Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/GsB5AOQ14UJbYVdFy-rkXdKsEM0.roa
File: GsB5AOQ14UJbYVdFy-rkXdKsEM0.roa (raw, json)
Hash identifier: v3V6Bj9G+9yeIk1VEn4eZOdmhKtKz+qYGvlJz21YtHQ=
Subject key identifier: 1A:C0:79:00:E4:35:E1:42:5B:61:57:45:CB:EA:E4:5D:D2:AC:10:CD
Certificate issuer: /CN=e84d9482ec68d3577d93048c98fa05517380a2a8
Certificate serial: 019F41C519DAC55A5F9037453A994C6CA4F7
Authority key identifier: E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/GsB5AOQ14UJbYVdFy-rkXdKsEM0.roa
Signing time: Wed 08 Jul 2026 12:47:43 +0000
ROA not before: Wed 08 Jul 2026 12:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212891
IP address blocks: 45.129.248.0/22 maxlen: 24
185.68.55.0/24 maxlen: 24
2001:3c40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:c5:19:da:c5:5a:5f:90:37:45:3a:99:4c:6c:a4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d9482ec68d3577d93048c98fa05517380a2a8
Validity
Not Before: Jul 8 12:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ac07900e435e1425b615745cbeae45dd2ac10cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:78:10:ac:b8:f1:5e:aa:c9:8e:b6:52:5e:18:
ea:f1:6b:bb:e7:f1:ee:8b:91:1a:00:14:57:75:32:
5f:90:86:61:b4:78:d5:b3:53:4e:1a:c4:20:3d:76:
a2:a2:05:ce:2f:e0:2c:89:4b:4e:e5:7d:29:70:01:
e7:f3:7d:46:49:a8:04:ab:35:f0:f2:98:6a:a4:e4:
3d:c7:ca:73:58:e7:c9:e5:69:d7:aa:65:94:8e:42:
51:66:fd:65:1a:9b:47:67:33:5a:8a:61:e6:5b:6e:
6f:00:14:1f:0d:b4:b5:3c:1b:df:f9:13:1a:6d:9b:
a7:06:a5:08:3b:f6:5a:5f:71:61:ee:06:0d:54:f2:
38:d0:b3:fd:1c:09:a0:02:ab:94:78:d4:b2:82:fb:
2d:90:b8:ca:d1:bb:72:0b:3b:1b:4c:f4:a7:f7:65:
2a:f0:e8:9b:36:53:40:29:c1:7b:d6:dc:92:cc:5f:
6d:0e:c3:87:b1:8a:55:e2:05:94:62:64:85:98:67:
19:27:91:0c:03:0b:a0:b7:50:0b:4a:2b:12:18:39:
26:0d:50:ef:66:07:f4:66:82:a7:a6:a0:ea:95:44:
1f:39:15:d9:67:1c:4f:12:08:29:c5:51:71:94:dd:
99:55:2a:1f:6a:86:e6:c2:c5:ef:a8:0a:c5:7d:9c:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C0:79:00:E4:35:E1:42:5B:61:57:45:CB:EA:E4:5D:D2:AC:10:CD
X509v3 Authority Key Identifier:
keyid:E8:4D:94:82:EC:68:D3:57:7D:93:04:8C:98:FA:05:51:73:80:A2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2Uguxo01d9kwSMmPoFUXOAoqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/GsB5AOQ14UJbYVdFy-rkXdKsEM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/64bdef-5b5d-4d13-ae8e-0835e6b1e39a/1/6E2Uguxo01d9kwSMmPoFUXOAoqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.248.0/22
185.68.55.0/24
IPv6:
2001:3c40::/29
Signature Algorithm: sha256WithRSAEncryption
96:23:4c:94:a6:3c:e8:03:ef:82:5d:03:77:05:1d:19:b5:4f:
7f:31:3d:4c:52:e6:ce:3f:3e:d3:34:0a:ae:3f:a5:0c:2d:56:
db:11:0a:28:57:64:99:9a:44:e0:92:80:b2:41:ec:77:85:56:
4b:f6:ec:a7:66:ab:4a:f0:9f:d9:1b:9a:b1:df:f3:64:5b:43:
6e:42:a6:b1:3b:e0:ea:4e:79:ef:77:f3:46:3d:62:54:05:82:
2f:e2:9d:3d:dd:8f:4f:c9:7e:29:23:0f:df:d6:83:ae:d8:79:
9b:96:09:00:18:08:c9:c4:58:a5:33:74:89:3a:15:dc:c4:54:
6e:bc:1e:bf:ac:90:3b:58:11:0b:38:47:73:bc:4e:65:c3:c9:
48:c2:48:86:d2:00:3d:cc:44:14:65:ac:d6:6b:29:b8:cb:bd:
a2:54:8c:70:5a:61:d5:23:5c:06:a0:43:1d:e0:40:2e:e1:c1:
80:3a:31:9a:db:91:48:75:cd:e2:27:16:97:e1:0d:c6:0f:38:
1d:5d:2d:28:96:6b:91:56:7c:a1:52:5d:fa:63:26:26:79:98:
8f:02:a4:22:b3:7a:0d:64:55:7e:32:7d:cb:9a:ed:03:5b:c4:
8b:3f:55:0c:ad:bf:5a:48:10:a9:34:01:c6:5e:b1:4a:b2:c4:
af:1a:e9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:23 2026 by rpki-client