Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/GPBnMrccvHfLRUetSr0V2OhSV78.roa
File: GPBnMrccvHfLRUetSr0V2OhSV78.roa (raw, json)
Hash identifier: bMjAfl7v9vzL7TDoDm3Lu45G9wMjJfK+MiFqNCPT/Us=
Subject key identifier: 18:F0:67:32:B7:1C:BC:77:CB:45:47:AD:4A:BD:15:D8:E8:52:57:BF
Certificate issuer: /CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Certificate serial: 0199CCE3D1234B7BD08A882434A0C38C7627
Authority key identifier: 1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/GPBnMrccvHfLRUetSr0V2OhSV78.roa
Signing time: Fri 10 Oct 2025 06:51:46 +0000
ROA not before: Fri 10 Oct 2025 06:51:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51540
IP address blocks: 46.31.144.0/24 maxlen: 24
46.31.145.0/24 maxlen: 24
46.31.146.0/24 maxlen: 24
46.31.147.0/24 maxlen: 24
46.31.148.0/24 maxlen: 24
46.31.149.0/24 maxlen: 24
46.31.150.0/24 maxlen: 24
46.31.151.0/24 maxlen: 24
185.14.20.0/24 maxlen: 24
185.14.21.0/24 maxlen: 24
185.14.22.0/24 maxlen: 24
185.14.23.0/24 maxlen: 24
185.52.228.0/24 maxlen: 24
185.198.196.0/24 maxlen: 24
185.198.197.0/24 maxlen: 24
185.198.198.0/24 maxlen: 24
185.198.199.0/24 maxlen: 24
2a03:6c40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cc:e3:d1:23:4b:7b:d0:8a:88:24:34:a0:c3:8c:76:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Validity
Not Before: Oct 10 06:51:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18f06732b71cbc77cb4547ad4abd15d8e85257bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:06:40:3a:bc:e1:ec:f1:99:30:9f:1c:3f:b6:
ee:45:35:5c:88:98:0c:db:96:a0:d0:63:c8:cf:27:
37:1e:b2:52:4f:63:cd:07:a9:d3:76:88:04:36:65:
8c:e8:81:37:3a:00:0c:0c:1d:60:72:fe:08:76:e0:
83:05:f4:81:d4:1e:8a:64:ad:b7:96:d6:13:06:30:
d0:cc:af:55:c1:00:d9:a4:9b:1c:3f:43:c6:93:8a:
13:a5:6a:17:7c:0e:03:5e:58:2f:46:59:3c:a9:b5:
61:7d:86:1d:95:bd:27:84:37:d5:30:e7:9d:74:02:
4c:e6:db:9c:d2:e1:df:b4:7c:df:66:be:e3:2c:05:
9b:04:f5:c4:4c:19:34:74:37:65:95:83:e0:e6:7c:
31:04:17:00:e8:3f:32:33:67:7b:5e:0b:e5:8b:f8:
27:59:92:47:89:cd:65:dc:38:6a:f3:82:45:06:bd:
15:61:9b:01:d1:67:a6:79:16:ac:35:32:d2:a9:9f:
da:79:8c:85:27:70:89:98:69:19:f1:12:50:2c:65:
f4:da:ed:da:fc:85:aa:84:51:0f:0f:5e:60:3c:cf:
bf:fc:0e:a9:14:ae:e2:d3:e0:dd:2c:17:34:de:18:
38:0a:4d:45:bf:86:54:b8:73:7d:d0:2d:6c:4e:b2:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F0:67:32:B7:1C:BC:77:CB:45:47:AD:4A:BD:15:D8:E8:52:57:BF
X509v3 Authority Key Identifier:
keyid:1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/GPBnMrccvHfLRUetSr0V2OhSV78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.144.0/21
185.14.20.0/22
185.52.228.0/24
185.198.196.0/22
IPv6:
2a03:6c40::/32
Signature Algorithm: sha256WithRSAEncryption
30:50:5c:66:8e:94:42:c7:38:0d:5c:11:89:dc:cd:4b:f3:7f:
ff:1e:f0:18:27:c5:e9:50:d0:f9:13:04:f5:22:bb:2c:20:36:
f4:7b:a0:b7:2a:1b:fd:73:c2:05:5d:86:70:d5:21:fb:60:00:
8a:53:22:71:d5:fc:e7:58:8b:da:de:54:a3:dd:37:1f:e1:ec:
43:9c:14:7f:2d:23:c8:67:cf:70:33:ed:f9:98:ab:db:a9:46:
72:a3:ce:88:a6:3c:2f:9e:fa:30:2f:7e:b5:2d:a7:c7:de:ef:
58:84:1b:03:19:0f:70:49:63:ec:c0:77:ba:f2:1b:19:6a:44:
54:2d:47:69:a7:13:57:00:2e:50:48:b5:9b:91:0d:56:9d:9c:
f2:f8:5b:62:7f:89:d7:db:47:7d:e2:23:9b:ab:e2:26:2e:24:
55:8d:83:16:92:77:ea:ce:27:8e:c8:ea:44:3b:35:6d:02:e2:
c3:b8:4f:cd:62:32:7b:cc:a2:3e:97:09:9e:0c:d7:df:fd:d0:
51:ac:7c:36:8b:fb:85:8b:f4:98:69:bd:ea:9f:d3:60:0d:ef:
0e:d0:42:fc:de:1e:c1:79:5c:9b:4f:22:3f:5e:73:7e:b5:0a:
d1:4e:cf:77:d7:ee:29:76:2f:9b:69:f8:58:b0:de:bb:20:10:
68:41:16:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:49 2025 by rpki-client