Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/G240TV7s_MsqaPW9S-qQsuoH3Ew.roa
File: G240TV7s_MsqaPW9S-qQsuoH3Ew.roa (raw, json)
Hash identifier: 7KDYnFoXd3QAJ5XIieOG3YLVQdxqt5f1kqqLxxnURZk=
Subject key identifier: 1B:6E:34:4D:5E:EC:FC:CB:2A:68:F5:BD:4B:EA:90:B2:EA:07:DC:4C
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019ECFF7F305B881508C6BEC7284AD999437
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/G240TV7s_MsqaPW9S-qQsuoH3Ew.roa
Signing time: Tue 16 Jun 2026 10:26:33 +0000
ROA not before: Tue 16 Jun 2026 10:26:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 2a11:c940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f7:f3:05:b8:81:50:8c:6b:ec:72:84:ad:99:94:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 16 10:26:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b6e344d5eecfccb2a68f5bd4bea90b2ea07dc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:d1:0c:15:94:92:da:73:22:40:04:4d:7a:
45:fd:db:9f:f9:b5:db:d0:7d:e9:b3:ab:9b:96:7b:
08:c5:e4:9b:ba:3b:1f:9c:9e:a5:cb:f5:cd:ae:53:
6c:5b:99:18:60:da:a3:4c:73:33:47:31:9a:88:eb:
73:6a:07:be:3a:fc:1a:83:4e:2a:47:31:cd:f7:40:
16:dc:7d:05:02:1a:2c:ef:d8:2b:cf:5c:58:cb:60:
6d:ed:83:39:50:c3:23:4c:02:68:49:9a:fe:b6:5a:
b7:77:dc:e9:8f:b6:25:30:bd:e7:6b:9d:ae:a5:c2:
ce:e7:a0:92:7b:56:ac:60:70:8f:47:c5:9e:c7:3f:
3f:2f:a8:0a:0a:3f:8f:50:df:6f:5e:60:32:de:82:
a7:6e:02:04:dc:97:05:c5:82:c5:d1:31:1f:57:ac:
34:26:41:a6:0d:70:9a:e2:80:d0:da:17:4b:72:49:
5e:a5:d1:13:95:7e:52:51:8d:1c:b6:73:83:a7:69:
d3:05:e0:f7:e9:0d:49:0d:27:ac:ed:c5:cc:83:73:
7a:fc:81:ae:c1:11:cf:f5:59:5f:61:84:a4:2c:0d:
f7:93:6f:d4:1a:ff:b3:e8:61:44:bf:37:5c:fb:46:
77:2d:2f:70:e7:15:13:cf:fc:54:40:67:6d:c8:49:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6E:34:4D:5E:EC:FC:CB:2A:68:F5:BD:4B:EA:90:B2:EA:07:DC:4C
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/G240TV7s_MsqaPW9S-qQsuoH3Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c940::/29
Signature Algorithm: sha256WithRSAEncryption
6d:cf:67:c7:93:ae:12:d6:f8:63:ba:dc:05:80:88:a1:af:b2:
57:f1:27:6f:21:98:c6:75:69:17:19:ab:1b:cf:8f:77:23:a3:
3a:b6:73:77:c5:68:ff:e5:ee:f1:5d:be:69:63:cb:3e:38:df:
80:0b:da:25:b8:85:3d:46:71:9e:a3:4f:59:6e:e1:c1:f1:8a:
26:4f:a4:d1:54:a1:4e:73:c2:4c:54:a2:c2:1c:7e:8c:b6:57:
75:c7:5e:87:e6:c0:55:23:ab:43:ed:1c:2b:68:9d:d5:ad:58:
51:95:67:ff:ac:a9:12:9c:ce:60:e2:2f:77:19:04:65:fc:6a:
d5:47:88:ca:f0:7b:fa:e0:0d:96:9d:3a:c7:56:11:3f:1e:20:
0b:e1:90:19:e5:90:8c:de:1a:06:86:58:20:a4:92:b6:e5:8f:
8f:70:ca:84:ad:28:aa:df:9d:3f:42:1b:b1:b3:da:07:04:ba:
01:f5:f8:3d:66:bb:40:cb:45:f1:cc:14:63:1b:46:78:51:e1:
14:50:50:4b:82:e9:6c:56:2f:2f:07:e4:26:c8:a7:9a:2c:1b:
4a:cf:e7:23:25:75:9a:40:97:aa:18:2c:c6:46:28:e5:50:e1:
54:e1:92:b7:57:1b:4e:5b:7d:f2:f9:9a:17:fd:6f:ce:6c:3b:
e3:01:f1:e0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ7P9/MFuIFQjGvscoStmZQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjYwNjE2MTAyNjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjZlMzQ0ZDVlZWNmY2NiMmE2OGY1YmQ0YmVhOTBiMmVhMDdkYzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd7RDBWUktpzIkAETXpF/duf+bXb
0H3ps6ublnsIxeSbujsfnJ6ly/XNrlNsW5kYYNqjTHMzRzGaiOtzage+Ovwag04q
RzHN90AW3H0FAhos79grz1xYy2Bt7YM5UMMjTAJoSZr+tlq3d9zpj7YlML3na52u
pcLO56CSe1asYHCPR8Wexz8/L6gKCj+PUN9vXmAy3oKnbgIE3JcFxYLF0TEfV6w0
JkGmDXCa4oDQ2hdLcklepdETlX5SUY0ctnODp2nTBeD36Q1JDSes7cXMg3N6/IGu
wRHP9VlfYYSkLA33k2/UGv+z6GFEvzdc+0Z3LS9w5xUTz/xUQGdtyEnBdwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBtuNE1e7PzLKmj1vUvqkLLqB9xMMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvRzI0MFRWN3NfTXNxYVBXOVMtcVFzdW9IM0V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhHJQDAN
BgkqhkiG9w0BAQsFAAOCAQEAbc9nx5OuEtb4Y7rcBYCIoa+yV/EnbyGYxnVpFxmr
G8+PdyOjOrZzd8Vo/+Xu8V2+aWPLPjjfgAvaJbiFPUZxnqNPWW7hwfGKJk+k0VSh
TnPCTFSiwhx+jLZXdcdeh+bAVSOrQ+0cK2id1a1YUZVn/6ypEpzOYOIvdxkEZfxq
1UeIyvB7+uANlp06x1YRPx4gC+GQGeWQjN4aBoZYIKSStuWPj3DKhK0oqt+dP0Ib
sbPaBwS6AfX4PWa7QMtF8cwUYxtGeFHhFFBQS4LpbFYvLwfkJsinmiwbSs/nIyV1
mkCXqhgsxkYo5VDhVOGSt1cbTlt98vmaF/1vzmw74wHx4A==
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:31 2026 by rpki-client