Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/gFVseb_oEHtNCGZMwhMjNNGb_nI.roa
File: gFVseb_oEHtNCGZMwhMjNNGb_nI.roa (raw, json)
Hash identifier: zwf4RlyR9U25P0Vz64/wtlmdYTS1ZWuaMHq8bSWPCKk=
Subject key identifier: 80:55:6C:79:BF:E8:10:7B:4D:08:66:4C:C2:13:23:34:D1:9B:FE:72
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 019E7FA42F1349F9F899934733375820D9D4
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/gFVseb_oEHtNCGZMwhMjNNGb_nI.roa
Signing time: Sun 31 May 2026 20:05:26 +0000
ROA not before: Sun 31 May 2026 20:05:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198154
IP address blocks: 91.239.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7f:a4:2f:13:49:f9:f8:99:93:47:33:37:58:20:d9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: May 31 20:05:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80556c79bfe8107b4d08664cc2132334d19bfe72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:7e:cd:a9:a7:c1:45:f8:5d:96:5a:8c:68:
38:a4:8b:7e:80:f1:94:01:9b:b8:6f:ec:51:71:e3:
fe:c5:90:fc:d8:1c:08:42:b2:97:8f:e8:22:97:87:
c3:ea:a2:b8:7f:73:06:a9:c7:17:ef:70:e6:5b:02:
4f:f9:65:28:4c:c0:83:26:47:4a:c4:de:93:26:73:
cb:16:fd:23:58:9f:af:50:51:ab:cf:3f:4c:09:a3:
7c:db:2d:35:8c:89:6f:04:2c:bc:45:45:55:c4:26:
d7:29:57:66:d1:bb:f6:da:51:e7:8e:dc:36:dc:27:
c4:1b:35:c2:c0:0f:95:bd:93:ef:14:b3:52:5e:94:
d2:d2:85:09:0f:07:d7:ff:a2:8f:74:6e:70:64:e5:
2c:9d:5f:fe:f7:42:22:ca:0a:dc:ca:87:a2:19:f7:
5c:ec:ec:dc:ab:79:eb:2f:68:15:3e:fb:6e:48:00:
12:58:4c:ab:9c:9d:d7:14:44:2c:d3:ae:b5:d0:0b:
70:16:58:a6:e9:05:f4:4d:27:7d:d4:b5:9a:74:05:
bb:23:c2:26:25:70:d7:c5:c7:c2:ee:64:bd:c7:24:
ae:41:62:0d:12:1e:54:aa:46:c1:9e:a9:54:61:19:
1e:25:1d:7a:6e:09:17:c7:65:9e:24:a1:5a:4d:3f:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:55:6C:79:BF:E8:10:7B:4D:08:66:4C:C2:13:23:34:D1:9B:FE:72
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/gFVseb_oEHtNCGZMwhMjNNGb_nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.192.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:77:78:19:e2:17:d8:b1:fc:13:e2:ad:9f:ca:05:45:de:6c:
70:a1:4e:b7:e3:59:03:66:42:4e:51:f9:22:b6:ea:d3:e1:00:
27:e6:91:a6:df:36:3d:d9:0f:24:44:36:cc:8b:c6:63:79:bf:
92:6d:30:bd:98:70:66:17:1b:e3:5e:4c:0c:13:28:f9:0d:af:
64:46:1d:5c:d7:12:4c:67:f7:8c:2d:92:2d:2f:96:67:3d:cc:
49:df:ec:22:b2:6f:e2:69:48:b4:59:e0:34:93:e1:18:68:1b:
27:1f:1b:c5:1c:5b:46:b8:19:f0:2c:29:9c:04:f5:b4:85:e7:
c0:ac:56:73:98:0b:b3:7b:02:52:80:57:5b:5d:63:58:8c:d6:
34:ee:ff:61:ef:8f:da:0b:df:3e:bd:e6:5d:10:57:d8:a7:54:
1a:10:1d:51:a5:be:b7:48:4e:0f:5e:e5:21:7f:bb:22:6d:e7:
dc:99:bd:39:3b:16:fa:72:c3:f4:ef:8e:64:87:15:5e:81:52:
e7:c1:f4:1d:0b:54:9d:75:46:a5:b0:00:9f:dd:91:79:08:df:
6a:28:d6:0b:b2:66:ab:d4:b4:e1:c2:0e:b7:90:36:a3:c1:33:
30:32:15:8b:df:14:1d:84:b0:60:ca:40:ac:88:f4:1c:18:e7:
ee:3f:dc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:33:28 2026 by rpki-client