Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GK66JFrU79zQ_jGTkePuCIidh-M.roa
File: GK66JFrU79zQ_jGTkePuCIidh-M.roa (raw, json)
Hash identifier: v/4xnS//jkqm+I9T4e5mfF7K9I8Rte87UrL5ZxV1NSs=
Subject key identifier: 18:AE:BA:24:5A:D4:EF:DC:D0:FE:31:93:91:E3:EE:08:88:9D:87:E3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EAB47FF0A07B33A3094D3CED746D55CDF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GK66JFrU79zQ_jGTkePuCIidh-M.roa
Signing time: Tue 09 Jun 2026 07:28:02 +0000
ROA not before: Tue 09 Jun 2026 07:28:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134477
IP address blocks: 213.210.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:47:ff:0a:07:b3:3a:30:94:d3:ce:d7:46:d5:5c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 9 07:28:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18aeba245ad4efdcd0fe319391e3ee08889d87e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:4e:1b:6c:68:0f:05:22:59:b3:30:59:dd:
5d:0c:4b:9c:33:cf:7d:5b:cf:f4:08:6d:04:a6:a0:
6a:49:91:fc:93:a1:5d:45:9f:09:40:d6:31:8c:e7:
67:6c:ae:5c:a7:65:f4:a1:9f:ae:4f:e1:4f:e5:ca:
a5:00:12:0b:cc:91:cd:27:ff:c3:ae:9f:2f:27:37:
24:57:ea:24:6d:51:da:51:a4:cb:14:03:4b:2a:f1:
37:13:40:10:53:63:aa:7e:94:05:02:f6:a3:be:7d:
d1:fa:8b:58:3a:64:ed:19:c8:3f:98:f1:07:e4:27:
60:0e:03:0d:b4:f8:c8:6d:a0:80:e1:22:ba:7a:48:
9c:67:16:31:56:96:78:fe:34:f5:cb:8f:6b:ef:54:
13:88:ef:99:96:80:74:54:b7:e8:07:1f:86:ff:94:
d3:ad:10:a2:c5:87:dc:2c:26:c0:76:46:3c:cc:bd:
cb:ba:2c:fe:e2:4c:f5:17:45:56:84:ae:cd:2f:70:
66:9d:a6:13:f8:48:ac:7d:bd:6e:50:d5:96:08:7f:
d4:b2:aa:33:b3:8d:ba:25:e9:76:b9:76:d3:02:1f:
e1:dc:9b:a4:9b:5c:a1:20:9d:b9:c9:5c:2a:08:2b:
55:22:34:8b:6d:dc:e0:0c:fd:01:c0:2b:8d:30:1c:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AE:BA:24:5A:D4:EF:DC:D0:FE:31:93:91:E3:EE:08:88:9D:87:E3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/GK66JFrU79zQ_jGTkePuCIidh-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.210.55.0/24
Signature Algorithm: sha256WithRSAEncryption
51:54:08:20:4b:88:cf:cb:7d:49:09:fc:40:47:de:7e:75:44:
26:df:4f:48:08:be:c8:4a:51:fa:48:5a:e3:ec:fe:3f:81:2e:
1e:6a:d0:cf:39:74:c2:8d:91:00:02:20:b9:f2:2b:4f:de:cf:
f9:11:c6:fb:16:5b:0a:0f:b2:04:ef:c7:68:09:df:18:d4:3b:
27:5a:a7:67:a2:6f:97:84:e9:a4:d0:2a:73:2b:76:86:d0:2d:
3d:6a:83:ca:4f:b7:ac:fb:86:50:15:03:61:46:4f:03:13:6e:
d0:82:ef:96:94:f3:e6:22:08:6d:61:03:a5:8f:70:2e:32:ee:
ca:c3:f2:d7:44:f2:84:7b:88:b8:40:0c:17:ee:91:db:6a:9a:
a2:72:19:06:fc:a3:5e:ac:4d:d7:36:5c:59:4b:31:b6:e8:60:
1a:af:bb:f8:26:c2:e5:32:b6:80:b0:07:b7:a0:56:fb:39:13:
75:29:d8:ad:5d:53:23:29:66:ef:a7:8b:9d:54:64:5b:45:dc:
97:d9:54:d9:10:67:c7:8a:4d:60:50:ef:4d:b4:5d:20:2a:a1:
8e:16:72:93:4b:5a:ed:9e:b7:e8:d1:bb:2a:99:c0:00:0b:a1:
2f:2d:e7:ea:d0:89:92:f5:20:0b:c5:87:90:74:18:15:a9:4b:
65:67:be:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:10 2026 by rpki-client