Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/Gfh4TLLtxOZjLOcARkbioL8fk_Q.roa
File: Gfh4TLLtxOZjLOcARkbioL8fk_Q.roa (raw, json)
Hash identifier: 2sXc9iKrtq+i83pxuGTHgtbwb349pNRuxqHP3JzBUo0=
Subject key identifier: 19:F8:78:4C:B2:ED:C4:E6:63:2C:E7:00:46:46:E2:A0:BF:1F:93:F4
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 019F37C2892FD23ACBEEBC1E6DD53F52BFD8
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/Gfh4TLLtxOZjLOcARkbioL8fk_Q.roa
Signing time: Mon 06 Jul 2026 14:08:43 +0000
ROA not before: Mon 06 Jul 2026 14:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203919
IP address blocks: 80.91.65.0/24 maxlen: 24
80.91.86.0/24 maxlen: 24
80.91.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:c2:89:2f:d2:3a:cb:ee:bc:1e:6d:d5:3f:52:bf:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Jul 6 14:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19f8784cb2edc4e6632ce7004646e2a0bf1f93f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ba:7e:86:13:16:80:08:44:9c:40:e3:21:3e:
01:98:95:3e:e4:53:00:1e:67:7f:ba:91:00:db:b1:
da:b2:44:07:51:91:79:c4:d8:1e:84:fb:92:eb:a0:
43:a6:af:36:b8:5d:f6:d0:33:25:bb:40:d4:f2:46:
c6:33:a8:4b:75:d6:48:99:17:fe:0b:2b:86:a9:19:
58:6c:08:23:96:c4:c0:8d:7d:3d:02:37:79:b1:6d:
af:57:7f:3b:fe:37:ed:39:80:7a:cd:6c:53:28:bf:
31:d6:d8:f0:d9:80:66:45:a1:13:be:71:b9:b8:83:
3b:1b:a4:2f:ba:db:2f:1c:e7:66:82:90:72:8b:9d:
13:fb:eb:43:0b:45:fe:d2:2c:7a:1e:2b:b6:d6:0d:
80:b4:84:da:47:8d:3c:b5:b7:44:98:d6:ec:5d:59:
a4:ef:5e:2d:ab:bc:92:d5:b9:4c:92:e2:e6:2b:85:
23:5e:2d:d1:95:76:2f:4b:95:07:b1:e0:16:fd:80:
59:23:64:be:fc:1c:89:33:1d:cf:5f:9d:4d:e6:0f:
f4:39:23:fe:ad:63:83:92:d1:b2:a5:6f:35:e4:3a:
3f:79:aa:6f:a5:49:37:2b:9b:a7:0c:43:e8:99:29:
26:25:b0:c7:42:44:7a:08:c6:80:eb:97:a8:c8:da:
19:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F8:78:4C:B2:ED:C4:E6:63:2C:E7:00:46:46:E2:A0:BF:1F:93:F4
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/Gfh4TLLtxOZjLOcARkbioL8fk_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.65.0/24
80.91.86.0/24
80.91.88.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b4:b0:3c:9e:27:c8:90:55:1c:bc:b7:5e:3e:55:02:65:da:
40:8e:c8:c9:74:67:75:f3:55:d1:9b:c2:b3:2e:9d:5f:69:ce:
40:28:1e:9c:28:cd:e1:aa:93:f5:0f:7b:56:77:ca:24:b8:05:
0c:83:da:c9:47:1c:a8:3a:20:78:90:d1:a8:a9:f1:fc:b7:fb:
a6:cd:a9:f2:0d:b8:83:89:b5:c6:b2:1d:19:10:1c:2b:e2:f7:
43:1b:1e:44:05:6e:69:93:f8:56:f0:06:41:ad:a6:6b:54:85:
24:d1:f4:cb:6e:43:d4:62:d0:e0:71:51:ca:79:fc:b9:c9:0b:
af:0e:b9:74:63:a1:2b:08:78:76:b4:24:e2:01:c5:d6:22:18:
9c:85:0a:62:93:1e:2d:12:95:5c:63:56:ec:bf:a0:d1:a4:7b:
a6:ca:5c:cb:1b:49:b8:ee:b1:6c:73:4a:28:5e:ce:a7:a5:5e:
53:39:31:7e:44:94:23:f2:86:6e:66:27:0b:77:ea:b1:78:7b:
a8:f3:0c:d3:a0:37:cb:3e:c8:53:4a:4f:61:0a:a3:a1:32:84:
e9:e2:90:e9:1e:75:4b:ff:d1:e1:5f:51:b7:9a:a1:74:e2:3c:
b2:e2:3b:d8:e4:7b:7f:f8:bf:e1:84:c8:16:10:73:67:1f:43:
28:59:e9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:36:32 2026 by rpki-client