Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/G8ok4WnRssMF_kSU0fMKahJetsU.roa
File: G8ok4WnRssMF_kSU0fMKahJetsU.roa (raw, json)
Hash identifier: l43UBskPXl3nXaaaJdzsHUtTJRUjiog9FX+gAeGDp4g=
Subject key identifier: 1B:CA:24:E1:69:D1:B2:C3:05:FE:44:94:D1:F3:0A:6A:12:5E:B6:C5
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019CE1D7EF1F25AB30D89393C9FB5312D374
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/G8ok4WnRssMF_kSU0fMKahJetsU.roa
Signing time: Thu 12 Mar 2026 11:39:10 +0000
ROA not before: Thu 12 Mar 2026 11:39:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207461
IP address blocks: 5.182.84.0/24 maxlen: 24
5.182.85.0/24 maxlen: 24
46.254.92.0/24 maxlen: 24
46.254.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:d7:ef:1f:25:ab:30:d8:93:93:c9:fb:53:12:d3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Mar 12 11:39:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bca24e169d1b2c305fe4494d1f30a6a125eb6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:57:5b:30:56:85:58:3d:7b:7d:cf:eb:fd:
ef:7e:5f:92:a9:5d:f8:40:6d:1d:77:26:ab:7d:cd:
44:00:dd:05:e6:ac:f7:45:e3:5a:6f:f9:dc:4c:79:
d9:6b:64:26:80:8f:ac:67:ee:c3:9b:dd:ae:2c:35:
ab:97:a0:86:b7:b1:fe:85:de:ba:8f:ac:06:8e:35:
0f:f7:f7:f2:b8:5c:d3:3e:e5:c7:08:9a:e6:2a:4a:
d5:0b:a3:05:6a:8c:80:f2:77:f8:08:e7:46:c2:c7:
18:57:75:72:a4:85:57:5c:69:94:4f:4e:c5:1e:c6:
98:7d:1e:d7:00:57:6e:6c:6c:8a:9e:f2:7b:dc:75:
37:b9:f4:29:5a:14:7d:b2:e2:fb:c4:ad:c6:f0:ef:
74:cb:c2:09:27:06:73:eb:a7:e0:86:2d:52:52:5d:
0e:b2:d1:55:82:8a:e7:ca:2c:ba:ce:65:3d:5f:93:
85:df:6e:44:5b:3a:3b:cd:ff:9f:8e:89:4b:06:a0:
f5:2e:be:a0:b8:17:76:4d:f6:93:1c:38:70:19:d4:
da:f7:d9:71:cd:7d:58:d8:9d:d3:b2:e2:8c:ab:20:
36:eb:2e:9a:8d:38:44:ab:39:d5:ac:cf:f1:64:94:
43:43:08:12:31:4a:74:6e:4c:1a:5a:39:81:ed:ba:
cf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CA:24:E1:69:D1:B2:C3:05:FE:44:94:D1:F3:0A:6A:12:5E:B6:C5
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/G8ok4WnRssMF_kSU0fMKahJetsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.84.0/23
46.254.92.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:66:a8:81:89:76:7e:d1:29:96:24:15:64:e8:75:99:0e:fc:
1e:0c:ae:04:01:91:34:35:63:e5:73:28:3e:b3:5b:5e:fa:83:
0c:9c:35:ff:c4:d4:29:57:3e:d2:ba:ce:25:80:12:89:a3:1c:
d4:67:8d:a0:2b:66:1b:9e:09:10:cb:12:ca:e1:23:80:ef:61:
9c:7a:57:38:21:7b:6e:73:df:46:4f:f2:e7:be:aa:7b:79:e8:
37:9e:d7:2c:16:25:db:da:56:b9:52:b6:0c:4b:e7:f3:db:ce:
4e:1d:40:4d:44:28:f4:02:dc:77:b5:d2:fc:84:e8:29:d3:aa:
a9:ab:c0:e7:23:a6:1a:a2:ee:a3:80:8f:87:4e:b5:4c:fd:7d:
81:07:d5:34:a9:35:d0:0e:b1:39:1a:10:27:d0:9f:39:12:bb:
f6:c8:96:f3:b3:c5:2f:fa:0f:40:9d:37:a4:65:3e:9a:af:2d:
d4:e6:9b:f4:54:00:91:61:ad:33:bf:15:81:7f:7b:b5:0f:e4:
cc:76:6f:ca:a1:3c:05:e2:89:3f:af:97:b4:cd:92:e5:9d:4c:
9a:bb:e2:1c:24:83:71:c9:8a:41:81:55:f4:a5:95:c3:90:d8:
2b:82:e1:ea:fa:bf:f6:0f:20:66:38:6a:69:81:4a:a0:43:9c:
6c:9e:55:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:19:02 2026 by rpki-client