Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/GUeXMFK9SoEQ7EUEYtFFmm87ss0.roa
File: GUeXMFK9SoEQ7EUEYtFFmm87ss0.roa (raw, json)
Hash identifier: XHapLYq++Wu54R43JHXxNljb7oNTeSO7iMt9Aug+VYo=
Subject key identifier: 19:47:97:30:52:BD:4A:81:10:EC:45:04:62:D1:45:9A:6F:3B:B2:CD
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 01A0AFFD494BDEF3ADD6202EAB9A23F2AD2D
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/GUeXMFK9SoEQ7EUEYtFFmm87ss0.roa
Signing time: Thu 17 Sep 2026 15:30:07 +0000
ROA not before: Thu 17 Sep 2026 15:30:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208693
IP address blocks: 91.132.243.0/24 maxlen: 24
185.185.204.0/22 maxlen: 24
2a00:7420:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:fd:49:4b:de:f3:ad:d6:20:2e:ab:9a:23:f2:ad:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Sep 17 15:30:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1947973052bd4a8110ec450462d1459a6f3bb2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:f0:cf:d4:aa:ef:30:c9:5c:3f:34:8c:0c:
18:4c:40:0f:d8:c7:bd:ca:63:2a:02:d8:ce:3d:7b:
20:98:11:d8:43:07:f7:be:80:7f:ca:0d:53:2e:f1:
6e:29:eb:f1:4c:66:9e:1b:78:90:4b:1d:85:e1:b3:
8a:29:be:ed:d6:cc:df:d9:e7:26:78:fb:70:43:ed:
cd:e0:2b:a4:ba:c7:48:c7:c3:74:8d:ba:f4:2a:bb:
77:71:75:a6:ea:6a:3e:9f:6c:e1:7a:53:fe:6b:49:
a4:f0:53:b0:40:91:fd:d4:4c:b9:c0:70:6b:a4:e7:
95:ac:81:60:79:b1:72:c7:19:88:01:6e:da:e6:7f:
ab:7f:b4:be:0a:e1:94:13:2b:a3:87:a1:71:54:35:
b7:b3:34:8e:46:ba:e0:c9:93:3d:be:e7:32:9e:64:
1e:f7:b3:c5:a8:d6:56:3f:f3:f8:3c:c9:b1:7f:4b:
fd:ee:42:79:f6:b8:d9:ce:c5:39:dc:70:e1:2e:74:
28:9c:7b:57:ea:72:a8:1b:f1:12:60:b3:ed:80:5a:
73:4e:1a:c8:76:32:87:ee:a7:5a:8c:80:1f:6e:13:
32:07:6f:8e:1e:f4:ea:17:20:49:85:e5:42:21:16:
b6:42:b2:c5:2b:fc:57:e1:3f:c3:6d:95:0c:a2:9e:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:47:97:30:52:BD:4A:81:10:EC:45:04:62:D1:45:9A:6F:3B:B2:CD
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/GUeXMFK9SoEQ7EUEYtFFmm87ss0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.243.0/24
185.185.204.0/22
IPv6:
2a00:7420:8000::/33
Signature Algorithm: sha256WithRSAEncryption
67:1c:d9:fa:1b:51:1b:e3:e4:42:24:40:81:c4:7e:3f:1b:3d:
a3:f6:5e:71:93:9d:91:df:3d:61:8c:4f:e3:8c:a2:48:ff:98:
94:85:42:9b:05:28:d2:dd:cb:c8:18:24:0d:cf:6e:8f:e1:79:
50:f7:6a:bb:1d:96:2e:5c:95:cf:bd:71:1d:b0:d0:70:fe:f3:
0f:64:05:1b:d1:42:f8:98:3a:75:26:07:a3:34:72:91:fc:48:
2f:f5:e6:f6:7d:de:fa:ad:36:26:33:e7:f7:85:f5:c0:24:a0:
8c:ac:3c:ad:b7:53:05:64:dd:96:ce:a4:41:ab:dd:a0:59:b0:
23:cf:a0:7a:4d:c5:a2:34:6f:1d:74:1d:1a:a1:c4:d4:f3:7e:
4c:43:5b:0a:d7:68:12:c9:11:17:a7:d6:97:fe:39:58:1a:83:
2a:e9:2c:43:ae:a7:aa:e1:3e:16:13:2f:d9:85:c8:f1:40:ba:
48:dd:93:fe:79:c9:29:18:1c:ca:bf:ce:c6:0a:4b:ad:37:be:
bb:bf:7e:c7:07:de:83:d5:a4:0c:0a:ea:72:ed:f2:d5:ff:5d:
5b:55:fa:d1:2f:cc:c8:c9:8a:77:09:6f:5d:78:f3:dd:46:f4:
23:ac:51:21:e9:16:d0:1c:c6:ea:0f:5e:61:5a:7d:5d:0d:de:
71:b4:9c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:20 2026 by rpki-client