Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/1GIHSznDsxXrw3jKQkIzicOXuk0.roa
File: 1GIHSznDsxXrw3jKQkIzicOXuk0.roa (raw, json)
Hash identifier: 9Pl5E1KhSoDAyA5hgG5eNFyWYdKksOI+dFWiKoJazjY=
Subject key identifier: D4:62:07:4B:39:C3:B3:15:EB:C3:78:CA:42:42:33:89:C3:97:BA:4D
Certificate issuer: /CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
Certificate serial: 019F23689C594B58263638F6A3E303EE5B4A
Authority key identifier: BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/1GIHSznDsxXrw3jKQkIzicOXuk0.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8638
IP address blocks: 87.123.208.0/22 maxlen: 22
89.27.161.0/24 maxlen: 24
89.247.220.0/24 maxlen: 24
94.134.81.0/24 maxlen: 24
2001:1438:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9c:59:4b:58:26:36:38:f6:a3:e3:03:ee:5b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d462074b39c3b315ebc378ca42423389c397ba4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:14:e5:c5:d0:3a:9b:51:c0:7e:1a:d4:91:
f2:25:51:f1:23:5a:9a:5d:5a:2b:b9:1c:46:ff:27:
da:0c:c4:47:c3:05:0e:54:1a:1b:b1:8c:94:35:cf:
13:af:73:aa:62:1d:0a:36:e6:ca:ce:10:fa:f6:df:
6c:93:db:d6:5c:59:03:db:69:fd:db:40:a1:a8:fd:
7b:41:14:38:f5:eb:96:ea:e7:7c:71:57:cb:fd:35:
cf:d4:a5:07:2f:1a:c6:5f:2d:8a:32:57:32:bd:b4:
17:cf:7c:83:c1:16:87:ac:f7:02:8a:7e:52:15:34:
75:27:35:62:ef:5a:35:c2:0b:c7:0f:93:44:0d:f4:
d0:df:b2:81:40:08:84:99:21:b9:7d:ee:65:3f:d5:
1e:70:ec:56:85:91:cc:87:24:0c:1d:44:d4:53:1b:
4c:14:e8:06:f5:a7:6f:cd:2b:01:ca:f3:36:d4:26:
84:06:37:e8:20:58:b2:4b:f9:fd:ca:69:94:a4:1c:
f4:37:71:15:a4:f4:3d:c4:32:63:59:de:65:cb:ef:
ae:9f:f8:68:b8:0d:18:69:db:78:b9:f6:f4:2b:f1:
77:8a:44:29:14:c2:cc:ab:f1:3e:fe:35:59:a3:7e:
a6:71:f6:6b:fd:b0:c4:81:17:eb:f2:34:90:a3:8b:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:62:07:4B:39:C3:B3:15:EB:C3:78:CA:42:42:33:89:C3:97:BA:4D
X509v3 Authority Key Identifier:
keyid:BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/1GIHSznDsxXrw3jKQkIzicOXuk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.123.208.0/22
89.27.161.0/24
89.247.220.0/24
94.134.81.0/24
IPv6:
2001:1438:f000::/36
Signature Algorithm: sha256WithRSAEncryption
25:5f:50:b9:34:cf:96:92:f5:65:bb:10:7b:39:15:b8:07:ac:
2d:c5:73:27:71:fb:31:c4:ef:35:79:69:bb:dd:c0:06:bb:0f:
4e:6b:82:f7:61:18:ff:79:de:1e:63:50:d1:3a:bd:cf:12:99:
fb:be:be:a3:81:38:9b:c7:2b:41:90:c9:3e:9e:59:0e:9e:be:
36:d0:db:7d:3b:65:68:6d:bf:f7:73:d6:98:02:e7:78:4b:55:
d3:b8:dd:f7:36:51:aa:c5:d5:28:91:98:8d:57:69:8e:f6:08:
f2:c2:00:3c:27:7e:dd:1f:b4:a6:7a:f1:25:3b:64:5d:fe:72:
e3:3e:08:93:8e:aa:3c:39:a4:1a:64:fe:3a:f5:46:13:f7:38:
85:62:de:33:3e:e0:4d:8c:10:17:50:4d:82:9b:b4:dd:9d:f8:
e3:ef:1c:fd:9b:0d:36:16:fc:40:33:6e:88:71:1b:5e:c5:de:
b2:b1:38:8b:f0:8f:86:7d:cd:83:53:c2:86:5a:80:b9:d8:70:
c8:c9:f0:97:28:be:dd:55:21:14:cb:11:41:86:d9:21:7f:1c:
fd:66:48:6e:31:c0:de:ca:9a:a4:7e:d6:94:9e:89:86:03:60:
45:69:37:85:c0:2f:f7:54:af:05:4c:c8:5d:1d:2e:c9:c6:b8:
4a:70:d8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:37 2026 by rpki-client