Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/gDSCRA6SYAo_ND0FekjkrAIEJOg.roa
File: gDSCRA6SYAo_ND0FekjkrAIEJOg.roa (raw, json)
Hash identifier: jFjh9a+6n6/CgL9A0TiXBnWMnMdLq13PoBLDCUcmf+Q=
Subject key identifier: 80:34:82:44:0E:92:60:0A:3F:34:3D:05:7A:48:E4:AC:02:04:24:E8
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01A18223FF9AC550A9B9E6C7E9D31846EDFB
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/gDSCRA6SYAo_ND0FekjkrAIEJOg.roa
Signing time: Wed 28 Oct 2026 10:52:39 +0000
ROA not before: Wed 28 Oct 2026 10:52:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210558
IP address blocks: 146.19.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:23:ff:9a:c5:50:a9:b9:e6:c7:e9:d3:18:46:ed:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Oct 28 10:52:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=803482440e92600a3f343d057a48e4ac020424e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:89:fc:bc:90:5f:a0:47:b4:ed:40:b6:f8:
da:e4:0e:55:ed:da:05:61:20:c4:a9:a1:ae:53:3c:
87:be:e5:3a:af:6f:f6:83:84:e1:a9:a6:ac:16:6d:
9e:53:19:a3:cb:da:6b:e7:80:65:d3:17:46:99:0e:
55:96:9f:b9:f9:bf:33:7c:09:81:69:8c:3e:53:e5:
2f:3c:24:2d:fa:2b:ec:55:0a:63:71:af:a3:30:6a:
50:fe:df:06:25:ca:e7:e1:8f:af:40:e2:22:3d:70:
29:2b:fa:3e:a3:1d:39:38:42:30:a5:7f:cf:51:97:
22:4c:18:28:b0:74:43:1c:00:cd:7f:27:d4:1b:52:
4e:f3:9f:15:d3:53:a3:82:42:70:a4:a5:81:75:d0:
50:00:c8:ae:74:50:c0:ce:6a:b3:22:3d:47:16:ef:
2d:65:c0:8b:d5:b7:62:40:20:87:38:f8:2f:81:39:
bb:e2:c9:8d:14:7f:63:1e:5e:36:82:d8:08:db:aa:
19:c9:a0:42:fd:0c:61:cf:38:b1:fd:1b:0f:7b:19:
cd:81:94:d7:49:d2:09:cc:81:6d:5b:36:02:6a:36:
d2:65:03:40:6c:15:77:3a:92:18:56:b9:00:ca:43:
e3:d7:87:c4:8e:51:d2:f3:94:57:b5:22:d8:54:16:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:34:82:44:0E:92:60:0A:3F:34:3D:05:7A:48:E4:AC:02:04:24:E8
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/gDSCRA6SYAo_ND0FekjkrAIEJOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.69.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7e:a6:3c:aa:ba:c3:db:74:6b:cc:6d:12:1b:62:a8:cf:17:
5a:f4:a7:d6:57:a9:8a:9c:0b:fa:f6:89:8c:85:b8:c6:e9:22:
0e:7e:fd:49:30:97:47:66:aa:08:84:8e:b9:e1:84:0f:0d:04:
79:01:02:a7:86:97:18:c6:2c:4b:2f:0e:5b:a8:65:90:95:4e:
8e:74:d4:9f:3b:e2:dc:01:40:60:12:39:95:3b:35:3a:41:34:
cb:10:9f:9a:65:1e:99:5e:4b:5a:e4:00:06:cb:65:77:44:1f:
3d:7e:f7:a2:8e:20:09:fc:f8:36:44:74:bb:ca:41:36:3a:5b:
cd:ce:5a:53:15:78:43:4b:a2:6d:2d:80:34:d6:47:52:79:b3:
00:9b:c5:3e:d3:18:62:77:c4:2b:a3:0c:26:4c:02:70:5d:94:
9a:9f:81:19:18:b7:c0:26:ef:f7:19:36:3e:c7:e8:5e:38:f8:
95:2e:bd:6c:a6:09:29:ff:9d:db:75:88:d9:ac:44:ea:1f:47:
8d:ae:45:b3:b1:b8:a0:b9:58:c1:9a:91:ae:7f:14:0a:4b:df:
79:01:1e:76:8a:10:6f:59:be:c2:f8:d6:8c:95:89:49:8c:a6:
6c:ce:d3:eb:3b:8b:b8:3f:8a:61:a3:a9:de:b3:c5:3a:ec:cd:
6e:f9:33:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGCI/+axVCpuebH6dMYRu37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjYxMDI4MTA1MjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDM0ODI0NDBlOTI2MDBhM2YzNDNkMDU3YTQ4ZTRhYzAyMDQyNGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMWJ/LyQX6BHtO1Atvja5A5V7doF
YSDEqaGuUzyHvuU6r2/2g4ThqaasFm2eUxmjy9pr54Bl0xdGmQ5Vlp+5+b8zfAmB
aYw+U+UvPCQt+ivsVQpjca+jMGpQ/t8GJcrn4Y+vQOIiPXApK/o+ox05OEIwpX/P
UZciTBgosHRDHADNfyfUG1JO858V01OjgkJwpKWBddBQAMiudFDAzmqzIj1HFu8t
ZcCL1bdiQCCHOPgvgTm74smNFH9jHl42gtgI26oZyaBC/Qxhzzix/RsPexnNgZTX
SdIJzIFtWzYCajbSZQNAbBV3OpIYVrkAykPj14fEjlHS85RXtSLYVBZY5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIA0gkQOkmAKPzQ9BXpI5KwCBCToMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvZ0RTQ1JBNlNZQW9fTkQwRmVramtyQUlFSk9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNFMA0G
CSqGSIb3DQEBCwUAA4IBAQBBfqY8qrrD23RrzG0SG2Kozxda9KfWV6mKnAv69omM
hbjG6SIOfv1JMJdHZqoIhI654YQPDQR5AQKnhpcYxixLLw5bqGWQlU6OdNSfO+Lc
AUBgEjmVOzU6QTTLEJ+aZR6ZXkta5AAGy2V3RB89fveijiAJ/Pg2RHS7ykE2OlvN
zlpTFXhDS6JtLYA01kdSebMAm8U+0xhid8QrowwmTAJwXZSan4EZGLfAJu/3GTY+
x+heOPiVLr1spgkp/53bdYjZrETqH0eNrkWzsbiguVjBmpGufxQKS995AR52ihBv
Wb7C+NaMlYlJjKZsztPrO4u4P4pho6nes8U67M1u+TMn
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:10:06 2026 by rpki-client