Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GaCNO5uvEPZSSwfLA86l-W_3H7o.roa
File: GaCNO5uvEPZSSwfLA86l-W_3H7o.roa (raw, json)
Hash identifier: Q+4U2eLN8lYe4XRd9553vr9mNVPmss4+izmTxQVodwk=
Subject key identifier: 19:A0:8D:3B:9B:AF:10:F6:52:4B:07:CB:03:CE:A5:F9:6F:F7:1F:BA
Certificate issuer: /CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Certificate serial: 019ECF5F0DBE977101CCAC26761866DD39B9
Authority key identifier: 1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GaCNO5uvEPZSSwfLA86l-W_3H7o.roa
Signing time: Tue 16 Jun 2026 07:39:33 +0000
ROA not before: Tue 16 Jun 2026 07:39:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61057
IP address blocks: 195.253.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:5f:0d:be:97:71:01:cc:ac:26:76:18:66:dd:39:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Validity
Not Before: Jun 16 07:39:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19a08d3b9baf10f6524b07cb03cea5f96ff71fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:1a:ad:17:90:03:b4:70:07:7b:29:22:23:
f8:de:da:2f:89:fd:56:37:ba:93:5d:50:87:04:94:
3e:8e:8a:b8:b1:86:c8:9b:87:98:0f:6f:29:09:be:
d1:b3:d7:c3:d4:b8:03:44:bc:93:81:1a:ab:25:de:
d8:99:b0:e1:d7:cc:57:f6:a6:24:b6:37:db:70:26:
b7:db:4a:cb:09:ad:f3:f2:7e:22:1b:f0:bb:9a:3c:
95:f3:09:62:2c:88:b1:ff:b6:e3:1d:e5:e2:0c:3f:
61:aa:b6:73:bd:0e:4c:e5:c0:31:11:c0:7f:93:46:
29:9c:44:e2:fb:7b:1c:81:75:8e:93:5f:03:b8:ca:
c7:58:2c:e6:47:79:ab:9e:be:73:05:bb:58:a1:f2:
78:2e:4c:64:56:22:b9:89:74:e1:d2:56:61:4d:93:
a4:73:22:94:2e:2f:b1:24:38:c8:40:8f:1d:74:8d:
bf:5a:82:aa:42:e0:20:49:65:7f:a2:2a:e3:9d:0a:
79:93:33:24:46:49:36:d4:6e:b1:86:4e:fc:92:52:
a7:bf:d0:eb:89:a5:d6:7e:79:40:8e:a2:bd:e5:dd:
97:46:54:73:f1:5c:b5:e6:92:7d:4f:c6:28:f3:48:
a4:5f:a2:38:49:f1:5d:89:26:aa:f7:ce:38:30:e4:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A0:8D:3B:9B:AF:10:F6:52:4B:07:CB:03:CE:A5:F9:6F:F7:1F:BA
X509v3 Authority Key Identifier:
keyid:1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GaCNO5uvEPZSSwfLA86l-W_3H7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.253.240.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:57:39:d3:a4:93:c7:f8:d1:b2:44:38:b8:6e:73:2b:38:fc:
08:e1:2c:87:fb:85:4c:18:d7:14:be:6c:1a:5e:d7:57:13:cb:
b0:7b:2c:02:81:fd:ae:d5:b3:69:cf:c7:39:d1:53:49:76:50:
5d:b2:0f:d1:65:d1:eb:0d:b6:ad:a0:1e:f7:87:00:69:d1:d4:
14:b9:fc:f8:37:67:a2:80:28:bb:db:1a:3e:01:3c:7e:2d:40:
57:d2:e7:b4:54:81:d3:e1:b3:56:18:e1:ff:e1:3e:74:70:23:
5e:4b:d1:6d:b5:cc:1a:59:d1:3a:12:9e:21:f2:66:67:a6:b9:
15:b9:1f:09:e5:69:21:4a:28:cc:46:f4:92:30:dc:07:e5:5b:
87:e0:5e:ff:fe:8c:cc:78:e3:60:5b:ee:b3:03:dc:93:a3:da:
24:6b:23:30:d6:1e:4e:ab:1c:61:0f:fc:fd:89:0b:7e:49:3d:
ad:67:99:ee:f7:a1:d5:1f:fa:48:0e:45:93:a8:c1:29:d4:f6:
7b:68:bf:95:65:53:d2:b5:e8:6b:cf:53:04:af:9c:47:70:ef:
f8:9c:ee:d3:62:98:ca:3b:ee:7b:3f:b5:c7:84:e9:bd:c2:21:
d2:44:b9:8a:cc:b3:4d:82:94:be:d5:53:51:d8:8b:8e:aa:0d:
43:25:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:18 2026 by rpki-client