Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/gNE4IPEZB9u0WmCsF4Pfsq8nHMA.roa
File: gNE4IPEZB9u0WmCsF4Pfsq8nHMA.roa (raw, json)
Hash identifier: xyIv1xmiMjTFOEwHYgnbJZRjv1TpjuI5f7fPV5Q1SEc=
Subject key identifier: 80:D1:38:20:F1:19:07:DB:B4:5A:60:AC:17:83:DF:B2:AF:27:1C:C0
Certificate issuer: /CN=19f473baac24603ead795c3aa2deadf86d351fc2
Certificate serial: 019F6D37E237194C0D79D7640546E412A12E
Authority key identifier: 19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/gNE4IPEZB9u0WmCsF4Pfsq8nHMA.roa
Signing time: Thu 16 Jul 2026 23:16:46 +0000
ROA not before: Thu 16 Jul 2026 23:16:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219391
IP address blocks: 63.251.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6d:37:e2:37:19:4c:0d:79:d7:64:05:46:e4:12:a1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f473baac24603ead795c3aa2deadf86d351fc2
Validity
Not Before: Jul 16 23:16:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80d13820f11907dbb45a60ac1783dfb2af271cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:5d:c7:5f:7c:a5:db:8d:15:75:ff:0b:53:
a7:47:47:71:96:53:75:89:d1:cb:4c:11:b4:76:d6:
b8:b2:de:4e:5c:6f:58:ab:53:d2:96:71:56:f8:ca:
39:5e:82:2b:0d:ed:0b:e4:94:57:cd:c8:5a:ca:15:
57:4f:7d:df:47:ce:cc:99:ba:bb:4a:fc:c5:d8:25:
a6:e9:79:69:c9:b0:4b:e7:34:b2:a1:75:98:13:e8:
4c:c4:bc:c7:ae:7d:78:69:24:1e:49:5c:7b:d7:7a:
f6:19:ca:39:a0:c6:1b:f6:cb:fe:ba:c7:17:ef:ec:
73:96:21:73:20:f8:af:9b:a0:09:2f:bb:ad:41:c9:
dd:99:1c:a2:da:6f:6e:61:6a:e3:9e:25:47:fa:72:
2e:35:b7:37:75:e3:56:64:8c:60:34:9a:d2:67:42:
cc:6f:9e:a1:d8:c7:34:18:bf:da:80:46:e6:13:e9:
aa:1b:0a:64:9c:ac:33:33:a9:2f:33:5b:62:1f:52:
99:d9:9f:73:6e:14:38:95:4b:e4:7c:71:f3:80:d4:
0f:a1:67:9a:32:7a:59:77:1b:01:7b:69:a8:b3:17:
75:a9:df:07:09:fd:24:32:59:6a:53:08:21:22:d4:
dd:7a:ac:0d:9e:d0:a9:3c:a3:56:09:1a:93:f6:20:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D1:38:20:F1:19:07:DB:B4:5A:60:AC:17:83:DF:B2:AF:27:1C:C0
X509v3 Authority Key Identifier:
keyid:19:F4:73:BA:AC:24:60:3E:AD:79:5C:3A:A2:DE:AD:F8:6D:35:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfRzuqwkYD6teVw6ot6t-G01H8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/gNE4IPEZB9u0WmCsF4Pfsq8nHMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c4ebb2-74fb-497c-9707-60fa8e0af204/1/GfRzuqwkYD6teVw6ot6t-G01H8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.251.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:00:a2:2f:d5:4c:df:91:60:4e:33:ec:b9:e8:ef:e1:81:1a:
80:00:1f:8d:bb:77:6e:e5:34:0e:f1:fb:c9:87:41:db:03:46:
ad:42:e3:f4:db:c8:0b:22:59:b6:d0:f6:6a:b9:74:ad:71:c6:
9b:b8:62:da:ad:61:b5:c4:1c:f3:cb:c7:42:90:2e:61:a2:da:
e7:84:d1:48:24:9b:bc:bd:a7:b0:b8:16:36:d5:67:ff:20:0c:
ff:ef:59:a4:82:22:8a:ac:e3:c8:86:f3:8c:95:36:68:2f:b9:
5b:30:b3:a9:69:5b:3d:14:dd:54:25:69:ae:0a:66:95:d5:cf:
dd:3f:e1:75:f5:97:02:91:a7:96:f2:07:48:7a:df:82:86:eb:
fb:c6:80:05:72:89:a8:e5:f7:cf:ba:8f:d5:df:01:59:13:8d:
c8:60:03:73:e5:c1:39:70:fb:44:46:ee:1c:ad:36:ee:60:ed:
ac:d3:d5:fd:d7:5d:f7:2b:8d:5d:04:ad:aa:f9:9f:54:f7:0e:
89:53:75:d0:bf:06:b4:98:31:09:6d:fa:d7:24:53:fe:71:c4:
e3:51:ad:51:c1:d8:86:50:9f:02:99:38:08:56:73:1a:75:ae:
f1:6a:ae:2b:4d:cf:05:93:5e:0b:60:33:99:04:ae:16:e3:a4:
99:4e:4c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:31:30 2026 by rpki-client