Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/GETy5_VcFPBEH9TCkrjiIGMssVs.roa
File: GETy5_VcFPBEH9TCkrjiIGMssVs.roa (raw, json)
Hash identifier: Vh70gHhkqKKxl5k2Dg0TbjglRuMkkmpBNqyfLAA9KtY=
Subject key identifier: 18:44:F2:E7:F5:5C:14:F0:44:1F:D4:C2:92:B8:E2:20:63:2C:B1:5B
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A178935A382C490E22974B3D82F935BFC5
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/GETy5_VcFPBEH9TCkrjiIGMssVs.roa
Signing time: Mon 26 Oct 2026 14:18:05 +0000
ROA not before: Mon 26 Oct 2026 14:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43278
IP address blocks: 187.5.229.0/24 maxlen: 24
189.74.109.0/24 maxlen: 24
189.74.110.0/24 maxlen: 24
189.74.111.0/24 maxlen: 24
201.50.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:93:5a:38:2c:49:0e:22:97:4b:3d:82:f9:35:bf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Oct 26 14:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1844f2e7f55c14f0441fd4c292b8e220632cb15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0a:b9:53:8f:09:a7:9a:72:22:47:43:fa:16:
6f:be:3d:7a:86:8e:b2:c6:ba:54:1c:72:f1:94:ed:
79:ff:02:29:f0:dd:68:c1:99:de:c3:72:fc:12:9b:
36:7d:0e:9f:dd:19:ce:f6:65:be:62:9c:cb:39:f7:
cd:fa:ef:1a:1d:de:ef:0b:7c:ac:af:43:50:d5:ce:
91:54:6f:00:0a:23:d9:cb:63:1f:d8:2f:25:3f:fd:
70:aa:7b:5d:c8:44:c6:16:42:1e:6d:04:e5:7b:a8:
cc:c0:c5:7f:dc:f2:c5:27:6b:db:47:ad:85:55:cd:
4b:d5:5a:a9:09:ff:dd:53:8e:7e:e1:86:c6:0e:8f:
f1:b4:f5:43:23:30:9a:55:ad:e3:b2:12:3d:c3:2c:
66:41:8f:2f:c4:31:ec:06:86:79:92:30:24:97:fd:
10:ec:27:35:4d:1e:48:6f:3b:c5:e3:29:68:ec:24:
9f:17:68:d1:24:80:65:c6:b2:d0:49:90:6d:c1:e6:
6c:7d:99:91:fb:4f:a0:06:cd:7a:1e:31:07:ac:98:
93:ca:45:9f:09:61:e4:5c:64:40:b5:8c:61:c8:c6:
d1:10:36:11:55:9b:01:7f:ac:32:b2:03:7f:e1:bd:
4e:28:07:06:3e:d2:0c:a5:92:d0:60:09:c8:9a:73:
d6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:44:F2:E7:F5:5C:14:F0:44:1F:D4:C2:92:B8:E2:20:63:2C:B1:5B
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/GETy5_VcFPBEH9TCkrjiIGMssVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.5.229.0/24
189.74.109.0-189.74.111.255
201.50.114.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f0:44:04:7b:2c:22:c0:72:b8:ce:d8:85:ab:cb:91:55:b8:
d9:b2:c5:72:ab:ec:c2:bd:94:18:c3:c0:07:e0:c3:f9:ed:a6:
43:01:af:83:1e:0f:95:d9:9b:79:31:dc:31:f1:bd:e0:4a:31:
97:d2:7f:bc:43:d3:5a:56:99:c1:12:7e:84:0d:52:f3:c8:1b:
6a:eb:70:20:50:1b:87:a7:75:ce:73:b3:2b:8b:6c:b4:6d:d1:
a3:05:79:69:32:83:18:d3:84:a9:73:51:c6:2b:03:2e:7d:25:
78:65:db:08:de:40:ee:aa:e6:d6:44:9c:69:2f:1c:74:a9:cf:
cf:0d:14:1d:6d:8b:83:cf:b3:57:7a:82:e6:1b:00:13:97:cd:
2d:00:2e:78:0e:fb:ca:54:1b:b7:82:09:5e:ee:ad:71:20:64:
74:4e:8c:62:27:46:94:cc:1d:79:6c:7f:2e:3d:7b:83:7a:ad:
6e:57:51:64:0f:ce:fa:ad:ca:3b:4f:94:b1:84:8b:d0:ed:31:
9c:70:34:7e:57:a7:18:ca:32:fd:7e:51:bc:ca:85:52:db:33:
1d:ba:40:32:97:08:fb:74:e3:f8:3c:5b:38:89:a3:0b:b2:86:
fe:5e:82:59:47:a0:10:b2:a2:fa:ac:48:62:d4:84:d4:0d:2c:
93:38:9e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:26:51 2026 by rpki-client