Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/gEgm-YbBqfhG0wrcevDJAZtxQus.roa
File: gEgm-YbBqfhG0wrcevDJAZtxQus.roa (raw, json)
Hash identifier: 5aqInYBl9y/53wWMmp0bs9VNPYHYNjT3W7UqoTGeXVw=
Subject key identifier: 80:48:26:F9:86:C1:A9:F8:46:D3:0A:DC:7A:F0:C9:01:9B:71:42:EB
Certificate issuer: /CN=b853010c5e6ec889f815aaaa617dfa850cef1812
Certificate serial: 019F88682415D1076C3021F8187DB73E3736
Authority key identifier: B8:53:01:0C:5E:6E:C8:89:F8:15:AA:AA:61:7D:FA:85:0C:EF:18:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/gEgm-YbBqfhG0wrcevDJAZtxQus.roa
Signing time: Wed 22 Jul 2026 05:59:14 +0000
ROA not before: Wed 22 Jul 2026 05:59:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219198
IP address blocks: 66.228.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:68:24:15:d1:07:6c:30:21:f8:18:7d:b7:3e:37:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b853010c5e6ec889f815aaaa617dfa850cef1812
Validity
Not Before: Jul 22 05:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=804826f986c1a9f846d30adc7af0c9019b7142eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:0e:69:27:ae:6a:2d:d6:c8:93:b4:c2:44:
fc:69:93:5d:9d:ad:f7:29:07:94:75:13:74:b7:2e:
b7:a2:f4:b0:11:6f:8d:52:14:d2:11:2a:ff:ed:2d:
fe:02:ed:ee:5c:2f:a5:5d:84:7f:c6:4e:47:cd:16:
1b:cd:2d:b5:8d:77:6d:48:81:65:15:e3:7a:7f:1b:
62:58:4a:8a:47:e5:86:07:8f:d9:f1:d1:58:2a:53:
89:55:7b:9a:80:d7:13:63:2c:63:4c:2c:fd:93:e5:
c6:1a:6c:86:b6:bf:26:a8:8f:b7:64:5f:ec:94:d1:
9b:79:b4:b8:66:d4:24:81:b8:6f:3e:ff:4c:59:6a:
1e:a0:0b:ea:83:50:06:f7:01:b5:87:9b:7d:ea:33:
b7:5e:2a:d3:f9:53:66:84:41:b3:8b:2a:c2:d9:ab:
d8:96:3a:a1:c1:52:10:dd:a0:a2:80:c9:8b:57:4f:
40:d4:5d:17:2b:03:2e:da:8b:ab:78:d1:d8:d2:59:
5f:f9:a0:9f:6b:d8:c7:7e:6a:c0:3c:98:98:b1:ec:
dc:d1:1a:06:47:13:80:32:1f:63:ef:7d:4b:a9:00:
73:e4:3f:6a:80:39:38:85:51:f2:50:7a:d6:73:70:
9f:fa:b2:26:74:2b:31:87:2f:cb:d5:05:27:d4:66:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:48:26:F9:86:C1:A9:F8:46:D3:0A:DC:7A:F0:C9:01:9B:71:42:EB
X509v3 Authority Key Identifier:
keyid:B8:53:01:0C:5E:6E:C8:89:F8:15:AA:AA:61:7D:FA:85:0C:EF:18:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/gEgm-YbBqfhG0wrcevDJAZtxQus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.228.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:47:70:76:7d:f6:c4:1e:b3:84:60:b3:60:57:cd:63:92:56:
eb:c6:ee:0a:51:be:5e:2d:a2:06:32:a4:38:7f:d7:59:23:fd:
71:7b:cd:db:ae:00:63:37:ab:94:2e:15:43:79:22:bc:b0:c2:
42:fa:80:86:f7:ed:da:ad:08:18:ed:f3:9e:12:8e:b5:2e:bc:
c0:ad:36:a0:bf:50:a0:d5:ec:1b:e5:55:e0:48:fb:40:31:e4:
06:50:9b:91:e1:7f:31:71:fb:2a:9e:e4:b1:28:50:6f:99:01:
99:4f:0a:64:b3:29:45:14:b6:ee:30:39:bf:c3:6a:40:26:80:
b4:13:08:48:b5:66:73:2d:65:b6:0f:69:ab:86:ba:e7:d1:76:
c3:80:ff:22:d2:04:49:e9:8c:f3:b7:c4:8c:fd:e9:30:70:8a:
f6:c7:cb:13:11:83:dc:f4:eb:36:12:42:e3:0e:f1:aa:f0:bf:
f4:08:71:25:2d:d8:d5:57:9f:8a:6a:1d:8a:a4:9b:7f:ac:07:
be:7a:f1:59:df:3d:90:35:c1:3d:e3:5a:b6:8f:e9:b3:8f:0c:
45:a4:05:ef:39:b8:84:33:dd:ee:c0:d8:52:50:5f:2a:99:3a:
b5:4d:7e:51:e4:30:12:d4:06:e6:1d:70:68:c5:6b:c1:60:8e:
87:3f:e7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:34:32 2026 by rpki-client