Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/GcHZepKQ4jGPVr3OoRfdhaTHGeE.roa
File: GcHZepKQ4jGPVr3OoRfdhaTHGeE.roa (raw, json)
Hash identifier: T6n6JXxwyvyhCyYpVrtVqkZOJ12HwYIjXtEa/2LOeWM=
Subject key identifier: 19:C1:D9:7A:92:90:E2:31:8F:56:BD:CE:A1:17:DD:85:A4:C7:19:E1
Certificate issuer: /CN=7f7113febddba1e06b953083b6648efaa031f1f5
Certificate serial: 019F23692F51540135751C72A986AFD34726
Authority key identifier: 7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/GcHZepKQ4jGPVr3OoRfdhaTHGeE.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44947
IP address blocks: 185.154.190.0/24 maxlen: 24
2a13:1640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2f:51:54:01:35:75:1c:72:a9:86:af:d3:47:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7113febddba1e06b953083b6648efaa031f1f5
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19c1d97a9290e2318f56bdcea117dd85a4c719e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:a3:8f:27:42:88:d2:d3:d6:be:e1:97:26:
ce:24:71:20:a9:e9:9f:d3:9a:14:bf:68:76:40:01:
54:b9:25:71:5b:7a:d7:1b:ed:41:04:7a:42:b3:37:
f7:89:de:8c:a4:b1:6a:71:29:df:78:d6:e1:c8:38:
f6:49:59:d6:04:39:1d:d0:bb:2e:fc:29:a4:0a:55:
d4:48:76:dd:4b:0d:3b:0d:89:69:13:71:b6:28:65:
2e:e3:b3:1c:65:fb:b9:b3:3b:33:ca:b4:b0:8e:9c:
a5:22:e5:83:2e:45:53:65:4f:0f:f6:7c:4b:76:60:
2c:22:c9:2c:55:cf:08:71:dc:49:10:1f:dd:33:23:
11:18:22:55:ae:ba:61:47:f4:86:57:41:06:d0:06:
47:7c:19:90:5e:09:b0:88:8d:fe:fa:b4:e4:76:a0:
cb:fb:d3:51:57:0a:15:66:8e:cc:4a:b2:57:97:6c:
0d:be:71:c9:15:95:f5:98:32:a3:42:26:82:63:c5:
6c:f2:02:d6:7c:71:79:2e:76:3e:d5:69:c8:93:28:
6a:7d:fc:9b:e1:d7:ad:34:80:b5:4c:3f:91:f8:c4:
7b:d8:1c:76:02:10:f8:b7:30:88:00:53:0d:89:7f:
8d:a5:d4:f6:c6:57:b3:1e:73:94:66:9b:36:45:4e:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C1:D9:7A:92:90:E2:31:8F:56:BD:CE:A1:17:DD:85:A4:C7:19:E1
X509v3 Authority Key Identifier:
keyid:7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/GcHZepKQ4jGPVr3OoRfdhaTHGeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.190.0/24
IPv6:
2a13:1640::/29
Signature Algorithm: sha256WithRSAEncryption
98:91:64:8f:aa:97:7f:6f:ff:a1:f5:46:bb:1a:e7:60:4b:3d:
db:33:a8:62:08:95:0c:d8:24:62:14:19:9b:51:84:3b:56:b8:
38:24:07:14:10:d2:d9:44:30:e6:98:a9:4e:96:2b:fb:00:74:
a6:87:53:e7:86:f4:19:48:e6:9e:e4:a8:09:9a:76:7a:4e:04:
8c:8a:7c:af:f0:18:f1:df:44:9b:f6:b5:cc:df:30:cf:fd:88:
bb:82:dc:91:d4:89:e3:91:07:00:70:0b:49:ee:43:da:9c:45:
8b:90:71:b3:2f:0d:3c:70:3e:57:ff:a8:cc:f3:86:3c:af:dc:
b4:ba:ed:86:a4:2e:79:e7:b5:a4:c3:86:84:0e:3d:30:f9:4a:
c4:96:41:1f:88:35:90:0e:88:71:a7:e4:a5:99:37:ab:4c:9f:
0f:a3:d5:e7:c4:bc:7c:28:ff:9d:0f:29:86:58:20:16:30:41:
a4:d8:74:3f:3f:a8:e2:e3:f3:a9:b2:1c:24:a6:72:de:24:47:
d4:01:d2:bf:cf:ba:92:fb:27:78:e2:35:4b:93:d3:ff:88:a4:
9b:4c:07:a0:e0:81:44:13:bd:f8:d4:f7:68:f7:52:bb:5c:2c:
b8:74:de:ef:ea:32:de:14:da:6a:0f:b5:f0:71:ee:e0:dd:c3:
85:9c:bf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:48 2026 by rpki-client