Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/GJFcsmALdQKB9vC3JT1DxuAOQmU.roa
File: GJFcsmALdQKB9vC3JT1DxuAOQmU.roa (raw, json)
Hash identifier: zS/mj5Wp5KNcMGHabHetSnVhYKeKWeuRer9JOOSFjZI=
Subject key identifier: 18:91:5C:B2:60:0B:75:02:81:F6:F0:B7:25:3D:43:C6:E0:0E:42:65
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A14CE3B8196C34B1FA329FE41787ED6A57
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/GJFcsmALdQKB9vC3JT1DxuAOQmU.roa
Signing time: Sun 18 Oct 2026 02:42:34 +0000
ROA not before: Sun 18 Oct 2026 02:42:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 153.52.77.0/24 maxlen: 24
163.245.43.0/24 maxlen: 24
163.245.52.0/24 maxlen: 24
163.245.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:e3:b8:19:6c:34:b1:fa:32:9f:e4:17:87:ed:6a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 18 02:42:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18915cb2600b750281f6f0b7253d43c6e00e4265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:e2:4d:da:bb:26:4a:ec:3b:03:dd:7d:31:
e7:e9:39:c5:36:af:4a:c8:84:eb:38:f5:71:24:3a:
8d:7e:e4:c3:bf:9f:84:a8:67:4f:23:d6:15:14:0f:
8d:5a:e8:65:de:ee:9b:df:1f:27:a2:b8:18:a7:68:
92:86:48:c3:58:54:72:51:61:a4:8d:9f:5e:dc:56:
8d:12:2f:c8:b5:44:3c:99:92:91:97:d1:f2:ad:89:
f4:80:e1:6b:11:4d:da:62:1f:47:de:0c:37:01:b3:
59:b0:50:84:22:8c:59:db:06:24:12:79:b8:59:4d:
7f:6c:3e:20:91:9c:f9:e0:eb:e0:98:a4:be:70:2f:
ce:bd:15:0b:a8:18:c0:1a:1d:15:d1:4f:66:3d:9d:
04:bc:cb:5e:7e:81:54:bd:a4:49:3e:33:ea:2f:27:
54:c1:5a:eb:67:da:fe:93:28:f0:2f:6a:31:70:dd:
1f:c8:c6:6a:35:8d:b6:48:f4:d2:e7:58:a7:57:42:
9e:a2:41:ff:b2:11:4f:c8:ee:ee:ad:42:35:b8:20:
66:65:39:b7:5a:f2:24:65:8f:26:2f:95:4b:5e:ee:
e4:e1:c0:53:98:92:b0:4e:f6:34:57:4e:73:2a:97:
41:eb:d2:17:bc:1b:38:5a:73:66:51:4e:8f:e4:68:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:91:5C:B2:60:0B:75:02:81:F6:F0:B7:25:3D:43:C6:E0:0E:42:65
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/GJFcsmALdQKB9vC3JT1DxuAOQmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.77.0/24
163.245.43.0/24
163.245.52.0/24
163.245.55.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:65:4f:14:13:22:e7:50:39:6e:be:1a:e5:86:a4:83:4d:75:
97:ec:3c:f7:c7:1a:d2:63:f1:df:e5:26:7d:ac:d8:1a:3c:fc:
88:f4:31:9c:e7:2b:44:2a:3b:ed:b1:bb:a3:30:03:2c:1b:dc:
df:d3:4e:1b:05:49:c3:10:17:e3:ab:e5:01:19:48:16:94:24:
96:52:4a:e9:c5:ec:b0:cc:57:a0:3f:ca:ac:41:de:52:14:d1:
e6:6e:e9:27:fb:7e:16:f9:4b:a2:f1:85:b9:90:c2:62:19:ab:
35:ab:24:74:a8:17:e3:90:3d:2e:60:8c:00:f5:51:48:06:f8:
7d:18:92:b2:70:56:e5:bb:70:ad:5e:b8:08:91:49:ac:0d:b7:
9f:ac:5c:ac:81:49:68:a1:d1:11:b7:f1:26:d6:e0:0e:90:21:
22:a2:71:1a:d0:72:30:ff:da:3f:53:6e:f0:57:de:98:ae:3b:
5c:b9:e6:8d:24:45:be:88:81:4e:91:56:c8:85:a6:d6:14:4c:
5c:69:c8:4f:e4:f3:3b:e4:6d:d6:a7:cf:7e:25:1a:9d:19:f9:
34:4a:4f:9c:b9:4f:60:11:33:81:63:1f:fa:c4:3e:cd:22:e1:
06:85:6c:5f:6e:fb:f6:93:62:93:ae:7d:06:2e:29:28:94:1d:
96:84:85:7e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaFM47gZbDSx+jKf5BeH7WpXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYxMDE4MDI0MjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODkxNWNiMjYwMGI3NTAyODFmNmYwYjcyNTNkNDNjNmUwMGU0MjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlofiTdq7JkrsOwPdfTHn6TnFNq9K
yITrOPVxJDqNfuTDv5+EqGdPI9YVFA+NWuhl3u6b3x8norgYp2iShkjDWFRyUWGk
jZ9e3FaNEi/ItUQ8mZKRl9HyrYn0gOFrEU3aYh9H3gw3AbNZsFCEIoxZ2wYkEnm4
WU1/bD4gkZz54OvgmKS+cC/OvRULqBjAGh0V0U9mPZ0EvMtefoFUvaRJPjPqLydU
wVrrZ9r+kyjwL2oxcN0fyMZqNY22SPTS51inV0KeokH/shFPyO7urUI1uCBmZTm3
WvIkZY8mL5VLXu7k4cBTmJKwTvY0V05zKpdB69IXvBs4WnNmUU6P5GhNNQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBiRXLJgC3UCgfbwtyU9Q8bgDkJlMB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEvR0pGY3NtQUxkUUtCOXZDM0pUMUR4dUFPUW1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1
LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAmTRNAwQA
o/UrAwQAo/U0AwQAo/U3MA0GCSqGSIb3DQEBCwUAA4IBAQAaZU8UEyLnUDluvhrl
hqSDTXWX7Dz3xxrSY/Hf5SZ9rNgaPPyI9DGc5ytEKjvtsbujMAMsG9zf004bBUnD
EBfjq+UBGUgWlCSWUkrpxeywzFegP8qsQd5SFNHmbukn+34W+Uui8YW5kMJiGas1
qyR0qBfjkD0uYIwA9VFIBvh9GJKycFblu3CtXrgIkUmsDbefrFysgUloodERt/Em
1uAOkCEionEa0HIw/9o/U27wV96YrjtcueaNJEW+iIFOkVbIhabWFExcachP5PM7
5G3Wp89+JRqdGfk0Sk+cuU9gETOBYx/6xD7NIuEGhWxfbvv2k2KTrn0GLikolB2W
hIV+
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:59 2026 by rpki-client