Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/GjEXw2qYVVfWjaAedumYpaSafnk.roa
File: GjEXw2qYVVfWjaAedumYpaSafnk.roa (raw, json)
Hash identifier: cY7LBOV9+SuBgmtFC31T5s2DIOh5jV3Y99pZ6KBb81I=
Subject key identifier: 1A:31:17:C3:6A:98:55:57:D6:8D:A0:1E:76:E9:98:A5:A4:9A:7E:79
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019D066B524827528EE01EAB78276B50DB74
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/GjEXw2qYVVfWjaAedumYpaSafnk.roa
Signing time: Thu 19 Mar 2026 14:06:29 +0000
ROA not before: Thu 19 Mar 2026 14:06:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211270
IP address blocks: 138.249.15.0/24 maxlen: 24
138.249.19.0/24 maxlen: 24
138.249.22.0/24 maxlen: 24
138.249.23.0/24 maxlen: 24
138.249.102.0/24 maxlen: 24
138.249.103.0/24 maxlen: 24
138.249.112.0/24 maxlen: 24
138.249.116.0/24 maxlen: 24
170.168.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:6b:52:48:27:52:8e:e0:1e:ab:78:27:6b:50:db:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Mar 19 14:06:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a3117c36a985557d68da01e76e998a5a49a7e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:23:5f:72:65:8a:9b:ef:6c:6a:e9:b3:2b:73:
4c:de:a4:54:f5:e2:6c:cb:d8:ef:16:de:91:62:48:
f3:af:ef:f0:52:03:f8:60:f0:e5:0e:a1:f8:d0:68:
44:57:3a:d2:bc:29:f0:e5:a4:a5:30:e3:5c:33:1f:
6b:20:1a:b2:65:56:20:59:df:90:88:69:5f:44:77:
91:15:6d:a1:20:44:17:30:2e:b6:93:09:d4:3e:48:
11:60:5c:36:b0:2a:e2:19:a9:15:4d:ce:ef:d6:d9:
db:3a:da:04:cf:1e:13:2f:f8:1b:7c:13:42:ab:3e:
b3:6a:fb:c4:b5:20:8a:91:9a:83:fa:e5:32:e2:79:
2f:a6:c9:64:b0:cb:65:b9:1e:54:70:da:d4:44:33:
34:5c:78:bf:a5:28:99:b8:df:4f:e8:e4:8e:40:d6:
c6:66:50:4a:5a:6a:d9:3e:52:37:e5:da:cb:d0:5e:
40:87:ed:48:1b:9d:f3:2d:3f:8c:8e:ae:06:da:18:
0f:1f:0d:00:e8:ee:1b:88:f0:95:cd:b4:a5:26:02:
5d:3f:73:60:cb:69:e6:f9:4b:71:b3:7f:9f:b6:73:
b2:3c:49:de:c1:70:f5:31:49:45:69:32:e8:03:c8:
de:d2:30:ca:ad:a4:ca:d6:88:38:a8:e8:8e:ca:ad:
22:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:31:17:C3:6A:98:55:57:D6:8D:A0:1E:76:E9:98:A5:A4:9A:7E:79
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/GjEXw2qYVVfWjaAedumYpaSafnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.15.0/24
138.249.19.0/24
138.249.22.0/23
138.249.102.0/23
138.249.112.0/24
138.249.116.0/24
170.168.88.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e7:c0:7c:ba:23:b4:9c:1e:60:9d:c1:8e:d4:28:d4:3d:f8:
1e:d7:00:14:0e:2c:60:4a:56:25:54:7f:23:15:84:07:2e:90:
a9:76:99:eb:b9:c0:9c:49:89:64:53:30:08:62:75:5c:16:56:
78:83:5f:40:82:af:88:b0:7b:a2:1c:bd:7c:90:ae:8a:58:96:
c0:7d:d0:7e:64:37:af:56:c4:60:7a:e5:b6:ff:03:10:44:dc:
3a:8e:ab:be:47:e2:b1:f9:03:eb:56:73:dc:d2:5c:85:79:4a:
f7:0f:b7:7d:ba:9d:3a:4b:aa:74:b0:69:de:95:54:a2:09:1d:
49:b4:f4:3d:39:3f:f1:e6:5d:4b:bc:67:f7:ea:3a:e4:38:7c:
77:c9:1a:90:30:42:67:aa:11:ba:47:ad:4e:21:30:63:9d:d3:
57:87:6f:5a:39:69:39:32:45:61:09:23:7e:8a:be:75:3b:6e:
d5:cc:70:5b:a7:38:ba:3a:8e:df:e3:f6:e8:8f:f2:f4:1e:f3:
84:8f:d4:2e:41:4b:4e:f2:99:66:90:e8:b2:91:1f:3c:f9:cf:
f2:f4:a4:6e:5e:60:22:da:0c:0c:77:c1:73:68:db:5b:ca:9e:
82:13:3c:c7:15:d6:a3:dc:04:85:82:5f:6f:96:7b:ce:5b:25:
fe:da:7b:2a
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ0Ga1JIJ1KO4B6reCdrUNt0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjYwMzE5MTQwNjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTMxMTdjMzZhOTg1NTU3ZDY4ZGEwMWU3NmU5OThhNWE0OWE3ZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiNfcmWKm+9saumzK3NM3qRU9eJs
y9jvFt6RYkjzr+/wUgP4YPDlDqH40GhEVzrSvCnw5aSlMONcMx9rIBqyZVYgWd+Q
iGlfRHeRFW2hIEQXMC62kwnUPkgRYFw2sCriGakVTc7v1tnbOtoEzx4TL/gbfBNC
qz6zavvEtSCKkZqD+uUy4nkvpslksMtluR5UcNrURDM0XHi/pSiZuN9P6OSOQNbG
ZlBKWmrZPlI35drL0F5Ah+1IG53zLT+Mjq4G2hgPHw0A6O4biPCVzbSlJgJdP3Ng
y2nm+Utxs3+ftnOyPEnewXD1MUlFaTLoA8je0jDKraTK1og4qOiOyq0i+wIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFBoxF8NqmFVX1o2gHnbpmKWkmn55MB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEvR2pFWHcycVlWVmZXamFBZWR1bVlwYVNhZm5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAivkPAwQA
ivkTAwQBivkWAwQBivlmAwQAivlwAwQAivl0AwQAqqhYMA0GCSqGSIb3DQEBCwUA
A4IBAQBK58B8uiO0nB5gncGO1CjUPfge1wAUDixgSlYlVH8jFYQHLpCpdpnrucCc
SYlkUzAIYnVcFlZ4g19Agq+IsHuiHL18kK6KWJbAfdB+ZDevVsRgeuW2/wMQRNw6
jqu+R+Kx+QPrVnPc0lyFeUr3D7d9up06S6p0sGnelVSiCR1JtPQ9OT/x5l1LvGf3
6jrkOHx3yRqQMEJnqhG6R61OITBjndNXh29aOWk5MkVhCSN+ir51O27VzHBbpzi6
Oo7f4/boj/L0HvOEj9QuQUtO8plmkOiykR88+c/y9KRuXmAi2gwMd8FzaNtbyp6C
EzzHFdaj3ASFgl9vlnvOWyX+2nsq
-----END CERTIFICATE-----
Generated at Sun Mar 22 01:53:05 2026 by rpki-client