Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/GuoMB_zJywmocFJnKvWUYbJRa48.roa
File: GuoMB_zJywmocFJnKvWUYbJRa48.roa (raw, json)
Hash identifier: k2hTVb7JpoVzJihpxeGxTk4yLmmOezOpphzp2CNKQaI=
Subject key identifier: 1A:EA:0C:07:FC:C9:CB:09:A8:70:52:67:2A:F5:94:61:B2:51:6B:8F
Certificate issuer: /CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Certificate serial: 019F2368765976F3AD15AAA5B64E142CB49B
Authority key identifier: AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/GuoMB_zJywmocFJnKvWUYbJRa48.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56624
IP address blocks: 91.237.236.0/22 maxlen: 22
2001:67c:2b7c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:76:59:76:f3:ad:15:aa:a5:b6:4e:14:2c:b4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aea0c07fcc9cb09a87052672af59461b2516b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:83:9c:a3:3f:bd:50:d9:b1:ad:0c:4e:6b:
7c:df:d7:95:e1:3d:44:a4:db:c6:80:47:de:16:e2:
81:06:25:fb:22:0f:5a:80:9d:d8:29:a8:ff:1c:42:
14:ab:36:a8:9c:b9:71:47:77:c8:35:62:f0:2e:1e:
4c:ea:6f:a2:8b:0b:bd:2d:b0:35:13:fe:27:f5:56:
c5:5f:c9:5b:96:23:09:a1:20:dc:79:d9:8f:25:10:
34:50:dc:ba:af:69:d3:65:15:a1:af:64:ec:a9:c9:
6b:04:f0:45:56:c6:0f:7e:d2:30:28:35:d1:0a:bf:
2e:0d:7d:9e:f3:9a:17:96:b1:3b:56:50:09:be:bc:
8c:c3:be:1d:66:e0:5b:0d:d1:df:b7:f1:bd:ef:6a:
ff:65:de:64:cd:8b:72:43:9d:de:0e:ce:f8:a3:e9:
c2:c6:a8:e5:93:66:fa:b8:3f:0a:01:15:69:fd:b2:
59:9e:a6:f2:82:4e:14:e3:f6:a2:ba:ae:13:88:29:
c1:76:42:ec:b5:6c:81:3a:c7:88:f9:da:3e:94:78:
af:72:13:dd:cf:4b:48:9b:02:1d:1e:fe:a3:a0:73:
32:ad:e8:78:90:79:21:c5:8e:d4:a2:9a:f2:8e:92:
80:95:96:29:46:dc:29:0f:f1:01:55:28:6e:bd:c7:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EA:0C:07:FC:C9:CB:09:A8:70:52:67:2A:F5:94:61:B2:51:6B:8F
X509v3 Authority Key Identifier:
keyid:AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/GuoMB_zJywmocFJnKvWUYbJRa48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.236.0/22
IPv6:
2001:67c:2b7c::/48
Signature Algorithm: sha256WithRSAEncryption
2a:ce:b3:76:24:44:4d:48:22:35:68:99:16:be:09:b5:e5:37:
cc:70:7e:e9:c5:e9:b9:33:8c:ff:c4:5e:31:be:73:bc:11:d2:
de:dc:25:15:0d:ef:69:06:ad:c7:a0:6c:40:34:6b:94:a5:18:
fc:b2:f5:30:af:44:f0:73:f0:7b:e3:c7:61:0e:26:17:52:95:
5a:dd:81:fc:61:fa:12:cc:7a:59:8d:33:d4:a0:8a:d8:8b:7e:
03:2e:bd:8a:ac:a2:c1:bc:5f:36:f3:4c:91:ea:d2:a4:ad:6a:
0f:cb:d3:27:d4:32:60:cc:df:e2:8c:20:71:de:5c:cd:cb:a4:
b9:39:ad:75:ad:0f:84:f5:ec:df:7c:1e:d9:ea:67:16:33:3e:
16:dd:72:fc:81:54:fc:29:29:6d:2b:9a:a7:bc:76:d8:1e:bb:
2e:f4:d6:96:d6:f2:fd:55:6f:50:0c:f8:97:0e:30:8a:f6:9c:
d8:37:81:ca:2f:dc:a8:9f:eb:a8:2f:46:95:c3:3a:ba:24:2d:
fe:96:3b:3a:1a:60:53:06:96:2f:6e:8f:a6:e8:58:8d:30:76:
be:6d:65:95:b6:2f:10:71:f2:ff:ba:80:13:dd:ae:6e:ec:a2:
d5:f8:6b:6f:59:44:40:1a:ac:62:18:31:57:06:e1:0c:45:33:
9b:24:0a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:38:38 2026 by rpki-client