Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/GXWJE-8eL7U4sVeXlOtFxZ7vcr8.roa
File: GXWJE-8eL7U4sVeXlOtFxZ7vcr8.roa (raw, json)
Hash identifier: HYQsYXLOcua0ABFdCgere8a70Mi6wAtAionAH1YPaTE=
Subject key identifier: 19:75:89:13:EF:1E:2F:B5:38:B1:57:97:94:EB:45:C5:9E:EF:72:BF
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 019FAD080F3BF335F7748E3C0D1D64A1818A
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/GXWJE-8eL7U4sVeXlOtFxZ7vcr8.roa
Signing time: Wed 29 Jul 2026 08:40:14 +0000
ROA not before: Wed 29 Jul 2026 08:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51517
IP address blocks: 103.251.156.0/22 maxlen: 22
103.251.156.0/24 maxlen: 24
103.251.157.0/24 maxlen: 24
103.251.158.0/24 maxlen: 24
103.251.159.0/24 maxlen: 24
2a10:e300::/32 maxlen: 32
2a10:e300:8411::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:08:0f:3b:f3:35:f7:74:8e:3c:0d:1d:64:a1:81:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jul 29 08:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19758913ef1e2fb538b1579794eb45c59eef72bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:fc:0b:20:fa:9c:f6:6b:08:81:ba:69:eb:
e5:92:8f:69:95:da:01:11:b3:55:fa:c9:89:65:54:
e0:30:8e:03:1f:ed:77:39:a5:e5:1d:bf:d6:cd:91:
dc:7a:42:51:0f:f0:ea:91:9c:41:25:20:43:73:a0:
e0:b1:c7:68:d5:e4:2d:32:37:aa:ad:83:df:e4:ac:
1b:67:d2:65:b5:db:48:57:30:32:42:ec:32:d0:21:
f1:3c:53:4d:57:fb:bd:e1:39:ab:5c:7a:ca:83:17:
49:ce:04:38:15:7d:34:f7:66:40:10:9f:70:9a:05:
f1:75:2b:6d:0e:33:a7:c2:4b:10:c5:84:7a:12:49:
f6:d7:c1:15:bb:b6:78:20:7c:12:20:1f:24:2e:48:
74:a4:1a:6f:e9:a8:82:47:46:91:39:ea:19:dc:0f:
0e:0b:de:96:1c:94:24:0a:8d:22:bd:02:3c:90:7f:
82:99:30:31:33:ed:91:dd:3e:4b:33:12:2b:a3:84:
df:4f:02:63:ce:c2:e6:cb:c4:5e:98:cd:1a:d6:2a:
e2:d4:3f:e4:6a:71:4e:e6:5b:1f:4e:b3:3b:df:12:
7a:8e:08:51:ff:5e:7f:34:14:2f:c2:26:bb:e1:eb:
b5:a2:18:7f:34:08:52:06:67:fa:06:41:57:89:53:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:75:89:13:EF:1E:2F:B5:38:B1:57:97:94:EB:45:C5:9E:EF:72:BF
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/GXWJE-8eL7U4sVeXlOtFxZ7vcr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.251.156.0/22
IPv6:
2a10:e300::/32
Signature Algorithm: sha256WithRSAEncryption
7f:f9:78:83:52:fa:2c:e2:48:31:3a:bc:a4:5b:ed:b5:a1:7a:
d8:c5:9f:57:5d:b3:37:ad:c3:4f:bd:11:5e:58:6b:f0:b9:38:
7f:02:82:f1:78:4a:e2:e6:ae:60:a0:cf:aa:9a:55:88:44:83:
14:47:01:09:be:e6:a9:7c:9a:67:4c:21:b4:5a:24:0c:7d:56:
45:69:1b:e9:04:bb:e4:23:a3:6d:38:2c:99:4d:36:36:d6:f8:
97:c9:f5:3e:3d:64:31:f7:2e:90:0f:56:cb:e1:61:9e:fa:1a:
4d:7f:21:23:3d:af:de:7b:f7:5f:ce:85:73:a4:de:9d:41:28:
92:c6:5c:40:d7:c0:62:96:55:19:0b:77:77:3d:b3:fe:b5:ef:
d5:d6:d8:59:74:81:24:d6:63:93:6a:5a:75:4f:57:89:30:11:
30:d2:17:e6:7a:4c:73:7d:fd:67:7a:89:0c:7a:e7:1d:d4:bb:
a0:1c:03:1f:7b:f1:66:12:0d:78:6c:6c:3b:2e:e4:75:a3:f8:
6a:04:50:1b:27:98:bc:b4:b5:83:29:2b:35:84:e7:ae:e2:48:
8d:72:6b:89:24:63:0d:d1:0b:a6:c2:01:43:77:04:e9:2f:4a:
14:48:82:0a:81:20:15:fd:1d:a0:3c:18:69:1a:7a:7d:e2:fc:
76:7d:ba:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:24:13 2026 by rpki-client