Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/Gj-RMjqwsOJ3ts40DQnIUo1O6KI.roa
File: Gj-RMjqwsOJ3ts40DQnIUo1O6KI.roa (raw, json)
Hash identifier: oC3k+gGJD7d0/8XuzNB9Jx2RbfjuCF68+g7utMnVb4Y=
Subject key identifier: 1A:3F:91:32:3A:B0:B0:E2:77:B6:CE:34:0D:09:C8:52:8D:4E:E8:A2
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 01A136AB7EB54DEEFF329DF0CF6C0929051E
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/Gj-RMjqwsOJ3ts40DQnIUo1O6KI.roa
Signing time: Tue 13 Oct 2026 19:09:31 +0000
ROA not before: Tue 13 Oct 2026 19:09:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209659
IP address blocks: 94.142.251.0/24 maxlen: 24
2a12:5bc0::/32 maxlen: 48
2a12:5bc0::/48 maxlen: 48
2a12:5bc1::/48 maxlen: 48
2a12:5bc2::/48 maxlen: 48
2a12:5bc3::/48 maxlen: 48
2a12:5bc4::/48 maxlen: 48
2a12:5bc4:2::/48 maxlen: 48
2a12:5bc4:3::/48 maxlen: 48
2a12:5bc5::/32 maxlen: 32
2a12:5bc6::/48 maxlen: 48
2a12:5bc7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:ab:7e:b5:4d:ee:ff:32:9d:f0:cf:6c:09:29:05:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Oct 13 19:09:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a3f91323ab0b0e277b6ce340d09c8528d4ee8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d0:4d:6d:f1:78:c2:08:a0:87:63:42:b8:1c:
f0:da:bc:04:98:13:57:51:0c:11:91:c7:dd:cc:1c:
70:5d:24:4a:5c:3f:9d:a8:f8:27:61:38:29:1e:7a:
d2:f4:b1:90:17:dd:dc:5d:42:74:b3:3e:dc:6e:c5:
59:58:75:87:68:15:01:ec:83:a1:1c:28:17:2f:c8:
ff:f5:8a:e9:83:06:11:4c:e5:15:2e:92:92:53:28:
af:83:90:bf:43:7d:2e:e5:7a:d0:65:fd:b8:51:09:
d9:3b:52:dc:77:8b:5f:bf:ec:c9:df:ac:eb:61:74:
87:7e:9b:17:86:5c:22:00:9e:df:8b:1e:49:c7:a9:
10:fc:16:95:32:b2:58:73:d0:f5:e5:5b:38:57:02:
79:2b:dd:8a:90:66:fd:42:dd:b7:75:02:62:fb:ba:
57:2a:6a:6a:cf:62:eb:f0:06:26:77:db:44:9b:ec:
42:84:b3:5a:a5:88:34:e8:e6:96:35:8f:c1:0a:42:
7a:02:f2:8a:67:c4:44:71:38:45:d2:d1:7a:da:90:
ac:d6:1d:20:43:82:49:86:6c:0d:78:8e:a8:15:bd:
fc:06:6c:01:a3:9e:0c:31:04:1d:70:51:22:fa:90:
84:fb:72:7c:0c:cc:a0:1c:ff:15:3f:b0:db:31:2a:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3F:91:32:3A:B0:B0:E2:77:B6:CE:34:0D:09:C8:52:8D:4E:E8:A2
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/Gj-RMjqwsOJ3ts40DQnIUo1O6KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.251.0/24
IPv6:
2a12:5bc0::-2a12:5bc1:0:ffff:ffff:ffff:ffff:ffff
2a12:5bc2::/48
2a12:5bc3::/48
2a12:5bc4::/48
2a12:5bc4:2::/47
2a12:5bc5::-2a12:5bc6:0:ffff:ffff:ffff:ffff:ffff
2a12:5bc7::/48
