Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/GeVimbJSV_EOychl5mg28BJfkA0.roa
File: GeVimbJSV_EOychl5mg28BJfkA0.roa (raw, json)
Hash identifier: 6Nyb/yh/fgAHQAw/Zrwhl35LE9P3bMK7WlCOymzd72g=
Subject key identifier: 19:E5:62:99:B2:52:57:F1:0E:C9:C8:65:E6:68:36:F0:12:5F:90:0D
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 01A13E602ED8C7FB40A59C45D53EDEBA9809
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/GeVimbJSV_EOychl5mg28BJfkA0.roa
Signing time: Thu 15 Oct 2026 07:04:13 +0000
ROA not before: Thu 15 Oct 2026 07:04:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219407
IP address blocks: 193.232.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:60:2e:d8:c7:fb:40:a5:9c:45:d5:3e:de:ba:98:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Oct 15 07:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19e56299b25257f10ec9c865e66836f0125f900d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:75:ab:cd:14:94:8d:56:50:1d:bd:e1:29:
70:ba:c8:4c:9d:81:29:b3:da:c3:8a:e5:29:ad:e8:
3e:85:b3:8c:06:49:6e:10:c5:67:23:8b:16:85:1d:
27:ba:14:fc:62:cd:a6:39:f0:2f:6b:a1:d6:dc:2d:
df:fc:3e:60:62:0c:e0:85:ea:a3:8a:03:9e:7f:d7:
77:90:33:e2:1a:f7:8e:29:7e:1c:a4:d4:1f:b2:cb:
2d:b5:1f:83:c2:26:65:49:de:25:6d:60:fc:26:58:
0c:61:ee:4d:6a:e3:98:93:07:3d:d2:ef:ff:f8:34:
21:b5:1c:52:c8:75:d7:0e:38:6a:87:ec:88:db:fa:
ce:19:23:1e:bd:56:96:5a:01:21:a7:a7:6b:aa:d6:
ce:19:c8:1c:a6:32:9c:1b:72:18:8c:1d:23:03:d6:
b6:b7:ed:b6:c0:f1:31:8b:6f:ca:b2:21:6d:78:af:
58:95:c6:c8:04:e9:e1:bf:74:7f:d4:52:36:2d:41:
5b:d1:e3:7b:7a:b6:87:bd:13:44:c5:c1:9c:f1:8f:
a1:09:83:c4:6e:49:f2:83:24:e2:2f:fc:d4:90:d3:
2e:ae:ac:af:64:d7:0a:37:d0:a3:e8:71:2c:f9:b4:
c1:55:86:60:d0:43:ee:b8:45:33:3b:30:22:31:a0:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E5:62:99:B2:52:57:F1:0E:C9:C8:65:E6:68:36:F0:12:5F:90:0D
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/GeVimbJSV_EOychl5mg28BJfkA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.53.0/24
Signature Algorithm: sha256WithRSAEncryption
86:37:b7:54:a3:bd:12:ba:9b:a0:16:26:4a:c4:94:b8:da:7b:
5b:f3:87:c9:aa:e5:44:04:b3:16:4c:04:d5:e0:32:73:00:34:
ff:cb:af:f0:e9:cd:6c:28:a0:f1:37:c8:02:11:99:08:b0:fb:
32:3f:e9:93:bf:8a:a2:15:5b:b5:46:c9:c4:e4:74:e1:24:a9:
5a:e7:3b:13:1d:a3:3b:78:4e:d5:55:fb:39:35:31:14:b0:06:
b8:d4:f1:9e:87:1a:7c:0c:0c:7f:ca:ce:23:5f:c7:f9:c1:3a:
59:95:9f:64:37:fc:dc:b7:04:61:4c:a0:0c:aa:c1:38:b3:65:
11:9e:ed:b9:ab:a7:67:64:1c:fd:34:62:14:73:0a:14:50:03:
b2:4a:85:f6:ec:26:99:db:f5:cb:8f:2b:92:73:67:54:2f:5a:
83:3f:7a:1c:55:56:e4:65:f3:6a:26:5e:de:88:11:89:63:1a:
3e:56:f9:04:45:77:06:01:ce:3c:ad:a9:f7:b5:be:6f:fc:df:
b8:d2:be:27:c0:11:1b:d9:09:fd:0f:7c:8b:05:86:1e:01:fd:
98:e5:ae:12:b1:fc:9c:c5:e8:0d:c4:be:93:d8:be:7c:30:37:
a5:1e:93:ad:53:d6:fe:6a:d7:b9:89:32:c2:0d:1b:df:34:f7:
f0:14:22:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:36 2026 by rpki-client