Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/GE_VQOmsDP-Y1bkx7TZGCnoFE68.roa
File: GE_VQOmsDP-Y1bkx7TZGCnoFE68.roa (raw, json)
Hash identifier: 62+kuU98oy4EBWbGRZ1tg6jTebE/AiOSPPyh1dqPc7k=
Subject key identifier: 18:4F:D5:40:E9:AC:0C:FF:98:D5:B9:31:ED:36:46:0A:7A:05:13:AF
Certificate issuer: /CN=73c340d423cea84bfe4bf1916d4467db284f1bd1
Certificate serial: 019F23687BFAB0A2E9FD7B9A1A77DD1E52CB
Authority key identifier: 73:C3:40:D4:23:CE:A8:4B:FE:4B:F1:91:6D:44:67:DB:28:4F:1B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/GE_VQOmsDP-Y1bkx7TZGCnoFE68.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206922
IP address blocks: 185.67.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7b:fa:b0:a2:e9:fd:7b:9a:1a:77:dd:1e:52:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c340d423cea84bfe4bf1916d4467db284f1bd1
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=184fd540e9ac0cff98d5b931ed36460a7a0513af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:ca:c4:b3:7d:da:04:c3:55:ca:53:09:e2:
54:2e:a9:d0:ac:2a:bd:16:a9:49:e8:88:76:b4:e0:
9e:70:77:5b:b2:11:8e:f2:08:73:7a:0b:df:31:f5:
ef:54:e4:ec:f5:f7:ed:04:2f:e6:33:76:18:5a:ba:
38:24:51:8b:6d:9d:46:d4:18:ad:1a:a2:e1:cb:bb:
30:a8:4f:d8:b1:a1:12:45:6b:ae:92:06:43:91:e3:
c7:e0:b7:2d:ed:cc:47:3f:dd:38:e5:09:27:2f:d8:
4e:86:f6:ca:c5:64:ef:db:03:c0:13:97:3b:4b:0a:
1c:f8:91:a8:b0:44:5c:28:43:28:bb:3d:ee:d1:2c:
be:e0:57:57:e4:cf:fc:6f:40:75:18:61:28:40:e5:
2a:f0:11:be:8a:b1:46:82:c2:6f:eb:b0:5c:1b:27:
2d:2a:e5:09:23:2e:15:11:75:12:b0:74:f8:80:26:
30:7b:1f:84:3c:e0:61:1a:85:f7:bc:83:87:ab:1e:
0a:eb:da:00:7c:e4:cb:11:e0:ea:61:ac:f0:15:27:
01:20:27:c2:27:f9:20:8b:0b:58:ee:23:43:47:43:
95:19:e7:b6:e3:8e:9f:fe:73:f3:eb:32:d6:70:63:
3c:60:1e:a4:1a:f6:e7:81:3f:b8:d7:9d:1c:ea:8f:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4F:D5:40:E9:AC:0C:FF:98:D5:B9:31:ED:36:46:0A:7A:05:13:AF
X509v3 Authority Key Identifier:
keyid:73:C3:40:D4:23:CE:A8:4B:FE:4B:F1:91:6D:44:67:DB:28:4F:1B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/GE_VQOmsDP-Y1bkx7TZGCnoFE68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.163.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9f:49:cb:01:3b:76:5d:73:6f:27:21:75:76:a3:c9:fc:8b:
c6:e9:f6:9b:08:42:98:e3:67:81:81:b5:e0:16:dc:df:e0:10:
05:af:da:d2:9c:be:f4:aa:fd:3c:be:ba:b4:09:ad:f6:8d:a0:
d9:d4:a3:ea:78:c4:f2:50:06:74:c6:92:90:ed:f3:84:ec:74:
57:bc:b5:7c:67:0b:46:dd:53:fe:c5:6e:db:d8:0d:17:2d:97:
17:37:e6:f5:e7:b6:3b:ca:da:d2:74:b0:68:4d:a7:5f:b1:d9:
f0:6d:9b:83:84:e8:58:09:b7:4b:0b:53:fc:f0:c9:b3:32:ea:
1e:61:29:ad:7f:c7:a8:d1:02:b7:9b:cc:86:3b:35:ca:d5:4b:
92:0e:db:6a:ec:34:5a:2e:76:13:d8:6d:b4:7e:17:a5:f7:44:
9c:57:3f:cc:68:e4:dc:78:15:9e:b0:bb:7c:dc:57:49:cf:db:
58:87:6e:12:28:db:d6:4f:33:48:23:35:61:a0:06:81:99:03:
d3:e5:d3:19:88:d6:61:15:5a:81:4f:a4:4a:47:18:fc:03:71:
b1:56:a2:cf:56:c9:ff:87:5e:85:f0:50:f2:b5:25:f2:84:8a:
d3:0d:ee:c9:d8:2a:1b:7a:fa:bc:31:d9:53:8c:97:de:e7:ed:
17:49:e8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:04 2026 by rpki-client