Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/GanLmx_94NGboQ0wvYJ3zJyowok.roa
File: GanLmx_94NGboQ0wvYJ3zJyowok.roa (raw, json)
Hash identifier: RC9B6Y6JvxbxopO7AmLA3RjsoCVHkH8Ods4Nlf3Ikoo=
Subject key identifier: 19:A9:CB:9B:1F:FD:E0:D1:9B:A1:0D:30:BD:82:77:CC:9C:A8:C2:89
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019F468B5776A305BB66BA34EDC7CFF2795A
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/GanLmx_94NGboQ0wvYJ3zJyowok.roa
Signing time: Thu 09 Jul 2026 11:02:44 +0000
ROA not before: Thu 09 Jul 2026 11:02:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 104.222.180.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:8b:57:76:a3:05:bb:66:ba:34:ed:c7:cf:f2:79:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jul 9 11:02:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19a9cb9b1ffde0d19ba10d30bd8277cc9ca8c289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:df:0d:0e:a3:90:3a:9c:86:68:2b:31:c4:77:
7a:ee:ae:8b:3a:90:1a:1c:f4:4e:ad:ab:dc:48:ba:
12:6a:4c:eb:e2:56:40:29:b8:7d:c6:08:76:2f:54:
82:2a:e0:a4:11:6b:a3:f7:63:99:11:ed:a8:41:dc:
96:25:e0:b4:d4:88:6d:99:42:bc:6c:ca:41:04:92:
61:e0:10:fc:84:ac:b3:5c:d4:f0:83:b9:db:12:79:
0d:ef:49:31:fc:78:fd:1e:fc:70:36:4a:e2:18:e8:
02:51:e0:9b:78:95:28:44:40:06:59:fa:9a:e6:3f:
51:23:e8:1f:09:da:3f:b8:35:dd:f5:3b:6d:53:0b:
fb:2d:47:74:3e:6f:4d:c0:9f:dd:fd:61:20:0a:70:
bd:ca:c8:b5:77:86:2b:01:d6:7e:cc:85:a1:58:2b:
4e:01:25:22:25:d9:d1:fd:c8:b1:34:ff:ed:5e:6e:
d5:96:26:ce:be:8b:96:dc:a4:2d:ee:87:3a:cd:49:
5b:e5:45:84:4e:fc:8f:86:fd:e7:de:82:50:1a:45:
d5:13:ba:f7:27:7c:82:8f:84:37:16:5c:f6:75:6d:
71:bc:9e:32:44:8b:d9:24:6b:21:ba:a2:46:df:9e:
70:80:0d:a8:dc:19:04:1e:6d:f2:62:be:82:0c:d1:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A9:CB:9B:1F:FD:E0:D1:9B:A1:0D:30:BD:82:77:CC:9C:A8:C2:89
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/GanLmx_94NGboQ0wvYJ3zJyowok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.222.180.0/24
104.249.21.0/24
Signature Algorithm: sha256WithRSAEncryption
42:8f:24:3c:d8:61:81:c7:96:fd:3d:11:65:b4:db:3b:bf:82:
e6:25:66:2b:3f:ca:5a:7c:31:66:a0:b1:bb:b2:e2:8e:91:f4:
1e:17:61:ad:be:e8:55:11:c8:7a:64:f8:c2:04:7c:90:bd:49:
43:1c:ec:63:1b:15:f7:93:d5:a5:58:32:1a:a3:16:52:64:f1:
49:95:76:37:3f:83:b2:ad:d9:aa:9a:55:ed:66:36:1e:2c:22:
2b:2e:cb:f2:9f:9f:de:24:95:bd:b2:be:cf:83:1e:ab:85:ef:
19:da:6b:d3:5c:25:8c:e3:83:e0:f3:1b:b2:76:d0:ee:45:98:
80:14:8c:c9:c8:ff:c5:4a:ac:86:16:51:d0:5e:31:05:be:7c:
3a:80:d5:d4:ef:dd:00:fc:c8:09:25:71:3e:f1:59:87:64:5b:
80:15:05:3f:9f:8b:9a:52:66:16:41:1b:3f:fd:af:c1:8c:5d:
21:df:88:40:97:b6:6c:ab:53:31:7c:3e:ce:f0:74:07:68:cb:
d8:d2:46:85:61:9b:ed:af:bb:93:54:48:da:0d:2f:4d:de:27:
00:a2:dc:4e:9f:25:c5:a3:97:44:1f:20:03:63:8c:ad:f1:3f:
f3:37:dd:8d:fc:c0:5d:e8:69:ff:37:73:eb:df:20:8d:82:84:
ab:3f:b6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 14:21:54 2026 by rpki-client