Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/G2BoL9ecCjBaRoaJDjebPJCWqzE.roa
File: G2BoL9ecCjBaRoaJDjebPJCWqzE.roa (raw, json)
Hash identifier: loS4tbrMcz0xl9nMvLRcoLHx1sX1e9WMQZBXsfgZpHU=
Subject key identifier: 1B:60:68:2F:D7:9C:0A:30:5A:46:86:89:0E:37:9B:3C:90:96:AB:31
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019ECFBA9C326EBABE0991E8BD49C252433F
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/G2BoL9ecCjBaRoaJDjebPJCWqzE.roa
Signing time: Tue 16 Jun 2026 09:19:33 +0000
ROA not before: Tue 16 Jun 2026 09:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55286
IP address blocks: 109.238.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:ba:9c:32:6e:ba:be:09:91:e8:bd:49:c2:52:43:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jun 16 09:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b60682fd79c0a305a4686890e379b3c9096ab31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:00:dd:a3:13:76:e6:2a:df:b2:19:1e:1a:
01:cd:2e:17:c1:16:47:3b:3a:35:ac:31:1c:31:04:
9f:fa:f3:7f:61:2d:81:db:8c:8a:05:b2:fb:70:a2:
c0:98:ad:ae:1d:1c:6b:29:a3:10:36:ff:06:c0:a0:
72:10:f2:e9:bd:d0:bd:5b:d0:34:10:e9:00:f2:40:
87:2a:59:38:10:66:fb:c3:6d:e0:08:ba:88:f3:50:
7c:18:8f:f7:a4:85:1d:e3:40:4e:4c:8b:52:2b:21:
34:c8:84:ac:d3:fa:94:b4:21:f8:d7:5f:d5:16:2e:
8e:42:00:8e:78:bb:5a:5e:77:ca:bb:2a:f9:29:c1:
47:51:11:1b:a5:40:a9:1e:c7:22:6b:d0:ea:72:4c:
d8:cc:6b:15:ed:33:8b:e0:87:d7:c0:32:4b:d3:25:
10:93:4c:d5:9d:d2:09:8d:84:50:90:2b:66:3b:74:
fe:0b:df:b0:72:7b:78:93:7f:bc:6f:20:20:83:4a:
c0:d9:9e:f8:3f:7d:2d:16:99:65:76:e8:46:0e:89:
59:7d:d5:e4:b7:bc:48:80:83:a3:20:19:38:dd:6a:
10:6c:c8:55:4d:8c:29:6f:9a:01:ea:dc:ae:bd:93:
5e:fe:73:53:c7:d0:11:85:20:3e:76:8b:ce:77:a2:
a4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:60:68:2F:D7:9C:0A:30:5A:46:86:89:0E:37:9B:3C:90:96:AB:31
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/G2BoL9ecCjBaRoaJDjebPJCWqzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.238.87.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:59:e2:cc:0a:11:0c:79:89:e5:fd:10:c9:4e:56:d3:50:7a:
2c:c4:bb:c7:a9:7b:ce:8e:7f:4f:58:30:d1:b0:83:65:e6:12:
47:f3:7b:d2:3b:4d:07:b2:d7:ec:27:14:90:02:61:4b:e0:bc:
33:5b:47:c1:60:8e:00:c7:b6:81:e2:2b:fc:58:de:05:f5:c4:
2e:38:54:b6:36:4d:1f:bc:09:59:83:35:e4:53:fb:87:69:04:
c6:95:97:3b:03:11:62:7a:7d:9a:45:49:4c:d3:9f:8a:7a:b9:
e4:c2:50:48:f6:d3:f7:55:d2:25:21:3a:68:bf:e2:00:af:2a:
3e:d2:ab:0f:90:51:02:39:b8:7e:8a:2f:26:4f:5b:96:07:4e:
b7:f5:f0:d1:3c:90:dd:41:67:b0:9f:4c:09:a5:f7:8a:4a:76:
fa:9c:d4:2d:95:64:cd:d8:3a:cb:a5:ee:af:ae:57:c0:4b:af:
ec:ff:11:18:bf:69:5f:6b:48:29:1b:df:a3:6b:2a:2c:87:30:
b6:4a:d7:1e:6f:52:ca:e4:12:10:70:14:42:ef:24:97:b5:12:
dc:91:81:89:31:12:ec:12:a8:d4:1b:6e:a6:42:db:71:d5:fb:
7f:71:00:70:58:53:8f:c6:39:98:c7:0d:f7:c1:77:32:f3:8f:
9a:35:f1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 01:45:35 2026 by rpki-client