Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GUhac3GGpaMe3BxiUXID3jXEQL4.roa
File: GUhac3GGpaMe3BxiUXID3jXEQL4.roa (raw, json)
Hash identifier: mIhMHyduwC5aLVciEN/dbK7yzEBH99t78lL0CLW2ugo=
Subject key identifier: 19:48:5A:73:71:86:A5:A3:1E:DC:1C:62:51:72:03:DE:35:C4:40:BE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A17C6D545C71FA8DFC92DAD06B30C3C878
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GUhac3GGpaMe3BxiUXID3jXEQL4.roa
Signing time: Tue 27 Oct 2026 08:15:02 +0000
ROA not before: Tue 27 Oct 2026 08:15:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215439
IP address blocks: 89.144.16.0/24 maxlen: 24
94.103.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:6d:54:5c:71:fa:8d:fc:92:da:d0:6b:30:c3:c8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 27 08:15:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19485a737186a5a31edc1c62517203de35c440be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f8:32:5b:d8:40:a9:c8:5f:33:d8:74:2d:00:
ac:ea:93:1b:24:e2:2b:0f:c2:d4:57:9e:27:94:32:
cc:55:a4:bc:fa:69:65:3d:f7:a4:68:03:ee:30:71:
d3:74:84:aa:5e:44:f7:cf:4d:6d:ae:2b:23:b6:a7:
30:de:38:26:b6:ee:1c:10:0a:8a:dc:f1:bd:ac:9f:
f8:72:37:d0:76:a6:df:3b:72:88:83:39:9a:b8:11:
ed:12:fa:4c:74:a2:b0:16:e5:df:b4:0d:15:3a:17:
ee:5c:4a:07:2c:61:51:7c:5d:1b:49:d3:a5:79:8b:
1e:fd:4a:3b:4c:02:e8:3a:89:c1:5f:8e:ec:43:b2:
6e:5e:89:27:4c:8c:5f:86:07:e9:eb:18:92:1f:75:
5a:1f:05:4b:6e:93:56:84:7c:19:e0:95:c0:2f:d6:
0d:fc:49:a6:26:19:1e:46:0c:48:e9:c5:8c:4a:da:
3b:1a:f8:f4:18:85:f4:cf:a1:e3:76:5e:f8:f0:00:
dc:15:c3:60:28:04:d5:e1:f0:cf:fd:9c:cb:00:ce:
aa:96:d7:ce:95:82:1a:5e:22:b6:57:e4:b6:6c:5a:
31:35:d8:de:bd:29:96:0c:49:f4:c9:e1:f5:76:50:
8d:6b:0c:80:c0:10:64:1b:94:ad:c9:12:b9:e4:bb:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:48:5A:73:71:86:A5:A3:1E:DC:1C:62:51:72:03:DE:35:C4:40:BE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GUhac3GGpaMe3BxiUXID3jXEQL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.16.0/24
94.103.169.0/24
Signature Algorithm: sha256WithRSAEncryption
88:56:2b:41:87:f2:14:84:2e:c5:bf:bd:13:30:22:20:3f:ca:
f3:52:d4:6b:27:e6:36:19:4f:6d:0d:ad:ef:ce:d2:43:c9:fd:
3d:8e:e3:76:43:ba:1b:bf:b2:55:01:7c:fb:2d:17:60:db:30:
a5:f5:b2:1f:2f:4e:7a:9a:c4:2b:b6:12:04:14:a4:28:78:f7:
12:b6:92:67:a4:2e:73:2a:f9:8a:68:89:74:74:fc:d4:43:e0:
7d:0d:9b:2f:47:0c:d2:d5:0c:a0:d6:5e:70:b2:39:c6:03:ad:
f1:58:90:12:28:be:ca:15:2f:15:d3:52:b1:63:50:35:fe:4b:
95:bd:3c:ef:25:ec:87:14:3d:69:45:b5:e0:4e:24:22:a9:ba:
1e:85:aa:63:77:3f:ee:3a:1f:87:16:6e:b8:a2:35:9e:dd:e5:
a3:82:b1:2a:b1:3c:07:14:2e:b6:d4:f0:1b:09:c7:a6:54:87:
96:a3:8f:e6:d5:a9:71:b0:8e:cd:c2:be:9a:d6:a6:1f:9d:d4:
90:af:cc:a4:38:a9:eb:c4:1f:c7:da:76:98:ea:f1:6c:2d:0c:
7e:df:17:bc:c0:e0:b6:5d:34:c4:86:81:2c:da:65:79:fd:32:
b7:58:74:aa:96:0b:ad:8b:32:29:55:da:34:fe:46:00:fa:ec:
08:a9:18:ac
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaF8bVRccfqN/JLa0Gsww8h4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDI3MDgxNTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTQ4NWE3MzcxODZhNWEzMWVkYzFjNjI1MTcyMDNkZTM1YzQ0MGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fgyW9hAqchfM9h0LQCs6pMbJOIr
D8LUV54nlDLMVaS8+mllPfekaAPuMHHTdISqXkT3z01trisjtqcw3jgmtu4cEAqK
3PG9rJ/4cjfQdqbfO3KIgzmauBHtEvpMdKKwFuXftA0VOhfuXEoHLGFRfF0bSdOl
eYse/Uo7TALoOonBX47sQ7JuXoknTIxfhgfp6xiSH3VaHwVLbpNWhHwZ4JXAL9YN
/EmmJhkeRgxI6cWMSto7Gvj0GIX0z6Hjdl748ADcFcNgKATV4fDP/ZzLAM6qltfO
lYIaXiK2V+S2bFoxNdjevSmWDEn0yeH1dlCNawyAwBBkG5StyRK55LtWfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBlIWnNxhqWjHtwcYlFyA941xEC+MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvR1VoYWMzR0dwYU1lM0J4aVVYSUQzalhFUUw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWZAQAwQA
XmepMA0GCSqGSIb3DQEBCwUAA4IBAQCIVitBh/IUhC7Fv70TMCIgP8rzUtRrJ+Y2
GU9tDa3vztJDyf09juN2Q7obv7JVAXz7LRdg2zCl9bIfL056msQrthIEFKQoePcS
tpJnpC5zKvmKaIl0dPzUQ+B9DZsvRwzS1Qyg1l5wsjnGA63xWJASKL7KFS8V01Kx
Y1A1/kuVvTzvJeyHFD1pRbXgTiQiqboehapjdz/uOh+HFm64ojWe3eWjgrEqsTwH
FC621PAbCcemVIeWo4/m1alxsI7Nwr6a1qYfndSQr8ykOKnrxB/H2naY6vFsLQx+
3xe8wOC2XTTEhoEs2mV5/TK3WHSqlgutizIpVdo0/kYA+uwIqRis
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:51:44 2026 by rpki-client