Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GloWNuAVod2sTbOcGh9z2TUuT5A.roa
File: GloWNuAVod2sTbOcGh9z2TUuT5A.roa (raw, json)
Hash identifier: ryE+hPQZHjDGaAZOkhSUVnGKq5fFszodQtY0OEBMIDg=
Subject key identifier: 1A:5A:16:36:E0:15:A1:DD:AC:4D:B3:9C:1A:1F:73:D9:35:2E:4F:90
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A00EA59DBE2869B99117A17FA3B2490853
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GloWNuAVod2sTbOcGh9z2TUuT5A.roa
Signing time: Mon 17 Aug 2026 07:35:29 +0000
ROA not before: Mon 17 Aug 2026 07:35:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213876
IP address blocks: 151.247.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:a5:9d:be:28:69:b9:91:17:a1:7f:a3:b2:49:08:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 17 07:35:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a5a1636e015a1ddac4db39c1a1f73d9352e4f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:4b:33:52:ca:37:70:8e:71:65:ae:93:84:
fb:8a:cc:86:72:c6:45:10:c0:9c:0f:24:80:89:b7:
9a:03:e2:48:21:00:9d:47:6b:bb:3f:16:66:7b:c0:
56:19:3c:96:a8:28:6f:5f:ff:f3:82:7b:5b:2a:9c:
d4:0a:1b:a8:93:7f:5b:90:90:6c:e6:69:b9:64:45:
49:af:6b:b7:d1:33:d8:4f:8c:35:3e:49:a7:66:aa:
58:83:ad:7c:5a:92:92:16:b3:2d:21:07:86:30:a6:
e1:c0:e5:81:06:02:35:0b:37:6f:17:b2:48:ca:59:
42:4c:a7:e1:d4:d6:96:b3:4d:90:f9:ce:02:ac:a5:
bc:13:28:c8:8f:8e:bf:08:c5:9f:48:25:07:f5:b5:
5c:69:aa:0a:97:30:f1:75:be:91:0c:d9:d5:fb:97:
a0:b2:8a:02:de:28:52:57:d1:d1:1c:9c:e3:e6:96:
2b:b3:c0:2a:27:9d:2f:b3:c4:b0:d3:52:fe:9c:33:
d2:b4:f8:3e:d6:d5:94:d3:32:fc:63:40:71:48:25:
b1:2c:d9:a9:0b:48:cb:02:98:6a:89:11:9e:40:fb:
20:e9:d7:ce:f3:c6:7f:e9:b0:46:8d:f0:c6:d0:47:
03:38:99:5a:78:c0:50:59:97:63:8e:4f:c3:65:d1:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5A:16:36:E0:15:A1:DD:AC:4D:B3:9C:1A:1F:73:D9:35:2E:4F:90
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GloWNuAVod2sTbOcGh9z2TUuT5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.8.0/24
Signature Algorithm: sha256WithRSAEncryption
14:db:13:36:56:96:63:8b:8c:fe:dc:b2:66:e6:92:4c:c3:80:
35:82:ba:b2:1f:01:76:e7:ba:95:2a:e4:9f:9e:5c:45:9c:30:
a7:c5:1c:f7:18:70:e4:fe:4d:59:b9:6d:ce:ae:ea:3a:0b:7b:
25:31:7d:a5:87:27:cc:7e:ef:d6:7e:7f:02:a4:40:2d:48:04:
ec:59:30:16:cd:19:24:52:75:f3:46:f9:13:f3:70:f0:e3:d6:
41:3d:a1:69:36:5f:e6:09:87:e3:b2:0f:96:30:5f:e4:a9:58:
4c:3e:33:a2:c2:7e:7e:9b:37:bc:de:81:af:58:ec:65:5c:ed:
80:8e:2f:c6:c6:b7:65:1a:f2:ce:2a:87:ad:2c:87:93:9c:12:
5b:4d:0f:b1:61:53:19:87:ff:d2:7d:4c:7b:0e:ba:fa:45:49:
29:8a:1d:66:1c:e7:c2:97:70:5f:8a:14:58:f7:5d:75:3b:01:
cb:3b:cc:11:82:2d:4f:bd:71:78:7a:54:a5:ce:42:2a:b3:5b:
13:2c:c2:2b:55:0f:a4:4c:69:de:a8:57:c8:89:40:6c:62:27:
f2:b5:c4:1e:d6:ee:f3:ed:da:33:f3:e8:25:02:6f:94:02:32:
7f:8c:a9:59:d8:61:7c:f2:a5:57:6b:51:5d:14:04:53:eb:b7:
de:8b:42:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAOpZ2+KGm5kRehf6OySQhTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwODE3MDczNTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTVhMTYzNmUwMTVhMWRkYWM0ZGIzOWMxYTFmNzNkOTM1MmU0ZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjhLM1LKN3COcWWuk4T7isyGcsZF
EMCcDySAibeaA+JIIQCdR2u7PxZme8BWGTyWqChvX//zgntbKpzUChuok39bkJBs
5mm5ZEVJr2u30TPYT4w1PkmnZqpYg618WpKSFrMtIQeGMKbhwOWBBgI1CzdvF7JI
yllCTKfh1NaWs02Q+c4CrKW8EyjIj46/CMWfSCUH9bVcaaoKlzDxdb6RDNnV+5eg
sooC3ihSV9HRHJzj5pYrs8AqJ50vs8Sw01L+nDPStPg+1tWU0zL8Y0BxSCWxLNmp
C0jLAphqiRGeQPsg6dfO88Z/6bBGjfDG0EcDOJlaeMBQWZdjjk/DZdEIMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBpaFjbgFaHdrE2znBofc9k1Lk+QMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvR2xvV051QVZvZDJzVGJPY0doOXoyVFV1VDVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/cIMA0G
CSqGSIb3DQEBCwUAA4IBAQAU2xM2VpZji4z+3LJm5pJMw4A1grqyHwF257qVKuSf
nlxFnDCnxRz3GHDk/k1ZuW3Oruo6C3slMX2lhyfMfu/Wfn8CpEAtSATsWTAWzRkk
UnXzRvkT83Dw49ZBPaFpNl/mCYfjsg+WMF/kqVhMPjOiwn5+mze83oGvWOxlXO2A
ji/GxrdlGvLOKoetLIeTnBJbTQ+xYVMZh//SfUx7Drr6RUkpih1mHOfCl3BfihRY
9111OwHLO8wRgi1PvXF4elSlzkIqs1sTLMIrVQ+kTGneqFfIiUBsYifytcQe1u7z
7doz8+glAm+UAjJ/jKlZ2GF88qVXa1FdFART67fei0Ko
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:09:55 2026 by rpki-client