Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/GXuc9uT_GkGmPkBU8-lxZlFlZhA.roa
File: GXuc9uT_GkGmPkBU8-lxZlFlZhA.roa (raw, json)
Hash identifier: qUz5FEzbY9Qu9qB3+EdfwN08VmMY+8nongqG9icDfrI=
Subject key identifier: 19:7B:9C:F6:E4:FF:1A:41:A6:3E:40:54:F3:E9:71:66:51:65:66:10
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019FD636F829317E81F39E3C6992AE63748B
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/GXuc9uT_GkGmPkBU8-lxZlFlZhA.roa
Signing time: Thu 06 Aug 2026 08:35:54 +0000
ROA not before: Thu 06 Aug 2026 08:35:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 43.240.150.0/24 maxlen: 24
43.240.151.0/24 maxlen: 24
91.109.41.0/24 maxlen: 24
91.109.45.0/24 maxlen: 24
91.109.46.0/24 maxlen: 24
147.185.196.0/24 maxlen: 24
207.244.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:36:f8:29:31:7e:81:f3:9e:3c:69:92:ae:63:74:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Aug 6 08:35:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=197b9cf6e4ff1a41a63e4054f3e9716651656610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:4d:09:e2:94:8b:6d:df:05:c3:6c:d9:42:
83:a4:f5:95:d9:a2:01:36:2b:5a:04:fd:d7:cc:eb:
86:1e:71:c1:38:a8:ca:82:40:24:c8:df:a1:ac:78:
18:f9:9d:ea:f9:4b:78:1c:fb:ed:a2:4d:26:55:5f:
f9:ab:84:fd:e2:6f:19:0c:26:c1:d1:da:02:0c:09:
61:23:36:0c:0e:ae:fc:cc:94:e2:a3:c8:d1:03:da:
b3:2a:08:d4:03:d9:4a:12:65:da:3c:0f:e8:a5:8f:
4b:0c:61:ea:fe:ee:af:f5:50:19:a4:ee:04:cf:11:
24:b5:18:22:69:9f:4e:f3:70:c5:c7:ec:e0:81:ea:
83:15:64:5a:62:8f:75:d2:75:bf:6b:31:46:af:7b:
f3:2e:cf:a6:55:3c:fe:29:03:9c:2d:90:e3:07:04:
0b:f0:68:a8:cb:f3:4a:42:40:4e:9d:6f:81:f2:10:
3d:c4:38:7f:d8:85:6f:75:4f:0c:54:7b:ea:ea:bd:
5b:3e:ab:9d:a3:9a:dd:8a:e9:c7:97:6d:df:b2:aa:
1c:e2:e0:79:1d:89:56:de:1e:e7:d1:0d:c8:d1:ab:
00:b5:d5:72:74:dd:f2:1a:7e:91:45:89:cb:77:87:
e6:9c:98:b8:dd:c7:5c:60:14:ee:f2:61:d2:fb:00:
44:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7B:9C:F6:E4:FF:1A:41:A6:3E:40:54:F3:E9:71:66:51:65:66:10
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/GXuc9uT_GkGmPkBU8-lxZlFlZhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.150.0/23
91.109.41.0/24
91.109.45.0-91.109.46.255
147.185.196.0/24
207.244.198.0/24
Signature Algorithm: sha256WithRSAEncryption
19:11:e6:01:65:6b:a5:f4:a8:91:9f:85:a5:cc:6e:92:64:e4:
c2:92:21:03:64:3f:7d:29:2b:ba:bf:cb:a6:4e:cc:fd:e1:dd:
86:02:68:7f:d2:f8:75:2b:45:f4:43:4c:46:2a:2e:75:63:25:
1b:5e:5c:9e:c2:6d:7e:40:9a:7b:81:12:c4:c0:87:20:dc:a8:
7e:68:05:2a:5d:cf:f1:8a:ea:15:54:b5:d6:6d:c9:d8:2d:1b:
3c:ef:c6:87:e9:15:a1:88:c8:96:cf:60:21:41:3c:90:22:fa:
87:85:f1:d1:eb:95:4e:83:69:cb:bd:69:9e:64:f1:c9:a6:44:
5d:ac:84:48:ab:31:b8:bc:96:1f:56:5c:18:d4:6d:9b:be:19:
8c:e5:4b:aa:d2:4a:d2:48:41:c9:79:4b:f1:c1:3c:a7:e3:74:
7c:3f:25:c0:3b:70:7f:d7:eb:c1:5a:db:97:5c:92:1d:96:1d:
97:70:3f:6d:4c:c8:bf:fd:fb:c1:ef:18:6c:74:ce:8b:8c:b3:
7a:cc:29:34:18:a5:72:6b:c9:97:6a:87:d7:89:e0:8a:f5:ce:
1f:ec:6a:d3:71:14:31:c2:ce:03:34:85:cb:d4:51:96:f5:8e:
6f:6b:8c:02:75:f5:e2:6a:12:cb:99:34:04:3b:f2:29:b3:fe:
7e:19:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:54 2026 by rpki-client