Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gcTHFEMn7c6lkJ2_E0Q7LoVypqI.roa
File: gcTHFEMn7c6lkJ2_E0Q7LoVypqI.roa (raw, json)
Hash identifier: RodYlItd/E8R6bQwvA4yK2Kby3LgcBNFyIsnisWnZd4=
Subject key identifier: 81:C4:C7:14:43:27:ED:CE:A5:90:9D:BF:13:44:3B:2E:85:72:A6:A2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019ECF6AF9E6A13C7AFC31306D1544B31ADF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gcTHFEMn7c6lkJ2_E0Q7LoVypqI.roa
Signing time: Tue 16 Jun 2026 07:52:35 +0000
ROA not before: Tue 16 Jun 2026 07:52:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212112
IP address blocks: 5.253.57.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:6a:f9:e6:a1:3c:7a:fc:31:30:6d:15:44:b3:1a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 16 07:52:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81c4c7144327edcea5909dbf13443b2e8572a6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f7:57:43:4f:91:49:69:6e:4f:17:e3:e5:88:
9b:c8:ca:57:ae:38:1c:9b:00:78:92:14:12:34:64:
39:7a:29:77:1a:46:a8:91:d6:0c:17:c4:61:94:64:
00:32:f5:c9:5c:21:dd:ec:4c:73:f5:aa:1f:2a:cc:
a3:f0:12:94:a9:b0:95:ef:25:34:2f:18:e5:4b:20:
e0:a6:f1:84:0c:74:f9:a8:df:7e:a5:10:19:f1:36:
55:73:f3:26:22:cb:d5:72:58:51:41:f1:8c:99:a7:
bf:9c:c1:21:de:2a:97:45:7d:92:24:31:60:4f:30:
14:cb:ad:69:2d:f1:1a:78:a9:7a:ec:81:ef:8a:2d:
69:16:9e:7a:0a:78:31:ae:c8:76:d4:58:b5:5a:b8:
ef:52:e3:fd:02:11:f4:d1:be:75:63:aa:7f:53:05:
26:ad:24:53:4c:d8:fc:d2:a0:fb:a7:ce:9e:5d:73:
92:ff:8d:03:34:9a:28:79:fb:33:14:b8:c9:e2:37:
af:ed:72:1b:4b:37:67:4b:20:cb:0e:f5:b7:c4:1a:
02:22:12:cb:a6:dd:67:ea:a0:7e:81:28:44:92:e1:
04:8d:41:5d:32:38:e0:f0:ae:da:92:ad:75:14:4d:
f3:10:3d:75:0d:9c:0a:8e:d9:21:8c:3d:d7:20:44:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C4:C7:14:43:27:ED:CE:A5:90:9D:BF:13:44:3B:2E:85:72:A6:A2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gcTHFEMn7c6lkJ2_E0Q7LoVypqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.57.0/24
185.246.221.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ae:87:79:9a:ca:ac:79:a6:17:21:5d:58:bf:85:57:6f:ec:
f9:18:1b:c7:13:19:6b:3e:41:15:fd:ec:1c:50:39:f5:64:67:
1e:70:bb:e1:3a:06:41:1e:18:05:de:c4:d1:fd:a5:0c:ab:c6:
55:97:92:75:83:58:b5:dd:11:a0:91:2b:8c:47:fd:74:09:91:
c5:a1:93:09:52:23:16:89:d0:9e:f2:53:a3:a4:66:fa:a6:e1:
ad:04:47:29:32:74:55:22:97:8d:35:17:9f:d9:c0:24:80:97:
b6:22:85:4a:d2:78:94:eb:be:cb:ee:28:d4:11:45:57:3d:19:
b7:71:73:ab:30:dc:e0:7d:14:14:cb:04:08:e2:72:53:77:87:
8b:bf:de:03:fd:aa:b2:6f:df:20:20:fb:df:2b:ed:52:64:c3:
d2:bb:81:c2:ba:51:66:56:9a:76:4f:94:7c:21:b6:4c:4f:3f:
d2:b3:9e:23:1a:6c:a2:1d:f9:d5:b7:6d:15:ba:ed:53:2f:d0:
36:60:50:1c:ac:b5:a7:85:42:09:7a:ef:33:3c:b2:32:59:3d:
1c:24:d9:e3:70:59:d6:20:2d:cb:fe:e0:1f:f7:41:21:a8:78:
c4:37:9b:cd:72:10:6c:79:12:fc:2e:71:e9:ec:ed:10:df:50:
c6:48:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 12:02:38 2026 by rpki-client