Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/GYJHiPWaMqugF_GjwExoIfhgoPc.roa
File: GYJHiPWaMqugF_GjwExoIfhgoPc.roa (raw, json)
Hash identifier: Dki8MrbWhooGodaNv11SsBHhdgyiXetzc8pqck9za2Y=
Subject key identifier: 19:82:47:88:F5:9A:32:AB:A0:17:F1:A3:C0:4C:68:21:F8:60:A0:F7
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019F40AC092727FD15E52222D096D6A92A52
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/GYJHiPWaMqugF_GjwExoIfhgoPc.roa
Signing time: Wed 08 Jul 2026 07:40:44 +0000
ROA not before: Wed 08 Jul 2026 07:40:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212720
IP address blocks: 87.232.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:ac:09:27:27:fd:15:e5:22:22:d0:96:d6:a9:2a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 8 07:40:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19824788f59a32aba017f1a3c04c6821f860a0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:43:62:2e:77:18:6e:d7:3f:45:9b:f2:c9:
b5:52:ba:e8:2f:4b:c1:b9:2f:19:b5:b1:db:47:d3:
84:55:f6:b6:cf:c9:cb:ac:f1:bc:33:24:5d:d5:b9:
ae:ee:11:4c:40:c9:83:6a:41:ab:99:fb:ea:e7:e7:
b2:49:30:72:11:63:ff:4f:4d:66:f1:d5:89:72:0d:
0f:97:83:71:cc:19:d9:d0:84:3f:ee:a2:d3:e3:5f:
c5:21:10:ca:c6:4b:5c:7e:f0:50:7d:a4:d0:5c:8b:
24:37:ac:85:e6:28:0c:01:32:72:09:90:e0:dc:e5:
82:8f:d0:b6:37:0c:58:4f:21:a4:27:d9:fe:a4:9a:
33:23:84:50:cb:a7:d6:0c:9d:ab:b6:ac:70:ee:0b:
a4:5b:a5:cf:7a:79:de:00:4c:31:77:0e:af:11:b1:
f4:e3:64:aa:0e:34:5a:43:ce:d8:1a:a3:ba:7c:e5:
6e:67:e6:39:7a:ad:0b:5d:eb:aa:c3:a1:b0:93:49:
4d:19:cc:07:c2:3a:f2:66:8e:aa:54:ab:55:a8:b6:
13:dd:8d:5c:a1:f8:a4:d8:10:04:b4:9f:61:3d:da:
72:73:20:44:79:ab:38:d3:68:20:66:ef:ad:c9:3f:
54:32:68:95:86:4b:3c:1f:cc:1f:e3:8f:82:b7:0d:
f2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:82:47:88:F5:9A:32:AB:A0:17:F1:A3:C0:4C:68:21:F8:60:A0:F7
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/GYJHiPWaMqugF_GjwExoIfhgoPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.111.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:f4:a6:d7:4e:b0:d5:db:6b:8b:8d:27:7a:18:bf:57:ee:d6:
9c:96:81:6a:d3:db:46:08:ee:3c:b9:73:01:91:b1:f5:ca:bc:
e8:ed:87:f3:93:a7:b1:64:df:bf:51:de:a5:26:3b:f5:9e:91:
fe:37:80:34:20:0f:e1:e1:22:30:ec:05:4f:73:95:33:dd:88:
e9:65:b8:5b:75:1d:d8:1e:81:c5:7b:fd:5d:29:ed:5e:63:0b:
1f:33:0b:cd:0e:fb:cd:c2:83:9c:9e:b4:51:02:9d:27:b2:87:
db:4a:28:6a:c7:3a:cc:ac:36:17:3c:65:4e:44:d4:49:07:15:
e3:d8:df:a2:55:f3:71:b4:2e:1a:96:6f:95:2a:d5:84:ee:cc:
cf:c4:90:e4:f3:a1:5b:9d:85:a0:60:4c:58:30:ef:2a:73:d4:
8c:7e:38:20:a6:05:8f:df:fd:75:08:cb:a8:e5:70:db:29:a1:
92:17:1e:48:3e:1e:f2:b4:88:cf:c5:b8:50:47:bd:f5:a1:bf:
a1:05:30:60:d5:c4:cd:9d:1e:67:56:9d:61:58:e8:97:49:e2:
48:86:d3:41:40:d3:ed:d2:ad:40:a7:4d:1a:1a:8a:da:61:aa:
c2:cb:e7:86:71:9d:e8:b7:70:82:89:68:cd:9c:6f:d6:43:e9:
8e:52:ff:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 13:22:10 2026 by rpki-client