Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/GNjPKxixkcQlInXuEMN64INqg7U.roa
File: GNjPKxixkcQlInXuEMN64INqg7U.roa (raw, json)
Hash identifier: uBUzDZtMXDo9MHMuc5AmdM0QZsLzdtsUdcLzN4QCg6I=
Subject key identifier: 18:D8:CF:2B:18:B1:91:C4:25:22:75:EE:10:C3:7A:E0:83:6A:83:B5
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 019F7506E79BAFD27F8612572AF17AC932E2
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/GNjPKxixkcQlInXuEMN64INqg7U.roa
Signing time: Sat 18 Jul 2026 11:40:14 +0000
ROA not before: Sat 18 Jul 2026 11:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 213.249.75.0/24 maxlen: 24
213.249.79.0/24 maxlen: 24
213.249.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:06:e7:9b:af:d2:7f:86:12:57:2a:f1:7a:c9:32:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jul 18 11:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18d8cf2b18b191c4252275ee10c37ae0836a83b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:dc:b9:45:38:75:e0:2f:f4:c5:cb:5e:80:
9d:f6:25:82:35:41:86:3d:29:56:e3:c1:d1:1d:43:
59:4c:96:2f:5d:bf:a6:fe:bb:f5:b2:eb:4d:77:79:
22:51:2e:30:05:f0:55:aa:ca:ba:b9:c9:10:97:68:
0c:5a:e6:7d:66:b8:c7:e6:5f:17:68:3c:7a:90:e4:
8c:c2:c8:0c:1b:32:66:ac:b2:f3:5a:0a:a0:9e:a8:
c0:d9:ef:12:b1:b7:c8:5f:60:75:37:65:28:4f:ec:
2a:44:b5:af:48:68:88:6b:13:d9:4b:e8:59:c1:c0:
d9:26:3a:51:f2:7d:76:97:d4:27:76:fb:bb:92:04:
f6:34:75:7c:c3:1f:a3:58:c3:1f:de:90:10:71:c8:
f9:52:87:13:71:20:39:a3:9e:05:ae:e1:25:3e:05:
0f:5f:ca:ae:51:3d:45:d6:5c:12:6d:0e:10:5e:9c:
c8:07:98:24:3e:7e:77:a7:73:52:4c:d2:30:e1:da:
c3:fc:65:ee:85:8f:58:13:34:67:08:36:5e:b6:11:
5a:7a:10:b9:ab:52:a5:e4:a7:1a:17:69:18:8a:67:
13:e4:17:da:ad:e6:be:15:50:1c:9e:11:e6:ce:a3:
3f:f9:c8:30:27:89:97:3d:cb:a0:46:9a:fd:90:73:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D8:CF:2B:18:B1:91:C4:25:22:75:EE:10:C3:7A:E0:83:6A:83:B5
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/GNjPKxixkcQlInXuEMN64INqg7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.249.75.0/24
213.249.79.0/24
213.249.84.0/24
Signature Algorithm: sha256WithRSAEncryption
90:79:d3:d9:33:18:3d:3a:9d:89:a9:31:a9:a7:ef:6f:59:44:
1c:2e:7b:6e:8e:e5:bf:b3:37:67:61:91:a7:49:29:16:e0:44:
75:53:cb:bb:76:37:40:07:bb:f6:aa:44:a0:b0:16:af:32:72:
f5:01:f8:fe:23:07:aa:e1:fd:f3:b9:bc:57:64:4e:fd:a9:fb:
fe:82:18:41:d4:c7:4a:d5:72:1a:87:ef:be:86:1f:26:d6:31:
98:8f:10:97:66:14:2b:55:cd:0d:f3:89:29:6d:9e:2b:23:41:
e3:75:5f:35:4b:eb:0d:2a:53:16:54:1b:89:cb:fa:6e:2a:8a:
e0:d6:b0:8b:88:33:bc:59:d5:60:a5:ab:cc:b9:b2:c1:28:57:
b5:c7:98:40:28:c1:0c:d7:7e:b9:5b:24:42:02:9c:df:76:64:
f3:af:a1:8c:8f:af:7f:15:ed:ef:d6:aa:bb:01:97:77:26:90:
e2:03:a1:d5:8f:99:c4:25:82:af:15:a9:0e:38:15:e5:47:75:
75:67:54:36:d9:fc:04:9a:c1:d7:63:fa:ee:14:eb:04:54:76:
27:44:60:85:ab:79:1b:5d:de:41:bd:05:ef:d9:ae:89:d4:c7:
46:8f:ac:66:3c:d2:5a:db:8f:79:e6:35:63:7a:3e:18:30:ba:
d9:89:6a:a6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ91Buebr9J/hhJXKvF6yTLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk
MTRjYzYwHhcNMjYwNzE4MTE0MDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGQ4Y2YyYjE4YjE5MWM0MjUyMjc1ZWUxMGMzN2FlMDgzNmE4M2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+ncuUU4deAv9MXLXoCd9iWCNUGG
PSlW48HRHUNZTJYvXb+m/rv1sutNd3kiUS4wBfBVqsq6uckQl2gMWuZ9ZrjH5l8X
aDx6kOSMwsgMGzJmrLLzWgqgnqjA2e8SsbfIX2B1N2UoT+wqRLWvSGiIaxPZS+hZ
wcDZJjpR8n12l9Qndvu7kgT2NHV8wx+jWMMf3pAQccj5UocTcSA5o54FruElPgUP
X8quUT1F1lwSbQ4QXpzIB5gkPn53p3NSTNIw4drD/GXuhY9YEzRnCDZethFaehC5
q1Kl5KcaF2kYimcT5Bfarea+FVAcnhHmzqM/+cgwJ4mXPcugRpr9kHPI0QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBjYzysYsZHEJSJ17hDDeuCDaoO1MB8GA1UdIwQY
MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt
ZDFiYjZiNGRkNzAxLzEvR05qUEt4aXhrY1FsSW5YdUVNTjY0SU5xZzdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx
LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1flLAwQA
1flPAwQA1flUMA0GCSqGSIb3DQEBCwUAA4IBAQCQedPZMxg9Op2JqTGpp+9vWUQc
LntujuW/szdnYZGnSSkW4ER1U8u7djdAB7v2qkSgsBavMnL1Afj+Iweq4f3zubxX
ZE79qfv+ghhB1MdK1XIah+++hh8m1jGYjxCXZhQrVc0N84kpbZ4rI0HjdV81S+sN
KlMWVBuJy/puKorg1rCLiDO8WdVgpavMubLBKFe1x5hAKMEM1365WyRCApzfdmTz
r6GMj69/Fe3v1qq7AZd3JpDiA6HVj5nEJYKvFakOOBXlR3V1Z1Q22fwEmsHXY/ru
FOsEVHYnRGCFq3kbXd5BvQXv2a6J1MdGj6xmPNJa24955jVjej4YMLrZiWqm
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:09:52 2026 by rpki-client