Signature Algorithm: sha256WithRSAEncryption
20:7b:73:ef:28:ef:09:81:b2:35:ff:5b:0c:e7:c5:1b:60:ef:
31:50:2a:ac:69:4f:85:96:d5:32:05:4f:8b:7d:c2:55:1e:3a:
80:85:33:26:d8:f6:b0:9c:37:8c:5b:bc:64:1c:9b:b3:d4:0e:
18:16:f9:ea:7f:dd:61:cb:f0:46:1e:f1:f1:40:3c:9e:59:dc:
67:0b:c3:6f:b7:7b:26:37:89:e7:3c:72:d6:c3:f1:fe:78:d6:
0c:a9:19:60:ea:06:41:4f:ec:9c:e7:c5:f6:6b:26:7d:78:23:
ac:a4:9b:92:46:6b:55:6a:25:bd:1d:3a:a3:14:05:c6:65:fe:
13:5b:5b:cc:de:fd:7e:84:dd:96:8c:be:87:6a:4c:24:45:67:
59:0c:a7:d2:85:96:1c:f5:28:98:4e:c5:9b:c6:0e:05:eb:d5:
04:a1:69:3e:c6:81:50:cd:ff:5c:cb:4d:0d:e7:2d:4a:dc:76:
3e:c5:21:cd:3f:ee:b0:81:cb:fa:1d:9d:5d:e4:25:e1:06:01:
e8:81:ae:25:85:b8:e4:a2:48:e1:3e:0a:b2:75:27:f9:d4:2e:
78:bc:b1:9f:03:66:26:16:9f:f1:d5:91:b4:b0:62:3d:22:ee:
98:83:62:a1:fb:69:c3:12:ed:f6:71:8c:19:b6:f3:c1:45:08:
9a:b2:ec:1d
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAaE2q361Te7/Mp3wz2wJKQUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMTZmMGU5YWZmMzlhOGIxOTZjNDgzZTA4NWRlNzlmMjQ2
ZDlmZGQwHhcNMjYxMDEzMTkwOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTNmOTEzMjNhYjBiMGUyNzdiNmNlMzQwZDA5Yzg1MjhkNGVlOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09BNbfF4wgigh2NCuBzw2rwEmBNX
UQwRkcfdzBxwXSRKXD+dqPgnYTgpHnrS9LGQF93cXUJ0sz7cbsVZWHWHaBUB7IOh
HCgXL8j/9YrpgwYRTOUVLpKSUyivg5C/Q30u5XrQZf24UQnZO1Lcd4tfv+zJ36zr
YXSHfpsXhlwiAJ7fix5Jx6kQ/BaVMrJYc9D15Vs4VwJ5K92KkGb9Qt23dQJi+7pX
Kmpqz2Lr8AYmd9tEm+xChLNapYg06OaWNY/BCkJ6AvKKZ8REcThF0tF62pCs1h0g
Q4JJhmwNeI6oFb38BmwBo54MMQQdcFEi+pCE+3J8DMygHP8VP7DbMSrrmwIDAQAB
o4ICYjCCAl4wHQYDVR0OBBYEFBo/kTI6sLDid7bONA0JyFKNTuiiMB8GA1UdIwQY
MBaAFEEW8Omv85qLGWxIPghd558kbZ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAt
MjQwZDFmZmQwOWI4LzEvR2otUk1qcXdzT0ozdHM0MERRbklVbzFPNktJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAtMjQwZDFmZmQwOWI4
LzEvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzAMBAIAATAGAwQAXo77MFcE
AgACMFEwEAMFBioSW8ADBwAqElvBAAADBwAqElvCAAADBwAqElvDAAADBwAqElvE
AAADBwEqElvEAAIwEAMFACoSW8UDBwAqElvGAAADBwAqElvHAAAwDQYJKoZIhvcN
AQELBQADggEBACB7c+8o7wmBsjX/WwznxRtg7zFQKqxpT4WW1TIFT4t9wlUeOoCF
MybY9rCcN4xbvGQcm7PUDhgW+ep/3WHL8EYe8fFAPJ5Z3GcLw2+3eyY3iec8ctbD
8f541gypGWDqBkFP7JznxfZrJn14I6ykm5JGa1VqJb0dOqMUBcZl/hNbW8ze/X6E
3ZaMvodqTCRFZ1kMp9KFlhz1KJhOxZvGDgXr1QShaT7GgVDN/1zLTQ3nLUrcdj7F
Ic0/7rCBy/odnV3kJeEGAeiBriWFuOSiSOE+CrJ1J/nULni8sZ8DZiYWn/HVkbSw
Yj0i7piDYqH7acMS7fZxjBm288FFCJqy7B0=
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:04:38 2026 by rpki-client