_Zo9tx_hnZpJKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.240.0/23
IPv6:
2a0c:e300:12::/48
2a0c:e303::/32
Signature Algorithm: sha256WithRSAEncryption
94:42:11:91:17:c9:1f:78:19:a1:39:f2:a3:b0:ea:29:e4:59:
47:b9:39:6f:27:fb:10:f3:43:7d:ab:d9:04:94:bd:c1:4c:94:
34:e0:b3:37:13:0d:9d:80:00:2d:77:36:a6:ff:b1:67:91:ea:
f1:96:85:dd:03:32:af:ec:c9:ce:3a:75:ef:86:c1:47:da:c7:
66:c5:a8:d2:56:55:47:4c:09:0f:48:98:5c:5a:06:53:be:e6:
05:59:54:93:b9:87:21:d1:55:42:b3:07:e4:c9:47:eb:ab:55:
98:96:e8:28:a6:b8:72:c8:93:b1:96:ee:52:5f:f3:70:1a:36:
40:bd:79:0f:05:ae:d8:a3:4d:83:12:49:ef:25:b0:89:44:db:
d6:dd:4a:75:af:01:0b:67:f2:4e:a1:68:30:03:9e:72:eb:3c:
8b:7a:8d:fe:2b:3c:6e:ce:63:a0:c6:db:4d:bf:ac:9e:ab:90:
86:e5:0f:ff:56:a5:91:fe:74:1b:a9:27:a5:01:38:46:3a:6a:
99:7c:14:1c:ba:5f:a1:ca:00:41:07:5c:a6:6a:96:9e:c4:25:
26:2b:21:06:2b:8d:49:0a:fd:26:c6:f9:60:a6:cb:5c:49:ca:
8b:56:66:2b:bf:bd:5d:49:89:3c:c5:dc:7d:00:fd:6b:ae:a4:
2f:64:18:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:56 2026 by rpki-client