Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gx-keaJwXEL8ojt72LmjeVYWEsY.roa
File: gx-keaJwXEL8ojt72LmjeVYWEsY.roa (raw, json)
Hash identifier: 9king195XNN4KqX3LIthYdVun1ddhzxslRyHA2XPPpg=
Subject key identifier: 83:1F:A4:79:A2:70:5C:42:FC:A2:3B:7B:D8:B9:A3:79:56:16:12:C6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1789445561A8092F7E0CE19FF9B9EC526
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gx-keaJwXEL8ojt72LmjeVYWEsY.roa
Signing time: Mon 26 Oct 2026 14:19:05 +0000
ROA not before: Mon 26 Oct 2026 14:19:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199595
IP address blocks: 45.91.208.0/24 maxlen: 24
45.137.40.0/24 maxlen: 24
45.158.187.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:94:45:56:1a:80:92:f7:e0:ce:19:ff:9b:9e:c5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 26 14:19:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=831fa479a2705c42fca23b7bd8b9a379561612c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:ef:6d:4c:15:3e:ce:00:bb:ad:32:d2:23:
43:0c:ae:df:03:42:f1:80:a6:98:0a:dd:db:3b:11:
2c:68:2b:d0:b9:9e:39:2e:b9:12:37:49:37:4f:9a:
b1:ef:11:b1:47:8f:6d:25:63:b3:3f:0b:58:b2:c8:
07:80:dc:d9:90:8d:8e:0d:39:9e:da:18:18:92:52:
09:ea:32:3c:dd:fe:72:bf:2f:9e:fc:bb:3d:3a:f5:
f7:55:01:38:64:6a:a3:ed:d5:28:a8:ac:60:5d:12:
51:50:67:cf:e5:78:19:01:ab:01:e9:04:6d:b4:04:
74:d0:7c:04:94:91:1f:7c:08:26:f8:33:ad:0b:fa:
43:96:8d:c4:f9:65:26:dc:d8:a7:78:7c:83:b4:a6:
11:e6:8c:c6:80:6d:72:29:15:23:1a:6f:fe:ca:a0:
51:31:da:9a:4c:bd:1c:d0:3d:c9:88:cb:5c:47:ec:
ec:54:73:ca:d4:9f:82:79:4e:f8:26:e4:4a:e8:c0:
a9:31:7a:e7:bd:33:60:e9:5e:2f:ab:a0:d2:b1:8d:
a7:ac:0d:5a:96:1a:9d:61:95:df:3e:0e:15:bc:63:
fe:9a:4a:21:76:3e:71:a8:a5:04:c0:5e:6e:42:4a:
2d:8c:c0:d2:89:65:20:a9:82:8a:69:a0:8d:ed:b3:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1F:A4:79:A2:70:5C:42:FC:A2:3B:7B:D8:B9:A3:79:56:16:12:C6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gx-keaJwXEL8ojt72LmjeVYWEsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.208.0/24
45.137.40.0/24
45.158.187.0/24
113.30.153.0/24
Signature Algorithm: sha256WithRSAEncryption
53:22:c8:b9:a4:d2:29:6c:69:f9:ff:da:2b:d5:c1:75:30:fe:
6c:7e:5a:6c:15:02:4a:d1:4e:19:83:66:21:df:9f:19:f1:0c:
12:ac:3f:27:78:1c:4a:c5:05:2e:7b:88:70:06:ed:d0:76:64:
61:64:4f:c0:e1:e0:2e:a6:c7:f6:33:6d:df:f8:3e:bb:40:c8:
eb:1b:43:3e:a4:c3:7a:08:65:88:70:db:3f:12:45:74:59:63:
f7:91:27:ae:39:fd:61:52:75:69:5a:0d:c7:2d:a1:51:79:4a:
f0:99:59:c4:d6:3e:b0:18:73:e7:ba:6e:82:e3:f2:41:4d:84:
dd:3e:f7:48:4c:d7:de:7e:28:13:5e:37:e2:b1:d8:93:5d:1f:
bd:f1:19:f7:2c:c4:a6:85:df:4d:30:7f:76:4c:94:91:6c:ba:
f9:41:48:93:98:7f:af:19:ce:60:12:49:c1:10:f1:fd:62:b2:
f3:6a:f5:7a:0e:7f:62:3c:92:20:24:a5:81:79:08:38:11:36:
4a:63:06:54:54:90:18:7c:73:f2:f6:ae:12:af:ac:db:5a:e9:
93:30:4f:cd:30:d2:66:85:60:fd:a0:8c:e5:8e:84:20:d1:3f:
88:d7:cf:82:43:56:fa:67:46:5c:5a:13:2e:38:0a:89:96:27:
19:0b:7c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 15:26:48 2026 by rpki-client