Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/GacdiJbZpZ2oPfuLkDSq7d3bcQI.roa
File: GacdiJbZpZ2oPfuLkDSq7d3bcQI.roa (raw, json)
Hash identifier: N/ccnzBCW/DjGGmSnaIv65kdKTj/oWBrux25tNTGhTY=
Subject key identifier: 19:A7:1D:88:96:D9:A5:9D:A8:3D:FB:8B:90:34:AA:ED:DD:DB:71:02
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 01A1DB457E0019CAB4B1153A13AC46033A4D
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/GacdiJbZpZ2oPfuLkDSq7d3bcQI.roa
Signing time: Sat 14 Nov 2026 18:15:26 +0000
ROA not before: Sat 14 Nov 2026 18:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62257
IP address blocks: 45.139.9.0/24 maxlen: 24
91.243.119.0/24 maxlen: 24
185.105.236.0/24 maxlen: 24
194.36.172.0/23 maxlen: 23
194.147.170.0/24 maxlen: 24
2a10:ab00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:45:7e:00:19:ca:b4:b1:15:3a:13:ac:46:03:3a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Nov 14 18:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19a71d8896d9a59da83dfb8b9034aaeddddb7102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:e5:e1:f8:24:6c:b1:9e:65:b2:c7:20:35:
c8:96:f1:e3:27:87:67:2d:ee:3d:96:b4:a9:2a:a5:
d4:8c:0a:2c:8f:52:e8:eb:d5:26:9e:11:7b:da:dd:
63:f7:b4:0d:f2:a0:6d:47:d9:f6:ff:c2:4a:49:40:
0d:df:26:7b:22:1d:28:09:1d:41:11:56:55:35:53:
f9:36:53:b2:b2:b8:af:68:0e:73:1b:e1:d6:2a:9d:
10:ec:36:18:78:c6:d7:17:2a:a2:13:e5:5e:77:5e:
de:ca:bd:d6:5b:64:2a:be:d9:fc:84:db:58:0f:e4:
e5:ae:f3:67:c6:c3:44:c0:00:ab:56:ac:ea:69:b4:
c9:f0:c0:67:3f:f0:cc:62:5f:89:e3:9e:73:ae:32:
fe:53:db:0a:b1:70:71:85:21:45:52:0d:40:ef:5f:
ea:4c:ed:d4:cb:5b:0c:fb:2a:56:11:46:93:3d:62:
2a:52:03:9a:1e:fc:1a:f1:64:86:55:0b:55:2a:9c:
ed:7e:fd:5b:87:7f:f6:e0:a3:db:d3:00:13:38:4c:
d9:b5:f8:b6:e0:2f:0d:f8:aa:39:3b:cf:e0:43:14:
e9:be:b7:2c:2d:88:6c:4e:eb:0a:61:e4:ea:69:c7:
bf:ba:cc:12:12:24:e5:9c:c7:0d:6b:2d:2f:b4:f0:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A7:1D:88:96:D9:A5:9D:A8:3D:FB:8B:90:34:AA:ED:DD:DB:71:02
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/GacdiJbZpZ2oPfuLkDSq7d3bcQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.9.0/24
91.243.119.0/24
185.105.236.0/24
194.36.172.0/23
194.147.170.0/24
IPv6:
2a10:ab00::/29
Signature Algorithm: sha256WithRSAEncryption
2b:29:be:c1:3a:27:78:a5:10:24:07:e9:25:1a:ba:05:dd:3f:
be:a1:aa:85:7a:e9:c5:56:38:f4:14:1b:ab:e3:2d:9e:44:d4:
01:34:93:ab:61:44:23:74:a4:9f:4b:e1:a7:7b:ee:c3:99:07:
1a:e5:a1:17:a8:80:01:ee:f2:b5:d9:34:8e:6f:1f:c0:89:b2:
8b:10:7d:70:38:91:45:e2:90:3f:f0:d6:d5:3b:75:f0:b9:18:
33:06:c9:70:61:cf:0b:d1:04:fc:24:cb:4d:ea:b3:70:1b:bb:
3d:d6:30:af:ed:cd:30:24:99:ea:51:ea:5c:65:02:2b:fd:9c:
18:d5:cf:71:cc:8f:89:7d:b7:96:ec:06:7d:53:f8:cb:f4:f7:
c7:3c:54:14:10:b9:48:14:25:a0:a8:bd:55:81:8f:62:34:cf:
22:62:11:57:3e:36:52:7f:46:e1:1e:d9:95:48:0a:47:1c:8c:
b4:70:07:ba:f9:55:aa:38:7d:b5:2a:33:f5:24:6c:af:00:fc:
79:6e:9e:a0:ba:19:3d:16:27:c9:31:81:27:77:0e:a6:a1:7c:
d3:41:a2:5d:e3:f1:87:2c:54:b9:8a:60:1b:f6:34:15:aa:6a:
24:f8:ff:79:f1:20:30:dc:ba:9e:0f:9f:74:4f:b6:e0:13:4b:
b4:bf:56:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:03:44 2026 by rpki-client