Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Gi_HDBumIIaeyuLxHS7cxQlOK_A.roa
File: Gi_HDBumIIaeyuLxHS7cxQlOK_A.roa (raw, json)
Hash identifier: Tm4L3gWiAeCs5Se2LiGsN9jPLCKXUonxKKeZsVxNaWo=
Subject key identifier: 1A:2F:C7:0C:1B:A6:20:86:9E:CA:E2:F1:1D:2E:DC:C5:09:4E:2B:F0
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0B379EE398E72FD4499156C4D844D6508
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Gi_HDBumIIaeyuLxHS7cxQlOK_A.roa
Signing time: Fri 18 Sep 2026 07:45:07 +0000
ROA not before: Fri 18 Sep 2026 07:45:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151407
IP address blocks: 109.66.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:79:ee:39:8e:72:fd:44:99:15:6c:4d:84:4d:65:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 18 07:45:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a2fc70c1ba620869ecae2f11d2edcc5094e2bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:45:9e:c6:cc:94:a4:51:b1:0f:93:7a:cd:
c4:a9:48:69:3e:fb:1d:de:58:56:67:56:98:05:1e:
bf:37:2b:8a:98:75:71:fb:03:d4:cc:3d:fd:77:a9:
7b:40:e4:97:d9:96:b8:55:b8:be:bf:d5:85:4e:c7:
f9:c7:a3:09:92:0e:2c:a4:66:8a:a3:43:d4:d1:e9:
47:5c:19:fc:c9:1c:6c:19:66:14:27:c2:3c:02:88:
7c:25:95:db:d5:46:65:e1:05:5a:51:29:e9:09:b0:
9e:d7:e7:55:bb:ae:ce:eb:10:53:e5:b4:4d:bd:71:
39:5d:68:cb:5c:c0:9d:17:56:52:57:0f:ed:30:e2:
f8:22:57:8c:ae:9a:99:71:f1:a9:0a:52:cc:e8:66:
e1:96:58:a1:fb:31:33:13:ec:3e:d9:ae:a0:ab:95:
64:cc:e2:7a:bf:37:ae:52:bc:f7:71:ad:75:8b:76:
19:ad:41:46:63:01:2d:11:01:a7:f9:56:80:42:07:
d6:82:36:a8:b0:4c:b9:b2:c2:fb:8e:c9:e6:26:aa:
33:37:ce:20:a1:3c:83:04:17:20:66:2d:df:ed:f5:
3a:19:ac:ac:da:05:ca:2b:a6:2a:36:69:8b:e0:2c:
75:0d:c5:14:e6:a9:7b:64:23:79:ca:4f:3b:2d:46:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2F:C7:0C:1B:A6:20:86:9E:CA:E2:F1:1D:2E:DC:C5:09:4E:2B:F0
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Gi_HDBumIIaeyuLxHS7cxQlOK_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.99.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:32:0c:dd:06:8a:b4:0d:44:bf:f3:70:d5:8d:ef:ec:e6:da:
12:8b:f4:8b:26:0f:72:53:75:12:50:f1:ae:a8:13:f4:f2:59:
54:03:91:0d:80:49:d5:c3:99:ef:51:7c:a5:3e:49:3b:50:bd:
20:e5:dc:cb:51:ae:90:39:7c:1e:b6:b2:f9:c4:de:26:a7:80:
2a:49:ec:47:1f:b4:3d:50:f4:3d:e9:3a:7a:22:d1:1b:aa:a1:
20:d6:cc:cb:ba:44:4a:49:a6:04:26:f7:89:25:7f:5a:b0:ea:
f5:39:17:7f:aa:8c:57:ba:c0:a3:2b:26:1a:8d:5f:41:02:af:
01:ff:6a:3d:c6:74:80:19:ff:db:5f:f3:10:11:59:55:e5:8e:
e6:5d:36:04:48:61:6a:52:78:ed:75:7a:f4:68:74:5c:f0:86:
7d:16:3b:94:7c:64:b1:e5:fe:8d:d7:b0:de:62:ec:a8:05:62:
5e:3d:d5:f7:93:f9:33:b6:aa:1e:a8:0d:bf:e5:67:48:d6:2c:
14:5c:23:f6:9c:ba:87:a1:5e:d8:7a:84:e3:ab:28:f0:b3:e1:
6c:75:76:bb:7e:49:ed:c3:d8:2c:0f:ab:81:97:e5:f0:cf:07:
b8:44:38:15:03:3a:a0:d9:f5:dd:6f:0e:3f:5f:8b:7f:6a:c7:
96:02:07:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCzee45jnL9RJkVbE2ETWUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTE4MDc0NTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTJmYzcwYzFiYTYyMDg2OWVjYWUyZjExZDJlZGNjNTA5NGUyYmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1dFnsbMlKRRsQ+Tes3EqUhpPvsd
3lhWZ1aYBR6/NyuKmHVx+wPUzD39d6l7QOSX2Za4Vbi+v9WFTsf5x6MJkg4spGaK
o0PU0elHXBn8yRxsGWYUJ8I8Aoh8JZXb1UZl4QVaUSnpCbCe1+dVu67O6xBT5bRN
vXE5XWjLXMCdF1ZSVw/tMOL4IleMrpqZcfGpClLM6Gbhllih+zEzE+w+2a6gq5Vk
zOJ6vzeuUrz3ca11i3YZrUFGYwEtEQGn+VaAQgfWgjaosEy5ssL7jsnmJqozN84g
oTyDBBcgZi3f7fU6Gays2gXKK6YqNmmL4Cx1DcUU5ql7ZCN5yk87LUb60QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBovxwwbpiCGnsri8R0u3MUJTivwMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvR2lfSERCdW1JSWFleXVMeEhTN2N4UWxPS19BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUJjMA0G
CSqGSIb3DQEBCwUAA4IBAQAqMgzdBoq0DUS/83DVje/s5toSi/SLJg9yU3USUPGu
qBP08llUA5ENgEnVw5nvUXylPkk7UL0g5dzLUa6QOXwetrL5xN4mp4AqSexHH7Q9
UPQ96Tp6ItEbqqEg1szLukRKSaYEJveJJX9asOr1ORd/qoxXusCjKyYajV9BAq8B
/2o9xnSAGf/bX/MQEVlV5Y7mXTYESGFqUnjtdXr0aHRc8IZ9FjuUfGSx5f6N17De
YuyoBWJePdX3k/kztqoeqA2/5WdI1iwUXCP2nLqHoV7YeoTjqyjws+FsdXa7fknt
w9gsD6uBl+Xwzwe4RDgVAzqg2fXdbw4/X4t/aseWAgcD
-----END CERTIFICATE-----
Generated at Mon Sep 21 01:01:13 2026 by rpki-client