Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/Gesfsa1mPZDnaCG5I-S24-ylDHM.roa
File: Gesfsa1mPZDnaCG5I-S24-ylDHM.roa (raw, json)
Hash identifier: 2IV3q7ceTfOxNOfoF+NvFTTxBpL0Fe+G/gUYs6fQZiU=
Subject key identifier: 19:EB:1F:B1:AD:66:3D:90:E7:68:21:B9:23:E4:B6:E3:EC:A5:0C:73
Certificate issuer: /CN=776ec04d7e679886216d07bc7228db528f3c86fd
Certificate serial: 019DBB2A06921323042D5A4302FCBD39D5CD
Authority key identifier: 77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/Gesfsa1mPZDnaCG5I-S24-ylDHM.roa
Signing time: Thu 23 Apr 2026 16:26:26 +0000
ROA not before: Thu 23 Apr 2026 16:26:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200137
IP address blocks: 91.210.154.0/24 maxlen: 24
185.84.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 20:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bb:2a:06:92:13:23:04:2d:5a:43:02:fc:bd:39:d5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776ec04d7e679886216d07bc7228db528f3c86fd
Validity
Not Before: Apr 23 16:26:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19eb1fb1ad663d90e76821b923e4b6e3eca50c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:91:7b:f0:f4:6d:29:7e:65:59:dd:6c:95:
72:32:e5:3b:4d:96:62:b4:cd:eb:3a:a5:7d:6d:91:
54:23:89:ec:50:ba:80:71:28:8b:e7:45:d6:96:05:
02:2b:a5:19:fa:6b:93:30:34:a2:ff:a8:6b:b6:1e:
05:d3:00:f6:d6:df:b3:11:60:f9:17:0d:0c:51:39:
a4:2e:c7:4b:5f:fd:b5:ad:09:85:ea:40:91:14:0d:
d2:17:f1:e6:79:13:b3:a3:bc:c4:9e:39:84:08:58:
ff:9d:4a:81:32:80:58:25:3b:7f:ee:f1:d8:24:a8:
96:7e:c8:cc:3f:dc:30:5b:e1:f5:cb:0f:20:b6:9b:
d8:b1:0e:81:75:e7:9a:56:d5:a1:eb:e6:b0:df:ce:
a2:a0:04:ac:0d:00:da:f4:5c:85:1f:3c:42:d0:91:
80:06:cd:ac:f5:2d:8c:da:1a:b0:fe:70:7e:33:bf:
1f:19:75:95:f3:13:88:42:29:76:d6:53:0d:fb:81:
b7:b2:d7:3d:92:2e:be:f6:3c:49:cd:7c:0a:50:67:
2c:3d:35:d2:e8:17:d4:21:f5:85:55:a8:93:4f:4f:
91:06:6f:3e:47:2c:d2:5b:5c:a9:e1:49:16:c6:45:
fb:ee:fb:31:21:52:9a:a9:6d:1e:a6:32:b1:46:30:
b3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EB:1F:B1:AD:66:3D:90:E7:68:21:B9:23:E4:B6:E3:EC:A5:0C:73
X509v3 Authority Key Identifier:
keyid:77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/Gesfsa1mPZDnaCG5I-S24-ylDHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.154.0/24
185.84.30.0/23
Signature Algorithm: sha256WithRSAEncryption
89:38:97:8c:eb:6b:cd:7a:79:81:55:bf:9f:e2:3d:5e:1c:c8:
2c:e8:c8:27:c4:5d:15:8a:0e:bc:5f:c0:ea:7f:13:af:83:92:
31:01:a1:c1:ae:8a:fe:c5:3e:41:82:4e:e6:81:09:02:10:bd:
ee:1b:6d:a1:fc:ba:5a:c1:c9:a4:fb:fd:9f:6a:20:4e:c3:43:
8d:47:24:90:59:45:64:98:a3:43:24:89:27:37:d3:20:2e:25:
e9:ce:a3:21:0a:17:a9:2a:db:fc:93:e3:42:86:79:d7:f7:ac:
c7:1a:a2:df:26:be:be:ff:c3:22:b1:3f:c2:be:bd:a0:81:03:
0d:b5:62:5d:ea:a1:30:e1:60:d0:f4:35:99:5f:1a:ab:f2:b5:
9f:4e:dc:9f:17:17:fe:ee:98:6e:24:43:c8:de:e9:cd:16:4e:
eb:9b:f1:ec:e1:b2:33:31:36:a8:fe:f4:34:d5:f8:c4:0d:91:
d6:45:1c:de:c1:95:64:f5:35:03:14:89:f4:4a:06:d5:09:a8:
c3:61:71:15:45:b1:2d:d8:44:4d:0c:ef:5c:5c:36:0a:1a:1d:
78:64:40:f9:ff:ae:b1:36:04:d2:a0:d5:da:c3:58:bb:57:38:
50:16:f0:17:7e:3b:ac:ea:04:58:41:be:eb:29:6b:39:b9:09:
eb:5c:3a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 03:10:50 2026 by rpki-client